Extracting prog: 4m54.364250788s
Minimizing prog: 57m3.79311315s
Simplifying prog options: 0s
Extracting C: 1m52.208986369s
Simplifying C: 22m12.702116001s


extracting reproducer from 24 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-bpf$auto-syz_genetlink_get_family_id$auto_nl802154-sendmsg$auto_NL802154_CMD_DEL_SEC_KEY-unshare$auto-unshare$auto-mmap$auto-rseq$auto-tkill$auto-select$auto-close_range$auto-openat$auto_usbdev_file_operations_usb-fsconfig$auto_SHMEM_HUGE_ALWAYS-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-prctl$auto-write$auto-shmdt$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3, 0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x8000000000000003, 0x9, 0xa, 0x12, 0xdd, 0xfffffffffffffffb)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80d00, 0x0)
fsconfig$auto_SHMEM_HUGE_ALWAYS(r3, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x8, 0x336a, 0x0, 0x80, 0xfff7fffffff7fffc)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x10000083d4)
shmdt$auto(0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 29, 19, 30, 28, 24, 4, 18, 28, 28, 29, 30, 24, 19, 28, 29, 28, 3, 27, 30, 28, 29, 29, 29]
detailed listing:
executing program 0:
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
select$auto(0xf, &(0x7f0000000140)={[0x7e, 0xe, 0x0, 0xf, 0xc, 0x8, 0x1, 0xc86, 0x8, 0x9, 0x2, 0xbf, 0x8, 0x59c, 0x609, 0x4]}, &(0x7f0000000280)={[0x8912, 0x7, 0xc000000000000000, 0xff, 0xa5, 0x8, 0x584, 0xaee, 0x4, 0x6, 0x7a, 0xa, 0x3, 0x7, 0x2a0, 0x75cd65ac]}, &(0x7f0000000440)={[0x1ff, 0x4, 0xfffffffffffffffd, 0x8, 0x775, 0x3, 0xffffffffffff2e3d, 0x3, 0x5, 0x80, 0x5, 0x3, 0x4, 0x3, 0xf47, 0xbba2]}, &(0x7f00000004c0)={0x4e3, 0x5239})
ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0xffffffffffff8000)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram15/queue/rotational\x00', 0x420c61, 0x0)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
ioctl$auto(r1, 0x400c4d00, r1)
executing program 0:
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x8202, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000000c0)={{0x1, 0x40, 0x4202, 0x3}, 0x2, 0xfffffffffffffffe, "72e00d838b24ff6fd5411f43301c8fa23cf2b9541b346600"})
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000003c0), 0xffffffffffffffff)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0xf, 0x0)
landlock_create_ruleset$auto(0x0, 0x6, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty45\x00', 0x201, 0x0)
ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000000))
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0x7ff, 0x0)
openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim2/ports/0/ipsec\x00', 0x4000, 0x0)
timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f0000000800)={@sival_ptr=&(0x7f0000000600)="3969a9a0ed7f369b98c7ad1331c80dfd3a64c80ea787eae15fb4dacf5de6610f76adc49a0208d30b5abcaca8801b0d164ccfb4bcefaaf2e2fea44f074d8ce0c1868f8dbd542034292c5349eae178268347d343c5aeb3684dabc4594f28e7af68bd9b77f7da7b5280a24de8b663cfe00e222d2af1593fd43f68669b6329b549845b5ef05f4e6f3ea9aa46d9fcc78f6f711428b9e3d948a879c55b5aec6f160ecd5ed79d3977bb94b79b4c31412be770fca05e10d843c3f3fa916b8917b3e58d4defc2982661c0fd63e1ded6a830c8e5d6ecc16924c0d1b0", @raw=0x3, 0x7, @_sigev_thread={&(0x7f0000000740)=&(0x7f0000000700)=0x80, &(0x7f0000000780)="fc5a5ca41429f482bd76aafc7941913f6edcbbd71098ba58721111dc66b28e90883773a2517099be55b666a31d2e7706c357dc7dd327d2e139535584eb1181542dacc51055542da21b3b6cfbe65a8eb9f9d0544b8faf1b8d0f92e381cdfe69cef334793cf578c6de08b9cabd84"}}, &(0x7f0000000840)=0x965)
bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)=@enable_stats={0x7f}, 0xa6)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x9)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402)
pipe2$auto(0x0, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r4, 0x936355e497c8b7e3, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x48000)
memfd_create$auto(&(0x7f0000000200)='/dev/snd/midiC2D0\x00', 0x4)
pselect6$auto(0x9, &(0x7f0000000400)={[0x8, 0x5411, 0x2, 0x3, 0x2, 0x3, 0x2, 0x3, 0x6, 0x0, 0x1, 0x0, 0x38, 0x4, 0x8000000000000001, 0x7]}, &(0x7f0000000480)={[0xfffffffffffff3d4, 0xda12, 0x1, 0x80000000, 0x7fffffffffffffff, 0x5, 0x8, 0x2, 0x1ff, 0x9, 0x4, 0x8000000000000000, 0xffffffffffffffff, 0x7, 0x9, 0x81]}, &(0x7f0000000500)={[0x9, 0x4, 0xb4, 0x7, 0xe, 0x80000000, 0xf506, 0x10000, 0x638d, 0x8000000000000000, 0x3b47, 0x9, 0xfb, 0x9, 0x21b, 0x1000000000000000]}, &(0x7f0000000580)={0x100000001, 0xe3}, &(0x7f00000005c0))
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
executing program 0:
unshare$auto(0x40000080)
sendmsg$auto_NL802154_CMD_SEND_BEACONS(0xffffffffffffffff, 0x0, 0x4145)
quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
shutdown$auto(0x200000003, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20461, 0x0)
write$auto(r0, &(0x7f0000000700)='/ECv/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lDT\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x90\xc8Oj\xd2\xd7\x0f\x1f\xf0\xb57\xfb\x87,P\xfb{\x99\x10\xdc\x80JGs\r\x93\x7f\x11\x0e\xbc\x99\x93M\xfe\xfd\x11\x14\xac]\xc4\xf2\xf4\xef\xde\xac\x1aQ\xdd\xd7[\xd7@\xe7R{\xaar\xfb~\x94\xd2n]\xd2\x15h\x18|2g\xfb\\%\xe6-\xca\xe3\xd9!7r\xf7\xfc\xe4z58\xf0W\xde\xd3\x90\xc5\rT\xbe\x90\xc0\xbc\xd5\xdb\x0e\t\x84X*\xcf\xd3}\x0eR\xae6\xa58\xc8\xac\x1d>t\xbe\xd7\xb3\xfc\xee\xa7jG\xb0\x1cN\xfb\x8c\x80+\xc2\x8f\x7f\xaf&\xbfx\xa4>\x8a\xab\t,i\xf42\xc2\nY\xcd\\\x1fLPP\x19\xe0\x1b-w\x85\xf9\xc3\x11/\\zh\xf7l\xaa?m\xd5.\xc1H\xdc\nq=.\x9f\xb3\x8aLf\x81\x82\x9e\xeb\xa6\x92Vg(pp3\x8c\xc5\xe6U\x1dK]\a\xf7\xd3!u\xb8akQ1\x92\xae\xe0C\xac\x9f\xd28Kg\xa6\xfbO\x84^\xfe\xed\x96\xfa\xa0\xd9\x8e\xa6\x17\xb9\x1c\xd6Z\x9ae\x85\xd1(\xde\xf1du\x12\xa7\xd3\xf2\xd1\xed\xa2\xe6;?\xfe\t|-\\bI\x9e\x02\x9d\xd3\x9a\'Oq\x8a\xcd\xd9\n\xa5\xedQg\xe1b\x93\xa1\xba\xc4\x91\xc8sg\xb5`z\xe8\r\xbeYg\x04E\xeb\x15\x05\x99\xcf7\x92\xcc\xd3^k]\xf6\xf1\x94n\x0f:mN\xa3W%*\xc2+F\x98\xc2[\x82\xed\x11q[\x10\x80\x98\x17C\xa1\x13=\xba\xcb\xa8', 0x100000a3d9)
mmap$auto(0x1, 0x400004, 0x800df, 0x9b72, 0x2, 0x0)
clock_adjtime$auto(0x17, 0x0)
socket(0x2, 0x2, 0x0)
mprotect$auto(0x0, 0x806121, 0x6)
io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xb, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}})
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x10780, 0x0)
openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x82, 0x0)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000)
sysfs$auto(0x2, 0xc, 0x0)
r1 = fsopen$auto(0x0, 0x1)
fsconfig$auto_SHMEM_HUGE_NEVER(r1, 0x0, &(0x7f0000000180)='no_\xe8\xdb\b\x9c\xe7J\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0)
executing program 3:
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async)
read$auto(0x3, 0x0, 0x8080) (async)
ioctl$auto_RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) (async)
syz_clone3(&(0x7f0000000300)={0x20080000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x20000037}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2}, 0x58) (async)
write$auto(0xffffffffffffffff, 0x0, 0x92bf)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0)
ioctl$auto_RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x3, 0x3, {0x5, 0x8, 0x9, 0x7, 0x3, 0x6b, 0xfffffffd, 0x10002, 0xfd}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'})
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) (async)
unshare$auto(0x40000080) (async)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = socket(0x4, 0x3, 0x3b)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth0\x00'}) (async)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2000, 0x0) (async)
r4 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x6a)
ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000080))
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
unshare$auto(0x40000083) (async)
openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) (async)
r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400006242181d32ef301df7b2d86c0e43cf00", @ANYRES16=r5, @ANYBLOB="000325bd7000fddbdf250300000007000200292800000600010009000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x20004010) (async)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async)
pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'<x\xfc\x19j\xfd\x95\xeaf\x06\x14+\x06:\x803\xae[\xfa\xac\x83\xd2', 0x4f, 0x7) (async)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/timer_source\x00', 0x20080, 0x0)
pread64$auto(r6, 0x0, 0x1fffe001, 0xb)
ioctl$auto_TUNGETVNETBE2(r4, 0x800454df, &(0x7f0000000180)=0x3) (async)
writev$auto(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7)
executing program 1:
ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0x4b47, 0x3, 0x4080005, @stream_id=0x7, 0x2004c, 0xc, 0x0, [{0xbb, 0x4, 0x800}, {0x0, 0x9, 0x5}, {0x0, 0x400058dc, 0x101}]})
pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
r0 = socket(0xa, 0x2, 0x73)
getsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x0, 0x40, 0x0, &(0x7f0000000240))
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
settimeofday$auto(&(0x7f0000000540)={0x5e, 0x1}, &(0x7f0000000580)={0x1, 0xdb36})
setpgid$auto(0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
rseq$auto(0x0, 0x7, 0x8, 0x10)
sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14)
ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=&(0x7f00000003c0), 0x80000000})
setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x8002)
mmap$auto(0x0, 0x20000040009, 0xdf, 0x9b72, r0, 0x1000000000028000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyr1\x00', 0xc81, 0x0)
newfstatat$auto(r2, 0x0, 0x0, 0xfffff29f)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r1, 0xffffffffffffffff, 0x8, 0x1, 0xffffffffffffffff, @relative_id=0x8, 0xe600}, 0xf)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x37f)
sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(r0, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000104000000ffdbdf252e000000640001801400020064766d7270310000000000000000000008000300070000001400020076657468315f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200677265300000000000000000000000001400020070696d726567310000000000000000002800018008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e3100000000000000000008000300090000005800018014000200708f1004aa3a39a782f7f1e7fa82240f696d7265673100000000000000000014000200766c616e300000", @ANYBLOB='R', @ANYBLOB="140002007369743000000000000000000000000008", @ANYRES32=0x0, @ANYBLOB="0800030083aa00001c000180", @ANYRESHEX, @ANYBLOB="0800030001000080080003000700000004000180"], 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000018)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3fd)
executing program 3:
ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0x4b47, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0, [{0xbb, 0x4, 0x800}, {0x0, 0x9, 0x5}, {0x4, 0x58dc, 0x101}]})
pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
settimeofday$auto(&(0x7f0000000540)={0x5, 0x5}, &(0x7f0000000400)={0x7fffffff, 0x3})
shmctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000300)={{0x6, 0x0, <r0=>0x0, 0x1, 0x80, 0x3, 0x8}, 0xfffffff8, 0x1ff, 0x800, 0x4, @raw=0x3, @inferred=0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="5e96d4c4c9f11b902b31b587288ce68456d3372d700a0df0db", 0x0})
r1 = setfsgid$auto(r0)
socket(0x2, 0x1, 0x106)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51)
shutdown$auto(0x200000003, 0x0)
msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r2, 0x5380, 0xffffffffffffffff)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
setns(r4, 0x8000000)
sendmsg$auto_OVS_VPORT_CMD_GET(r3, &(0x7f0000003d00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003d40)=ANY=[], 0x2758}, 0x1, 0x0, 0x0, 0x8080}, 0x4008000)
keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
executing program 1:
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000140), 0x60e83, 0x0)
ioctl$auto(r1, 0x3b8e, r0)
executing program 2:
mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0)
bpf$auto(0xd, &(0x7f0000000000)=@test={r0, 0x71c, 0xfaab, 0x468, 0x2, 0x8000000000000001, 0x80, 0x7, 0x2, 0x1fc, 0xfd, 0xb5, 0x4, 0x40004, 0xd96e}, 0xe3)
io_uring_setup$auto(0x6, 0x0)
sysfs$auto(0x2, 0x100000000000038, 0x0)
r1 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8)
timer_create$auto(0x3, 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000a40)=""/4096, 0x1000)
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
io_uring_setup$auto(0x1, 0x0)
r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000000)={0x4, r2, 0x3, "750791e656f6cca009cc2d969e3075aa"})
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2, 0x0)
read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$auto(0x3, 0x80000541b, 0x38)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001040)='/dev/dsp1\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)="7a47301037")
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x103342, 0x0)
read$auto(0x3, 0x0, 0x8080)
readv$auto(r1, &(0x7f0000000240)={0x0, 0x84d}, 0x3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000040), 0x3)
socket(0xa, 0x801, 0x84)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x1)
mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x801, 0x106)
keyctl$auto_KEYCTL_INVALIDATE(0x15, 0xa2, 0xf, 0x9, 0xe)
pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x5, 0x2020009, 0x3, 0x19, 0xfffffffffffffffa, 0x800008004)
madvise$auto(0x0, 0x2000040080000004, 0xe)
executing program 3:
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
socket(0x28, 0x2, 0x0)
unshare$auto(0x8)
msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x2, 0x5, 0xa, 0xf9e9, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff})
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop12\x00', 0x80, 0x0)
r1 = setfsuid$auto(0xffffffffffffffff)
getpriority$auto_PRIO_USER(0x2, r1)
r2 = setfsuid$auto(0xee00)
shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000002900)={{0x3, r2, 0xee00, 0x9, 0x17, 0x6, 0x1}, 0x6, 0x4, 0x7, 0x2, @raw=0xfffffff8, @raw=0x5, 0x80, 0x0, 0x0, &(0x7f0000002800)="98184e760a0f452eb11ea06b99ff21207e3b8c3b220044babfe4265728b83289334ad0fe741aa5ca55a08562caac2a4250362d60e4fa7c638f6df5ce567f74be13b83c270559872f67c6a2b22bf7734c63c04d9ee81bc615e00b15ccc53a5b6ed9157d27379564431ff2b3f0b4fda06486a9c5a82249d257871870a1070a15c7beaadf0dc4213674015e96a424cd97bb46607a111c53e42e0b"})
r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0)
ioctl$auto_I2C_FUNCS(r3, 0x705, &(0x7f0000000440)="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")
setfsuid$auto(r2)
ioctl$auto(0xffffffffffffffff, 0x4b48, 0xffffffffffffffff)
ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, &(0x7f0000000280)="8feb71f320812fae5f7785ec93a548ebf19bbd4f933d8591baa295a70beb7fbbbd46db13dca3f1f62e468ce19350fe31ca01f42cc83563")
utime$auto(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)={0xffffffff, 0x1})
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000040)={@raw=0x5, 0x555c, 0xffff, 0x550, "8f9638544ae4bbff000000dbb5a3760f9b6b2c854e49fac493b9ab034dde3b02000000000000008192f5488f", @raw=0x4})
name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000003c0)='/proc/self/net/Oev_snmp</veth0_to_hsrS', 0x0, 0x0, 0x200)
socket(0x2, 0x3, 0x100)
bpf$auto(0x80000400, &(0x7f0000000000)=@bpf_attr_3={0x9, 0x9, 0xffffffffffff7fff, 0x5, 0x1fe, 0x2, 0x1, 0x884, 0x4007, "0108a5172d53c213b43038e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x7fffffffffffffff, 0x89, 0x9, 0xffff, 0x3ff, 0x7, @attach_btf_obj_fd, 0x440, 0xa, 0x7, 0x1ff, 0x9}, 0x9)
close_range$auto(0x2, 0x8, 0x0)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
executing program 2:
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x6c0840, 0x0)
socket(0x27, 0x4, 0xa4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x1f, 0x80002, 0x73)
ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000002c0)={0xea, 0x63, 0xfffffeff, 0x6bf, &(0x7f0000000080)="c12a4ead89997936d412e7fc1d853bd21acb64802cab67d0c24eabe0d0d9beadd7", 0x3, 0x400000, 0x7, @stream_id=0x9, 0x76, 0x102, &(0x7f0000000180)="b89972aabaa332aacbd6b2bdf204fd3303b2cb2d61d8b790181ba1c4e3047fdc239a853766ee4528d5c8529827465e0a089873b02b96bb437b5348587c43293acd58916304ab247b218455fe23711ee49f418ee1cd5457843cfc2be4e9701f283385554ecf", [{0xb86, 0xf0b, 0x7}, {0x1, 0x4, 0x2}, {0xfffff801, 0x966d, 0x8ea}]})
ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0})
pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
r1 = setfsgid$auto(0xee01)
msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff)
set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4)
mseal$auto(0x0, 0x7dda, 0x0)
r2 = socket(0x1, 0x1, 0x1)
setsockopt$auto(r2, 0x29, 0x20, 0x0, 0x8002)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff)
mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
madvise$auto(0x100000000000, 0x200006, 0xc)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
close_range$auto(r0, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
executing program 1:
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socketcall$auto(0x5, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r1)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf250200000008000300800040f507000200"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r3, r3, 0x0, 0x3)
mmap$auto(0x0, 0x8000000000000000, 0x3edc2ecf, 0x9b72, 0x2, 0x8000)
socket(0x27, 0x800, 0x84)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x3, 0x3b)
msync$auto(0x200000, 0x2000000005, 0x6)
keyctl$auto(0x23, 0x1, 0x6, 0x3, 0x3ff)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
socket(0x2, 0x3, 0x6)
executing program 3:
ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0x4b47, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0, [{0xbb, 0x4, 0x800}, {0x0, 0x9, 0x5}, {0x4, 0x58dc, 0x101}]})
pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
settimeofday$auto(&(0x7f0000000540)={0x5, 0x5}, &(0x7f0000000400)={0x7fffffff, 0x3})
shmctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000300)={{0x6, 0x0, <r0=>0x0, 0x1, 0x80, 0x3, 0x8}, 0xfffffff8, 0x1ff, 0x800, 0x4, @raw=0x3, @inferred=0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="5e96d4c4c9f11b902b31b587288ce68456d3372d700a0df0db", 0x0})
r1 = setfsgid$auto(r0)
socket(0x2, 0x1, 0x106)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51)
shutdown$auto(0x200000003, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=&(0x7f00000003c0), 0x80000000})
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x40000, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r2, 0x5380, 0xffffffffffffffff)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
setns(r4, 0x8000000)
sendmsg$auto_OVS_VPORT_CMD_GET(r3, &(0x7f0000003d00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003d40)=ANY=[], 0x2758}, 0x1, 0x0, 0x0, 0x8080}, 0x4008000)
keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
executing program 0:
unshare$auto(0x40000080)
sendmsg$auto_NL802154_CMD_SEND_BEACONS(0xffffffffffffffff, 0x0, 0x4145)
quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
shutdown$auto(0x200000003, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20461, 0x0)
write$auto(r0, &(0x7f0000000700)='/ECv/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lDT\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x90\xc8Oj\xd2\xd7\x0f\x1f\xf0\xb57\xfb\x87,P\xfb{\x99\x10\xdc\x80JGs\r\x93\x7f\x11\x0e\xbc\x99\x93M\xfe\xfd\x11\x14\xac]\xc4\xf2\xf4\xef\xde\xac\x1aQ\xdd\xd7[\xd7@\xe7R{\xaar\xfb~\x94\xd2n]\xd2\x15h\x18|2g\xfb\\%\xe6-\xca\xe3\xd9!7r\xf7\xfc\xe4z58\xf0W\xde\xd3\x90\xc5\rT\xbe\x90\xc0\xbc\xd5\xdb\x0e\t\x84X*\xcf\xd3}\x0eR\xae6\xa58\xc8\xac\x1d>t\xbe\xd7\xb3\xfc\xee\xa7jG\xb0\x1cN\xfb\x8c\x80+\xc2\x8f\x7f\xaf&\xbfx\xa4>\x8a\xab\t,i\xf42\xc2\nY\xcd\\\x1fLPP\x19\xe0\x1b-w\x85\xf9\xc3\x11/\\zh\xf7l\xaa?m\xd5.\xc1H\xdc\nq=.\x9f\xb3\x8aLf\x81\x82\x9e\xeb\xa6\x92Vg(pp3\x8c\xc5\xe6U\x1dK]\a\xf7\xd3!u\xb8akQ1\x92\xae\xe0C\xac\x9f\xd28Kg\xa6\xfbO\x84^\xfe\xed\x96\xfa\xa0\xd9\x8e\xa6\x17\xb9\x1c\xd6Z\x9ae\x85\xd1(\xde\xf1du\x12\xa7\xd3\xf2\xd1\xed\xa2\xe6;?\xfe\t|-\\bI\x9e\x02\x9d\xd3\x9a\'Oq\x8a\xcd\xd9\n\xa5\xedQg\xe1b\x93\xa1\xba\xc4\x91\xc8sg\xb5`z\xe8\r\xbeYg\x04E\xeb\x15\x05\x99\xcf7\x92\xcc\xd3^k]\xf6\xf1\x94n\x0f:mN\xa3W%*\xc2+F\x98\xc2[\x82\xed\x11q[\x10\x80\x98\x17C\xa1\x13=\xba\xcb\xa8', 0x100000a3d9)
mmap$auto(0x1, 0x400004, 0x800df, 0x9b72, 0x2, 0x0)
clock_adjtime$auto(0x17, 0x0)
socket(0x2, 0x2, 0x0)
mprotect$auto(0x0, 0x806121, 0x6)
io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xb, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}})
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x10780, 0x0)
openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x82, 0x0)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000)
sysfs$auto(0x2, 0xc, 0x0)
r1 = fsopen$auto(0x0, 0x1)
fsconfig$auto_SHMEM_HUGE_NEVER(r1, 0x0, &(0x7f0000000180)='no_\xe8\xdb\b\x9c\xe7J\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0)
executing program 1:
syz_clone3(&(0x7f0000000280)={0x1000000, &(0x7f0000000000)=<r0=>0xffffffffffffffff, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), {0x14}, &(0x7f00000000c0)=""/87, 0x57, &(0x7f0000000140)=""/214, &(0x7f0000000240)=[0x0, 0xffffffffffffffff], 0x2}, 0x58)
write$auto(0xffffffffffffffff, 0x0, 0x92bf)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0)
r3 = prctl$auto_PR_SET_MM_START_STACK(0x8, 0x5, 0x0, 0x401, 0x100)
ioctl$auto_RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000040)={0x3, 0x3, {0x5, 0x8, 0x9, 0x7, 0x3, 0x6b, 0xfffffffd, 0x10002, 0xfd}})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'})
unshare$auto(0x40000080)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000800)='/Eev/audio1\x00VI\xa3\xaa\xb1\xce\xf4d\xab\x83\xcfJ;\x9dJ\xc6\xc0\'\xdb\xbd\xe9/\x93\n\xcd$ab\xb3k7V\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89\xcc\xd9\x92\xee\x069m\x05b\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\xdbE\x93}\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaYd\xb0\xf1\xcb\xd3\xdd\xe2\xae,\x95k\xfer\xa8[\x84\x0f>:\xc2\xfe\x0e=7\xe5\xdc\xe9\xab\x0e\xfd\xd7`\xbe\x7f*\x10\x04A\xd2\xc9\xbc\xea\xb0\xa1\x930|09\xc2\x97M\xfc\x1a\xa7\xa4\xd0\x96\x03\xb9 \xe5\x9a\x0e\v6o\xc3I\v\x8d\xf2\x1e\xc9w\xac]\xe6\xe9\'2\x01\xe0\xf3\xf7\t\xf72\x1b\xe6\x16\x01\xc4}\x18\xbe\xbd\xa8\xd2\x00\xaf\xd6\x05k\xa6\xf8\x80\xe6\x7f\xc1\x95$\t\x1f\xa1\x83\xce\x11\x88\x99y\x9b\xe5\xfe(\xa6\xd5Z`\x9b\xdc\xa2 \xc7\xcd.C\xd0\xe0\x88\xf3\xba\x8b\xd2V\xdbw\x8dc', 0x100000a3dd)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r5 = getpid()
shmctl$auto_SHM_STAT(0x8000, 0xd, 0x0)
sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085)
fchdir$auto(0xffffffffffffffff)
get_mempolicy$auto(0x0, 0x0, 0x7, 0x5, 0x20000002)
openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000100, <r6=>0xee01, 0xee01, 0xfff, 0x87, 0x40, 0x3}, 0x0, 0x0, 0x7ff, 0x20003ff, 0x2000005, 0xa, 0x8, 0x4, 0x3, 0x3ff, @raw=0x7fff, @inferred=r5})
select$auto(0x4, 0x0, &(0x7f0000000680)={[0xffffffffffff1aa2, 0x8000, 0x401, 0x9, 0xffffffffffffffff, 0x1, 0xff, 0x6, 0x5, 0x0, 0xa, 0x1e, 0x2, 0x80000000, 0x6, 0xc0]}, 0x0, &(0x7f0000000780)={0x4, 0x2})
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402)
keyctl$auto(0x1f, 0x1, r6, 0x3, 0x3ff)
waitid$auto_P_PID(0x1, r1, &(0x7f0000000300)={@_si_pad}, 0x0, &(0x7f0000000380)={{0xb72, 0x6}, {0x7, 0x1}, 0x2e49, 0xedb, 0x20000000000, 0xb, 0x80000000, 0x7a, 0xfffd, 0x4, 0x2, 0x100, 0x8, 0x9d04, 0x91})
process_madvise$auto_MADV_KEEPONFORK(r0, &(0x7f0000000540)={&(0x7f0000000440)="69bbae3a4a81c98a6992d40a70d16e7b58cc8ad4f49218d0de74497f866f60402982cab89336bddf2c3bea78ebb39e3d49025de6453a836c48b85a94aaedfccf1e5683a9f05d617cea1509816eef7573df0ad2107b2c711214184c73d529b4a0adc2b9ea985390d79de842504e473b80a82d64d97064f26299fd04d3f297f61054c5b9d45359007654d7225c7eaaf70b56946f1ec7915d2def99733318b20b8098c7ffc03dbe8b3cefb1e934a99a89e061ac33775a99b3148bb7baf602f2f4be271f302d59c21791070a1a8002c4ff07e03677a5c0f190d209913478df6288", 0xfffffffffffffffa}, 0x3ff, 0x13, 0xf7c)
executing program 2:
ioctl$auto_RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/xfs/stats_clear\x00', 0x202, 0x0)
syz_clone3(&(0x7f0000000300)={0x20080000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x20000037}, &(0x7f00000000c0)=""/87, 0x57, &(0x7f0000000400)=""/214, &(0x7f0000000140)=[0x0, 0x0], 0x2}, 0x58)
write$auto(0xffffffffffffffff, 0x0, 0x92bf)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0)
ioctl$auto_RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x3, 0x3, {0x5, 0x8, 0x9, 0x7, 0x3, 0x6b, 0xfffffffd, 0x10002, 0xfd}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000800)='/Eev/audio1\x00VI\xa3\xaa\xb1\xce\xf4d\xab\x83\xcfJ;\x9dJ\xc6\xc0\'\xdb\xbd\xe9/\x93\n\xcd$ab\xb3k7V\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89\xcc\xd9\x92\xee\x069m\x05b\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\xdbE\x93}\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaYd\xb0\xf1\xcb\xd3\xdd\xe2\xae,\x95k\xfer\xa8[\x84\x0f>:\xc2\xfe\x0e=7\xe5\xdc\xe9\xab\x0e\xfd\xd7`\xbe\x7f*\x10\x04A\xd2\xc9\xbc\xea\xb0\xa1\x930|09\xc2\x97M\xfc\x1a\xa7\xa4\xd0\x96\x03\xb9 \xe5\x9a\x0e\v6o\xc3I\v\x8d\xf2\x1e\xc9w\xac]\xe6\xe9\'2\x01\xe0\xf3\xf7\t\xf72\x1b\xe6\x16\x01\xc4}\x18\xbe\xbd\xa8\xd2\x00\xaf\xd6\x05k\xa6\xf8\x80\xe6\x7f\xc1\x95$\t\x1f\xa1\x83\xce\x11\x88\x99y\x9b\xe5\xfe(\xa6\xd5Z`\x9b\xdc\xa2 \xc7\xcd.C\xd0\xe0\x88\xf3\xba\x8b\xd2V\xdbw\x8dc', 0x100000a3dd)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r3 = getpid()
shmctl$auto_SHM_STAT(0x8000, 0xd, 0x0)
sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085)
fchdir$auto(0xffffffffffffffff)
get_mempolicy$auto(0x0, 0x0, 0x7, 0x5, 0x20000002)
openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2001, 0x0)
msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000100, 0xee01, 0xee01, 0xfff, 0x87, 0x40, 0x3}, 0x0, 0x0, 0x7ff, 0x20003ff, 0x2000005, 0xa, 0x8, 0x4, 0x3, 0x3ff, @raw=0x7fff, @inferred=<r4=>r3})
select$auto(0x4, 0x0, &(0x7f0000000680)={[0xffffffffffff1aa2, 0x8000, 0x401, 0x9, 0xffffffffffffffff, 0x1, 0xff, 0x6, 0x5, 0x0, 0x1, 0x1e, 0x2, 0x80000000, 0x6, 0xc0]}, &(0x7f0000000700)={[0x3ff, 0xf3, 0xb, 0x7f, 0xd, 0x6446, 0x5, 0x9, 0x3, 0x401, 0x8, 0x7347, 0x0, 0x34, 0x7ff, 0x9]}, 0x0)
ptrace$auto_PTRACE_PEEKDATA(0x2, r4, 0x400, 0x4)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402)
sendmsg$auto_MACSEC_CMD_ADD_TXSA(r2, &(0x7f0000001640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000000ac0)={0xa4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_RXSC_CONFIG={0x39c, 0x2, 0x0, 0x1, [@nested={0x8, 0x110, 0x0, 0x1, [@nested={0x4, 0x49}]}, @nested={0xc, 0xc7, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0x80}]}, @nested={0x1a3, 0xe5, 0x0, 0x1, [@nested={0x4, 0x85}, @generic="f0c5c167e7fd2d88da554578aacee8d930c47ca64bc707333c7f386f1ad7f68e4c867c293047938d22fdf84e81e528f4a53946c5fb0e4521745aed620e29ada71a7c6604cf7f756d33b255", @typed={0x4, 0x43}, @nested={0x4, 0x131}, @typed={0x148, 0x108, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1\xce\xf4d\xab\x83\xcfJ;\x9dJ\xc6\xc0\'\xdb\xbd\xe9/\x93\n\xcd$ab\xb3k7V\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89\xcc\xd9\x92\xee\x069m\x05b\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\xdbE\x93}\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaYd\xb0\xf1\xcb\xd3\xdd\xe2\xae,\x95k\xfer\xa8[\x84\x0f>:\xc2\xfe\x0e=7\xe5\xdc\xe9\xab\x0e\xfd\xd7`\xbe\x7f*\x10\x04A\xd2\xc9\xbc\xea\xb0\xa1\x930|09\xc2\x97M\xfc\x1a\xa7\xa4\xd0\x96\x03\xb9 \xe5\x9a\x0e\v6o\xc3I\v\x8d\xf2\x1e\xc9w\xac]\xe6\xe9\'2\x01\xe0\xf3\xf7\t\xf72\x1b\xe6\x16\x01\xc4}\x18\xbe\xbd\xa8\xd2\x00\xaf\xd6\x05k\xa6\xf8\x80\xe6\x7f\xc1\x95$\t\x1f\xa1\x83\xce\x11\x88\x99y\x9b\xe5\xfe(\xa6\xd5Z`\x9b\xdc\xa2 \xc7\xcd.C\xd0\xe0\x88\xf3\xba\x8b\xd2V\xdbw\x8dc'}]}, @nested={0x1df, 0xf3, 0x0, 0x1, [@generic="e97023cb1c7206b6f6cb4dade727bdaf3c0eca57bbdb860d3aa394bbb126031a508661c0d17b4e63d4f89f738c8a1aab0455454c082cc52f9033bfd624fd4e9e58c37e0d05f424c2feee883fe39671d2f22d49c7de12b647771ff382cd72d17e100c6020aba1b0a976d88562ad75583cc1dac5a189adc2202f959560c9750415cbfe614a6a9b723e077b16d3e69466cfbe4594da54946ab899e3e1cd7aad98c5e991e960b80e3e8f6b9c4a16bc5c1dfe4e1da160cfb34a34e19f8a4cd5d35c75a7d9e9a19b535edf250f38ace55fadf81f13adae7a3b6904553327d7", @generic="a997e85971e667fae98e9d23000971df54f189264d29a4229082a0cc514321d932d25b5c5d0a17394c3c440cc00663b7127b3f7fc133de513da8280e3ee56750f60449a74757311201bbee3abc629ff7f051bbc258c56a446efe7571fa2141eacb85cdd74df42ec8a03ae84ae7b0758427b8d258827e8ce92db2fc7add1384893bedd450e00b202fc35aa5983c5dd42f9839cd9652fc4a2e5271b76c87e8ace9fc92910ede410696d87e8d952221635236ea0cdb31835ec344d44b31530042089bfe9676ff7fb1be33a4a311976671a39a316c532f39bcbd6df99c43442eb65679d0219f79aa7a573c99f4eaeb4d74608fe27672e4a1e7", @typed={0x8, 0x15f, 0x0, 0x0, @u32=0x80000000}]}]}, @MACSEC_ATTR_SA_CONFIG={0x165, 0x3, 0x0, 0x1, [@generic="6875b38066b8cd6a949693dc4c3f0a0b761d495bd6489bda9765963320356a850ab231b5b240148b3674976968bbe737", @typed={0x16, 0x79, 0x0, 0x0, @str='/dev/snd/midiC2D0\x00'}, @nested={0x18, 0x4, 0x0, 0x1, [@typed={0x14, 0x5b, 0x0, 0x0, @ipv6=@mcast1}]}, @typed={0x11, 0xcc, 0x0, 0x0, @str='\xf3#-+{]][)\'-}\x00'}, @generic="8816eee4526fe52105e9c1de3e100bc877feb7abfd54157a8a5785bcc8b5212dca3105617a103a33ccad179dd15346c3eb07063e8fc955c8390ff1ff833dce93e957a1abc3e95952413be1f253d212b9ac78bc0c4c3afbcfddbb2926d245d4a770105525142ea497ba7d52ec996d0ed4d3bfad3a9e9974ac02cf1927687641f953dbebd483b339d029813de48848fe3dd8ebb205e89da38485a96274042ebd45191467517718b48875396976443c4357f997d00b6020d3db3c8fbfd2f2c3ce35b0a823f92f6a3f11c4405bfba178fb15feba61f5fd411e2b650399674a5417fdec1fe64ce2e50f83bcb47fee77"]}, @MACSEC_ATTR_OFFLOAD={0x164, 0x9, 0x0, 0x1, [@nested={0xec, 0x87, 0x0, 0x1, [@nested={0x4, 0x92}, @generic="4ef641991b54fa5441e35978e902c16e45f4cd545b59679ebf9a924362ea489abfc10bc77ae6d6e00b459198eea7a49b87944eb7cfdf8673c025d12ce8795f7ff8ce2b7e8837465ecca09fb090fdbaedd1504ddb8cc670a50632ef4894f2f7f83d79c70db4d4c0a1118302a83480122f971cc7e11eb0eeccd369103f70cd39f6bafc25e3faa4ab60433c3436e5a3b9eec40fa5b2d3f60188e916ab17ebf692d65d887a800b64e45057782171e71a5f82de534a9cec5c068a5622e4f6d235cea484ec15e427bc048848cf0203675bf3b857cd59cb8cde2f5b7db952ae85343680fbc6c18e"]}, @generic="9bad35703b1201765d6e8b12692beb4399eb08a51e307ec24ba203c1e2c1e6a5e96201183863b0b6b2804020721804106e202a7ee5bc5ce5ce8d15ad8462ff540b41373c2855a496c7e42f0c3d9bcaf83f7d7c5c5e21b2f1f6c139d2bff84b6bde4b10eac152902875cdf876c05c4cb0f30e95b2"]}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_RXSC_CONFIG={0x40, 0x2, 0x0, 0x1, [@typed={0x14, 0x75, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x25, 0x34, 0x0, 0x1, [@generic="7fd5ddd5caedb8abc02fc53890c17d6a7f379ebdab", @typed={0x8, 0x55, 0x0, 0x0, @u32=0x8}, @typed={0x4, 0x11}]}]}, @MACSEC_ATTR_OFFLOAD={0x1a2, 0x9, 0x0, 0x1, [@typed={0x8, 0x1a, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x4f, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x8, 0x43, 0x0, 0x0, @fd=r1}, @generic="a41299a3484c37f150bbf9ddd5920db402bc402057ebc0a7a36408ad5b44f3ab9fe955", @nested={0x59, 0xbd, 0x0, 0x1, [@typed={0x4, 0x119}, @generic="987c04eab64ef3fd0aeff5912da6a83c108ac1bb6305c2aa38380bedba8804d45496ecbefaae555c1ca53ee053f3b8fe171339089bf8eb5aa3a19f901b4a24b6461d92ef3e3632a9ab", @typed={0x8, 0xfe, 0x0, 0x0, @u32=0x7f}]}, @nested={0x4c, 0xba, 0x0, 0x1, [@generic="cf314ba475f29be38f4f30d182531ca8533859f62648839cef2998cb529f30b89a8ce6e5df17685df0d655304d622b57ddd3cdc141c4c9c713a7f5b96d6223e0ec77ef8d89669a05"]}, @generic="5ae6e33daf94cb35461876e408abb19be6cca893e575d6dfaf1752e71442e1b417e3fa6d628ccdfa53320199c66be82b64f1d7c94dc294866fa6e6f76d81ab3b41d374f77ce9cf7ec5fa5202b1940ccf11afc6545af6137d2f670a19973ab0f35116302dcd55fc4dd2d76ef1c8a0a08da377b5884918a9b6c64a572590baa6a1c7faf04fca144548278de1327f5b54380b96b035431fefd366d57b79437ba58f5bda779c055558320a0944c0f23307fb5a77bb09291ce8f6a1e8b8"]}, @MACSEC_ATTR_OFFLOAD={0x1d4, 0x9, 0x0, 0x1, [@nested={0x1a8, 0x11b, 0x0, 0x1, [@generic="bed484421bc5e36f3eecf6ffe614b4b63b459795939ead47b933de9bc31d45892a26f4dfb8a7f352a39f178eb67fbe68257fa5f3e45e56f6272c4612f0915bfddd5635d8ad9c20753408c1719cba41aebfc5be1e87bcfb9c9f55ba507a079ee41ef5172103975c2c470149720ecbb47cd26ce42208ab95ae2f7085d724b65730df0c8f1b172816095a628e291d25cf58d0c186c9205f05ab3edf68425f8bae2b31def93f890881e8c732d1dfe08c71ad09c0f879641f59ed51c604fab9f5f60fe55690b3bd5da0bb99248e1be91d0325495c95de3573c28c646988506b", @generic="3779af7f516ba442ae9169bccbc4a7c5b5dd4033666475922df13c8d8da6b3824260ab055307765722500571e623e239c9187826e1ace12e94f5321492d552eae9e4f0cbd38b76b7facafba62dd3b15bdd129f9d047a771c010f99b43ac2e858f629aeeec316a9fa6c19c72aa140c12d803072dd2ce5f5179b7d8c5e61c5530d015ef677b814a3e07bb7bd1741505dce3180206fffd6641d6d0bca1186b6c16de93590c40f7f9b2337960b8a0d0082cdf29b6776fe54d7abd490a8a6a0012e7a0a6ca85272b344"]}, @typed={0xd, 0x111, 0x0, 0x0, @str=':&{{*{@$\x00'}, @nested={0x10, 0xe1, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x25}]}, @typed={0x8, 0xe2, 0x0, 0x0, @ipv4=@local}]}]}, 0xa4c}, 0x1, 0x0, 0x0, 0x8080}, 0x800)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
executing program 0:
ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0x4b47, 0x3, 0x4080005, @stream_id=0x7, 0x2004c, 0xc, 0x0, [{0xbb, 0x4, 0x800}, {0x0, 0x9, 0x5}, {0x0, 0x400058dc, 0x101}]})
pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
r0 = socket(0xa, 0x2, 0x73)
getsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x0, 0x40, 0x0, &(0x7f0000000240))
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
settimeofday$auto(&(0x7f0000000540)={0x5e, 0x1}, &(0x7f0000000580)={0x1, 0xdb36})
setpgid$auto(0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
rseq$auto(0x0, 0x7, 0x8, 0x10)
sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14)
ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=&(0x7f00000003c0), 0x80000000})
setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x8002)
mmap$auto(0x0, 0x20000040009, 0xdf, 0x9b72, r0, 0x1000000000028000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyr1\x00', 0xc81, 0x0)
newfstatat$auto(r2, 0x0, 0x0, 0xfffff29f)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r1, 0xffffffffffffffff, 0x8, 0x1, 0xffffffffffffffff, @relative_id=0x8, 0xe600}, 0xf)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x37f)
sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(r0, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000104000000ffdbdf252e000000640001801400020064766d7270310000000000000000000008000300070000001400020076657468315f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200677265300000000000000000000000001400020070696d726567310000000000000000002800018008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e3100000000000000000008000300090000005800018014000200708f1004aa3a39a782f7f1e7fa82240f696d7265673100000000000000000014000200766c616e300000", @ANYBLOB='R', @ANYBLOB="140002007369743000000000000000000000000008", @ANYRES32=0x0, @ANYBLOB="0800030083aa00001c000180", @ANYRESHEX, @ANYBLOB="0800030001000080080003000700000004000180"], 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000018)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3fd)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x1a, 0x3, 0x1)
getsockopt$auto_SO_TIMESTAMPING_OLD(r0, 0x104, 0x25, 0x0, 0x0)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$auto(0x3, 0x80000541b, 0x38)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001040)='/dev/dsp1\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)="7a47301037")
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x103342, 0x0)
read$auto(0x3, 0x0, 0x8080)
readv$auto(r1, &(0x7f0000000240)={0x0, 0x84d}, 0x3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x801, 0x84)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x1)
mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x801, 0x106)
pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x5, 0x2020009, 0x3, 0x19, 0xfffffffffffffffa, 0x800008004)
madvise$auto(0x0, 0x2000040080000004, 0xe)
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3, 0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x8000000000000003, 0x9, 0xa, 0x12, 0xdd, 0xfffffffffffffffb)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80d00, 0x0)
fsconfig$auto_SHMEM_HUGE_ALWAYS(r3, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x8, 0x336a, 0x0, 0x80, 0xfff7fffffff7fffc)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x10000083d4)
shmdt$auto(0x0)
executing program 3:
syz_clone3(&(0x7f0000000280)={0x1000000, &(0x7f0000000000)=<r0=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x14}, &(0x7f00000000c0)=""/87, 0x57, &(0x7f0000000140)=""/214, &(0x7f0000000240)=[0x0, 0xffffffffffffffff], 0x2}, 0x58)
write$auto(0xffffffffffffffff, 0x0, 0x92bf)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0)
r2 = prctl$auto_PR_SET_MM_START_STACK(0x8, 0x5, 0x0, 0x401, 0x100)
ioctl$auto_RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x3, 0x3, {0x5, 0x8, 0x9, 0x7, 0x3, 0x6b, 0xfffffffd, 0x10002, 0xfd}})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'})
unshare$auto(0x40000080)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r3, &(0x7f0000000800)='/Eev/audio1\x00VI\xa3\xaa\xb1\xce\xf4d\xab\x83\xcfJ;\x9dJ\xc6\xc0\'\xdb\xbd\xe9/\x93\n\xcd$ab\xb3k7V\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89\xcc\xd9\x92\xee\x069m\x05b\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\xdbE\x93}\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaYd\xb0\xf1\xcb\xd3\xdd\xe2\xae,\x95k\xfer\xa8[\x84\x0f>:\xc2\xfe\x0e=7\xe5\xdc\xe9\xab\x0e\xfd\xd7`\xbe\x7f*\x10\x04A\xd2\xc9\xbc\xea\xb0\xa1\x930|09\xc2\x97M\xfc\x1a\xa7\xa4\xd0\x96\x03\xb9 \xe5\x9a\x0e\v6o\xc3I\v\x8d\xf2\x1e\xc9w\xac]\xe6\xe9\'2\x01\xe0\xf3\xf7\t\xf72\x1b\xe6\x16\x01\xc4}\x18\xbe\xbd\xa8\xd2\x00\xaf\xd6\x05k\xa6\xf8\x80\xe6\x7f\xc1\x95$\t\x1f\xa1\x83\xce\x11\x88\x99y\x9b\xe5\xfe(\xa6\xd5Z`\x9b\xdc\xa2 \xc7\xcd.C\xd0\xe0\x88\xf3\xba\x8b\xd2V\xdbw\x8dc', 0x100000a3dd)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r4 = getpid()
shmctl$auto_SHM_STAT(0x8000, 0xd, 0x0)
sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085)
fchdir$auto(0xffffffffffffffff)
get_mempolicy$auto(0x0, 0x0, 0x7, 0x5, 0x20000002)
openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram1\x00', 0x20001, 0x0)
ioctl$auto_BLKRRPART(r5, 0x801070cf, 0x700000000000000)
msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000100, <r6=>0xee01, 0xee01, 0xfff, 0x87, 0x40, 0x3}, 0x0, 0x0, 0x7ff, 0x20003ff, 0x2000005, 0xa, 0x8, 0x4, 0x3, 0x3ff, @raw=0x7fff, @inferred=r4})
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402)
keyctl$auto(0x1f, 0x1, r6, 0x3, 0x3ff)
process_madvise$auto_MADV_KEEPONFORK(r0, &(0x7f0000000540)={&(0x7f0000000440)="69bbae3a4a81c98a6992d40a70d16e7b58cc8ad4f49218d0de74497f866f60402982cab89336bddf2c3bea78ebb39e3d49025de6453a836c48b85a94aaedfccf1e5683a9f05d617cea1509816eef7573df0ad2107b2c711214184c73d529b4a0adc2b9ea985390d79de842504e473b80a82d64d97064f26299fd04d3f297f61054c5b9d45359007654d7225c7eaaf70b56946f1ec7915d2def99733318b20b8098c7ffc03dbe8b3cefb1e934a99a89e061ac33775a99b3148bb7baf602f2f4be271f302d59c21791070a1a8002c4ff07e03677a5c0f190d209913478df6288", 0xfffffffffffffffa}, 0x3ff, 0x13, 0xf7c)
executing program 1:
setns(0xc9, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0p/sub2/sw_params\x00', 0x88400, 0x0)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee)
mmap$auto(0xfffffffffffffffc, 0x40009, 0x201, 0x9b72, 0x7, 0x28000)
modify_ldt$auto(0x1, 0x0, 0x10)
modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82002, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)='-', 0x1)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_VHOST_SET_FEATURES2(r2, 0x4008af00, &(0x7f0000000040)=0x3)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0x6)
madvise$auto(0x0, 0x2003f2, 0x15)
mmap$auto(0x0, 0x4020009, 0xdb, 0xebf, r2, 0x8000)
creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r4, r4, 0x0, 0x3)
openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x80001, 0x0)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x10000000000002f, 0x0)
ioctl$auto(0x4000000000000c8, 0x400454e2, 0x3)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
setsockopt$auto_SO_MARK(r0, 0x9f, 0x24, &(0x7f0000000000)='\x00', 0xc743)
r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), 0xffffffffffffffff)
r2 = getpgid(0xffffffffffffffff)
sysfs$auto(0x9, 0x7fffffff, 0xcb1)
r3 = prctl$auto_PR_SET_MM_START_BRK(0x4, 0x6, r2, 0xd, 0x0)
setsockopt$auto_SO_LOCK_FILTER(r3, 0x6, 0x2c, &(0x7f00000000c0)='--(#-+^\x00', 0x6)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000040), 0xc, &(0x7f00000009c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="18080000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="04002e8095408c52eb178b45ee0bf282f7805cc6ca5f58860ed70dfb2b6e2abeadb67a9e7a4a0ed2a1cc2d90983057c8f1ddd524e918c67fec83df40e10c005c0003000000000000000800ec00", @ANYRES32=r0, @ANYBLOB="0c00e4002d2d28232d2b5e000800970083f218bd5ffdb8abe4de1b1e01a3440e8d30cc1627ff8149a215245b913b1e08ff56174a9a5a0d77cbc1c9392a97e9a5c185139f25e2853e50b5d43736914ef82ae06d66b8d029e8e371607ad7ab8cb86ab47868a4e0124569b8f3fe8c258e85334c13bca9c27e5a429683a75ae6714b1a030d14d222b661845978ae9429fabebd52d4e878d19098a51022a25d4c65ea2d42d7d1751a945b8fafbf2a6a07527eb24aceb574d5a0df6bf22af2ff20395128630afe9d945f2e93fa2775a466a2bd4c86a828707a50d9d3cbcb05c490fb4662d72d9d87187475c8219ecc4f5ce284c131839a", @ANYRES32=r2, @ANYBLOB="000000040002805a02098008004c00e00000010c00cf0000000000010000000800f100", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0c005500030000000000000008004600", @ANYRES32=0x0, @ANYBLOB="0c00168008006100", @ANYRES32, @ANYBLOB], 0x818}, 0x1, 0x0, 0x0, 0x8040}, 0x20040005)
r4 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000140), 0x60e83, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x80004, 0x400000000e2, 0xeb1, 0x405, 0x8000)
pipe2$auto(0x0, 0x80)
mmap$auto(0x0, 0x10000, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x11, 0x80003, 0x300)
r5 = socket(0x10, 0x2, 0x4)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x20008800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES64], 0x38}}, 0x40008c0)
close_range$auto(0x2, 0x8, 0x0)
fanotify_init$auto(0x65, 0x2)
socket(0x1d, 0x2, 0x2)
connect$auto(0x3, 0x0, 0x53)
socket(0x10, 0x3, 0x6)
socketpair$auto(0x1e, 0xb, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x38}, 0x6, 0x0, 0x4, 0x9}, 0x9}, 0x6, 0x1f00)
ioctl$auto(r4, 0x3b8e, r0)
executing program 2:
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x6c0840, 0x0)
socket(0x27, 0x4, 0xa4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x1f, 0x80002, 0x73)
ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000002c0)={0xea, 0x63, 0xfffffeff, 0x6bf, &(0x7f0000000080)="c12a4ead89997936d412e7fc1d853bd21acb64802cab67d0c24eabe0d0d9beadd7", 0x3, 0x400000, 0x7, @stream_id=0x9, 0x76, 0x102, &(0x7f0000000180)="b89972aabaa332aacbd6b2bdf204fd3303b2cb2d61d8b790181ba1c4e3047fdc239a853766ee4528d5c8529827465e0a089873b02b96bb437b5348587c43293acd58916304ab247b218455fe23711ee49f418ee1cd5457843cfc2be4e9701f283385554ecf", [{0xb86, 0xf0b, 0x7}, {0x1, 0x4, 0x2}, {0xfffff801, 0x966d, 0x8ea}]})
ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0})
pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
r1 = setfsgid$auto(0xee01)
msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff)
set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4)
mseal$auto(0x0, 0x7dda, 0x0)
r2 = socket(0x1, 0x1, 0x1)
setsockopt$auto(r2, 0x29, 0x20, 0x0, 0x8002)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff)
mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
madvise$auto(0x100000000000, 0x200006, 0xc)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
close_range$auto(r0, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-bpf$auto-syz_genetlink_get_family_id$auto_nl802154-sendmsg$auto_NL802154_CMD_DEL_SEC_KEY-unshare$auto-unshare$auto-mmap$auto-rseq$auto-tkill$auto-select$auto-close_range$auto-openat$auto_usbdev_file_operations_usb-fsconfig$auto_SHMEM_HUGE_ALWAYS-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-prctl$auto-write$auto-shmdt$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3, 0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x8000000000000003, 0x9, 0xa, 0x12, 0xdd, 0xfffffffffffffffb)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80d00, 0x0)
fsconfig$auto_SHMEM_HUGE_ALWAYS(r3, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x8, 0x336a, 0x0, 0x80, 0xfff7fffffff7fffc)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x10000083d4)
shmdt$auto(0x0)

program crashed: WARNING: ODEBUG bug in hci_release_dev
single: successfully extracted reproducer
found reproducer with 30 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-bpf$auto-syz_genetlink_get_family_id$auto_nl802154-sendmsg$auto_NL802154_CMD_DEL_SEC_KEY-unshare$auto-unshare$auto-mmap$auto-rseq$auto-tkill$auto-select$auto-close_range$auto-openat$auto_usbdev_file_operations_usb-fsconfig$auto_SHMEM_HUGE_ALWAYS-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-prctl$auto-write$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3, 0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x8000000000000003, 0x9, 0xa, 0x12, 0xdd, 0xfffffffffffffffb)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80d00, 0x0)
fsconfig$auto_SHMEM_HUGE_ALWAYS(r3, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x8, 0x336a, 0x0, 0x80, 0xfff7fffffff7fffc)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x10000083d4)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-bpf$auto-syz_genetlink_get_family_id$auto_nl802154-sendmsg$auto_NL802154_CMD_DEL_SEC_KEY-unshare$auto-unshare$auto-mmap$auto-rseq$auto-tkill$auto-select$auto-close_range$auto-openat$auto_usbdev_file_operations_usb-fsconfig$auto_SHMEM_HUGE_ALWAYS-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-prctl$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x8000000000000003, 0x9, 0xa, 0x12, 0xdd, 0xfffffffffffffffb)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80d00, 0x0)
fsconfig$auto_SHMEM_HUGE_ALWAYS(r2, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x8, 0x336a, 0x0, 0x80, 0xfff7fffffff7fffc)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-bpf$auto-syz_genetlink_get_family_id$auto_nl802154-sendmsg$auto_NL802154_CMD_DEL_SEC_KEY-unshare$auto-unshare$auto-mmap$auto-rseq$auto-tkill$auto-select$auto-close_range$auto-openat$auto_usbdev_file_operations_usb-fsconfig$auto_SHMEM_HUGE_ALWAYS-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x8000000000000003, 0x9, 0xa, 0x12, 0xdd, 0xfffffffffffffffb)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80d00, 0x0)
fsconfig$auto_SHMEM_HUGE_ALWAYS(r2, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-bpf$auto-syz_genetlink_get_family_id$auto_nl802154-sendmsg$auto_NL802154_CMD_DEL_SEC_KEY-unshare$auto-unshare$auto-mmap$auto-rseq$auto-tkill$auto-select$auto-close_range$auto-openat$auto_usbdev_file_operations_usb-fsconfig$auto_SHMEM_HUGE_ALWAYS-unshare$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x8000000000000003, 0x9, 0xa, 0x12, 0xdd, 0xfffffffffffffffb)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80d00, 0x0)
fsconfig$auto_SHMEM_HUGE_ALWAYS(r2, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1)
unshare$auto(0x40000080)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-bpf$auto-syz_genetlink_get_family_id$auto_nl802154-sendmsg$auto_NL802154_CMD_DEL_SEC_KEY-unshare$auto-unshare$auto-mmap$auto-rseq$auto-tkill$auto-select$auto-close_range$auto-openat$auto_usbdev_file_operations_usb-fsconfig$auto_SHMEM_HUGE_ALWAYS
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x8000000000000003, 0x9, 0xa, 0x12, 0xdd, 0xfffffffffffffffb)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80d00, 0x0)
fsconfig$auto_SHMEM_HUGE_ALWAYS(r2, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-bpf$auto-syz_genetlink_get_family_id$auto_nl802154-sendmsg$auto_NL802154_CMD_DEL_SEC_KEY-unshare$auto-unshare$auto-mmap$auto-rseq$auto-tkill$auto-select$auto-close_range$auto-openat$auto_usbdev_file_operations_usb
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x8000000000000003, 0x9, 0xa, 0x12, 0xdd, 0xfffffffffffffffb)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80d00, 0x0)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-bpf$auto-syz_genetlink_get_family_id$auto_nl802154-sendmsg$auto_NL802154_CMD_DEL_SEC_KEY-unshare$auto-unshare$auto-mmap$auto-rseq$auto-tkill$auto-select$auto-close_range$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x8000000000000003, 0x9, 0xa, 0x12, 0xdd, 0xfffffffffffffffb)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-bpf$auto-syz_genetlink_get_family_id$auto_nl802154-sendmsg$auto_NL802154_CMD_DEL_SEC_KEY-unshare$auto-unshare$auto-mmap$auto-rseq$auto-tkill$auto-select$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x8000000000000003, 0x9, 0xa, 0x12, 0xdd, 0xfffffffffffffffb)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-bpf$auto-syz_genetlink_get_family_id$auto_nl802154-sendmsg$auto_NL802154_CMD_DEL_SEC_KEY-unshare$auto-unshare$auto-mmap$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x8000000000000003, 0x9, 0xa, 0x12, 0xdd, 0xfffffffffffffffb)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-bpf$auto-syz_genetlink_get_family_id$auto_nl802154-sendmsg$auto_NL802154_CMD_DEL_SEC_KEY-unshare$auto-unshare$auto-mmap$auto-rseq$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x8000000000000003, 0x9, 0xa, 0x12, 0xdd, 0xfffffffffffffffb)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-bpf$auto-syz_genetlink_get_family_id$auto_nl802154-sendmsg$auto_NL802154_CMD_DEL_SEC_KEY-unshare$auto-unshare$auto-mmap$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x8000000000000003, 0x9, 0xa, 0x12, 0xdd, 0xfffffffffffffffb)
tkill$auto(0x80000000000001, 0x7)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-bpf$auto-syz_genetlink_get_family_id$auto_nl802154-sendmsg$auto_NL802154_CMD_DEL_SEC_KEY-unshare$auto-unshare$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-bpf$auto-syz_genetlink_get_family_id$auto_nl802154-sendmsg$auto_NL802154_CMD_DEL_SEC_KEY-unshare$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
unshare$auto(0x40000080)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-bpf$auto-syz_genetlink_get_family_id$auto_nl802154-sendmsg$auto_NL802154_CMD_DEL_SEC_KEY-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-bpf$auto-syz_genetlink_get_family_id$auto_nl802154-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-bpf$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x18, 0x0, 0x92)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-bpf$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-write$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-openat$auto_snd_rawmidi_f_ops_rawmidi-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-unshare$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-ioctl$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
ioctl$auto(0x3, 0x89e0, 0x38)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-sendto$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
ioctl$auto(0x3, 0x89e0, 0x38)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-ioctl$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
ioctl$auto(0x3, 0x89e0, 0x38)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-socketpair$auto-write$auto-ioctl$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0xe)
ioctl$auto(0x3, 0x89e0, 0x38)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-pwrite64$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
ioctl$auto(0x3, 0x89e0, 0x38)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
ioctl$auto(0x3, 0x89e0, 0x38)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
ioctl$auto(0x3, 0x89e0, 0x38)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
ioctl$auto(0x3, 0x89e0, 0x38)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
ioctl$auto(0x3, 0x89e0, 0x38)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
ioctl$auto(0x3, 0x89e0, 0x38)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
ioctl$auto(0x3, 0x89e0, 0x38)
rseq$auto(0x0, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program crashed: WARNING: ODEBUG bug in hci_release_dev
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
program crashed: WARNING: ODEBUG bug in hci_release_dev
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
program crashed: WARNING: ODEBUG bug in hci_release_dev
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
program crashed: WARNING: ODEBUG bug in hci_release_dev
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
program crashed: WARNING: ODEBUG bug in hci_release_dev
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
program crashed: WARNING: ODEBUG bug in hci_release_dev
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
program crashed: WARNING: ODEBUG bug in hci_release_dev
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
program crashed: WARNING: ODEBUG bug in hci_release_dev
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
program crashed: WARNING: ODEBUG bug in hci_release_dev
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
program crashed: WARNING: ODEBUG bug in hci_release_dev
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
program crashed: WARNING: ODEBUG bug in hci_release_dev
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
program crashed: WARNING: ODEBUG bug in hci_release_dev
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
program crashed: WARNING: ODEBUG bug in hci_release_dev
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
program crashed: WARNING: ODEBUG bug in hci_release_dev
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
ioctl$auto(0x3, 0x89e0, 0x38)
rseq$auto(0x0, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program crashed: WARNING: ODEBUG bug in hci_release_dev
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
ioctl$auto(0x3, 0x89e0, 0x38)
rseq$auto(0x0, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program crashed: WARNING: ODEBUG bug in hci_release_dev
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap$auto-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto-ioctl$auto-rseq$auto-tkill$auto
detailed listing:
executing program 0:
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
ioctl$auto(0x3, 0x89e0, 0x38)
rseq$auto(0x0, 0x20, 0x0, 0x8000006)
tkill$auto(0x80000000000001, 0x7)

program crashed: WARNING: ODEBUG bug in hci_release_dev
validation run: crashed=true
reproducing took 1h30m47.600921956s
repro crashed as (corrupted=false):
------------[ cut here ]------------
ODEBUG: free active (active state 0) object: ffff88807e341438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 net/bluetooth/coredump.c:217
WARNING: lib/debugobjects.c:629 at debug_print_object+0x198/0x2b0 lib/debugobjects.c:629, CPU#1: syz-executor/5771
Modules linked in:
CPU: 1 UID: 0 PID: 5771 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:debug_print_object+0x1a5/0x2b0 lib/debugobjects.c:629
Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 78 52 1e 0c 41 56 48 8b 14 ed 40 34 62 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 a2 86 13 0c 01 48 83 c4 18 5b 5d 41 5c 41
RSP: 0018:ffffc900039af948 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: ffffc900039afa30 RCX: 0000000000000000
RDX: ffffffff8c623380 RSI: ffffffff8c622f20 RDI: ffffffff915022b0
RBP: 0000000000000003 R08: ffff88807e341438 R09: ffffffff8bf30f60
R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c622f20
R13: ffffffff8bf30fa0 R14: ffffffff8ad50040 R15: ffffc900039afa48
FS:  0000000000000000(0000) GS:ffff888123c68000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007faa8f0ef286 CR3: 000000006ee6c000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 __debug_check_no_obj_freed lib/debugobjects.c:1171 [inline]
 debug_check_no_obj_freed+0x4da/0x630 lib/debugobjects.c:1201
 __free_pages_prepare mm/page_alloc.c:1425 [inline]
 __free_frozen_pages+0x409/0x10f0 mm/page_alloc.c:2962
 hci_release_dev+0x4ef/0x630 net/bluetooth/hci_core.c:2742
 bt_host_release+0x6b/0xb0 net/bluetooth/hci_sysfs.c:87
 device_release+0xd2/0x270 drivers/base/core.c:2640
 kobject_cleanup lib/kobject.c:689 [inline]
 kobject_release lib/kobject.c:720 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x1f7/0x640 lib/kobject.c:737
 put_device+0x1f/0x30 drivers/base/core.c:3884
 vhci_release+0x185/0x230 drivers/bluetooth/hci_vhci.c:701
 __fput+0x3ff/0xb50 fs/file_table.c:512
 task_work_run+0x150/0x240 kernel/task_work.c:233
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x951/0x2ae0 kernel/exit.c:1008
 do_group_exit+0xd5/0x2a0 kernel/exit.c:1151
 __do_sys_exit_group kernel/exit.c:1162 [inline]
 __se_sys_exit_group kernel/exit.c:1160 [inline]
 __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1160
 x64_sys_call+0x1567/0x1570 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x121/0x770 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f0d98b9e159
Code: Unable to access opcode bytes at 0x7f0d98b9e12f.
RSP: 002b:00007ffeb28c5278 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f0d98b9e159
RDX: 00007f0d98b5e98e RSI: 0000000000000000 RDI: 0000000000000007
RBP: 00007ffeb28c593c R08: 0000000000000000 R09: 0000000000000007
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
R13: 00000000000927c0 R14: 00000000000202ed R15: 00007ffeb28c5990
 </TASK>
----------------
Code disassembly (best guess):
   0:	b8 00 00 00 00       	mov    $0x0,%eax
   5:	00 fc                	add    %bh,%ah
   7:	ff                   	lcall  (bad)
   8:	df 48 89             	fisttps -0x77(%rax)
   b:	fa                   	cli
   c:	48 c1 ea 03          	shr    $0x3,%rdx
  10:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
  14:	75 4f                	jne    0x65
  16:	48 8d 3d 78 52 1e 0c 	lea    0xc1e5278(%rip),%rdi        # 0xc1e5295
  1d:	41 56                	push   %r14
  1f:	48 8b 14 ed 40 34 62 	mov    -0x739dcbc0(,%rbp,8),%rdx
  26:	8c
  27:	4c 89 e6             	mov    %r12,%rsi
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	58                   	pop    %rax
  30:	83 05 a2 86 13 0c 01 	addl   $0x1,0xc1386a2(%rip)        # 0xc1386d9
  37:	48 83 c4 18          	add    $0x18,%rsp
  3b:	5b                   	pop    %rbx
  3c:	5d                   	pop    %rbp
  3d:	41 5c                	pop    %r12
  3f:	41                   	rex.B

final repro crashed as (corrupted=false):
------------[ cut here ]------------
ODEBUG: free active (active state 0) object: ffff88807e341438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 net/bluetooth/coredump.c:217
WARNING: lib/debugobjects.c:629 at debug_print_object+0x198/0x2b0 lib/debugobjects.c:629, CPU#1: syz-executor/5771
Modules linked in:
CPU: 1 UID: 0 PID: 5771 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:debug_print_object+0x1a5/0x2b0 lib/debugobjects.c:629
Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 78 52 1e 0c 41 56 48 8b 14 ed 40 34 62 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 a2 86 13 0c 01 48 83 c4 18 5b 5d 41 5c 41
RSP: 0018:ffffc900039af948 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: ffffc900039afa30 RCX: 0000000000000000
RDX: ffffffff8c623380 RSI: ffffffff8c622f20 RDI: ffffffff915022b0
RBP: 0000000000000003 R08: ffff88807e341438 R09: ffffffff8bf30f60
R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c622f20
R13: ffffffff8bf30fa0 R14: ffffffff8ad50040 R15: ffffc900039afa48
FS:  0000000000000000(0000) GS:ffff888123c68000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007faa8f0ef286 CR3: 000000006ee6c000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 __debug_check_no_obj_freed lib/debugobjects.c:1171 [inline]
 debug_check_no_obj_freed+0x4da/0x630 lib/debugobjects.c:1201
 __free_pages_prepare mm/page_alloc.c:1425 [inline]
 __free_frozen_pages+0x409/0x10f0 mm/page_alloc.c:2962
 hci_release_dev+0x4ef/0x630 net/bluetooth/hci_core.c:2742
 bt_host_release+0x6b/0xb0 net/bluetooth/hci_sysfs.c:87
 device_release+0xd2/0x270 drivers/base/core.c:2640
 kobject_cleanup lib/kobject.c:689 [inline]
 kobject_release lib/kobject.c:720 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x1f7/0x640 lib/kobject.c:737
 put_device+0x1f/0x30 drivers/base/core.c:3884
 vhci_release+0x185/0x230 drivers/bluetooth/hci_vhci.c:701
 __fput+0x3ff/0xb50 fs/file_table.c:512
 task_work_run+0x150/0x240 kernel/task_work.c:233
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x951/0x2ae0 kernel/exit.c:1008
 do_group_exit+0xd5/0x2a0 kernel/exit.c:1151
 __do_sys_exit_group kernel/exit.c:1162 [inline]
 __se_sys_exit_group kernel/exit.c:1160 [inline]
 __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1160
 x64_sys_call+0x1567/0x1570 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x121/0x770 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f0d98b9e159
Code: Unable to access opcode bytes at 0x7f0d98b9e12f.
RSP: 002b:00007ffeb28c5278 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f0d98b9e159
RDX: 00007f0d98b5e98e RSI: 0000000000000000 RDI: 0000000000000007
RBP: 00007ffeb28c593c R08: 0000000000000000 R09: 0000000000000007
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
R13: 00000000000927c0 R14: 00000000000202ed R15: 00007ffeb28c5990
 </TASK>
----------------
Code disassembly (best guess):
   0:	b8 00 00 00 00       	mov    $0x0,%eax
   5:	00 fc                	add    %bh,%ah
   7:	ff                   	lcall  (bad)
   8:	df 48 89             	fisttps -0x77(%rax)
   b:	fa                   	cli
   c:	48 c1 ea 03          	shr    $0x3,%rdx
  10:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
  14:	75 4f                	jne    0x65
  16:	48 8d 3d 78 52 1e 0c 	lea    0xc1e5278(%rip),%rdi        # 0xc1e5295
  1d:	41 56                	push   %r14
  1f:	48 8b 14 ed 40 34 62 	mov    -0x739dcbc0(,%rbp,8),%rdx
  26:	8c
  27:	4c 89 e6             	mov    %r12,%rsi
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	58                   	pop    %rax
  30:	83 05 a2 86 13 0c 01 	addl   $0x1,0xc1386a2(%rip)        # 0xc1386d9
  37:	48 83 c4 18          	add    $0x18,%rsp
  3b:	5b                   	pop    %rbx
  3c:	5d                   	pop    %rbp
  3d:	41 5c                	pop    %r12
  3f:	41                   	rex.B