Extracting prog: 48.135216602s
Minimizing prog: 1h1m53.142410076s
Simplifying prog options: 0s
Extracting C: 1m13.528477791s
Simplifying C: 13m27.391288898s


extracting reproducer from 38 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-ioctl$auto_PPPIOCSPASS-mmap$auto-mmap$auto-mmap$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mon_fops_binary_mon_bin-close_range$auto-io_uring_setup$auto-socket-bind$auto-sendmmsg$auto-connect$auto-sendto$auto-syz_genetlink_get_family_id$auto_nfc-sendfile$auto-mmap$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x80002, 0x73)
r1 = socket(0xf, 0x1, 0x82)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r1)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r2, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
mmap$auto(0xfffffffffffffffa, 0xef3f, 0x0, 0x1a, r5, 0xe1ec)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r6, 0x4b47, 0x1)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon6\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r7 = socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f00000001c0)="66ae49e4b1b4869acfa0fa00008d9712b6ab340634378173cec3f4f783eff48b3f0c88b4f4338112e704a1e2ff90a28b210865587a6e10212e72497c72fd4c19df82e277db71c9ad72b6a864548c", 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x0, 0x0, 0x3ff, 0xb}, 0xfff}, 0x5, 0x311)
connect$auto(0x3, &(0x7f0000000000)=@l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x2}, 0x55)
sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c)
syz_genetlink_get_family_id$auto_nfc(0x0, r0)
sendfile$auto(0x3, r3, 0x0, 0x400000000006)
mmap$auto(0x0, 0x7b61033, 0xdf, 0x80009b75, 0x2, 0x8000)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
single: successfully extracted reproducer
found reproducer with 30 syscalls
minimizing guilty program
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-ioctl$auto_PPPIOCSPASS-mmap$auto-mmap$auto-mmap$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mon_fops_binary_mon_bin-close_range$auto-io_uring_setup$auto-socket-bind$auto-sendmmsg$auto-connect$auto-sendto$auto-syz_genetlink_get_family_id$auto_nfc-sendfile$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x80002, 0x73)
r1 = socket(0xf, 0x1, 0x82)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r1)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r2, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
mmap$auto(0xfffffffffffffffa, 0xef3f, 0x0, 0x1a, r5, 0xe1ec)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r6, 0x4b47, 0x1)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon6\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r7 = socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f00000001c0)="66ae49e4b1b4869acfa0fa00008d9712b6ab340634378173cec3f4f783eff48b3f0c88b4f4338112e704a1e2ff90a28b210865587a6e10212e72497c72fd4c19df82e277db71c9ad72b6a864548c", 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x0, 0x0, 0x3ff, 0xb}, 0xfff}, 0x5, 0x311)
connect$auto(0x3, &(0x7f0000000000)=@l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x2}, 0x55)
sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c)
syz_genetlink_get_family_id$auto_nfc(0x0, r0)
sendfile$auto(0x3, r3, 0x0, 0x400000000006)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-ioctl$auto_PPPIOCSPASS-mmap$auto-mmap$auto-mmap$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mon_fops_binary_mon_bin-close_range$auto-io_uring_setup$auto-socket-bind$auto-sendmmsg$auto-connect$auto-sendto$auto-syz_genetlink_get_family_id$auto_nfc
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x80002, 0x73)
r1 = socket(0xf, 0x1, 0x82)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r1)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r2, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
mmap$auto(0xfffffffffffffffa, 0xef3f, 0x0, 0x1a, r4, 0xe1ec)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r5, 0x4b47, 0x1)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon6\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r6 = socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f00000001c0)="66ae49e4b1b4869acfa0fa00008d9712b6ab340634378173cec3f4f783eff48b3f0c88b4f4338112e704a1e2ff90a28b210865587a6e10212e72497c72fd4c19df82e277db71c9ad72b6a864548c", 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x0, 0x0, 0x3ff, 0xb}, 0xfff}, 0x5, 0x311)
connect$auto(0x3, &(0x7f0000000000)=@l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x2}, 0x55)
sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c)
syz_genetlink_get_family_id$auto_nfc(0x0, r0)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-ioctl$auto_PPPIOCSPASS-mmap$auto-mmap$auto-mmap$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mon_fops_binary_mon_bin-close_range$auto-io_uring_setup$auto-socket-bind$auto-sendmmsg$auto-connect$auto-sendto$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
mmap$auto(0xfffffffffffffffa, 0xef3f, 0x0, 0x1a, r3, 0xe1ec)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r4, 0x4b47, 0x1)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon6\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r5 = socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f00000001c0)="66ae49e4b1b4869acfa0fa00008d9712b6ab340634378173cec3f4f783eff48b3f0c88b4f4338112e704a1e2ff90a28b210865587a6e10212e72497c72fd4c19df82e277db71c9ad72b6a864548c", 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x0, 0x0, 0x3ff, 0xb}, 0xfff}, 0x5, 0x311)
connect$auto(0x3, &(0x7f0000000000)=@l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x2}, 0x55)
sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-ioctl$auto_PPPIOCSPASS-mmap$auto-mmap$auto-mmap$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mon_fops_binary_mon_bin-close_range$auto-io_uring_setup$auto-socket-bind$auto-sendmmsg$auto-connect$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
mmap$auto(0xfffffffffffffffa, 0xef3f, 0x0, 0x1a, r3, 0xe1ec)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r4, 0x4b47, 0x1)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon6\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r5 = socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f00000001c0)="66ae49e4b1b4869acfa0fa00008d9712b6ab340634378173cec3f4f783eff48b3f0c88b4f4338112e704a1e2ff90a28b210865587a6e10212e72497c72fd4c19df82e277db71c9ad72b6a864548c", 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x0, 0x0, 0x3ff, 0xb}, 0xfff}, 0x5, 0x311)
connect$auto(0x3, &(0x7f0000000000)=@l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x2}, 0x55)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-ioctl$auto_PPPIOCSPASS-mmap$auto-mmap$auto-mmap$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mon_fops_binary_mon_bin-close_range$auto-io_uring_setup$auto-socket-bind$auto-sendmmsg$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
mmap$auto(0xfffffffffffffffa, 0xef3f, 0x0, 0x1a, r3, 0xe1ec)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r4, 0x4b47, 0x1)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon6\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r5 = socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f00000001c0)="66ae49e4b1b4869acfa0fa00008d9712b6ab340634378173cec3f4f783eff48b3f0c88b4f4338112e704a1e2ff90a28b210865587a6e10212e72497c72fd4c19df82e277db71c9ad72b6a864548c", 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x0, 0x0, 0x3ff, 0xb}, 0xfff}, 0x5, 0x311)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-ioctl$auto_PPPIOCSPASS-mmap$auto-mmap$auto-mmap$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mon_fops_binary_mon_bin-close_range$auto-io_uring_setup$auto-socket-bind$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
mmap$auto(0xfffffffffffffffa, 0xef3f, 0x0, 0x1a, r3, 0xe1ec)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r4, 0x4b47, 0x1)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon6\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-ioctl$auto_PPPIOCSPASS-mmap$auto-mmap$auto-mmap$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mon_fops_binary_mon_bin-close_range$auto-io_uring_setup$auto-socket
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
mmap$auto(0xfffffffffffffffa, 0xef3f, 0x0, 0x1a, r3, 0xe1ec)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r4, 0x4b47, 0x1)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon6\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x2, 0x5, 0x0)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-ioctl$auto_PPPIOCSPASS-mmap$auto-mmap$auto-mmap$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mon_fops_binary_mon_bin-close_range$auto-io_uring_setup$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
mmap$auto(0xfffffffffffffffa, 0xef3f, 0x0, 0x1a, r3, 0xe1ec)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r4, 0x4b47, 0x1)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon6\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-ioctl$auto_PPPIOCSPASS-mmap$auto-mmap$auto-mmap$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mon_fops_binary_mon_bin-close_range$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
mmap$auto(0xfffffffffffffffa, 0xef3f, 0x0, 0x1a, r3, 0xe1ec)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r4, 0x4b47, 0x1)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon6\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-ioctl$auto_PPPIOCSPASS-mmap$auto-mmap$auto-mmap$auto-openat$auto_tty_fops_tty_io-ioctl$auto-openat$auto_mon_fops_binary_mon_bin
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
mmap$auto(0xfffffffffffffffa, 0xef3f, 0x0, 0x1a, r3, 0xe1ec)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r4, 0x4b47, 0x1)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon6\x00', 0x2, 0x0)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-ioctl$auto_PPPIOCSPASS-mmap$auto-mmap$auto-mmap$auto-openat$auto_tty_fops_tty_io-ioctl$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
mmap$auto(0xfffffffffffffffa, 0xef3f, 0x0, 0x1a, r3, 0xe1ec)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r4, 0x4b47, 0x1)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-ioctl$auto_PPPIOCSPASS-mmap$auto-mmap$auto-mmap$auto-openat$auto_tty_fops_tty_io
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
mmap$auto(0xfffffffffffffffa, 0xef3f, 0x0, 0x1a, r3, 0xe1ec)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-ioctl$auto_PPPIOCSPASS-mmap$auto-mmap$auto-mmap$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
mmap$auto(0xfffffffffffffffa, 0xef3f, 0x0, 0x1a, r3, 0xe1ec)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-ioctl$auto_PPPIOCSPASS-mmap$auto-mmap$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
mmap$auto(0xfffffffffffffffa, 0xef3f, 0x0, 0x1a, r3, 0xe1ec)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-ioctl$auto_PPPIOCSPASS-mmap$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
mmap$auto(0xfffffffffffffffa, 0xef3f, 0x0, 0x1a, r3, 0xe1ec)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU-ioctl$auto_PPPIOCSPASS
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0})

program crashed: KFENCE: out-of-bounds in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic-ioctl$auto_PPPIOCSMRU
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto-openat$auto_ppp_device_fops_ppp_generic
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-openat$auto_proc_reg_file_ops_compat_inode
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)

program did not crash
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-mmap$auto-writev$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)

program did not crash
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_iter_file_ops_compat_inode-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-connect$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-bind$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_LISTENER_GET-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xea, r1, 0x200, 0x70bd29, 0x25df5bfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)

program did not crash
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-syz_genetlink_get_family_id$auto_nfsd-bind$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xf, 0x1, 0x82)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-socket-bind$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xf, 0x1, 0x82)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-bind$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-bind$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
close_range$auto(0x2, 0x8, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)

program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
bind$auto(0x3, 0x0, 0x6a)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)

program did not crash
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x102, 0x0)
writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3)

program did not crash
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r0, 0x0, 0x3)

program did not crash
testing program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
detailed listing:
executing program 0:
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r0, &(0x7f0000000080)={0x0, 0x6}, 0x3)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m2.328070303s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
simplifying C reproducer
testing compiled C program (duration=1m2.328070303s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing compiled C program (duration=1m2.328070303s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing compiled C program (duration=1m2.328070303s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing compiled C program (duration=1m2.328070303s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing compiled C program (duration=1m2.328070303s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing compiled C program (duration=1m2.328070303s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
testing compiled C program (duration=1m2.328070303s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$auto-openat$auto_proc_reg_file_ops_compat_inode-writev$auto
program crashed: KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
reproducing took 1h17m22.19741148s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-out-of-bounds in afs_split_string fs/afs/addr_prefs.c:51 [inline]
BUG: KASAN: slab-out-of-bounds in afs_proc_addr_prefs_write+0x13a9/0x15f0 fs/afs/addr_prefs.c:415
Read of size 1 at addr ffff88801cb233a7 by task syz-executor140/5833

CPU: 0 UID: 0 PID: 5833 Comm: syz-executor140 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xc3/0x670 mm/kasan/report.c:521
 kasan_report+0xe0/0x110 mm/kasan/report.c:634
 afs_split_string fs/afs/addr_prefs.c:51 [inline]
 afs_proc_addr_prefs_write+0x13a9/0x15f0 fs/afs/addr_prefs.c:415
 proc_simple_write+0x114/0x1b0 fs/proc/generic.c:825
 pde_write fs/proc/inode.c:330 [inline]
 proc_reg_write+0x23d/0x330 fs/proc/inode.c:342
 do_loop_readv_writev fs/read_write.c:848 [inline]
 do_loop_readv_writev fs/read_write.c:833 [inline]
 vfs_writev+0x6c4/0xdc0 fs/read_write.c:1057
 do_writev+0x132/0x330 fs/read_write.c:1101
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa6ec00fa79
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffc14cbd38 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa6ec00fa79
RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
RBP: 00007fa6ec0825f0 R08: 0000000000000006 R09: 0000000000000006
R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001
R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001
 </TASK>

Allocated by task 5833:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kasan_kmalloc include/linux/kasan.h:260 [inline]
 __do_kmalloc_node mm/slub.c:4331 [inline]
 __kmalloc_node_track_caller_noprof+0x221/0x510 mm/slub.c:4350
 memdup_user_nul+0x2b/0x120 mm/util.c:302
 proc_simple_write+0xc7/0x1b0 fs/proc/generic.c:822
 pde_write fs/proc/inode.c:330 [inline]
 proc_reg_write+0x23d/0x330 fs/proc/inode.c:342
 do_loop_readv_writev fs/read_write.c:848 [inline]
 do_loop_readv_writev fs/read_write.c:833 [inline]
 vfs_writev+0x6c4/0xdc0 fs/read_write.c:1057
 do_writev+0x132/0x330 fs/read_write.c:1101
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88801cb233a0
 which belongs to the cache kmalloc-8 of size 8
The buggy address is located 0 bytes to the right of
 allocated 7-byte region [ffff88801cb233a0, ffff88801cb233a7)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1cb23
flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000000 ffff88801b441500 dead000000000100 dead000000000122
raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 4435759757, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1717
 prep_new_page mm/page_alloc.c:1725 [inline]
 get_page_from_freelist+0x1193/0x39b0 mm/page_alloc.c:3652
 __alloc_frozen_pages_noprof+0x263/0x2370 mm/page_alloc.c:4934
 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2301
 alloc_slab_page mm/slub.c:2459 [inline]
 allocate_slab mm/slub.c:2623 [inline]
 new_slab+0x23c/0x330 mm/slub.c:2676
 ___slab_alloc+0xd9c/0x1940 mm/slub.c:3862
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3952
 __slab_alloc_node mm/slub.c:4027 [inline]
 slab_alloc_node mm/slub.c:4188 [inline]
 __do_kmalloc_node mm/slub.c:4330 [inline]
 __kmalloc_noprof+0x2f2/0x510 mm/slub.c:4343
 kmalloc_noprof include/linux/slab.h:909 [inline]
 kzalloc_noprof include/linux/slab.h:1039 [inline]
 acpi_ns_internalize_name+0x144/0x220 drivers/acpi/acpica/nsutils.c:331
 acpi_ns_get_node_unlocked+0x163/0x310 drivers/acpi/acpica/nsutils.c:666
 acpi_ns_get_node+0x4c/0x70 drivers/acpi/acpica/nsutils.c:726
 acpi_get_handle+0x105/0x270 drivers/acpi/acpica/nsxfname.c:98
 acpi_has_method+0x7a/0xc0 drivers/acpi/utils.c:672
 acpi_is_ioapic drivers/acpi/ioapic.c:75 [inline]
 handle_ioapic_add+0x9d/0xc50 drivers/acpi/ioapic.c:107
 acpi_ns_walk_namespace+0x405/0x5b0 drivers/acpi/acpica/nswalk.c:233
 acpi_walk_namespace drivers/acpi/acpica/nsxfeval.c:606 [inline]
 acpi_walk_namespace+0x110/0x130 drivers/acpi/acpica/nsxfeval.c:554
page_owner free stack trace missing

Memory state around the buggy address:
 ffff88801cb23280: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
 ffff88801cb23300: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
>ffff88801cb23380: fa fc fc fc 07 fc fc fc fa fc fc fc fa fc fc fc
                               ^
 ffff88801cb23400: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
 ffff88801cb23480: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-out-of-bounds in afs_split_string fs/afs/addr_prefs.c:51 [inline]
BUG: KASAN: slab-out-of-bounds in afs_proc_addr_prefs_write+0x13a9/0x15f0 fs/afs/addr_prefs.c:415
Read of size 1 at addr ffff88801cb233a7 by task syz-executor140/5833

CPU: 0 UID: 0 PID: 5833 Comm: syz-executor140 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xc3/0x670 mm/kasan/report.c:521
 kasan_report+0xe0/0x110 mm/kasan/report.c:634
 afs_split_string fs/afs/addr_prefs.c:51 [inline]
 afs_proc_addr_prefs_write+0x13a9/0x15f0 fs/afs/addr_prefs.c:415
 proc_simple_write+0x114/0x1b0 fs/proc/generic.c:825
 pde_write fs/proc/inode.c:330 [inline]
 proc_reg_write+0x23d/0x330 fs/proc/inode.c:342
 do_loop_readv_writev fs/read_write.c:848 [inline]
 do_loop_readv_writev fs/read_write.c:833 [inline]
 vfs_writev+0x6c4/0xdc0 fs/read_write.c:1057
 do_writev+0x132/0x330 fs/read_write.c:1101
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa6ec00fa79
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffc14cbd38 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa6ec00fa79
RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
RBP: 00007fa6ec0825f0 R08: 0000000000000006 R09: 0000000000000006
R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001
R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001
 </TASK>

Allocated by task 5833:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kasan_kmalloc include/linux/kasan.h:260 [inline]
 __do_kmalloc_node mm/slub.c:4331 [inline]
 __kmalloc_node_track_caller_noprof+0x221/0x510 mm/slub.c:4350
 memdup_user_nul+0x2b/0x120 mm/util.c:302
 proc_simple_write+0xc7/0x1b0 fs/proc/generic.c:822
 pde_write fs/proc/inode.c:330 [inline]
 proc_reg_write+0x23d/0x330 fs/proc/inode.c:342
 do_loop_readv_writev fs/read_write.c:848 [inline]
 do_loop_readv_writev fs/read_write.c:833 [inline]
 vfs_writev+0x6c4/0xdc0 fs/read_write.c:1057
 do_writev+0x132/0x330 fs/read_write.c:1101
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88801cb233a0
 which belongs to the cache kmalloc-8 of size 8
The buggy address is located 0 bytes to the right of
 allocated 7-byte region [ffff88801cb233a0, ffff88801cb233a7)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1cb23
flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000000 ffff88801b441500 dead000000000100 dead000000000122
raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 4435759757, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1717
 prep_new_page mm/page_alloc.c:1725 [inline]
 get_page_from_freelist+0x1193/0x39b0 mm/page_alloc.c:3652
 __alloc_frozen_pages_noprof+0x263/0x2370 mm/page_alloc.c:4934
 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2301
 alloc_slab_page mm/slub.c:2459 [inline]
 allocate_slab mm/slub.c:2623 [inline]
 new_slab+0x23c/0x330 mm/slub.c:2676
 ___slab_alloc+0xd9c/0x1940 mm/slub.c:3862
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3952
 __slab_alloc_node mm/slub.c:4027 [inline]
 slab_alloc_node mm/slub.c:4188 [inline]
 __do_kmalloc_node mm/slub.c:4330 [inline]
 __kmalloc_noprof+0x2f2/0x510 mm/slub.c:4343
 kmalloc_noprof include/linux/slab.h:909 [inline]
 kzalloc_noprof include/linux/slab.h:1039 [inline]
 acpi_ns_internalize_name+0x144/0x220 drivers/acpi/acpica/nsutils.c:331
 acpi_ns_get_node_unlocked+0x163/0x310 drivers/acpi/acpica/nsutils.c:666
 acpi_ns_get_node+0x4c/0x70 drivers/acpi/acpica/nsutils.c:726
 acpi_get_handle+0x105/0x270 drivers/acpi/acpica/nsxfname.c:98
 acpi_has_method+0x7a/0xc0 drivers/acpi/utils.c:672
 acpi_is_ioapic drivers/acpi/ioapic.c:75 [inline]
 handle_ioapic_add+0x9d/0xc50 drivers/acpi/ioapic.c:107
 acpi_ns_walk_namespace+0x405/0x5b0 drivers/acpi/acpica/nswalk.c:233
 acpi_walk_namespace drivers/acpi/acpica/nsxfeval.c:606 [inline]
 acpi_walk_namespace+0x110/0x130 drivers/acpi/acpica/nsxfeval.c:554
page_owner free stack trace missing

Memory state around the buggy address:
 ffff88801cb23280: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
 ffff88801cb23300: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
>ffff88801cb23380: fa fc fc fc 07 fc fc fc fa fc fc fc fa fc fc fc
                               ^
 ffff88801cb23400: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
 ffff88801cb23480: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
==================================================================