Extracting prog: 6m38.657774171s
Minimizing prog: 37m7.907850801s
Simplifying prog options: 0s
Extracting C: 37.021579913s
Simplifying C: 25m46.023930721s


extracting reproducer from 38 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_l2tp-openat$auto_safesetid_gid_file_fops_securityfs-ioctl$auto-mmap$auto-socket$nl_generic-ioctl$auto-close_range$auto-mmap$auto-socketpair$auto-sendmmsg$auto-userfaultfd$auto-sendmmsg$auto-write$auto-clone$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff)
mmap$auto(0x0, 0x20000000009, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x20000}, 0x4}, 0x1f8, 0xb07e)
userfaultfd$auto(0x5)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
write$auto(r0, &(0x7f0000000140)=')-+\xa2\x00', 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
mmap$auto(0x0, 0xffffffff, 0xe0, 0x15, r0, 0x7)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program did not crash
program did not crash
single: failed to extract reproducer
bisect: bisecting 38 programs with base timeout 30s
testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 2, 30, 20, 19, 22, 22, 30, 29, 7, 2, 26, 26, 26, 2, 24, 30, 30, 21, 30, 7, 7, 19, 27, 6, 28, 29, 40, 22, 30, 26, 5, 11, 30, 7, 30, 29, 17]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getcwd$auto(0x0, 0x5) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0x5, 0x0)
pipe$auto(0x0) (async)
socket(0x11, 0x80003, 0x300) (async)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
r0 = pidfd_open$auto(0x1, 0x0)
setns(r0, 0x60020000)
r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents$auto(r1, 0x0, 0x400018) (async)
ioctl$auto(0x3, 0x4020565a, 0x38) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x11, 0x80003, 0x300)
io_uring_setup$auto(0x6, 0x0) (async)
setsockopt$auto(r3, 0x107, 0x14, 0x0, 0x4) (async)
sendto$auto(r2, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@phonet={0x23, 0x81, 0x2, 0x2}, 0x2) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x0, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x1277, 0xfffffffffffffffd)
socket(0x2, 0x6, 0x0) (async)
openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/revalidate\x00', 0x200840, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(0xffffffffffffffff, 0xc008aec1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x885b) (async)
r5 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto_IMADDTIMER(r5, 0x80044940, 0x0)
executing program 0:
fcntl$auto(0x0, 0x8, 0xffffffff80000000)
pread64$auto(0xffffffffffffffff, 0x0, 0x810000003d, 0x5)
executing program 0:
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x80800, 0x0)
read$auto_tomoyo_operations_securityfs_if(r0, 0x0, 0x0)
mmap$auto(0x0, 0x9a, 0x4, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x2, 0x73)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mlockall$auto(0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0x3, 0x0, 0x7fffffff)
ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(0xffffffffffffffff, 0x40084149, &(0x7f00000000c0)=0xab)
preadv$auto(0x40000000000003, 0x0, 0xa, 0xfffffffffffff806, 0x4)
r1 = socket(0x2b, 0x1, 0xffffffff)
r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0)
sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r1, 0x0, 0x20000001)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
kill$auto(0x0, 0x21)
madvise$auto(0x0, 0x200007, 0x8)
socket(0x1f, 0x3, 0xffffffff)
setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4)
openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0xa00, 0x0)
close_range$auto(r1, r2, 0x4)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180), 0x54)
setsockopt$auto(0x400000000000003, 0x28, 0x2, 0x0, 0x56b)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000)
r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
poll$auto(&(0x7f0000000180)={<r1=>r0, 0xfff7, 0x9816}, 0x7f, 0x9)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$auto(0x3, 0x4008af03, 0x0)
capset$auto(0x0, 0x0)
ioctl$auto_VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0x3, 0x0, 0x5c8)
lseek$auto(0xffffffffffffffff, 0x0, 0x2000004)
mlockall$auto(0x7)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/traceSMB\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
read$auto(0x3, 0x0, 0x1f40)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x103002, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0xc00000, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2, 0x2, 0x1)
r1 = io_uring_setup$auto(0x6, 0x0)
tkill$auto(0x1, 0x7)
keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x4000000c2, 0x9, 0x3, 0x48eafc79)
sendto$auto(r0, 0x0, 0xb, 0xc, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x1}}, 0x1c)
syslog$auto(0x3, &(0x7f0000000000)='-@#%}#[\\}@(%\\/\x88*\xd5(\x00', 0xff)
r2 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001)
write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb)
read$auto(0x3, 0x0, 0x7c)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f0000000040)="506cf03def5ddd00e8e09c7b3532bcb58e3e7e4570ed9b6fe5a56d1d6690525a72bb9340")
read$auto(0x3, 0x0, 0x7)
setsockopt$auto(0x3, 0x0, 0xc, 0x0, 0x5)
io_uring_setup$auto(0x6, 0x0)
write$auto(0x3, 0x0, 0xfdef)
executing program 0:
prctl$auto(0x53564d41, 0x7, 0xffffffffffffffff, 0x3, 0x80000000f4ff)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002e00), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
io_uring_setup$auto(0x8000, &(0x7f0000000140)={0x2, 0x8, 0x3, 0x0, 0x7, 0x101, 0xffffffffffffffff, [0x95, 0x9], {0xffffff80, 0x9, 0x10, 0xb831, 0x3, 0xdbb, 0x3, 0xee9, 0x2}, {0x8001, 0x6, 0x8, 0x1, 0x8, 0x0, 0x4, 0x6, 0xf}})
ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x101082, 0x0)
r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0)
read$auto_proc_environ_operations_base(r0, 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000002bc0)=""/82, 0x52)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mem/full/uevent\x00', 0x40000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/58, 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r2)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x5, 0xb, '.'}]}, 0x1c}}, 0x4044820)
executing program 32:
prctl$auto(0x53564d41, 0x7, 0xffffffffffffffff, 0x3, 0x80000000f4ff)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002e00), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
io_uring_setup$auto(0x8000, &(0x7f0000000140)={0x2, 0x8, 0x3, 0x0, 0x7, 0x101, 0xffffffffffffffff, [0x95, 0x9], {0xffffff80, 0x9, 0x10, 0xb831, 0x3, 0xdbb, 0x3, 0xee9, 0x2}, {0x8001, 0x6, 0x8, 0x1, 0x8, 0x0, 0x4, 0x6, 0xf}})
ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x101082, 0x0)
r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0)
read$auto_proc_environ_operations_base(r0, 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000002bc0)=""/82, 0x52)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mem/full/uevent\x00', 0x40000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/58, 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r2)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x5, 0xb, '.'}]}, 0x1c}}, 0x4044820)
executing program 1:
r0 = semctl$auto(0x7, 0x5, 0x0, 0x6)
sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800c000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="80050000", @ANYRESDEC=r0, @ANYBLOB="02002bbd7000fcdbdf25010000000400e2000000002000328005000300020000000500030002000000040005000800040000000000000be24c183fde5b9d4eaa60152c220b90f9370ed909cb387efd44283302b1f53dcde4e9bc252c784fea90af25c968b063e49d0c7166e007d16e", @ANYRES16=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYRESHEX=r0], 0x580}, 0x1, 0x0, 0x0, 0x60008810}, 0x20000040)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
close_range$auto(0x2, 0x8, 0x0) (rerun: 64)
io_uring_setup$auto(0x6, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
r1 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) (async)
pwrite64$auto(r1, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00\x00', 0x7, 0x3) (async)
r2 = socket(0x2, 0x5, 0x0)
listen$auto(0x3, 0x83)
mmap$auto(0x0, 0x20009, 0x4000008000df, 0xeb1, 0x401, 0x8000) (async)
ioctl$auto(0x1, 0x541b, 0x8) (async)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async)
r3 = clone$auto(0x21, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) (async, rerun: 64)
recvmmsg$auto(r2, 0x0, 0x2010003, 0x80000001, 0x0) (rerun: 64)
close_range$auto(0x2, 0x8, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = getpgid$auto(r3)
sched_getattr$auto(r5, &(0x7f0000000000)={0x5, 0x80000001, 0x2, 0xc19, 0x1, 0x0, 0xfffefffffffffff8, 0x4, 0xfff, 0x1}, 0xfff, 0x0) (async, rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x1) (rerun: 64)
ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) (async)
socket(0x11, 0x80003, 0x300) (async)
setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x3ff, 0xffffffffffffffff, 0x8001) (async)
mmap$auto(0x0, 0x801004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
getpgid(0x0)
executing program 1:
mmap$auto(0x0, 0x101, 0x3, 0xeb1, 0xffffffffffffffff, 0x100000000)
io_uring_setup$auto(0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x6, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x1, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8001)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b)
sysfs$auto(0x7, 0x10001, 0x4)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x6ae}, 0x7)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
semctl$auto_SETALL(0xffffffff, 0x7, 0x11, 0x1ff)
ioctl$auto_TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)=0x4)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x793fc0, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0)
ioctl$auto(r1, 0x4008550c, r1)
executing program 1:
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x80, 0x0)
ioctl$auto(r0, 0xab09, 0xffffffffffffffff)
r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/hci7:200/power/autosuspend_delay_ms\x00', 0x208000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004580), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r3, 0x601, 0x70bd29, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x14ed4312}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x1}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x3}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x4}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x411}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040055}, 0x20000811)
executing program 1:
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/25/spurious\x00', 0x10b402, 0x0)
pread64$auto(r0, 0x0, 0x810000003d, 0x5)
executing program 1:
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x1, 0x0, 0x80000000)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/mm/ksm/use_zero_pages\x00', 0x8000, 0x0)
read$auto(r0, &(0x7f0000003740)='^.*\xf0\x00', 0x9)
r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0x101000, 0x0)
mmap$auto(0x0, 0xfffffffffffffffd, 0xdf, 0x10, 0x2, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x3, 0x80000, 0x6)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x6, 0x400008, 0xe2, 0x9b72, r2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
r4 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mtd/mtd0/mtdblock0/trace/pid\x00', 0x1a1842, 0x0)
write$auto(r6, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8)
read$auto(0x3, 0x0, 0xf34)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r1, r5, 0x4, 0x1ff, r4, @relative_id=0x13, 0xe600}, 0xf)
executing program 1:
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/interrupts\x00', 0x12b402, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
getsockopt$auto(0x3, 0x200000000001, 0x2a, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@hci={0x1f, 0xfffe, 0x3}, 0x6a)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0x100)
read$auto_nsim_dev_trap_fa_cookie_fops_dev(r2, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
socket(0x23, 0x80805, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, r4, 0x1b, 0x70bd24, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x10}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "8982884700"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44040}, 0xc800)
adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x4, 0x2, 0x4, 0x0, 0xfffffffffffffffa, 0x1, 0x0, 0x9, 0x7, 0x5})
pread64$auto(r0, 0x0, 0x810000003d, 0x5)
executing program 33:
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/interrupts\x00', 0x12b402, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
getsockopt$auto(0x3, 0x200000000001, 0x2a, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@hci={0x1f, 0xfffe, 0x3}, 0x6a)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0x100)
read$auto_nsim_dev_trap_fa_cookie_fops_dev(r2, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
socket(0x23, 0x80805, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, r4, 0x1b, 0x70bd24, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x10}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "8982884700"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44040}, 0xc800)
adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x4, 0x2, 0x4, 0x0, 0xfffffffffffffffa, 0x1, 0x0, 0x9, 0x7, 0x5})
pread64$auto(r0, 0x0, 0x810000003d, 0x5)
executing program 2:
clone$auto(0x3, 0x10430a33, 0x0, 0x0, 0x9)
openat$auto_fops_u32_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/bpf_offloaded_id\x00', 0x200080, 0x0)
executing program 2:
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
socket(0x2, 0x3, 0x4)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
keyctl$auto(0x1, 0x5, 0x0, 0x81, 0x6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x8, 0x9, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xc018aec0, 0x38)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
r1 = socket(0x11, 0x80003, 0x300)
name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000200)={0x0, 0x200}, 0x0, 0x1001)
setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4)
write$auto(0x3, 0x0, 0xffeb)
executing program 5:
mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7)
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000600)="70fb0a3edc9042f62445d60aca71eea529b32e26076e44410cced819202d537d16ec88c8d77ddf29783e05dec8e3a480d2eb81d4fc78d18bc8a3273e6f13967e7663638b43284a3d1ef5b3bca91a0e72d7da5b9727d827e2c0ec0a6be837bd379d7e986fc47f87aabe7a86960b334b0a973245105935ed1d62377838b14a1daedb0c614ddccf9c0d11f4bf5c65361a5bb83139f1e82073d0b921f0a49f3e8d651432cee2e81ce8ed30bcd577bec3376974571b0c5e2f698ef936d223e9c8a82e5019e84bc4c058683331232df07a3a7c7aef8bc7f737da8f18decd48b36061c6e5c64513b07eee251d", 0xffffffff}, 0x4, 0x8)
ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f00000001c0)={"079df5ecf9c177abe71e2da4db232e59ee69537f8c8b4decc22e572f7a7077bc", 0x10, 0x0, 0x10001, 0x769, 0x0, <r2=>r1})
capset$auto(&(0x7f00000000c0)={0x8, <r3=>r2}, &(0x7f0000000140)={0x81, 0x7, 0x3})
semctl$auto(0x8, 0x29f8989c, 0xa0, 0xfffffffffffeffff)
syz_clone3(&(0x7f0000000580)={0x111000000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380), {0x10}, &(0x7f00000003c0)=""/121, 0x79, &(0x7f0000000440)=""/231, &(0x7f0000000540)=[r2, r2, r3], 0x3, {r0}}, 0x58)
r4 = pidfd_open$auto(r3, 0x800)
msgsnd$auto(0x0, &(0x7f0000000340)={0x1, 0x6}, 0x27f80000000, 0x6)
r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0)
mmap$auto(0xfffffffffffffffe, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0xfffffffffffffffd)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x8001, 0xa507}, 0x4}, 0x8000004, 0x4008)
r6 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004814}, 0x200448c5)
recvmmsg$auto(r6, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0x5, 0x10, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x40103d0b, 0x0)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
setns(r4, 0x20000)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
capget$auto(0x0, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x200, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0x7, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0x7, 0xb654, 0x2, 0x9)
setsockopt$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1e)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
close_range$auto(0x2, 0x8, 0x0)
executing program 2:
mmap$auto(0xe9c1, 0x1, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x7)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x100000000000001, 0x2, 0xffffffffffffffff, 0x40df, 0xffffffffffffffff, 0x2)
ioprio_set$auto(0x2, 0x800000000, 0x8)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
writev$auto(r0, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
ioctl$auto(r0, 0x5609, r1)
open(0x0, 0x161342, 0x100)
write$auto(0xffffffffffffffff, 0x0, 0x0)
rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8)
bpf$auto(0x0, 0x0, 0xa3)
mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xebf, 0xffffffffffffffff, 0x9)
unshare$auto(0x40000080)
fallocate$auto(0x8000000000000003, 0x2, 0x2, 0x0)
r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0)
ioctl$auto(r2, 0xc0404d1a, r2)
socket(0x12, 0x4, 0x440a)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0)
write$auto(r3, 0x0, 0x7fffffff)
ioctl$auto_SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0)
socket(0x25, 0x5, 0x0)
sendfile$auto(r0, 0x3, 0x0, 0xfdef)
io_setup$auto(0x10000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000)
listen$auto(0x3, 0xa8000000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x52c42, 0x0)
set_mempolicy$auto(0x4, &(0x7f0000000000)=0x1, 0x5)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000)
r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
poll$auto(&(0x7f0000000180)={<r1=>r0, 0xfff7, 0x9816}, 0x7f, 0x9)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$auto(0x3, 0x4008af03, 0x0)
capset$auto(0x0, 0x0)
ioctl$auto_VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)
ioctl$auto_VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0x3, 0x0, 0x5c8)
lseek$auto(0xffffffffffffffff, 0x0, 0x2000004)
mlockall$auto(0x7)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/traceSMB\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
read$auto(0x3, 0x0, 0x1f40)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x103002, 0x0)
writev$auto(r2, 0x0, 0x3)
mmap$auto(0xc00000, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
executing program 5:
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x4200000000, 0xfffffffffffffffe, 0x1, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x5}, 0x5, 0x8, 0xfffffffffffffff6, 0x1008000, 0x0, 0x8, 0x81, 0xdfffffffffff6291, 0x6, 0x4, 0x808})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty29\x00', 0x0, 0x0)
ioctl$auto(r1, 0x5453, r1)
getrandom$auto(0x0, 0x8, 0x7)
r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/mb_group_prealloc\x00', 0x8001, 0x0)
write$auto(r3, &(0x7f0000000000)='gJ\xdf\xd9\t\x8b7\x04\\\x00\x04x\x03\xcb\x12\xfa\b\x1c\xc7\xeb', 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ILA_CMD_DEL(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010021bd7000fbdbdf25020000000c0003000d0000ba0a9eecfd8c8a9acaeeeeb50100000000000c00030000000000000000", @ANYRES32=0x0, @ANYBLOB="05000700030000000c000100ff01000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x10)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)
madvise$auto(0x110c230000, 0x1, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000007c0)=""/153, 0xfffffffffffffd19)
mmap$auto(0xfffffffffffffffc, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
shutdown$auto(r4, 0x1)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x56b)
mmap$auto(0x0, 0x40009, 0x20036, 0x9b72, 0x7, 0x8)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0)
socket(0x10, 0x2, 0xc)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
executing program 3:
mlockall$auto(0x7)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = set_tid_address$auto(0x0)
capset$auto(&(0x7f0000000040)={0x19980330, r0}, 0x0)
mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000)
mprotect$auto(0x0, 0x7, 0x9)
remap_file_pages$auto(0x7, 0xff, 0x100, 0x401, 0x3)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x80000000, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84, 0x0, 0x4000, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd)
openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000180), 0x8c00, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
executing program 3:
setreuid$auto(0x7, 0x806)
bind$auto(0x3, 0x0, 0xf)
r0 = getpgid(0x0)
r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x80301, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000040)="6524b5aac083b05c1173a1174ad8f5246cdc9552bbdffc09852e4d", 0x1b)
rt_tgsigqueueinfo$auto(r0, r0, 0x20c, 0x0)
prlimit64$auto(r0, 0xa3d, 0x0, 0x0)
pipe2$auto(0x0, 0x80)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0)
pread64$auto(r2, 0x0, 0x100000000008, 0x8000)
settimeofday$auto(0x0, 0x0)
socket(0x25, 0x5, 0x0)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfd, 0x0, 0xfffffffffffffffd)
r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129843, 0x0)
ioctl$auto(r3, 0x921064b1, 0x8)
sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x2)
ioctl$auto(0x3, 0x8b0b, 0x91)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
ioctl$auto(0x3, 0x4020940c, 0xffffffffffffffff)
executing program 3:
arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x5)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x140040b0}, 0x24002001)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
open(0x0, 0x0, 0x152)
rseq$auto(&(0x7f00000001c0)={0x20006, 0x5, 0x0, 0x7, 0xffffffff, 0x80000001}, 0x7ffd, 0xa, 0xa)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x100000000000000, 0x2, 0x4000000000df, 0x40df, 0x401, 0x2)
ioprio_set$auto(0x2, 0x800000000, 0x8)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
write$auto(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0)
rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8)
unshare$auto(0x40000080)
fallocate$auto(0x8000000000000003, 0x2, 0x6, 0xcbd5d)
r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x4380, 0x0)
ioctl$auto(r1, 0xc0404d1a, r1)
socket(0x12, 0x4, 0x440a)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x30, r4, 0x21, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80)
ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040))
executing program 5:
mmap$auto(0x2, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
write$auto(0x4, 0x0, 0x100082)
poll$auto(0x0, 0x5, 0x108)
setrlimit$auto(0x9, 0x0)
executing program 2:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
shutdown$auto(0x200000003, 0x2)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0)
read$auto(r0, 0x0, 0x39b8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x20004, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, 0x0, 0x6a)
sendmmsg$auto(r1, 0x0, 0x7, 0x20020000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
socket(0x2, 0x801, 0x106)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000001100)='/dev/mtd0\x00', 0x0, 0x0)
ioctl$auto_BLKPG2(r2, 0x1269, 0x0)
r3 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0)
read$auto_proc_sessionid_operations_base(r3, &(0x7f00000000c0)=""/4096, 0x1000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x400, 0x0)
shutdown$auto(0x200000003, 0x2)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
fcntl$auto(0xffffffffffffffff, 0x400, 0x1)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)
executing program 5:
r0 = socket(0x11, 0x3, 0x9)
sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0xf}, 0x7, 0x0, 0x5, 0xe}, 0x5}, 0x1, 0x101)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x4000ebf, r0, 0x7fff)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x22180, 0x0)
writev$auto(r1, &(0x7f00000003c0)={&(0x7f0000000540)="3ea225d32d6572e46b42c797cf8bb1e6b39bd2c7777940852dd19fe0b0fb8da20b27925b49be55b0f6094a5a988e72ce80dd715ebff5b5077790d30b24692bdf9bd9ad047870", 0x8000}, 0x9)
socket(0xa, 0x2, 0x73)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
setsockopt$auto(0x4, 0x29, 0x2a, 0x0, 0x200577)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x801, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2a, 0xffffffffffffffff, 0x3, 0x62, 0x7, 0x7, 0x6d3f, 0x9, 0x4, 0x5]}, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000010c0)=""/4096, 0x1000)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0x3, 0x8, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80040021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0)
select$auto(0x7f, &(0x7f0000000040)={[0x1, 0x7, 0x7, 0x2, 0xe, 0xffffffffffffc24e, 0xe1a, 0x7fffffffffffffff, 0x3, 0x4, 0x6, 0xb, 0x7, 0x7, 0xffffffffffffffff, 0x80]}, 0x0, &(0x7f0000000340)={[0xd6db, 0x9, 0xc2, 0x4, 0xffffffffffff2623, 0x3, 0x8001, 0xfa, 0x9, 0xe, 0x140, 0xc, 0x9, 0x2, 0x4, 0x6]}, &(0x7f0000000280)={0x9, 0xc89})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/tracing/trace\x00', 0x80601, 0x0)
close_range$auto(0x2, 0x8, 0x0)
select$auto(0x3, &(0x7f0000000200)={[0x3, 0x2, 0x8, 0x18, 0xa2, 0x9, 0x6, 0xffffffffffffffff, 0x0, 0x6afdf79, 0x2, 0x80, 0xedb8, 0x9, 0x1, 0x8]}, &(0x7f0000000440)={[0x0, 0x4, 0x3ff, 0xfffffffffffffffa, 0x401, 0xfffffffffffffff7, 0x6, 0xffff, 0x0, 0x8, 0x110c, 0x7fe, 0x1, 0x0, 0x8, 0x8000000000000000]}, &(0x7f00000004c0)={[0xfffffffffffffff8, 0xffffffffffffffff, 0xff80000000000000, 0x9, 0xf, 0x4, 0x1, 0x6, 0x7, 0xffffffff, 0x0, 0xe422, 0xe022, 0x5, 0x2, 0xfffffffffffffff4]}, &(0x7f0000000180)={0x0, 0x9})
executing program 5:
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6)
unshare$auto(0x40000080)
unshare$auto(0x9)
socket(0x10, 0x2, 0x0) (async)
r1 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x3185, 0xeb0, r1, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x3185, 0xeb0, r1, 0x8000)
statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xffffff01, 0x9, 0x9, 0x7ffffffd, 0x7, 0x8, 0x5, 0x5, 0x9, 0x2, 0x8, 0x5, 0x8000000000f, 0xffffffffffffffff, 0x9, 0x80000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x5, 0x0) (async)
statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xffffff01, 0x9, 0x9, 0x7ffffffd, 0x7, 0x8, 0x5, 0x5, 0x9, 0x2, 0x8, 0x5, 0x8000000000f, 0xffffffffffffffff, 0x9, 0x80000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x5, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES16, @ANYRESDEC=r1], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) (async)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES16, @ANYRESDEC=r1], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x2c, 0x6, 0x3ff)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x222002, 0x0)
socket(0x11, 0x3, 0x9) (async)
socket(0x11, 0x3, 0x9)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xf8ef6fb5aad8b5d6, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x100400000000000, 0x8001, 0x800, 0x16, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x85cd, 0xffffffffffff0001, 0x9)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x106)
executing program 4:
r0 = ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x1ff, &(0x7f00000000c0)={0x2, 0x4, 0x0, @inferred=<r1=>0xffffffffffffffff}})
getpeername$auto(0xffffffffffffffff, &(0x7f00000001c0)=@hci={0x1f, 0x0, 0x1}, &(0x7f0000000200)=0x5278)
ioperm$auto(0x90d5, 0xc, 0x2)
membarrier$auto(0x4, 0x8000000000000000, 0xffffffff)
ioctl$auto_SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000140)="f9eba84136e4a38972f56de7666604b201d9b11f64cb2cb2279d18c72480939a4866d521df4cb2cde16bd57582ff2ec4bb6b904c1ad6af57510cd231b9221616")
ioctl$auto_BLKTRACESETUP32(r1, 0xc0401273, &(0x7f0000000340)={"8326a18c21dd431d91ee768da1273b6d2fe59cc46aa1c197a09a1d06647d804d", 0x2, 0xffffff0d, 0x1, 0x5, 0x7, <r2=>0xffffffffffffffff})
timer_create$auto_CLOCK_TAI(0xb, &(0x7f00000003c0)={@sival_ptr=&(0x7f0000000240)="6a89669b80b2e30a30cf44c0881dd89625189cd93d9a4b1fd58efc50597e508ba10228459e94b41c3e80ad3787b211bf78395d1be43f19c08704d73a020f8459001f6e2dd669153a388c12ae92c98aa8bac9660bfaa92bdf9a6531746223241957f88138ba03577b0375336c5cb203573b26b04c5581fb45d1b919f5740ed590f093f98fef554426ea5ca56e4d172b817b0ba900760c4e2ae78b41f82d33d00769972184a5e250be71322ddfd5dce3d17c650b583faf47835c127924e6d3420b2665a03be2fbf067e0", @inferred=r0, 0x8, @_tid=r2}, &(0x7f0000000400)=0x3adb83f4)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x20, r3, 0x13, 0x70bd26, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x20040894)
ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x1ff, &(0x7f00000000c0)={0x2, 0x4}}) (async)
getpeername$auto(0xffffffffffffffff, &(0x7f00000001c0)=@hci={0x1f, 0x0, 0x1}, &(0x7f0000000200)=0x5278) (async)
ioperm$auto(0x90d5, 0xc, 0x2) (async)
membarrier$auto(0x4, 0x8000000000000000, 0xffffffff) (async)
ioctl$auto_SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000140)="f9eba84136e4a38972f56de7666604b201d9b11f64cb2cb2279d18c72480939a4866d521df4cb2cde16bd57582ff2ec4bb6b904c1ad6af57510cd231b9221616") (async)
ioctl$auto_BLKTRACESETUP32(r1, 0xc0401273, &(0x7f0000000340)={"8326a18c21dd431d91ee768da1273b6d2fe59cc46aa1c197a09a1d06647d804d", 0x2, 0xffffff0d, 0x1, 0x5, 0x7, 0xffffffffffffffff}) (async)
timer_create$auto_CLOCK_TAI(0xb, &(0x7f00000003c0)={@sival_ptr=&(0x7f0000000240)="6a89669b80b2e30a30cf44c0881dd89625189cd93d9a4b1fd58efc50597e508ba10228459e94b41c3e80ad3787b211bf78395d1be43f19c08704d73a020f8459001f6e2dd669153a388c12ae92c98aa8bac9660bfaa92bdf9a6531746223241957f88138ba03577b0375336c5cb203573b26b04c5581fb45d1b919f5740ed590f093f98fef554426ea5ca56e4d172b817b0ba900760c4e2ae78b41f82d33d00769972184a5e250be71322ddfd5dce3d17c650b583faf47835c127924e6d3420b2665a03be2fbf067e0", @inferred=r0, 0x8, @_tid=r2}, &(0x7f0000000400)=0x3adb83f4) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x20, r3, 0x13, 0x70bd26, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x20040894) (async)
executing program 3:
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b80040043"], 0x40}, 0x1, 0x0, 0x0, 0x20004040}, 0x44)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fedbdf2502000000080003008000400008001d"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x841)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2, 0x1, 0x0)
epoll_create$auto(0x4)
mq_open$auto(0x0, 0x5, 0x3, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0)
sched_get_priority_min$auto(0x40)
socket(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000)
getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
executing program 4:
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESDEC], 0x14}, 0x1, 0x0, 0x0, 0x24048841}, 0x24004000)
socket(0x5, 0x2, 0x4)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x7fff, 0xfffffffffffffffd, 0xd4, 0x4, 0x28c, 0x0, 0x3, 0x8001, 0x9, {0xfffffffe, 0x5}, 0x5, 0x6, 0xfffffffffff7fffd, 0x1007ffd, 0x0, 0xfe, 0x81, 0xffffffffffff628e, 0xa747, 0x5, 0x804})
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x41900, 0x0)
pread64$auto(r2, 0x0, 0xe, 0x100000000007)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffe000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0)
epoll_pwait$auto(r1, &(0x7f00000000c0)={0x7fffffff, 0x7}, 0x5, 0xae, &(0x7f00000001c0)={0x6}, 0x8)
write$auto(r3, 0x0, 0x3)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c03, 0xfffffffffffffffd)
bind$auto(0x3, 0x0, 0x6a)
ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd0a, &(0x7f00000001c0))
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
socketpair$auto(0x4, 0x8, 0xfffffffd, 0x0)
open(0x0, 0x163340, 0x6a)
socket(0x21, 0x2, 0x2)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e24, @multicast2}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x145502, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x280440, 0x0)
executing program 2:
clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x40000002c55, 0x0)
io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) (fail_nth: 6)
executing program 4:
r0 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000019c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22040, 0x75)
socket(0x840000000002, 0x3, 0xff)
connect$auto(0x3, &(0x7f0000000000), 0x55)
setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2)
open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x60)
sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010029bd7000ffdbdf2503000000080001000600003d"], 0x1c}, 0x63, 0x0, 0x0, 0x4}, 0x4040010)
executing program 2:
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/ipvlan1/router_solicitation_delay\x00', 0x202, 0x0)
sendfile$auto(r0, r0, 0x0, 0x7ffff000)
socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x10, 0x2, 0x6)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x890100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';')
unshare$auto(0x40000080)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/uevent\x00', 0x800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/16, 0x10)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/video4linux/radio4/uevent\x00', 0x38880, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x7}, 0xff, 0x3, 0xfffffffffffffffd, 0x1008000, 0x0, 0x6, 0x81, 0xbfffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio1\x00', 0x101001, 0x0)
ioctl$auto_SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
socket(0x15, 0x5, 0x0)
ustat$auto(0x801, 0x0)
bpf$auto(0x9, &(0x7f00000005c0)=@query={@target_ifindex, 0x3, 0x10000, 0x400, 0x0, @prog_cnt=0x3, 0x0, 0x4, 0x9, 0x40, 0x2007fffffff}, 0x1)
mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x80000000, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84, 0x0, 0x4000, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd)
openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000180), 0x8c00, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
executing program 4:
ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x0, 0x1, 0x5, 0x5, 0x7, [0x4, 0x80000000, 0x2, 0x7, 0xffffffffffffffff, 0x3]})
ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000080)={0x97, <r1=>r0})
sendmmsg$auto(r0, &(0x7f0000000280)={{&(0x7f00000000c0)="abb9ece68861a8b91b57b23138778961b863c8bc94ba2915a3273765deaf9c5f01bb7f4862", 0x101, &(0x7f0000000180)={&(0x7f0000000100)="226aa6a723b4569c6f4528307911d0151d2783b6124f2f1490e0c047de12536fd732f3aeebee59e524ac239b6fa5682910a461d1d7362ab7c734515566d52645e3f700fcc01d692354cba81186db2b4b679af6e38241902bfb8394c449a5f00730bff9b08ea28e82d9", 0x5}, 0x3f7, &(0x7f00000001c0)="c7e1977d93f07a95b18a277706c0a25f1e3f75f3731e87748a621618eb559b6c8a62970f3eef309be8aa07ef9ce173b4e960d5dbbdf40c91776187fb362b119a1e652844a0573bf2275d09e62bf2783a339119ff756f40c124e00961bfecb4fc1b68a4ad69d7c6a04ff0ff1de95d17763df068bfbf4c028ce8b9d684cd8ec88df47b02af61293b5b4e2291d2bb86651a1a9286367ed03ac9c48ab40cf9583fb9a065e71fc3a1b87c8098389c53f83f82fb9e13c5", 0xffffffffffffffff, 0x7}, 0x2}, 0x5, 0x9)
r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x521800, 0x0)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), r1)
sendmsg$auto_NFSD_CMD_THREADS_GET(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010)
sendfile$auto(r2, r2, &(0x7f0000000440)=0x8, 0xcc9)
openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/fail_usercopy/space\x00', 0x1e9000, 0x0)
ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000540)={@raw=0x8001, 0x4, 0x74, @btrfs_ioctl_vol_args_v2_3_0={0x401, &(0x7f00000004c0)={0x2, 0x8, 0x912, 0x4, {0xffffffffffffff00, 0x9, 0xe, 0x1, 0x200}, [0x5, 0x1]}}, @subvolid=0xfffffffffffffff8})
r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000001540), 0x80000, 0x0)
r5 = ioctl$auto_TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000015c0)={0xa, &(0x7f0000001580)={0x2, 0x0, 0x7, @inferred=<r6=>r0}})
ioctl$auto_BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
write$auto_console_fops_tty_io(r0, &(0x7f0000001600)="69202fe03d62cee5d4e49b3dce4fc174", 0x10)
madvise$auto(0x3, 0x200, 0x2)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001680), r5)
sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001bc0)={&(0x7f00000016c0)={0x4cc, r7, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_REKEY_DATA={0x164, 0x7a, 0x0, 0x1, [@nested={0x8, 0xcf, 0x0, 0x1, [@nested={0x4, 0x11c}]}, @nested={0xf7, 0x13b, 0x0, 0x1, [@generic="b2bd4bc3c578d70f9b01e91dfad8bf48a134e2c814ed1466055d75e87e98e6c4e643fab45eecac8aa7abcd202faf203db172588cca660e8aa3d609ff43c1f36c681abd24e5a1493b82995296d8a3d5b512f9bd3f21046b71f63311195067af635eaa2e66e4b063", @nested={0x4, 0x80}, @generic="f4bcc32c3e5bd645d711a314ceb9a9a2bc83d87de4c984e7a9941dac1befb5f1060ded353924dc41ca83230a38368a681bdffafb49f81bb7a1d1f32c92bc5381bb34148e1417279581bd9ed063fd2bdd03aa84dbb38cc7aace10d5e057333c14fc0d3e76cabef0df3d9496566a16c9466148770a9718cef23472e140c2faf54b74d706c57de33990"]}, @nested={0x10, 0x127, 0x0, 0x1, [@typed={0x8, 0x137, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x14d}]}, @nested={0x50, 0xca, 0x0, 0x1, [@generic="0d2313183ceed7ad8dad568abd76295471e267b6b6580d2be46b847f1c43352f0c595cd76fb633557a6350fd0563ac235850deb74cbf4c81bb74f5b76becab122c436596b50103238f7060bc"]}]}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_PREV_BSSID={0xd, 0x4f, "70e5fac73f5f316520"}, @NL80211_ATTR_NAN_FUNC={0x32c, 0xf0, 0x0, 0x1, [@nested={0x23d, 0xaa, 0x0, 0x1, [@typed={0x9, 0x10d, 0x0, 0x0, @str='nfsd\x00'}, @nested={0x4, 0x7c}, @generic="a8b9cffe72cf7498dd0fd7e1cd1d5abe410d53c1877063e79c609755aa8a5b9687f607790e7e7f9a220c3d35c47a9997ee377b524586d73ec5531f7682ed59fb2ffdabc74082b6c57ab2cf78f20b8901a59b8404b1d24fa6270892ce0d47edb29d8bd823a8735ef67e824546aa4c0c2ad169716d76f1397d473b2f5ae9c6dceefa264d544302ec9e1b7cb3c743686ee6bffa4f97a7e4d8d2363d6807fba7e369f7d859d32d2e39abf231e82cc1106db7e314c2a8cb1aa138dcfb65a10afed9ce0d41822233d2b0ad112f1e1cd7bd70e4e3edd3a64a1d94453e45eb9dee122e3649d9b1c83dc3b52fc09982b4", @generic="cb4ea4a12d5905d342d5e485a2b0092a130a7fe0bdba00d7fb36adfe9cc1ed99d3afd5f72ad4b7a6853cf2de908a6fdadd96bef21d456f1af704497c860a9b9068", @typed={0x4, 0x46}, @typed={0xf6, 0x4c, 0x0, 0x0, @binary="e5dbca04a88d0fbd11c3eed60373644a15cda3d00e3486804e11cc5ba0607c0760c50b2144fbf01455971388b0f28cd4ec5b10f0ad54a2db018a3c6826ab5e88fd2a50343ab4f5bfa3308dd3a6886915bae6b85e039ae2d7f74314e52f0456f30a52e3dfebc39695c10471cc0c9b99dc1488a84f682549398eaa7a7f12f468a44cb1ae2d12f10afb192fafe1283a6a8858738eb924269b3cfafe8bb5a11362827b1aa9476f05a6000d0742a014b3352445a60c862df8180df023e8cefb8badc19098cff36ec1c90c83034c2a6194c2c6ba55fe1c2db09d56dc52cbad8ed2b3b5fb4f7585371a3dc82312fdbf1cbabd795ec6"}]}, @generic="34c5815af9f89e3bb122b0cbe0fb62c13a0ab1ac17244b80e0f05146dfbc8392636ee1823b2ce3eafe8e4f41d942d6822f433dc0135d0a5066b8cbf1f78d64159322d2ffc90ab1d5a9879b8b1d2d4710", @nested={0x95, 0x35, 0x0, 0x1, [@nested={0x4, 0xc2}, @generic="acf2415fa83666dca815648b560de9c21899d191894e6fb86977cfc38b1ede22bfd4b47a398fbba6049cb3fc5a2f97ff35778b1b0c1757505d329b7f44b71e4f9bdbfda0e421ead3a2e36387d851ca8977c28db066deffd33a357c4c06e41d5007b67a3e100ddbb5bc3e8906d78612629a97a9c27b034b2eb6d6fcd773c3e0e291126f01119e70fd266f5ff3cd"]}]}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x4c4c0}, 0x800)
msgctl$auto(0x6, 0x1, &(0x7f0000001cc0)={{0x8, <r8=>0x0, 0xffffffffffffffff, 0xfffffed0, 0x7, 0x5, 0xfc}, &(0x7f0000001c40)=0x9, &(0x7f0000001c80)=0xe, 0x5, 0x200, 0xffff, 0xd42, 0x3993, 0xe12, 0x900, 0x0, @inferred=<r9=>0xffffffffffffffff, @raw=0x40})
statx$auto(r6, &(0x7f0000001d40)='./file0\x00', 0x6, 0x4, &(0x7f0000001d80)={0x10000, 0x9, 0xd6, 0x5, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0x10, 0x1ff, 0x0, 0x2, 0x400, 0xc, {0x80000001, 0x83e5}, {0xbbb, 0x10}, {0x3, 0xcd99}, {0x7, 0x9ffb}, 0x0, 0xaa7b, 0x80000001, 0x4, 0x8, 0x7, 0x0, 0x80, 0xe, 0x40, 0x5, 0x4, [0x70a, 0x2, 0x3, 0x6, 0x7fffffff, 0x9, 0x7, 0x7, 0x7203be3a]})
setresuid$auto(0xee01, r8, r10)
close_range$auto(r6, r0, 0x8)
ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000003240)={{<r12=>r0, &(0x7f0000001e80)="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", 0x8, &(0x7f0000002e80)="a44dd20e8caa1504e43425249574549b0a22d340231588c9cfee25b7e40f58305a380c70846c039d98f4f8a0cb731e1c47a8c5d27e30041bbf9b7a80ed83a40afb32cfde8031d41ecb0226c0ef5b1988fe0943ded114679e8ac02839f5c6126d062638122f6f334ad7abec711d002240eb69e1daa8fb0161b06abebd27068074be14a3469c864490ec47f654fe401067e38580eb255ced0b7cb0b9e50b1c6a063c0f65ab4af6d6cee7ddef07335b04f6821df622952314a637e86ba9f3b17a1b807df7c3ca128bd249b655c1a955092794c6a8f3692eaf64d127fd18", 0x1, &(0x7f0000002f80)="141f4eb38229caabfed24a42606b5474cb3c9dfca3132bd838998ce91d526972f06681693e0d38f75b", &(0x7f0000002fc0)=0xd87}, 0x7fffffff, &(0x7f0000003200)={0xb7, 0x5, &(0x7f0000003000)="8ae014f4fd6a138d938cd4dd3c363c17dab6ba132dc6e62502048abd5107a3169986af80ac618e72bb93c665a897a3288a8265ad9d67bf63c55f41c103256433cf96620eec9696d733db6a0c3d1edc645791b8572c0b655abad4ed79df5ef4e9fe49cf1fd8a707ec625319eecd8392ac48364982919f1dd30643c5ed8285822932e27f4ef34863878c2003abe520004cc1d4dafc2b0141d2e0653d0451d541b50aca7b0c8f7d44e7449200a4cd564949a80b2fba3411e8358e7263b6fb328b47c02886a1a29b8f9e06b973e77b4d65ee850ceac3ad4f9527b27f", &(0x7f0000003100)="4eb79dbf6d03379e9a6f0f9829f522057c3a5d93e5224adc5af0a52e374a731383222e35a913b5c92759e849ff32a150628e951732a4bff059e1b0117969ea41e250b9068564d075068676a278b53e1d6a7b053a52524464fd19d240933f706bb27aa52fd3a0874ae2c28b54d719fb4ce4d7658848576032fc124d7be68c0cc445498e60d15a2e514c25ab31ced8f03421a431721a03658eba5328f46f065e14209c6213dd1c551585b8600d2f1fcbc4f6c664543e99800a0f1c81584e9f8d0ad11e3330bcf51fb1a717735ed203a6286d32b0e9b00c2b2c764d3b6cedc406beb8719ce6d0ec9c1c022b66e6769fda473c7b1db0a3ad330352", 0x6}})
sendmsg$auto_NL80211_CMD_GET_COALESCE(r12, &(0x7f0000003440)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003400)={&(0x7f0000003300)={0xe8, r7, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_SCAN_FREQ_KHZ={0xc7, 0x124, 0x0, 0x1, [@typed={0x8, 0x82, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0xec, 0x0, 0x0, @pid}, @generic="fb54dad53fb5ae8c56032978fb4d3e20038c9608a7905ae286a3915f7d5c5840488e2d50b778af31b12ed9b17cbd381cd12912a6f2b45eb1ef685c4b5e9c0f9fe107bb6a49fb816169178b6e5b17324aae365996413cc4bbcaf9ca8311ef48c5e388366c06abc4c5ec9543caf27c441c256d71e1cfe95af934eba0a76da0a6f3b533b8acca28ad838ac1754d4bbd0d722d32bf7c8687611caf33802b03d47e3a9dbf07b3d3424b1de41d1a6f2ebb1ffe6c293c"]}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x3}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000000}, 0x20004000)
r13 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000034c0), r12)
msgctl$auto_IPC_INFO(0x0, 0x3, &(0x7f0000003580)={{0x7, <r14=>r8, r11, 0x0, 0x1ff, 0x0, 0xfd}, &(0x7f0000003500)=0x2, &(0x7f0000003540)=0xd, 0x8, 0x2, 0x6, 0xfffffffffffffffa, 0x3, 0x10, 0xa, 0xff01, @inferred=<r15=>r9, @raw=0x2f83})
sendmsg$auto_WG_CMD_SET_DEVICE(r6, &(0x7f0000004740)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x2020002}, 0xc, &(0x7f0000004700)={&(0x7f0000003600)={0x10f4, r13, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0xaf, 0x8, 0x0, 0x1, [@typed={0x8, 0x13f, 0x0, 0x0, @uid=r14}, @generic="1e1cd470a45efb01722ff4e61c2d2d8cf50082223112e3e9132d0c44cd0d32ad48c9eec30428e9afa370ff1e4740413bd5e828f85a41abf0288b05872737db239b07015096b28f93d0f12d540a615cdf9b2f33e957151683f4ee4d76a31c7ee9262751ae598f4b8fcb88191731fa011def79ea68d085507c04a94e19855f20ee09521efae11594389e81006a20500bb904091b00ef3e49333c6a95fc4753858e57dddd"]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'nicvf0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x7}, @WGDEVICE_A_PRIVATE_KEY={0x1004, 0x3, "45e34eb30292625a6c1c065b9fc8a29f7cbb8bd96b0a178773b11bceb20222723e984be5d1dac206e55b7224583e4b9ed7a970b41ed02895ac897973751f25e0534bdecbbb17749a9d643062e683cd0135aafe2f1ce0fce00f24c7983591f43fcc65ac3903419a9e6dc4e9dd1b65fd849180ceb2378341eb5913f19b478fe95efcef2e0c90757301b75b70891509752b1c2b5f83c1c5f7e3d76e4a4c6d7bcfa902fead4d53778a986cf8fcf28ea7a8397f1c3a025bb1d73d05cbf748dc13140ae7d25cfb866a29c1d8b5224263b582af0b3d961907e3f46937e84ceab887496963c8267b506112f3b171438172c5fe342e568d16c0bfb9fde8253ebde6621ef612dc8c1a7b59c31ac6442905682065c7d7594eab8a4b8b12f6f1fff4496671900d362a8d60e39c19c8478ac2b48dc60516166ef166edde8c69eeddbc9a3dd274ea7de8bdd5381a1b92f9232dfb5ced0de1c82d6ca17f7be9109e217261f4a00b30b6d4c0b87603f5832ea5198cce1e10cd781bb5d2f680035c336b37c05df149573600bcd311c681694b27a8aa9b74d9259560974bd17c96f55586285e4cbc0e3a03825cf66b6915ffabdfeeab697d41d8f6e5c97a81037f98ee1b2d057291bc678c6008108d5f2006f38ffb71c6c3b77be7f1a43cc7a5ffaa01ae7d840ea6aa3b11c4be51e30790713838e29d471b195b911c31dcad40ae22e45b9b968949f3227bcd31323fa8e02439d4974c31f1ea7f2cf3be157d76b294b1adf98bb99d69702572d30baa3a956414ebe009dd9f0f110ea14add6b9ca123e3477a01fdc00370ac13b544ec7b356a476f0ceadbd73426d37adb064a2b3b4d44f44938876b33f0307b2fff03d9e70617f9c03a04931dc7bb8f3fcbd0fd77a69ffc571bae415da9195dec9094fd665fcf57c3760cfbc9f2c7ea1e8cfca7730ae2be9dc8cf7bc82503611cafc06b19fb26b76cac2b4df1b838329f3cf34c7839c64414809fa849a7852fe80b1520714482cc379303f7233c353e978b5179b833f88fd68a5a25c0a7a9f4811aafc85d5b1a8bc486fa3ac2d69a94868348c6deffbb85a65e6cf11d1708de70a86745aca61ed7e9433fc3c80f5d7e28e30a7caeab1c82b0ab603bd9bcdb277a283f3f4f68b7f410af0d69a9a6073f7ab70013717db1ffa468524703d73789f2abf05f4d136664ba400032ef59fec2d374fee9645ba804556e08d2ea10b3eef634c965f27f76495c6a9d4f428c3edb067b8a15cfd9050b4327ab95a154f148f02268e9c5be3161b1e4e2b45773170ac4da6e2167553d8cf2014880e646db85c057a717396c2e0fbaf9b5dd5c905270039b2aa97cb71d9818604c377ea88df9ea1640e8cfa7dee0d1e39fb076c1c23b01df8c197da4afba8c94854c4f5a3cf211a952d3e2035ba03971ff344a5607413f539646beb2e143e910420874c659f68bf1ec5ec58adeaa310fdbaeca13fcd259f1ace7de9bc24cdc5cd5fb2a546f658eb6422a82a23b18f3776f18b7c0ad806442ce3eea501734791f55b7a4ba6bc5905dbe9085aab6939dec836ca294f468669fec9e82326e02fb4489f3556b2730f5121dde0e9e2f40518660f2511604720373ab7cf9a42c70d4160806bf68ff12e6b0b61f7ae4c5e61521c6bba6aff53c265cbf090ca906ac62aea5e5250386cd4fb156a48baec44976ced87da7b9c0b78c0b82e3657d6177484264e8cd8d0c826f077412af93b1ded21df46aff3938ccc4bb13b78f6ea436fc8024fc5a8f1fafcb96dcf2794cfc733099904e3f16445b7f0d50c5dec4c2f86809edc7594db723f0ffbfb042e4694ef0145e34c0acf8f9337e3e65988bcff32ad1b724564f43e5dd6e121e2b6067f9e0df53f938609307f1e02ffb5e7a3212a34e9c2fbf61b42f9a140b2b9905dbdbba7359188e3f4ff248d8239d8f402f5cf109dda083ab726411cee59945a10958463b075202b2e94f13ff8ecc8a2a20e0ecb2c239af2d3e7e9b42b3fae5b0983c1fe280b1adc6a779c9e6c4279c2be4694f6869c993de39e8e817bb0d1c730ec1ec62e1943f23c659414e9bba0034b319b87fa0c28d5aa7b6eb55717562dcc7bde1e591a7740c6812fef91c44ebb59ef5057eb296bef18228ef2da4d976c1d0551ade347c6f729ae4893ab74447b6d8ee74791976951a9c05b3272589320cd47cf11ee64a58abbebbbe1ba93b685f7c82af3d4cdcdd4da6e30f73670d0c766ba0d6c9812ee6188a45c469888fc3da1af48e652ca2537552a4b043b312ffb91b6c84a282e685c7a3f482315ac9de7b49c5ecfd7bcddee736dbe43437e8276eea606bccb8a7b4807ecc56bdb5c43408eee6b41c3731a771177706562a116fc64314575bca79fa5dada2c169819e4bfce5115c759a246c198c37d6887749d153bf8155d3d40c5e88479f87d4b63e3f8a760a05755636006753bc6c5e2da9582f7404a01871f2d992cdab2a97d26b1a8e4d9cd4e9ec510f741e4fc3b4199728b09cb416cc3a5945b42da984af36b1827d6d3304c0c45980f53fea95dfde43f30cff4ebd4cf6c13056d12810360a8b0793831cbe5606b4d7652e2dc2332d58cf1a3d4fa0a3a74b15151a6b9e222bf77cb0ad6821fac6dcbd06c856dba15c01dbbf4d4b8d1eb46bb998d1d2b2010891d6c1b18375716adb343dea93f342e29cad48c939da4a323b7ad7e0695a229acf74f661143123f10ef7f7665c3b68dce0259c01cec6081570913a7908573652888ca1d8e663f38b8adbae8c48b7cc951ba327d8a085b58e2864bb0cd410fa25078a01afb18b337458b8d0ed596d6d6efcdf49e3bd450cc758e8e9b767bbfb2bb8d4791061b762522020171168edde92b71bb2cb6d7e549b9917b7ede83688dbb6c30d1aeb1c8096cd377e9c15c140bc5325913e5996e555047d464f8138309adf78a626b7cd5e0f841cd70dbd7e81ab6c68ce5165014ffe7bc03f782c27df77190e6e0f43cd523a663c983e0a9843fba1b84d06c7465577354f58ea519093e5a4b8b3aec1c4a7944986569d84f9d88b3a9daa3da3a25cbbc387f2f9a9ae9c7d4afc2aca787626260f8920baf0ddc130a646e09737deb351d727813d2ac6c3f79fba40909033f2ab69e5e4df2a4b0a485141a80d5c89e5da11517ea30f7a11957396ececc49d00836d109a97f00947e24c7574611b7e44da28d8369c44172231a204cd3097d97d3e6eca0061bdbee60d9a7e178e67bc81dc4d7dcebad2d26f7cddb301c428e2187907b3a3eec470add2ad09838f70bef08cf4567f1e24ea777ffcdd9b9b44cfec1c556bd003bce065d9f20eedabc6d03f50e816e983375550ecc5fbb56a254feea00eefdf8f3be04076a0c9aa22260f08ab7f1a6a42c3b9cef47e1e25800a870baff72b8e427f316fd7d9b0b7026b0eba69c4a0577eadba046492ce21c7fcf9a8119328b620bbdcdcf54d6539796a1c1e723c25a48c581208b9ad57f348b832a4900fddefd718cc22c5d35e078b1eafe75d6501b7b6912b549c1e13f32c83cef3c10e4f3c1296515dae43bb6026c60ed03cfe44f103f113a3165643d789933e6f53d1203e92d7acf302573f069cf6a0efedd0a94308b8f3106e9a3b57fef15b480cb7fb0a17719e678a1f058ca149dd7141ddc3bf78ffbe95b45caeb8341aa3324844c543d98c9258735e46c058e1509744043e2238bfb70b1dae6c1f4e62292360710027517116e7080878c722e97aea87b8c5ddc8c5c4bcf63aaee4953ea6a6d6e3feb78003037621190f5d7f16f0dd102d3e7b0f7ab0cb4e4f7fd66fd0c91e3e859cad15fd2f6671cc611f86c94bf824d2d3a1e2479a54f504bb747c47bd5684afd563ae249b0ea971fa5ebb8f0eaadadf68c84168abb1c77d870dc950c64331e4bb9f3cb06ab68f39c95197cedf8ab7490048e5c133cfa8aa6d86d89ded35e0c61ffee1e0b3434a5c37da0f684790477a535d69599ba492bd97d096cfe94c58d3b5886d54c33c61b04249b387d635595d369f19918334db200cf1503f4a61de51775bb08246a1e22ad010d3b25f7d5b217b6287f0aec3fb782c7758325e8f060f059fe0f6a5c5a59cc5fa870be40570de3fbbfa23e092c5bb093def0502f3f23b5cb4a13873966900bd3d55542f329b2c621cdc6a7b8273ffb5aba14f030c327cfe4137efe08abe5d3c2b9d40101a06556e20e56b4e1b2c6c81cc44d5b7ec0614b162dcc38811f4bfaedd9a8c4f68d69f19172668f3908dc8967a68439bbea1056daa4772d7828b78358978d80a3008d23c3a4df7b5ce495d5a904d9177f01de0ff2003c29d291c0de4e7f1f5bb5f71056aab56f4e96cf1a24f7f93420dd7a0256a2b76357c6077f0c522ef45b747b15a8a6b1a99a8605a75a46ecc827b9844a89a48356bee3278968033b85f0f865f22437b4dc3255df825015aa41222b24f7c600d3a34e3b11a3a7ec86ef9214c5faf520d58d307135fe1f3c3ebe253f0bd6ce8562d998b6ab2ca47aa87cd7644d1b6fbd4b35fce28f218b8f158f887777761703ba86ec3efe1b9c00e8cf2e64711709e3600effafe382b7c8a8ec664708b077dc091fb525624a534a4b5bfc03fa4cbf17928a17f7f4ba2a3441b4132254bd4569a1b2adf15aa9d2516915920abebdf817d25f73e25d20b4fa55a42f649b5a57f51377c5d269baa7ce15998899bc2f081e2689e16922ed781602eae4c3f0e466919d0f20392deeb000b0fa1ece7b708edab9322e743defefe8e72b689e92b6df9c71c844f389924c63b3cac0c32e144f08009693b97dde61d59d0a594ef4c7e20245c000770ba2f0011c2eba2692ca2dac967d5d9756eb20b15985745791f1438c0621c0f69c4a12aa74bc218ac4ef30b02e8b1cd668abfbb98ead12e54954911ab56fa00b052c3288ca4b776e299f2c3f72c5731bf670e311940eb81ed5716107f2da5b5a09afe25039572cbd44ecbc377e3718e17122de223a9b8b3b37a007f92b29b38e97f09e0f9994a74ce51aef1320597ad52155f48c66594655227e921b96d0581fd820e36ece56a5dfd9f23c564bc86988a921c76c1b611848faf74535ea5f0af0b52dcb51ced7e1722df285e9081c482905b7466694eaa608ded24b2341e6aa572bb138876677de692bb67a747bed1539895f4b513ccb39d2a12e165f442a69357a4c1cd0f4f8c0506f5b62a7719456df8120aae9453cfc3428e96cd50ffe336506634d4fa5a509ef7d3aa8052590b7c6ade6810f629c65b5c55e83b416ed7e345fd0bf274f8f9578e76d9c55e6e7c57f8d6541dcc9ec769c55efa00fe2c0f094cf9e6d79f136137e19caa24685334b914818ec210e6e96389413721f0106edb40e15ad869f01ffc846975d533f280c32b0137fa38f120c2eb2fc1ea9aa0c8868f0cd66ed5b94cdc77c3c61f21a86704ba28ff99c4b249dae9041ce356600fdcbd2fc6c02c807750295ba0ee7bff246ffbaef621d05e20a362f735c37abb61d92d2e808bf7c26e564b6d6ea2d72c5d90777d0ab8e2b95dc79b373bb9dfc31cf7ee4212d60fab564f601b94c3ce935939c12f2622fcbd9bcc144d5fcffa691cd84be31315bd363fb67a4a7b426072e726144f64c347b0e43ac964cd719dd7a943168fa4a44ca336f93ca1456845aba96ec12b1a65c3198de9a40d97fe215f75ed1128d665e0b84030966838c367d4058578ff05fb70f658da57f5d46a8685629d7db6ab350dd3ff95b27d4c3a09a1ded566ff9df2c23b1f7492ce7b202c2df33116ee29c49fef68025cdef3b916f1d287ee9d3defaec03a39338ed345"}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x80}]}, 0x10f4}}, 0x0)
mprotect$auto(0x0, 0x9, 0x80000000)
r16 = getpgid(r15)
sendmsg$auto_NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000004980)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004940)={&(0x7f00000047c0)={0x14c, r7, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_SSID={0x21, 0x34, "acef51beecad33c04a7c636896cca49ffdb060cb1759e228d8db2ac496"}, @NL80211_ATTR_STA_FLAGS2={0x33, 0x43, "6f2a41d90b45b7710040610c1e073aabeb3f001283f929b54f1e93df5a370e1767cd6dff1bd76bb8af7b83bf2d3589"}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xde, 0x25, 0x0, 0x1, [@typed={0x8, 0xff, 0x0, 0x0, @pid=r16}, @generic="72f212eabc92aeeb6b93da8fa985ec076a0cf66266592d6156def2e626fb1f81d575dc020ff81bd5ddb23c98818172892d7a5fe9189a075f61d6b8a436a32f0949c37cdb89e0b89440ff0e2521da620f27ffc7e0dadebe1eb7fc83089097f8c0c5fa4c003c689f844454b0d177e26884111f79a9e827005f82a35400854219d651cbe55404705a419fc3e9f18d2e3e1481c0b5a12f1e38b5e00026abb29819dbb44b413ed2bee1391341d4ddbd5b8ed7ede0ba95878c32ae31eaecd84b671984ebe15463c74fa07ca0e2d5cd0525013038a6"]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4040082}, 0x20008840)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000049c0)='/sys/devices/virtual/dmi/id/chassis_serial\x00', 0x1730c2, 0x0)
ioctl$auto_NS_GET_MNTNS_ID(0xffffffffffffffff, 0x8008b705, &(0x7f0000004a40)=0x3)
executing program 5:
r0 = socket(0x11, 0x3, 0x9)
sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0xf}, 0x7, 0x0, 0x5, 0xe}, 0x5}, 0x1, 0x101)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x4000ebf, r0, 0x7fff)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x22180, 0x0)
writev$auto(r1, &(0x7f00000003c0)={&(0x7f0000000540)="3ea225d32d6572e46b42c797cf8bb1e6b39bd2c7777940852dd19fe0b0fb8da20b27925b49be55b0f6094a5a988e72ce80dd715ebff5b5077790d30b24692bdf9bd9ad047870", 0x8000}, 0x9)
socket(0xa, 0x2, 0x73)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
setsockopt$auto(0x4, 0x29, 0x2a, 0x0, 0x200577)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x801, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2a, 0xffffffffffffffff, 0x3, 0x62, 0x7, 0x7, 0x6d3f, 0x9, 0x4, 0x5]}, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000010c0)=""/4096, 0x1000)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0x3, 0x8, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80040021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0)
select$auto(0x7f, &(0x7f0000000040)={[0x1, 0x7, 0x7, 0x2, 0xe, 0xffffffffffffc24e, 0xe1a, 0x7fffffffffffffff, 0x3, 0x4, 0x6, 0xb, 0x7, 0x7, 0xffffffffffffffff, 0x80]}, 0x0, &(0x7f0000000340)={[0xd6db, 0x9, 0xc2, 0x4, 0xffffffffffff2623, 0x3, 0x8001, 0xfa, 0x9, 0xe, 0x140, 0xc, 0x9, 0x2, 0x4, 0x6]}, &(0x7f0000000280)={0x9, 0xc89})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/tracing/trace\x00', 0x80601, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/veth1_macvtap/locktime\x00', 0x103142, 0x0)
executing program 4:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff)
mmap$auto(0x0, 0x20000000009, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x20000}, 0x4}, 0x1f8, 0xb07e)
userfaultfd$auto(0x5)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
write$auto(r0, &(0x7f0000000140)=')-+\xa2\x00', 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
mmap$auto(0x0, 0xffffffff, 0xe0, 0x15, r0, 0x7)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_l2tp-openat$auto_safesetid_gid_file_fops_securityfs-ioctl$auto-mmap$auto-socket$nl_generic-ioctl$auto-close_range$auto-mmap$auto-socketpair$auto-sendmmsg$auto-userfaultfd$auto-sendmmsg$auto-write$auto-clone$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff)
mmap$auto(0x0, 0x20000000009, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x20000}, 0x4}, 0x1f8, 0xb07e)
userfaultfd$auto(0x5)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
write$auto(r0, &(0x7f0000000140)=')-+\xa2\x00', 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
mmap$auto(0x0, 0xffffffff, 0xe0, 0x15, r0, 0x7)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
single: successfully extracted reproducer
found reproducer with 17 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_l2tp-openat$auto_safesetid_gid_file_fops_securityfs-ioctl$auto-mmap$auto-socket$nl_generic-ioctl$auto-close_range$auto-mmap$auto-socketpair$auto-sendmmsg$auto-userfaultfd$auto-sendmmsg$auto-write$auto-clone$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff)
mmap$auto(0x0, 0x20000000009, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x20000}, 0x4}, 0x1f8, 0xb07e)
userfaultfd$auto(0x5)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
write$auto(r0, &(0x7f0000000140)=')-+\xa2\x00', 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
mmap$auto(0x0, 0xffffffff, 0xe0, 0x15, r0, 0x7)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_l2tp-openat$auto_safesetid_gid_file_fops_securityfs-ioctl$auto-mmap$auto-socket$nl_generic-ioctl$auto-close_range$auto-mmap$auto-socketpair$auto-sendmmsg$auto-userfaultfd$auto-sendmmsg$auto-write$auto-clone$auto-mmap$auto-write$auto
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff)
mmap$auto(0x0, 0x20000000009, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x20000}, 0x4}, 0x1f8, 0xb07e)
userfaultfd$auto(0x5)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
write$auto(r0, &(0x7f0000000140)=')-+\xa2\x00', 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
mmap$auto(0x0, 0xffffffff, 0xe0, 0x15, r0, 0x7)
write$auto(0xffffffffffffffff, 0x0, 0xe)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_l2tp-openat$auto_safesetid_gid_file_fops_securityfs-ioctl$auto-mmap$auto-socket$nl_generic-ioctl$auto-close_range$auto-mmap$auto-socketpair$auto-sendmmsg$auto-userfaultfd$auto-sendmmsg$auto-write$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff)
mmap$auto(0x0, 0x20000000009, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x20000}, 0x4}, 0x1f8, 0xb07e)
userfaultfd$auto(0x5)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
write$auto(r0, &(0x7f0000000140)=')-+\xa2\x00', 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_l2tp-openat$auto_safesetid_gid_file_fops_securityfs-ioctl$auto-mmap$auto-socket$nl_generic-ioctl$auto-close_range$auto-mmap$auto-socketpair$auto-sendmmsg$auto-userfaultfd$auto-sendmmsg$auto-write$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff)
mmap$auto(0x0, 0x20000000009, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x20000}, 0x4}, 0x1f8, 0xb07e)
userfaultfd$auto(0x5)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
write$auto(r0, &(0x7f0000000140)=')-+\xa2\x00', 0x6)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_l2tp-openat$auto_safesetid_gid_file_fops_securityfs-ioctl$auto-mmap$auto-socket$nl_generic-ioctl$auto-close_range$auto-mmap$auto-socketpair$auto-sendmmsg$auto-userfaultfd$auto-sendmmsg$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff)
mmap$auto(0x0, 0x20000000009, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x20000}, 0x4}, 0x1f8, 0xb07e)
userfaultfd$auto(0x5)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_l2tp-openat$auto_safesetid_gid_file_fops_securityfs-ioctl$auto-mmap$auto-socket$nl_generic-ioctl$auto-close_range$auto-mmap$auto-socketpair$auto-sendmmsg$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff)
mmap$auto(0x0, 0x20000000009, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x20000}, 0x4}, 0x1f8, 0xb07e)
userfaultfd$auto(0x5)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_l2tp-openat$auto_safesetid_gid_file_fops_securityfs-ioctl$auto-mmap$auto-socket$nl_generic-ioctl$auto-close_range$auto-mmap$auto-socketpair$auto-sendmmsg$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff)
mmap$auto(0x0, 0x20000000009, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x20000}, 0x4}, 0x1f8, 0xb07e)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_l2tp-openat$auto_safesetid_gid_file_fops_securityfs-ioctl$auto-mmap$auto-socket$nl_generic-ioctl$auto-close_range$auto-mmap$auto-socketpair$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff)
mmap$auto(0x0, 0x20000000009, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
userfaultfd$auto(0x5)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_l2tp-openat$auto_safesetid_gid_file_fops_securityfs-ioctl$auto-mmap$auto-socket$nl_generic-ioctl$auto-close_range$auto-mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff)
mmap$auto(0x0, 0x20000000009, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
userfaultfd$auto(0x5)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_l2tp-openat$auto_safesetid_gid_file_fops_securityfs-ioctl$auto-mmap$auto-socket$nl_generic-ioctl$auto-close_range$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff)
mmap$auto(0x0, 0x20000000009, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
userfaultfd$auto(0x5)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_l2tp-openat$auto_safesetid_gid_file_fops_securityfs-ioctl$auto-mmap$auto-socket$nl_generic-ioctl$auto-mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff)
mmap$auto(0x0, 0x20000000009, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r0, 0x89a0, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
userfaultfd$auto(0x5)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r1, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_l2tp-openat$auto_safesetid_gid_file_fops_securityfs-ioctl$auto-mmap$auto-socket$nl_generic-mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff)
mmap$auto(0x0, 0x20000000009, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
userfaultfd$auto(0x5)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_l2tp-openat$auto_safesetid_gid_file_fops_securityfs-ioctl$auto-mmap$auto-mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff)
mmap$auto(0x0, 0x20000000009, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
userfaultfd$auto(0x5)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_l2tp-openat$auto_safesetid_gid_file_fops_securityfs-ioctl$auto-mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
userfaultfd$auto(0x5)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_l2tp-openat$auto_safesetid_gid_file_fops_securityfs-mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
userfaultfd$auto(0x5)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_l2tp-mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
userfaultfd$auto(0x5)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
userfaultfd$auto(0x5)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
userfaultfd$auto(0x5)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-userfaultfd$auto-clone$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
reproducing took 1h10m9.611157078s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: vmalloc-out-of-bounds in skb_put_data include/linux/skbuff.h:2752 [inline]
BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258
Read of size 140 at addr ffffc90000ace000 by task kworker/u9:1/5140

CPU: 0 UID: 0 PID: 5140 Comm: kworker/u9:1 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
Workqueue: hci0 hci_devcd_rx
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xc3/0x670 mm/kasan/report.c:521
 kasan_report+0xe0/0x110 mm/kasan/report.c:634
 check_region_inline mm/kasan/generic.c:183 [inline]
 kasan_check_range+0xef/0x1a0 mm/kasan/generic.c:189
 __asan_memcpy+0x23/0x60 mm/kasan/shadow.c:105
 skb_put_data include/linux/skbuff.h:2752 [inline]
 hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258
 hci_devcd_handle_pkt_abort net/bluetooth/coredump.c:298 [inline]
 hci_devcd_rx+0xa25/0x1780 net/bluetooth/coredump.c:367
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

The buggy address ffffc90000ace000 belongs to a vmalloc virtual mapping
Memory state around the buggy address:
 ffffc90000acdf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
 ffffc90000acdf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
>ffffc90000ace000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
                   ^
 ffffc90000ace080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
 ffffc90000ace100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: vmalloc-out-of-bounds in skb_put_data include/linux/skbuff.h:2752 [inline]
BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258
Read of size 140 at addr ffffc90000ace000 by task kworker/u9:1/5140

CPU: 0 UID: 0 PID: 5140 Comm: kworker/u9:1 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
Workqueue: hci0 hci_devcd_rx
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xc3/0x670 mm/kasan/report.c:521
 kasan_report+0xe0/0x110 mm/kasan/report.c:634
 check_region_inline mm/kasan/generic.c:183 [inline]
 kasan_check_range+0xef/0x1a0 mm/kasan/generic.c:189
 __asan_memcpy+0x23/0x60 mm/kasan/shadow.c:105
 skb_put_data include/linux/skbuff.h:2752 [inline]
 hci_devcd_dump+0x142/0x240 net/bluetooth/coredump.c:258
 hci_devcd_handle_pkt_abort net/bluetooth/coredump.c:298 [inline]
 hci_devcd_rx+0xa25/0x1780 net/bluetooth/coredump.c:367
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

The buggy address ffffc90000ace000 belongs to a vmalloc virtual mapping
Memory state around the buggy address:
 ffffc90000acdf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
 ffffc90000acdf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
>ffffc90000ace000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
                   ^
 ffffc90000ace080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
 ffffc90000ace100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
==================================================================