Extracting prog: 57m56.498094413s
Minimizing prog: 24m46.073420071s
Simplifying prog options: 15m40.151678373s
Extracting C: 5m59.789413119s
Simplifying C: 0s


extracting reproducer from 31 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
single: failed to extract reproducer
bisect: bisecting 31 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = epoll_create$auto(0x3e)
epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0)
executing program 0:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.max.depth\x00', 0x0, 0x0)
mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_app\x00', 0xc80, 0x0)
read$auto(r0, 0x0, 0x805644)
executing program 0:
shmget$auto(0x400, 0x10563, 0x568c12f2)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3)
shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00')
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={<r1=>r0, 0x7, 0x6}, 0x6, 0x100000)
r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0)
read$auto(r0, &(0x7f0000000100)='netdev\x00', 0x80000001)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003940)={0x14, r2, 0x301, 0x70bd2e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4)
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
tkill$auto(0x1, 0x7)
executing program 0:
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0xa14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x9e8, 0x2, 0x0, 0x1, [@nested={0x9e2, 0x4a, 0x0, 0x1, [@generic="ce1121d80f1f9696043f33afa37882bd78da92247b6f5287b7caaf828fbeb70b5fdf98c15227eebc012a873be17fbb96c40d707eabe821f004e2b97549b201d9867488ba8a8d42fe6091f12d63d9a5cac5a85f16524e71138f5407716d80ab96b512317e785911862ffd80bb1a3d8e7f37275619059ff3dd13a8144ba1edf61e6a5db0c82bb1cfe5cab7b7447c8c69cf649ec1a9e10e4efb0efc5f2013efc23cfb3ff13ad92f02e8133fd1f7a5a898823bb7f5315bdeda8ac15b45b73a42ac1b45465f201e62463c5206bd628d4b5c754653b671e905e9be45ad5dda88b7442159fbab54173f74cde7aa8fb23dbdd6b0eeb72fa84445cbe70831a48ac1bd57dd7e8cadde0e31eb083d3953d358a315924b16be40b8901b60d7b6485d34f1787b9ca66b092c5e602640ec87cc32e21a918a86fe690aba57100b8d6f7ace0ea2d1c7bb60543a1d4f8c00e8bc27d30f21aba4be9b814d49a000fcb30d3ff83f77668e3dce41317b21df32597d407e216d297a7d2761eeefb60d89eb63770bd9b57a72b708fdb4be192defd4a6b614883615a39ed686d06fae22f2ced15b10117a4e236d2048945df7e03057d1e778e90f048ecc6906aba7b2d452fd2fae49dfc6a7a24a0bc2b21c805c3cffc8a5b0730fd123fa826c43056add6afa702e0fea7a7c94d17e817a85bc28ab23768691a482a1146b1522c249d5417b6c44b4383b03d2b3d5e7c54b4ff5d063446d2ee47644f82574675c89473c79ac403ba2c1e964c25eebc44fa77eae8448ff3631bd2ed4daeb8111067ceb7ae865a85a6a63f7eb53afe2807fe0af6bd0c7954fdd35cad241b0d3254f600faf38c5c61f96d2af39f0bdc696aba0e4dfa5403063b0b87bfdf040216249b08402d8aae2db0dff362ccd08123f7a89dcacb738112644f7c66f7a87e336b3e6d5ae1d0fa949ef681662bd8a2c596114126e0eb4e3fb3434b6dc3ff6828472970670863438c83f682480c516bf4be160bd2ee2d1d2b949ecd75efecff9641161a5fa9304504a6992a692792fd4c2ae1e13ea3594223eecbb78bade1a567b5f8fc881cb250b43897654e17de005a6ee52c431e8814c64e95cd0be3e89a80642a326dab72ca8fca7719192893f849585bfd0838f806aa2c8ee1e5eab15145dad55903df432a6dabfe8024f2dd697d62845f1b96193f45b982839a7d90ade8bc4c5ac9673026b20119b8da751cd5eb133814c18ed72199a7839e84285067b064f3bbb44b65b888e98a230f69996ac2a8ea811ab43c531af0def19c8b754077c4a35e1edb745a88bf45399983735e73870d13561af06cbd01cff8ac1077c25ada7aab4126bc2c222f374ac1d6a7dc5c3b6eeb8e6a3e0b2794760d54dfa433e2139d116cbb7cd354ac522a151d1b6d7f618cf7bd2e968ab065ff2c9bc3618065b921dcc35dc03657d4ffd35c7dd4c3a9f0fbc87a8b223f7f3bc7385586f49490c5296049883e6b0fbadc923786189956ab85e248216b6f44ead1b8063b583c2f0d88a29adee89f098b2b3689af37c9395d73212b9e917a82c6b636aa46499ebb998721b3334ced7a993d32b0b5aaef1a4d714bb7df9b86f990588df86ccc535bb3b7bbec5c42daebc5b619eaaa071cbcbadceea408cb592b94cc6760ae21ba8b3a77a22f910ec1f9c1204da6d779ad4875df9a0b2b44d9485c0be26da490a5a37997f806e26752562a3cc387a7fcd13d04d8b895a529b2573db6e719c5e8bdf0e743bf1909085bbbf787e8da3560d82b9aa167dce03c8f37a418c921bd9b5ec8bdced7e98e293b19a6f765487476271676fa48cdbeac0fe99b206d975be5fd0ad36162c0dddeaeb365be1f34a6f2f952b6c0fc4e66956a0fae7852722475aeda6cc5d58b88767015ee054aefa938946700eeb755e4111c7dc532a6d47b44af7f225a0b4dddef55b32a2bf44e7846a3fd90b5ca404b48132c10664926a9503b43447fdee72a9a2b5160b961a69c5515bbb7a0bff4d462fd077ab7ac049bfb4ce78203e0cde72329051a14f16a4e179f1d1f99933848d0548b7c54cacb4775525984c098f14b41f6da5214e6677a8a8bc8eb9e5986ee0400f9d9b8b0ebe81fad3630c09cf40b6da29bd150b650b330bb66eb685e63555c135c9af924645f75d89ccee8c043513ab53e8ceda24c951c1ed5c5d124e2d9fae64ce99f9385b036d10191223b7f79dade3f10e5e2344f28322869ceefcd0ed8f643397312fee8dae51cffc83da7cb49fa0651d89d6f9d81f51057548304220326e6050aa10e51299e4d88edb215262a68e17da89f24a93efe907aeac496600d5e817a52718b431ce76917010f428eb657ddf8a29dcf3f42a6e6d926b8005299ef062328bfacfed87413446a4b8edd637c7822a1414b4c6534aa6ab32f7f6f51b5ffbb50cf37a3dcc32894314cc685264aedb8bf157076269fafdad088689cd23b9732e00d4333cde63f70977ab5c9b8efd6bff3936af2f4dc58131f6495cf6489475848c164726dbbe5de8d97ff721755e47ce89ffbddfcbe4e6c58f3eb882a83114a7f4b56dd4acf886dcde8075a2c410079bd274b729173e5da49b7e0992c320be6080fb82cfd29197c18d7f8c55a94edcb124d485fb0f68fce57a51de44a719e2f1afa5b0aec4ab2df3f3e012d5d2cdddd7a53158478401537d1ab60c126040401db4ffb0aa639c201ddbba2651ec0c44f9997287e4c6f9e3a135f75e7e8b5f6564b24b244ee1d03bcaeb23076d2afcd1b6e1858d5933f85020bb03fafe9e131bad975bc9febe456f465f10d5eb504d01bbf9f377e47da63ee6e71980ea8525b43f1d5bed0a179d41fb9b7a2f2b823ac409486a9a849899de0309c5f18b6c06a8e5bf83f663fdc5e6bf3ed5bc8f869a35c49b30f7c018acb7f61c5d0cfd692c23937a3e7713056431ef55a4f2d8f04d52630d6b5e16903bb16b744c60b6b262ab93aa90f5b1fc7a4a6774dc34e4bc8135c9c58b2e8d8541481da8c2d54e8a72fd6ff769cbe385dc5688e9af658a988fe7bd1578f6719b21083f41207fc039a066d60f0135c5589d1377341154b9f5524f9f41f8f233cdea380e1aaba8b5b520a375288700363595f6677bb1abfe1ff07cee3bab23449fe74683fb2e443adb8b4d7bc7c698273e0c862b410e65a08db5eea59fe2eeb9e8c6f41c8fc611abd468f329d3ae25465b0e164edb0f04e66864b0de1c114f18798530ad7ba1a4cd1be56d5004185822c6ccdf82bcf69c2853ee30bcfa734949ada37118b634cad7ee824f42b8166dc3f3a1f0ccc384b071ab45b714eb81a1e00d02113975de721692637b533841a83c7a88452917d1e8efb31d61e5c959bf43777dac41b0d0d27d783106c1df0db20a4be32a219ca0e44aacd240876eb54997c86ba1e6c6a2320dbcad37db73834ca36a22fde6c0b7c344d1413c394ac62a4c03b642aff53da317dab3b3cf9ac3c7c4c564abc68ea601520492d1c84aae820f9e317b70b85af6521702e12c94ec59e8efccda3a640d041607b962f3ad1f0e1d289189a0e14e20c5e1ced3a2a4508d515509e4d0d6b617fdb718618c9b5b"]}]}]}, 0xa14}, 0x1, 0x0, 0x0, 0x40000}, 0x24000800)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
executing program 32:
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0xa14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x9e8, 0x2, 0x0, 0x1, [@nested={0x9e2, 0x4a, 0x0, 0x1, [@generic="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"]}]}]}, 0xa14}, 0x1, 0x0, 0x0, 0x40000}, 0x24000800)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
executing program 4:
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = fanotify_init$auto(0xe02, 0x1)
r1 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98)
fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22)
read$auto_vhost_vsock_fops_vsock(r0, &(0x7f00000000c0)=""/192, 0xc0)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
r0 = socket(0x2, 0x1, 0x0)
sysfs$auto(0x2, 0x4, 0x0)
getsockopt$auto(r0, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e)
executing program 2:
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='\"\x00\''], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), 0xffffffffffffffff)
clone$auto(0xf, 0xfffffffffffeffff, 0x0, 0x0, 0x7)
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/smaps_rollup\x00', 0x1a3000, 0x0)
pread64$auto(r0, 0x0, 0xa8, 0x7)
executing program 1:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@OVS_DP_ATTR_USER_FEATURES={0x0, 0x5, 0x1b8a}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040c84}, 0x8010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 2:
mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1)
mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0xe615, 0x0)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x40000000005, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
kexec_load$auto(0x9, 0x0, 0x0, 0x5)
executing program 2:
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
shutdown$auto(0x200000003, 0x2)
executing program 3:
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
r0 = socket(0xa, 0x1, 0x84)
io_uring_setup$auto(0x401, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
getsockopt$auto(r0, 0x84, 0x11, 0x0, 0x0)
executing program 1:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x0, 0x1a, 0x0, 0x28)
executing program 4:
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB='^\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 1:
ioperm$auto(0x2, 0x3, 0x4a2e97a0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(r0, 0x4, 0x0, 0x1)
executing program 4:
mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x0, 0xa, 0x0, 0x10000)
write$auto(0x3, 0x0, 0x100082)
executing program 1:
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
timer_create$auto(0x9, 0x0, 0x0)
timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10007}, {0x9}}, 0x0)
timer_gettime$auto(0x0, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x8002)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0)
openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x28400, 0x0)
adjtimex$auto(&(0x7f0000000000)={0xfffffff0, 0x0, 0x7, 0x9c, 0xe1d, 0x3, 0x3, 0x0, 0xfffffffffffffff7, 0x4, 0x80000000004, {0x100000000, 0x2}, 0x8000000252, 0x5, 0x3, 0x1, 0x0, 0x4, 0x9, 0xc578, 0x4, 0x400, 0x7ff})
readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6)
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r1, 0x4004743d, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto(0x3, 0x40045613, 0x38)
executing program 1:
ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x2, 0xffff}, 0x5, 0x0, 0x0, 0x8)
msgctl$auto(0x26, 0x400, 0x0)
rseq$auto(&(0x7f00000002c0)={0xe, 0x3ff, 0x0, 0x20006, 0xffffffff, 0x2}, 0xfffffff4, 0x0, 0x7)
write$auto(0xffffffffffffffff, 0x0, 0x200800000000f)
mlockall$auto(0x7)
mlockall$auto(0x7)
executing program 4:
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
socket(0x2, 0x3, 0xa)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(r0, 0x1002, 0x0, 0x0, 0x0, 0x2)
executing program 2:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
executing program 3:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents64$auto(0x0, 0x0, 0x18)
socket(0x2, 0x1, 0x0)
ioctl$auto(0x1, 0x8941, 0x8)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0)
r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-socket-socketpair$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
single: failed to extract reproducer
bisect: bisecting 31 programs with base timeout 1m40s
testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = epoll_create$auto(0x3e)
epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0)
executing program 0:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.max.depth\x00', 0x0, 0x0)
mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_app\x00', 0xc80, 0x0)
read$auto(r0, 0x0, 0x805644)
executing program 0:
shmget$auto(0x400, 0x10563, 0x568c12f2)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3)
shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00')
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={<r1=>r0, 0x7, 0x6}, 0x6, 0x100000)
r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0)
read$auto(r0, &(0x7f0000000100)='netdev\x00', 0x80000001)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003940)={0x14, r2, 0x301, 0x70bd2e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4)
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
tkill$auto(0x1, 0x7)
executing program 0:
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0xa14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x9e8, 0x2, 0x0, 0x1, [@nested={0x9e2, 0x4a, 0x0, 0x1, [@generic="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"]}]}]}, 0xa14}, 0x1, 0x0, 0x0, 0x40000}, 0x24000800)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
executing program 32:
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0xa14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x9e8, 0x2, 0x0, 0x1, [@nested={0x9e2, 0x4a, 0x0, 0x1, [@generic="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"]}]}]}, 0xa14}, 0x1, 0x0, 0x0, 0x40000}, 0x24000800)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
executing program 4:
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = fanotify_init$auto(0xe02, 0x1)
r1 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98)
fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22)
read$auto_vhost_vsock_fops_vsock(r0, &(0x7f00000000c0)=""/192, 0xc0)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
r0 = socket(0x2, 0x1, 0x0)
sysfs$auto(0x2, 0x4, 0x0)
getsockopt$auto(r0, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e)
executing program 2:
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='\"\x00\''], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), 0xffffffffffffffff)
clone$auto(0xf, 0xfffffffffffeffff, 0x0, 0x0, 0x7)
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/smaps_rollup\x00', 0x1a3000, 0x0)
pread64$auto(r0, 0x0, 0xa8, 0x7)
executing program 1:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@OVS_DP_ATTR_USER_FEATURES={0x0, 0x5, 0x1b8a}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040c84}, 0x8010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 2:
mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1)
mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0xe615, 0x0)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x40000000005, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
kexec_load$auto(0x9, 0x0, 0x0, 0x5)
executing program 2:
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
shutdown$auto(0x200000003, 0x2)
executing program 3:
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
r0 = socket(0xa, 0x1, 0x84)
io_uring_setup$auto(0x401, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
getsockopt$auto(r0, 0x84, 0x11, 0x0, 0x0)
executing program 1:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x0, 0x1a, 0x0, 0x28)
executing program 4:
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB='^\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 1:
ioperm$auto(0x2, 0x3, 0x4a2e97a0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(r0, 0x4, 0x0, 0x1)
executing program 4:
mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x0, 0xa, 0x0, 0x10000)
write$auto(0x3, 0x0, 0x100082)
executing program 1:
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
timer_create$auto(0x9, 0x0, 0x0)
timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10007}, {0x9}}, 0x0)
timer_gettime$auto(0x0, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x8002)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0)
openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x28400, 0x0)
adjtimex$auto(&(0x7f0000000000)={0xfffffff0, 0x0, 0x7, 0x9c, 0xe1d, 0x3, 0x3, 0x0, 0xfffffffffffffff7, 0x4, 0x80000000004, {0x100000000, 0x2}, 0x8000000252, 0x5, 0x3, 0x1, 0x0, 0x4, 0x9, 0xc578, 0x4, 0x400, 0x7ff})
readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6)
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r1, 0x4004743d, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto(0x3, 0x40045613, 0x38)
executing program 1:
ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x2, 0xffff}, 0x5, 0x0, 0x0, 0x8)
msgctl$auto(0x26, 0x400, 0x0)
rseq$auto(&(0x7f00000002c0)={0xe, 0x3ff, 0x0, 0x20006, 0xffffffff, 0x2}, 0xfffffff4, 0x0, 0x7)
write$auto(0xffffffffffffffff, 0x0, 0x200800000000f)
mlockall$auto(0x7)
mlockall$auto(0x7)
executing program 4:
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
socket(0x2, 0x3, 0xa)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(r0, 0x1002, 0x0, 0x0, 0x0, 0x2)
executing program 2:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
executing program 3:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents64$auto(0x0, 0x0, 0x18)
socket(0x2, 0x1, 0x0)
ioctl$auto(0x1, 0x8941, 0x8)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0)
r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: bisecting 31 programs
bisect: split chunks (needed=false): <30>
bisect: split chunk #0 of len 30 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6]
detailed listing:
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='\"\x00\''], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), 0xffffffffffffffff)
clone$auto(0xf, 0xfffffffffffeffff, 0x0, 0x0, 0x7)
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/smaps_rollup\x00', 0x1a3000, 0x0)
pread64$auto(r0, 0x0, 0xa8, 0x7)
executing program 1:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@OVS_DP_ATTR_USER_FEATURES={0x0, 0x5, 0x1b8a}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040c84}, 0x8010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 2:
mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1)
mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0xe615, 0x0)
executing program 1:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x40000000005, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
kexec_load$auto(0x9, 0x0, 0x0, 0x5)
executing program 2:
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
shutdown$auto(0x200000003, 0x2)
executing program 3:
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
r0 = socket(0xa, 0x1, 0x84)
io_uring_setup$auto(0x401, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
getsockopt$auto(r0, 0x84, 0x11, 0x0, 0x0)
executing program 1:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x0, 0x1a, 0x0, 0x28)
executing program 4:
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB='^\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
executing program 1:
ioperm$auto(0x2, 0x3, 0x4a2e97a0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(r0, 0x4, 0x0, 0x1)
executing program 4:
mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x0, 0xa, 0x0, 0x10000)
write$auto(0x3, 0x0, 0x100082)
executing program 1:
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
timer_create$auto(0x9, 0x0, 0x0)
timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10007}, {0x9}}, 0x0)
timer_gettime$auto(0x0, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x8002)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0)
openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x28400, 0x0)
adjtimex$auto(&(0x7f0000000000)={0xfffffff0, 0x0, 0x7, 0x9c, 0xe1d, 0x3, 0x3, 0x0, 0xfffffffffffffff7, 0x4, 0x80000000004, {0x100000000, 0x2}, 0x8000000252, 0x5, 0x3, 0x1, 0x0, 0x4, 0x9, 0xc578, 0x4, 0x400, 0x7ff})
readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6)
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r1, 0x4004743d, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto(0x3, 0x40045613, 0x38)
executing program 1:
ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x2, 0xffff}, 0x5, 0x0, 0x0, 0x8)
msgctl$auto(0x26, 0x400, 0x0)
rseq$auto(&(0x7f00000002c0)={0xe, 0x3ff, 0x0, 0x20006, 0xffffffff, 0x2}, 0xfffffff4, 0x0, 0x7)
write$auto(0xffffffffffffffff, 0x0, 0x200800000000f)
mlockall$auto(0x7)
mlockall$auto(0x7)
executing program 4:
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
socket(0x2, 0x3, 0xa)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(r0, 0x1002, 0x0, 0x0, 0x0, 0x2)
executing program 2:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
executing program 3:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents64$auto(0x0, 0x0, 0x18)
socket(0x2, 0x1, 0x0)
ioctl$auto(0x1, 0x8941, 0x8)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0)
r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)

program did not crash
bisect: testing without sub-chunk 2/3
testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = epoll_create$auto(0x3e)
epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0)
executing program 0:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.max.depth\x00', 0x0, 0x0)
mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_app\x00', 0xc80, 0x0)
read$auto(r0, 0x0, 0x805644)
executing program 0:
shmget$auto(0x400, 0x10563, 0x568c12f2)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3)
shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00')
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={<r1=>r0, 0x7, 0x6}, 0x6, 0x100000)
r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0)
read$auto(r0, &(0x7f0000000100)='netdev\x00', 0x80000001)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003940)={0x14, r2, 0x301, 0x70bd2e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4)
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
tkill$auto(0x1, 0x7)
executing program 0:
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0xa14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x9e8, 0x2, 0x0, 0x1, [@nested={0x9e2, 0x4a, 0x0, 0x1, [@generic="ce1121d80f1f9696043f33afa37882bd78da92247b6f5287b7caaf828fbeb70b5fdf98c15227eebc012a873be17fbb96c40d707eabe821f004e2b97549b201d9867488ba8a8d42fe6091f12d63d9a5cac5a85f16524e71138f5407716d80ab96b512317e785911862ffd80bb1a3d8e7f37275619059ff3dd13a8144ba1edf61e6a5db0c82bb1cfe5cab7b7447c8c69cf649ec1a9e10e4efb0efc5f2013efc23cfb3ff13ad92f02e8133fd1f7a5a898823bb7f5315bdeda8ac15b45b73a42ac1b45465f201e62463c5206bd628d4b5c754653b671e905e9be45ad5dda88b7442159fbab54173f74cde7aa8fb23dbdd6b0eeb72fa84445cbe70831a48ac1bd57dd7e8cadde0e31eb083d3953d358a315924b16be40b8901b60d7b6485d34f1787b9ca66b092c5e602640ec87cc32e21a918a86fe690aba57100b8d6f7ace0ea2d1c7bb60543a1d4f8c00e8bc27d30f21aba4be9b814d49a000fcb30d3ff83f77668e3dce41317b21df32597d407e216d297a7d2761eeefb60d89eb63770bd9b57a72b708fdb4be192defd4a6b614883615a39ed686d06fae22f2ced15b10117a4e236d2048945df7e03057d1e778e90f048ecc6906aba7b2d452fd2fae49dfc6a7a24a0bc2b21c805c3cffc8a5b0730fd123fa826c43056add6afa702e0fea7a7c94d17e817a85bc28ab23768691a482a1146b1522c249d5417b6c44b4383b03d2b3d5e7c54b4ff5d063446d2ee47644f82574675c89473c79ac403ba2c1e964c25eebc44fa77eae8448ff3631bd2ed4daeb8111067ceb7ae865a85a6a63f7eb53afe2807fe0af6bd0c7954fdd35cad241b0d3254f600faf38c5c61f96d2af39f0bdc696aba0e4dfa5403063b0b87bfdf040216249b08402d8aae2db0dff362ccd08123f7a89dcacb738112644f7c66f7a87e336b3e6d5ae1d0fa949ef681662bd8a2c596114126e0eb4e3fb3434b6dc3ff6828472970670863438c83f682480c516bf4be160bd2ee2d1d2b949ecd75efecff9641161a5fa9304504a6992a692792fd4c2ae1e13ea3594223eecbb78bade1a567b5f8fc881cb250b43897654e17de005a6ee52c431e8814c64e95cd0be3e89a80642a326dab72ca8fca7719192893f849585bfd0838f806aa2c8ee1e5eab15145dad55903df432a6dabfe8024f2dd697d62845f1b96193f45b982839a7d90ade8bc4c5ac9673026b20119b8da751cd5eb133814c18ed72199a7839e84285067b064f3bbb44b65b888e98a230f69996ac2a8ea811ab43c531af0def19c8b754077c4a35e1edb745a88bf45399983735e73870d13561af06cbd01cff8ac1077c25ada7aab4126bc2c222f374ac1d6a7dc5c3b6eeb8e6a3e0b2794760d54dfa433e2139d116cbb7cd354ac522a151d1b6d7f618cf7bd2e968ab065ff2c9bc3618065b921dcc35dc03657d4ffd35c7dd4c3a9f0fbc87a8b223f7f3bc7385586f49490c5296049883e6b0fbadc923786189956ab85e248216b6f44ead1b8063b583c2f0d88a29adee89f098b2b3689af37c9395d73212b9e917a82c6b636aa46499ebb998721b3334ced7a993d32b0b5aaef1a4d714bb7df9b86f990588df86ccc535bb3b7bbec5c42daebc5b619eaaa071cbcbadceea408cb592b94cc6760ae21ba8b3a77a22f910ec1f9c1204da6d779ad4875df9a0b2b44d9485c0be26da490a5a37997f806e26752562a3cc387a7fcd13d04d8b895a529b2573db6e719c5e8bdf0e743bf1909085bbbf787e8da3560d82b9aa167dce03c8f37a418c921bd9b5ec8bdced7e98e293b19a6f765487476271676fa48cdbeac0fe99b206d975be5fd0ad36162c0dddeaeb365be1f34a6f2f952b6c0fc4e66956a0fae7852722475aeda6cc5d58b88767015ee054aefa938946700eeb755e4111c7dc532a6d47b44af7f225a0b4dddef55b32a2bf44e7846a3fd90b5ca404b48132c10664926a9503b43447fdee72a9a2b5160b961a69c5515bbb7a0bff4d462fd077ab7ac049bfb4ce78203e0cde72329051a14f16a4e179f1d1f99933848d0548b7c54cacb4775525984c098f14b41f6da5214e6677a8a8bc8eb9e5986ee0400f9d9b8b0ebe81fad3630c09cf40b6da29bd150b650b330bb66eb685e63555c135c9af924645f75d89ccee8c043513ab53e8ceda24c951c1ed5c5d124e2d9fae64ce99f9385b036d10191223b7f79dade3f10e5e2344f28322869ceefcd0ed8f643397312fee8dae51cffc83da7cb49fa0651d89d6f9d81f51057548304220326e6050aa10e51299e4d88edb215262a68e17da89f24a93efe907aeac496600d5e817a52718b431ce76917010f428eb657ddf8a29dcf3f42a6e6d926b8005299ef062328bfacfed87413446a4b8edd637c7822a1414b4c6534aa6ab32f7f6f51b5ffbb50cf37a3dcc32894314cc685264aedb8bf157076269fafdad088689cd23b9732e00d4333cde63f70977ab5c9b8efd6bff3936af2f4dc58131f6495cf6489475848c164726dbbe5de8d97ff721755e47ce89ffbddfcbe4e6c58f3eb882a83114a7f4b56dd4acf886dcde8075a2c410079bd274b729173e5da49b7e0992c320be6080fb82cfd29197c18d7f8c55a94edcb124d485fb0f68fce57a51de44a719e2f1afa5b0aec4ab2df3f3e012d5d2cdddd7a53158478401537d1ab60c126040401db4ffb0aa639c201ddbba2651ec0c44f9997287e4c6f9e3a135f75e7e8b5f6564b24b244ee1d03bcaeb23076d2afcd1b6e1858d5933f85020bb03fafe9e131bad975bc9febe456f465f10d5eb504d01bbf9f377e47da63ee6e71980ea8525b43f1d5bed0a179d41fb9b7a2f2b823ac409486a9a849899de0309c5f18b6c06a8e5bf83f663fdc5e6bf3ed5bc8f869a35c49b30f7c018acb7f61c5d0cfd692c23937a3e7713056431ef55a4f2d8f04d52630d6b5e16903bb16b744c60b6b262ab93aa90f5b1fc7a4a6774dc34e4bc8135c9c58b2e8d8541481da8c2d54e8a72fd6ff769cbe385dc5688e9af658a988fe7bd1578f6719b21083f41207fc039a066d60f0135c5589d1377341154b9f5524f9f41f8f233cdea380e1aaba8b5b520a375288700363595f6677bb1abfe1ff07cee3bab23449fe74683fb2e443adb8b4d7bc7c698273e0c862b410e65a08db5eea59fe2eeb9e8c6f41c8fc611abd468f329d3ae25465b0e164edb0f04e66864b0de1c114f18798530ad7ba1a4cd1be56d5004185822c6ccdf82bcf69c2853ee30bcfa734949ada37118b634cad7ee824f42b8166dc3f3a1f0ccc384b071ab45b714eb81a1e00d02113975de721692637b533841a83c7a88452917d1e8efb31d61e5c959bf43777dac41b0d0d27d783106c1df0db20a4be32a219ca0e44aacd240876eb54997c86ba1e6c6a2320dbcad37db73834ca36a22fde6c0b7c344d1413c394ac62a4c03b642aff53da317dab3b3cf9ac3c7c4c564abc68ea601520492d1c84aae820f9e317b70b85af6521702e12c94ec59e8efccda3a640d041607b962f3ad1f0e1d289189a0e14e20c5e1ced3a2a4508d515509e4d0d6b617fdb718618c9b5b"]}]}]}, 0xa14}, 0x1, 0x0, 0x0, 0x40000}, 0x24000800)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
executing program 32:
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0xa14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x9e8, 0x2, 0x0, 0x1, [@nested={0x9e2, 0x4a, 0x0, 0x1, [@generic="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"]}]}]}, 0xa14}, 0x1, 0x0, 0x0, 0x40000}, 0x24000800)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
executing program 4:
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = fanotify_init$auto(0xe02, 0x1)
r1 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98)
fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22)
read$auto_vhost_vsock_fops_vsock(r0, &(0x7f00000000c0)=""/192, 0xc0)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
r0 = socket(0x2, 0x1, 0x0)
sysfs$auto(0x2, 0x4, 0x0)
getsockopt$auto(r0, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e)
executing program 2:
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 4:
mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x0, 0xa, 0x0, 0x10000)
write$auto(0x3, 0x0, 0x100082)
executing program 1:
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
timer_create$auto(0x9, 0x0, 0x0)
timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10007}, {0x9}}, 0x0)
timer_gettime$auto(0x0, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x8002)
executing program 4:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0)
openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x28400, 0x0)
adjtimex$auto(&(0x7f0000000000)={0xfffffff0, 0x0, 0x7, 0x9c, 0xe1d, 0x3, 0x3, 0x0, 0xfffffffffffffff7, 0x4, 0x80000000004, {0x100000000, 0x2}, 0x8000000252, 0x5, 0x3, 0x1, 0x0, 0x4, 0x9, 0xc578, 0x4, 0x400, 0x7ff})
readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6)
executing program 2:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r1, 0x4004743d, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 3:
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto(0x3, 0x40045613, 0x38)
executing program 1:
ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x2, 0xffff}, 0x5, 0x0, 0x0, 0x8)
msgctl$auto(0x26, 0x400, 0x0)
rseq$auto(&(0x7f00000002c0)={0xe, 0x3ff, 0x0, 0x20006, 0xffffffff, 0x2}, 0xfffffff4, 0x0, 0x7)
write$auto(0xffffffffffffffff, 0x0, 0x200800000000f)
mlockall$auto(0x7)
mlockall$auto(0x7)
executing program 4:
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
socket(0x2, 0x3, 0xa)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(r0, 0x1002, 0x0, 0x0, 0x0, 0x2)
executing program 2:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
executing program 3:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents64$auto(0x0, 0x0, 0x18)
socket(0x2, 0x1, 0x0)
ioctl$auto(0x1, 0x8941, 0x8)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0)
r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 5, 5, 6, 6, 6, 6]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = epoll_create$auto(0x3e)
epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0)
executing program 0:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.max.depth\x00', 0x0, 0x0)
mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_app\x00', 0xc80, 0x0)
read$auto(r0, 0x0, 0x805644)
executing program 0:
shmget$auto(0x400, 0x10563, 0x568c12f2)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3)
shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00')
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={<r1=>r0, 0x7, 0x6}, 0x6, 0x100000)
r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0)
read$auto(r0, &(0x7f0000000100)='netdev\x00', 0x80000001)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003940)={0x14, r2, 0x301, 0x70bd2e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4)
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
tkill$auto(0x1, 0x7)
executing program 0:
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0xa14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x9e8, 0x2, 0x0, 0x1, [@nested={0x9e2, 0x4a, 0x0, 0x1, [@generic="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"]}]}]}, 0xa14}, 0x1, 0x0, 0x0, 0x40000}, 0x24000800)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
executing program 32:
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0xa14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x9e8, 0x2, 0x0, 0x1, [@nested={0x9e2, 0x4a, 0x0, 0x1, [@generic="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"]}]}]}, 0xa14}, 0x1, 0x0, 0x0, 0x40000}, 0x24000800)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
executing program 4:
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = fanotify_init$auto(0xe02, 0x1)
r1 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98)
fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22)
read$auto_vhost_vsock_fops_vsock(r0, &(0x7f00000000c0)=""/192, 0xc0)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
r0 = socket(0x2, 0x1, 0x0)
sysfs$auto(0x2, 0x4, 0x0)
getsockopt$auto(r0, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e)
executing program 2:
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 2:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <10>
bisect: split chunk #0 of len 10 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 6, 6, 6, 6]
detailed listing:
executing program 0:
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0xa14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x9e8, 0x2, 0x0, 0x1, [@nested={0x9e2, 0x4a, 0x0, 0x1, [@generic="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"]}]}]}, 0xa14}, 0x1, 0x0, 0x0, 0x40000}, 0x24000800)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
executing program 32:
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0xa14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x9e8, 0x2, 0x0, 0x1, [@nested={0x9e2, 0x4a, 0x0, 0x1, [@generic="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"]}]}]}, 0xa14}, 0x1, 0x0, 0x0, 0x40000}, 0x24000800)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
executing program 4:
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = fanotify_init$auto(0xe02, 0x1)
r1 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98)
fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22)
read$auto_vhost_vsock_fops_vsock(r0, &(0x7f00000000c0)=""/192, 0xc0)
executing program 4:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
r0 = socket(0x2, 0x1, 0x0)
sysfs$auto(0x2, 0x4, 0x0)
getsockopt$auto(r0, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e)
executing program 2:
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
executing program 2:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 5, 5, 5, 6]
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = epoll_create$auto(0x3e)
epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0)
executing program 0:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.max.depth\x00', 0x0, 0x0)
mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_app\x00', 0xc80, 0x0)
read$auto(r0, 0x0, 0x805644)
executing program 0:
shmget$auto(0x400, 0x10563, 0x568c12f2)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3)
shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00')
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={<r1=>r0, 0x7, 0x6}, 0x6, 0x100000)
r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0)
read$auto(r0, &(0x7f0000000100)='netdev\x00', 0x80000001)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003940)={0x14, r2, 0x301, 0x70bd2e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4)
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
tkill$auto(0x1, 0x7)
executing program 2:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: general protection fault in hci_devcd_register
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <5>
bisect: split chunk #0 of len 5 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 6]
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={<r1=>r0, 0x7, 0x6}, 0x6, 0x100000)
r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0)
read$auto(r0, &(0x7f0000000100)='netdev\x00', 0x80000001)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003940)={0x14, r2, 0x301, 0x70bd2e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4)
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
tkill$auto(0x1, 0x7)
executing program 2:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: general protection fault in hci_devcd_register
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 6]
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
tkill$auto(0x1, 0x7)
executing program 2:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 2 programs left: 

executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
tkill$auto(0x1, 0x7)
executing program 2:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)


bisect: trying to concatenate
bisect: concatenate 2 entries
minimizing program #0 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 6]
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
executing program 2:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 6]
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
tkill$auto(0x1, 0x7)
executing program 2:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 6]
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
tkill$auto(0x1, 0x7)
executing program 2:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6]
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
executing program 2:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6]
detailed listing:
executing program 0:
tkill$auto(0x1, 0x7)
executing program 2:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: lost connection to test machine
minimized 5 calls -> 1 calls
minimizing program #1 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 5]
detailed listing:
executing program 0:
tkill$auto(0x1, 0x7)
executing program 0:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 5]
detailed listing:
executing program 0:
tkill$auto(0x1, 0x7)
executing program 0:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0xe)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 5]
detailed listing:
executing program 0:
tkill$auto(0x1, 0x7)
executing program 0:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 4]
detailed listing:
executing program 0:
tkill$auto(0x1, 0x7)
executing program 0:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: WARNING: ODEBUG bug in hci_release_dev
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 3]
detailed listing:
executing program 0:
tkill$auto(0x1, 0x7)
executing program 0:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: general protection fault in hci_devcd_register
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 2]
detailed listing:
executing program 0:
tkill$auto(0x1, 0x7)
executing program 0:
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
minimized 6 calls -> 3 calls
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): tkill$auto-mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
tkill$auto(0x1, 0x7)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
bisect: concatenated prog does not crash
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
single: successfully extracted reproducer
found reproducer with 3 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
write$auto(0xffffffffffffffff, 0x0, 0xe)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)

program crashed: KASAN: slab-use-after-free Read in force_devcd_write
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_force_devcoredump_fops_hci_vhci-write$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
reproducing took 1h43m34.731454995s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327
Read of size 8 at addr ffff888028229800 by task syz.0.616/6658

CPU: 0 UID: 0 PID: 6658 Comm: syz.0.616 Not tainted 6.14.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327
 full_proxy_write+0x13c/0x200 fs/debugfs/file.c:398
 vfs_write+0x24c/0x1150 fs/read_write.c:677
 ksys_write+0x12b/0x250 fs/read_write.c:731
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3cddd8cda9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffec66888a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f3cddfa5fa0 RCX: 00007f3cddd8cda9
RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007f3cdde0e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f3cddfa5fa0 R14: 00007f3cddfa5fa0 R15: 0000000000001d62
 </TASK>

Allocated by task 5969:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 vhci_open+0x4c/0x430 drivers/bluetooth/hci_vhci.c:634
 misc_open+0x35a/0x420 drivers/char/misc.c:179
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x735/0x1c40 fs/open.c:955
 vfs_open+0x82/0x3f0 fs/open.c:1085
 do_open fs/namei.c:3830 [inline]
 path_openat+0x1e88/0x2d80 fs/namei.c:3989
 do_filp_open+0x20c/0x470 fs/namei.c:4016
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1427
 do_sys_open fs/open.c:1442 [inline]
 __do_sys_openat fs/open.c:1458 [inline]
 __se_sys_openat fs/open.c:1453 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1453
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 5969:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4609 [inline]
 kfree+0x2c4/0x4d0 mm/slub.c:4757
 vhci_release+0xbb/0xf0 drivers/bluetooth/hci_vhci.c:670
 __fput+0x3ff/0xb70 fs/file_table.c:448
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x2576/0x2610 kernel/signal.c:3036
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff888028229800
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 0 bytes inside of
 freed 1024-byte region [ffff888028229800, ffff888028229c00)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28228
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88801b041dc0 ffffea0000cc9a00 dead000000000002
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88801b041dc0 ffffea0000cc9a00 dead000000000002
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000003 ffffea0000a08a01 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 11, tgid 11 (kworker/u8:0), ts 272486059714, free_ts 272326929603
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551
 prep_new_page mm/page_alloc.c:1559 [inline]
 get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3477
 __alloc_frozen_pages_noprof+0x221/0x2470 mm/page_alloc.c:4739
 alloc_pages_mpol+0x1fc/0x540 mm/mempolicy.c:2270
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2587 [inline]
 new_slab+0x23d/0x330 mm/slub.c:2640
 ___slab_alloc+0xbfa/0x1600 mm/slub.c:3826
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916
 __slab_alloc_node mm/slub.c:3991 [inline]
 slab_alloc_node mm/slub.c:4152 [inline]
 __do_kmalloc_node mm/slub.c:4293 [inline]
 __kmalloc_noprof+0x2de/0x4f0 mm/slub.c:4306
 kmalloc_noprof include/linux/slab.h:905 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 neigh_alloc net/core/neighbour.c:473 [inline]
 ___neigh_create+0x152b/0x2900 net/core/neighbour.c:607
 ip6_finish_output2+0x1308/0x2090 net/ipv6/ip6_output.c:132
 __ip6_finish_output net/ipv6/ip6_output.c:215 [inline]
 ip6_finish_output+0x3f9/0x1360 net/ipv6/ip6_output.c:226
 NF_HOOK_COND include/linux/netfilter.h:303 [inline]
 ip6_output+0x1f8/0x540 net/ipv6/ip6_output.c:247
 dst_output include/net/dst.h:459 [inline]
 NF_HOOK include/linux/netfilter.h:314 [inline]
 ndisc_send_skb+0xa69/0x1c50 net/ipv6/ndisc.c:511
 ndisc_send_rs+0x129/0x670 net/ipv6/ndisc.c:721
 addrconf_dad_completed+0x4a1/0x1060 net/ipv6/addrconf.c:4356
 addrconf_dad_work+0x84e/0x14e0 net/ipv6/addrconf.c:4264
page last free pid 5952 tgid 5952 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x6db/0xfb0 mm/page_alloc.c:2660
 vfree+0x174/0x950 mm/vmalloc.c:3383
 kcov_put kernel/kcov.c:439 [inline]
 kcov_put+0x2a/0x40 kernel/kcov.c:435
 kcov_close+0xd/0x20 kernel/kcov.c:535
 __fput+0x3ff/0xb70 fs/file_table.c:448
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x2576/0x2610 kernel/signal.c:3036
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff888028229700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888028229780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888028229800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff888028229880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888028229900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327
Read of size 8 at addr ffff888028229800 by task syz.0.616/6658

CPU: 0 UID: 0 PID: 6658 Comm: syz.0.616 Not tainted 6.14.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:489
 kasan_report+0xd9/0x110 mm/kasan/report.c:602
 force_devcd_write+0x31f/0x350 drivers/bluetooth/hci_vhci.c:327
 full_proxy_write+0x13c/0x200 fs/debugfs/file.c:398
 vfs_write+0x24c/0x1150 fs/read_write.c:677
 ksys_write+0x12b/0x250 fs/read_write.c:731
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3cddd8cda9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffec66888a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f3cddfa5fa0 RCX: 00007f3cddd8cda9
RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007f3cdde0e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f3cddfa5fa0 R14: 00007f3cddfa5fa0 R15: 0000000000001d62
 </TASK>

Allocated by task 5969:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:901 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 vhci_open+0x4c/0x430 drivers/bluetooth/hci_vhci.c:634
 misc_open+0x35a/0x420 drivers/char/misc.c:179
 chrdev_open+0x237/0x6a0 fs/char_dev.c:414
 do_dentry_open+0x735/0x1c40 fs/open.c:955
 vfs_open+0x82/0x3f0 fs/open.c:1085
 do_open fs/namei.c:3830 [inline]
 path_openat+0x1e88/0x2d80 fs/namei.c:3989
 do_filp_open+0x20c/0x470 fs/namei.c:4016
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1427
 do_sys_open fs/open.c:1442 [inline]
 __do_sys_openat fs/open.c:1458 [inline]
 __se_sys_openat fs/open.c:1453 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1453
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 5969:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2353 [inline]
 slab_free mm/slub.c:4609 [inline]
 kfree+0x2c4/0x4d0 mm/slub.c:4757
 vhci_release+0xbb/0xf0 drivers/bluetooth/hci_vhci.c:670
 __fput+0x3ff/0xb70 fs/file_table.c:448
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x2576/0x2610 kernel/signal.c:3036
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff888028229800
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 0 bytes inside of
 freed 1024-byte region [ffff888028229800, ffff888028229c00)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28228
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88801b041dc0 ffffea0000cc9a00 dead000000000002
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88801b041dc0 ffffea0000cc9a00 dead000000000002
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000003 ffffea0000a08a01 ffffffffffffffff 0000000000000000
head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 11, tgid 11 (kworker/u8:0), ts 272486059714, free_ts 272326929603
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x181/0x1b0 mm/page_alloc.c:1551
 prep_new_page mm/page_alloc.c:1559 [inline]
 get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3477
 __alloc_frozen_pages_noprof+0x221/0x2470 mm/page_alloc.c:4739
 alloc_pages_mpol+0x1fc/0x540 mm/mempolicy.c:2270
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2587 [inline]
 new_slab+0x23d/0x330 mm/slub.c:2640
 ___slab_alloc+0xbfa/0x1600 mm/slub.c:3826
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3916
 __slab_alloc_node mm/slub.c:3991 [inline]
 slab_alloc_node mm/slub.c:4152 [inline]
 __do_kmalloc_node mm/slub.c:4293 [inline]
 __kmalloc_noprof+0x2de/0x4f0 mm/slub.c:4306
 kmalloc_noprof include/linux/slab.h:905 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 neigh_alloc net/core/neighbour.c:473 [inline]
 ___neigh_create+0x152b/0x2900 net/core/neighbour.c:607
 ip6_finish_output2+0x1308/0x2090 net/ipv6/ip6_output.c:132
 __ip6_finish_output net/ipv6/ip6_output.c:215 [inline]
 ip6_finish_output+0x3f9/0x1360 net/ipv6/ip6_output.c:226
 NF_HOOK_COND include/linux/netfilter.h:303 [inline]
 ip6_output+0x1f8/0x540 net/ipv6/ip6_output.c:247
 dst_output include/net/dst.h:459 [inline]
 NF_HOOK include/linux/netfilter.h:314 [inline]
 ndisc_send_skb+0xa69/0x1c50 net/ipv6/ndisc.c:511
 ndisc_send_rs+0x129/0x670 net/ipv6/ndisc.c:721
 addrconf_dad_completed+0x4a1/0x1060 net/ipv6/addrconf.c:4356
 addrconf_dad_work+0x84e/0x14e0 net/ipv6/addrconf.c:4264
page last free pid 5952 tgid 5952 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x6db/0xfb0 mm/page_alloc.c:2660
 vfree+0x174/0x950 mm/vmalloc.c:3383
 kcov_put kernel/kcov.c:439 [inline]
 kcov_put+0x2a/0x40 kernel/kcov.c:435
 kcov_close+0xd/0x20 kernel/kcov.c:535
 __fput+0x3ff/0xb70 fs/file_table.c:448
 task_work_run+0x14e/0x250 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x2576/0x2610 kernel/signal.c:3036
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff888028229700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888028229780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888028229800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff888028229880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888028229900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================