Warning: Permanently added '[localhost]:18876' (ECDSA) to the list of known hosts. 2025/11/15 22:02:40 fuzzer started 2025/11/15 22:02:40 dialing manager at localhost:37161 syzkaller login: [ 60.527005] cgroup: Unknown subsys name 'net' [ 60.600984] cgroup: Unknown subsys name 'cpuset' [ 60.632958] cgroup: Unknown subsys name 'rlimit' 2025/11/15 22:02:51 syscalls: 202 2025/11/15 22:02:51 code coverage: enabled 2025/11/15 22:02:51 comparison tracing: enabled 2025/11/15 22:02:51 extra coverage: enabled 2025/11/15 22:02:51 setuid sandbox: enabled 2025/11/15 22:02:51 namespace sandbox: enabled 2025/11/15 22:02:51 Android sandbox: enabled 2025/11/15 22:02:51 fault injection: enabled 2025/11/15 22:02:51 leak checking: enabled 2025/11/15 22:02:51 net packet injection: enabled 2025/11/15 22:02:51 net device setup: enabled 2025/11/15 22:02:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/15 22:02:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/15 22:02:51 USB emulation: enabled 2025/11/15 22:02:51 hci packet injection: enabled 2025/11/15 22:02:51 wifi device emulation: enabled 2025/11/15 22:02:51 802.15.4 emulation: enabled 2025/11/15 22:02:51 fetching corpus: 0, signal 0/0 (executing program) 2025/11/15 22:02:52 starting 8 fuzzer processes 22:02:52 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40081, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x80000000, 0x5}) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000080)) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000000c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/udplite\x00') r2 = syz_open_dev$loop(&(0x7f0000000140), 0xb2, 0x400000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000180)={0x1000, 0x800}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r3, 0x0, r0, 0x5}) modify_ldt$read(0x0, &(0x7f0000000280)=""/186, 0xba) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x5, 0x7, 0x82}, {0x4, 0x53, 0x81, 0x10000}]}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x680000, 0x0) openat$cgroup_ro(r4, &(0x7f0000000400)='cpu.stat\x00', 0x0, 0x0) r5 = socket(0x21, 0x2, 0x53) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000440)={r3, 0x1, r5, 0x0, 0x80000}) recvmsg$unix(r5, &(0x7f0000000c80)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f0000000580)=""/125, 0x7d}, {&(0x7f0000000600)=""/204, 0xcc}, {&(0x7f0000000700)=""/81, 0x51}, {&(0x7f0000000780)=""/110, 0x6e}, {&(0x7f0000000800)=""/60, 0x3c}, {&(0x7f0000000840)=""/200, 0xc8}, {&(0x7f0000000940)=""/206, 0xce}, {&(0x7f0000000a40)=""/62, 0x3e}], 0xa, &(0x7f0000000b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}, 0x2000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000cc0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000d40)={r7, 0x3, 0x1}) 22:02:52 executing program 1: r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0xe0, 0x56, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x4, 0x20, 0x54}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x40, 0x2, 0x4b, 0x8, 0xe}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "a8c6ecbcda42e2933208477478d889f1"}]}, 0x6, [{0x102, &(0x7f00000000c0)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x807}}, {0x101, &(0x7f0000000240)=@string={0x101, 0x3, "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"}}, {0xe8, &(0x7f0000000380)=@string={0xe8, 0x3, "62f398f331c5ef5148c020a0e75953cb14ab1beaa5655e2916bc63bba58601e77fa952db0b273c348c32845d18333fb2ae6440b4399ee315dd1feba77773ba8187c18c7a2bf766ea99c27f225390cc20f3c41f1b0c6af45d3e7f02c485019f8c646402f7f004cf68395a189cb852f4997701209eecfec1e00c763fb69a6436ac8981dd509453e23cec1cbb0a84a85f18c0f7b7e0c400a18a8411c3cc24625062c37a291c2115121e426ca43d63bdf5104dc109f79dd6c8c8ed1de77e0c5841d4efe23e98bc41f56e30296b5c0c87776dad8ff98bbe29c2011533edc5c5fa2483a9f843a9d009"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3006}}, {0x15, &(0x7f00000004c0)=@string={0x15, 0x3, "c93782bcfef8e06c2822667934f14675bdea66"}}]}) syz_usb_connect$uac1(0x6, 0xd5, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x3, 0x1, 0x5, 0x20, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x2e86, 0xd3, "8f8fee02cf"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x9, 0x1002}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5b, 0x2, 0xff, 0x6, "63b27ca1d3"}, @as_header={0x7, 0x24, 0x1, 0xbe, 0x5, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x7, 0x8c, {0x7, 0x25, 0x1, 0x1, 0x6, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x40, 0x3, 0x7, 0x7f}, @as_header={0x7, 0x24, 0x1, 0xc2, 0x20}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x4, 0x4, 0x6, "ec9b11", "0133"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xff, 0x3, 0x40, 0x40, "892b", "27f8bd"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xff8, 0x81, 0x4, "ef78"}, @as_header={0x7, 0x24, 0x1, 0x35, 0xe0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x81, 0x1, 0xc0, {0x7, 0x25, 0x1, 0x80, 0x6, 0x1}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x300, 0x40, 0x0, 0x6, 0x20, 0xff}, 0x2d, &(0x7f00000006c0)={0x5, 0xf, 0x2d, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "505968050c8c78728ae014973c88f625"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0x5, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0xe, 0x1}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x447}}, {0x6b, &(0x7f0000000740)=@string={0x6b, 0x3, "38af4d8d3fed8e32dae81f89d6b2e02684dd596d09e8eca5bbab38d625446d2df2991beaa1fcdb222bca7e077e765363bd1b2620d82a78fa3c25db1b57461187495d1c03b6493dbd6098407bf06020a10953a97d7f26af5ace177238a3daaf2a96634c2bcee2fb9d3b"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0xe1, &(0x7f0000000800)=@string={0xe1, 0x3, "7e560a93bff0fa96ebb3f9d343c576a3f00dad1fc55ed4455ccc3754a88c25002b8bfa1f0b3108dc8fb38ad77a2b36e5956116bceda98fabea4746d35a2cc778cf4d0281abf7c057580a2a62cd0b06f1d8b13043c714de5ba79f264a529613da505b29f3874f01ad699d62091386e20e136ce0183e8707c5ed725fa2722611924770cb25641410e1f56eceec7c0704368453b3199c8a4d9a7c73982477b1a26ea4cbf46d31cd2be1188c362b211493e639289916d37783b25076db85654a2255725e253e304488e817b00e46c076a4c2a9120b7a399bc24b1cab121345dd12"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc287, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x90, 0xff, [{{0x9, 0x4, 0x0, 0x44, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x8000, 0xeb, 0x1, {0x22, 0xec0}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8d, 0x8, 0x1}}}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x200, 0x8, 0x0, 0x8a, 0x10, 0x6}, 0x5, &(0x7f0000000a40)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x401}}, {0xaa, &(0x7f0000000bc0)=@string={0xaa, 0x3, "a0f8ba7685324ed7d3f8087f77c064684b5624807351d74dcc811be17653bcf986d141833bc70a921d3997ce65961a5a6a836ed69a8e88bd83eb5faba12dd0e317905b44c55d80237a29006dc61b73425baca166bcc7a4764ac2936b5239f759fcf9c98580e04218e6315ba1bca94d4a706093e8064fc7f69e240c4d1acca4bbdbdf65ca1e939ca290ce4c0ba59c7e5069db15055813fb0fe035bc2d7e988fd2f5b271213ead1eb6"}}, {0x8, &(0x7f0000000c80)=@string={0x8, 0x3, "7a179572f33d"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x1404}}]}) syz_usb_control_io$printer(r0, &(0x7f0000000ec0)={0x14, &(0x7f0000000d80)={0x0, 0x31, 0xac, {0xac, 0x21, "f65bf10ac9969d4a68968e88304e1c1e15826d6eb93e8e445190446f18fae3fd153d9f175bf64494bc69bf10ae2dc32419504287efa11ea84c1996a91aadce97b911ce8f5cb1a4dffefa5728f0a82f603480271378229f6395f631d27caf81d5d2eeedd82a14a5a41ba6e2d1763298f18b33c40dee2b30a9fcf2f312f8f5482ba03d3a342b6ca0812e37f219ce8ddee5fa3ce23060c8edfb64010f1e2e658ac925ab9d0d166d3afbc442"}}, &(0x7f0000000e40)={0x0, 0x3, 0x4a, @string={0x4a, 0x3, "e7e445397c2b4c5ce84662bf79f2e3ec20684ee2cea1e36307730fb5b7a8f989059e602103250e55bd470896a4baa07df25d9e83310f73b8641be794c82eccf085d449e99038bf00"}}}, &(0x7f00000011c0)={0x34, &(0x7f0000000f00)={0x40, 0x8, 0x9a, "760e5d46fd9c854fe4bf6bdd86c2467aa0a035c812b7e8a31e4a7ec26c62808396ceba44e8a5f87f13f4c63a22c7c1841d346eb73687ce6f4485d4686225587c1e4b16e724ad1734deb0a8939e0fe291e9e1a4987c7a7e867eb0e86c72d60211f9304e2f7c79130ca948bde2e537bf0ba1949a29ceca3e54a7f0bc3e49cadc92d16bafd07058091f3499ee02a2256f890bff65a900a5f757821a"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001040)={0x20, 0x0, 0xec, {0xea, "17b536cb4d6073a89f33a6d2ca2ad8f43fade78cbe7ed4c23aae38bc94e88f905c097347652dab63f11b0d64753a2a28fa03a52b6b5a28c57a70d0e82899428efdb69a4777dd7ec54af6a41405d891e1139f2d846eda98b087d7e40d4dd1610cc43a5499fd9cca4b3307dda952a238039f4e9b80e2dfd5418a80d5f1f69050787614fdefe3ab109f39c736e0770c200f1486e704cbea54f693b9723455a5352ebcb564edccb3c9b4b37a7c40651e652066d2369eee8f19ac27872c0d2f0b03aed49acffeefdf44bc4f8775a0bfc0e82b078d46d31f844e1b02e62956928ddbec826b15d68f8c51cc34ef"}}, &(0x7f0000001140)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x8}}) syz_usb_connect(0x1, 0x1a0, &(0x7f0000001200)={{0x12, 0x1, 0x200, 0xc4, 0x11, 0x13, 0xff, 0x1114, 0x1, 0x1d2a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18e, 0x1, 0x0, 0x58, 0x40, 0xff, [{{0x9, 0x4, 0x23, 0x7, 0xa, 0x45, 0x7f, 0xb9, 0x5, [], [{{0x9, 0x5, 0x4877db864ee8ad23, 0x10, 0x20, 0x7f, 0x0, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x5, 0xa, 0xff}}, {{0x9, 0x5, 0x5, 0x11, 0x200, 0x81, 0x6, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x81, 0x1f, 0x1, [@generic={0x5c, 0x11, "45b73ffc20cdc8689be1086b50709d5fdd60fd207256d477fce70870174bd638aa003ce1d47495ceb7f6029eadde495bde22de4c99e81eedee859f79372b4c0c59131c571a397b6f407a46da31566ea68db701a440e417e93e9c"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x1, 0x40, 0x3f}}, {{0x9, 0x5, 0xf, 0x1, 0x3ff, 0x75, 0x5, 0x9, [@generic={0x3e, 0x6, "72359f5413ff9ea75d63f8c0eb93435c873bfb838be33055e4a355bf9509c95d6b21c867b63c1a33c0b33a7e380d2c2716b606302a58ece9ee098979"}, @generic={0x6c, 0xe, "fa2bc972cff98ae57eeec57848a1ba131d15ef0d987b53929c3676943b224f45cf158f2536f64340e7710e9ca2c1ea436a65c7548207d19352efd79c24c2a5f305138fb9d5d644a02bc59cbcea948c3c560f20a3b40a13845ed0a22925d9ec7867e1d0b3e768e60dcc33"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0xda, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x1, 0x20, 0x4, 0x6, 0x10}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x81, 0xb3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x1000}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x5, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x3f}]}}]}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f00000013c0)={0xa, 0x6, 0x300, 0x7, 0x1, 0x5, 0x10, 0x8}, 0x31, &(0x7f0000001400)={0x5, 0xf, 0x31, 0x4, [@generic={0x9, 0x10, 0xa, "91208ecd12b1"}, @ptm_cap={0x3}, @generic={0x14, 0x10, 0x5f7ebea49046143c, "48cd7c8c31ddeb6eb0b3a833a9bdb8691b"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x422ee63, 0xf000, 0x400}]}, 0x5, [{0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x6e, &(0x7f0000001500)=@string={0x6e, 0x3, "8816dae3cdb68d7e018096237b43240c72b1e8c721d3b24a8c6c4268127801d4fb15a5a67ca2e67e08351072521184741629bae32074894d3233d03f4728886b34bfdfed0cdf1add7891f43594f806833daa99f46bb07088bb42482ac3582aa9b6f1810b1e51b41629473037"}}, {0x18, &(0x7f0000001580)=@string={0x18, 0x3, "d239100e919251ae6c3705c6b48ee3e5b05fdab9abf3"}}]}) syz_usb_connect$uac1(0x1, 0xe7, &(0x7f0000001640)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x4, 0x60, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff, 0x20}, [@selector_unit={0xa, 0x24, 0x5, 0x5, 0x4, "cfe026d2e3"}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0x20, '+'}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x301, 0x1, 0x6, 0x2}, @mixer_unit={0xa, 0x24, 0x4, 0x3, 0x6, "5e51bf9df1"}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x1, 0x1f, "4c80a4"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6d, 0x20, 0x20, {0x7, 0x25, 0x1, 0x0, 0x1, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x3, 0x2, 0x1, "3e8135"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0x9, 0x7f, "bcd3ff"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x4, 0x2, 0x40, "a3c55e", "aad24b"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x0, 0x1, 0x8, 0x4, "0e2538", "c93729"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x20, 0x81, "a5f3fbdaa3"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x3, 0xbe, 0x9, 'Z'}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x10, 0x4}}}}}}}]}}, &(0x7f0000001a00)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x110, 0xff, 0x40, 0x80, 0x8, 0x1}, 0x1f, &(0x7f0000001780)={0x5, 0xf, 0x1f, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x0, 0xf88f, 0x81, [0xffc030]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x5, 0xb69}]}, 0x5, [{0x4a, &(0x7f00000017c0)=@string={0x4a, 0x3, "5e3ee6d6af7bfcdad723436f2ddb4408d4aab3655fca00cd6f1427b407c824ffd09317e6da93aadd27a20434032f5f13a05aed699e78ac82f20ae9cc21d0752ab4c5cbaa3a7cc2f5"}}, {0x78, &(0x7f0000001840)=@string={0x78, 0x3, "8c84ab71679505058071532670509297897b3cecc279e2af2149a57b23c523aa339afa003cf384f07cdd9f9ae0cedf9e5685e636b8f3079de179677c99bc51c8bedcdf8053d18a8e574e0a9e699fc0ef82e81b37e8f456d2e344a690cd975cd9acad8bbe45948348e86163cf8e528b4bea6d0550aa1f"}}, {0x99, &(0x7f00000018c0)=@string={0x99, 0x3, "9596772fe8acdccd4b3a5c18e0472124c1212150da849e2db672dce25d2485b4dc16e739999948ac7ae8f3c9e93f014ef1843ab0a808b8e6c8f90f5618fed08b8b8abde4583d614ef78603bb6308e085bdce934025dd8ee338c085ac4769840874d652a8e973c604b2cce2a5cf830bd2db4e4788a2234449a76bd8fb3c75a8f191d1c7bccc7a513b80963fb3ae0dd0a88e805166e5fdd8"}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x827}}]}) syz_usb_connect$uac1(0x3, 0x7e, &(0x7f0000001a80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x3, 0x1, 0x7f, 0x90, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1000, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x6, 0x6, 0x0, "71308b58"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xe6, 0xbb, 0x47, {0x7, 0x25, 0x1, 0x0, 0x4, 0xe84}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2b, 0x1, 0x8, {0x7, 0x25, 0x1, 0x1, 0x2, 0x6}}}}}}}]}}, &(0x7f0000001e80)={0xa, &(0x7f0000001b00)={0xa, 0x6, 0x300, 0x1, 0x2, 0x2b, 0x8, 0xd1}, 0xf, &(0x7f0000001b40)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x3, 0x6, 0x3}]}, 0x6, [{0x6e, &(0x7f0000001b80)=@string={0x6e, 0x3, "cca7656f06964f37d4436a5f90719cabeeb07a666def2faae7a8ccd1ef7e412a06ac1dd0f2fc68ae76b6e3af0d73c38ae2127924894080cd7bcb50dcac1a16503f23a1699c741d29677d0ec1d448b71e01339261f2a773b57683bc760049ecb8199764285b52f8efdc5862cf"}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x407}}, {0xda, &(0x7f0000001c40)=@string={0xda, 0x3, "54517ccf4308f0d93bc9ef918f027ce2f75edfe8f73c14aa0e0c3912ffbae22213a60cf351b250cc99215fd04c8b766e2271c6362ebc67c270505140e884e326e3a9d57fba09f8890725f396b3163a52bd32a159ce701d5374067cf506a4c337131cfe3b91a376aa9d1b1425332c584873a1a3874ffddbf5feeab74ded3d565028f46a7cd1ef6d3f29e063c4e38719a27d4cb3d8d9e46a95a175c51f9420c360cd2843e9aefef9e6377d21d1f80f2fa5766011145bd00d3f6ca37d3965ecb7eb8d3658f7e6898f94df5bca59c38c9f571998654e3d5a99e7"}}, {0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000001d80)=@lang_id={0x4, 0x3, 0x2009}}, {0x8b, &(0x7f0000001dc0)=@string={0x8b, 0x3, "d214a0b5445e04030ddce546c42c362501c509fb3ebe65b1ceca9aed4a51369ff45e35a9f9a070636b386efbc74f6c0c116f6c751a0553ea1e4488bf7609a9f27b032b93d85f63d1f705406177afe221e699dd5a7e7df61195efb7243d895ff2cb85fb3359b46f7f07b943759308cef4a8391773fb2dca5207d3598642c63685ea24bd70ac1eadf13e"}}]}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001f00)='cgroup.freeze\x00', 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002700)=[{{&(0x7f0000001f40)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000001fc0)=""/219, 0xdb}], 0x1, &(0x7f0000002100)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x120}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002240)=""/10, 0xa}, {&(0x7f0000002280)=""/86, 0x56}, {&(0x7f0000002300)=""/180, 0xb4}, {&(0x7f00000023c0)=""/9, 0x9}, {&(0x7f0000002400)=""/223, 0xdf}, {&(0x7f0000002500)=""/77, 0x4d}, {&(0x7f0000002580)=""/212, 0xd4}], 0x7}}], 0x2, 0x0, &(0x7f0000002780)={0x77359400}) write$P9_RGETATTR(r1, &(0x7f00000027c0)={0xa0, 0x19, 0x1, {0x40, {0x20, 0x1, 0x1}, 0xc0, 0xffffffffffffffff, r3, 0x0, 0x5, 0x6515, 0x0, 0x5, 0x84, 0x0, 0x3, 0x480000, 0x5, 0x9, 0x1, 0x6, 0x1, 0x40}}, 0xa0) io_setup(0x1, &(0x7f0000002880)=0x0) io_getevents(r4, 0x8, 0x7, &(0x7f00000028c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000029c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xdfc, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xd0, 0x1d, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x7f, {0x9, 0x21, 0x3b9, 0x1, 0x1, {0x22, 0xf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x260, 0x2, 0x2, 0xf9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0x5, 0x9}}]}}}]}}]}}, &(0x7f0000002ec0)={0xa, &(0x7f0000002a00)={0xa, 0x6, 0x201, 0x9, 0xff, 0x3f, 0x50, 0x4}, 0x4a, &(0x7f0000002a40)={0x5, 0xf, 0x4a, 0x5, [@generic={0x4, 0x10, 0x2, "d8"}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x9, 0xf00f, 0x1, [0x0, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x1567f26f09c06b76, 0x6, 0x15, 0x28, 0xef16}, @wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0xca, 0x8, 0x7f}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x2, 0x110f, 0x7, [0xff3f30, 0xff0030, 0xf]}]}, 0x9, [{0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x423}}, {0x80, &(0x7f0000002b00)=@string={0x80, 0x3, "c599f2f6bb4ed7dba1259b6c09a919488d37ce8c2dc5121f238e038c4c80f3dc713e4df8bca55b017800786cbb360e38b5293a87b658cb834b38a1395aba2d3c183479f2466d6fd4e13092f62576a76cef54d828f34330ceac5878107cee942d5b382cc62fadaedabfd429ac3063cf76a969e453b5d5c6d42670b84d13fd"}}, {0xdf, &(0x7f0000002b80)=@string={0xdf, 0x3, "46f11d055c9e3fe001410e3ca6987f89b9f948280daf8ca722da94e78b7b325888ab6a606feb3c4fc274becb9a57f29172694c380d884ae948a1148a41b138c5c93d81f063f4d56b9299e92bad7839a02415c62d29be1c48ff9b26d5723981c93b6acb49062dc28575099f15a35959045d20368704241ab8168d42203d1146232b801c47b9f0e95ec476ce3ea587fca99045781fb8025a493e7b69d8ee00006429702cec1e5046e6e36b2a88f64a21c47a555b5364b976d46d0e57906cff8a7bd53330c66a14a73e6de4b52c5f6640ec01e0855c95c0d68e2475084ee5"}}, {0xd3, &(0x7f0000002c80)=@string={0xd3, 0x3, "36b86d6e50cc94c522c3694b32e7c78e23c5f571af2634b5eab749b90df4cd5b9dc4e360035e3d9e7617ae0247061efc1a34b9c0db6606843979df23770a3b17bdf2812e29f7e1a549e69960621bebe9d46f60b160ab6e474d7a0aa9b71b492af1025ebebd5fb9cfd5e415de38e756a9cac365e8cde29bcb1abdb9e921ad9a8ee88ac8fb37705050490af4b501c537f5190de94a0b13cc60999aec5af9835f9bb2aebce2ef833ad4971d793c94e3aef895d704537fac6c0257ff6f85b03a737209c9f8681cbca7f9fdc4338f0b7b65dddc"}}, {0x4, &(0x7f0000002d80)=@lang_id={0x4, 0x3, 0x41c}}, {0x38, &(0x7f0000002dc0)=@string={0x38, 0x3, "aa10fa7b5dd7eb34f053bab341f7cff514191ae8b184b940967034301a92f2f85937a84fb861feba5b4298ce8e51dc1d517d7eac5c56"}}, {0x4, &(0x7f0000002e00)=@lang_id={0x4, 0x3, 0x240a}}, {0x2a, &(0x7f0000002e40)=@string={0x2a, 0x3, "2aa36dea253ef5e91ce26bc3226d73f495aa262721101b013cb8f7ccb330e37c3a4d8c6cee15ea53"}}, {0x4, &(0x7f0000002e80)=@lang_id={0x4, 0x3, 0x42c}}]}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000002f80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x5a, [{{0x9, 0x4, 0x0, 0x14, 0x1, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0x5, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x7, 0x7}}]}}}]}}]}}, &(0x7f0000003280)={0xa, &(0x7f0000002fc0)={0xa, 0x6, 0x200, 0x7, 0x3f, 0x4, 0xc7668f502a81ed81, 0x1}, 0x5, &(0x7f0000003000)={0x5, 0xf, 0x5}, 0x5, [{0x89, &(0x7f0000003040)=@string={0x89, 0x3, "e53126e29b9de77c5c01955e0d0aab0730300362fc05ed07e0fcd37f0915184099372f6b75a39e5ae6026fc01aeea2e97c206e706359049abe01a67d52dd817aeeab997ba621e25549439eaf49566c137fffc14fdeb5c9572a3afb3021f7eec9c8dbec9135b7596f216d242c1a70cf7d1bd2e901aeec78784794cc11285a84e2e93437b4f9f0a6"}}, {0x7, &(0x7f0000003100)=@string={0x7, 0x3, "c274ba54b7"}}, {0x65, &(0x7f0000003140)=@string={0x65, 0x3, "5b0fc2c68a5f7c31685b666ee4d4262c2cb4a9eacebd7df14aae7bf2a868e73d0bd0535d24e7e4cd43aef264d63824634c84ff94ccd135e843f9734510b63a5ad20915d40536ddaafa3597ddae327ef3678507fa3374b707985807ebf34ee298bc5bdd"}}, {0x4, &(0x7f00000031c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x5c, &(0x7f0000003200)=@string={0x5c, 0x3, "2ebf86026ca1d8c425ff7b8f3cfe3f102da7b1b3ddf59c82b8078d0aa2e2debf44ec8927db78194dbb9df9c7382f0e34bff4500b5d3d02de45ca28165c86ea67d98015ab94bcc6da0c5d58e757ca1a73ddae7444d604f84e56f4"}}]}) clock_getres(0x4, &(0x7f0000003300)) syz_usb_connect$uac1(0x2, 0xef, &(0x7f0000003340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x3, 0x1, 0x0, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x7f}, [@selector_unit={0xa, 0x24, 0x5, 0x6, 0x1f, "9e5ec1a293"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x80, 0x6}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0x2, 0x3, "c0"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x3, 0x5, 0x4}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x2, 0x1f, "6074fc"}, @mixer_unit={0x6, 0x24, 0x4, 0x1, 0x8, "89"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0x88, 0xcb, "417987", 'P'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0x6fc0, 0x8, "c52ad0456c6206"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x1f, 0x3}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x40, 0x1, 0x7f, 0x3f, '8'}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x81, 0x8c, 0x2, {0x7, 0x25, 0x1, 0x1, 0x80, 0xe691}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0xff, 0x5, "c2577563eee966"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x0, 0x3, 0x2, 0x5, "155b14", "395dc9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x6, 0x6, {0x7, 0x25, 0x1, 0x1, 0x6, 0xfffe}}}}}}}]}}, &(0x7f0000003680)={0xa, &(0x7f0000003440)={0xa, 0x6, 0x310, 0x20, 0x2e, 0x80, 0x40, 0x3}, 0xfd, &(0x7f0000003480)={0x5, 0xf, 0xfd, 0x1, [@generic={0xf8, 0x10, 0x4, "96170205ea700b72cbdbe3f675732f13dd2c01b11562e731028d080e512751c30af4e13d588fda5dc27907c6e1ee1b0ee60c9e79765184be3c98b1629a2ba7d8d905aed94e15a5ca9a7c834c92ed42e42ddeb9ab83a31d18566c38a9d8c76095df984c91c99c9fdfa9d7961bfb3dbfd3851efdfb333074415acf6c91aa40dc40ffcaed094f14f290d4d836c654e7c72b17e844199e0ba599d9dbf92d12c2c0a5c1a3519d00769f5434795855ecb1252921bcd86a8f8b181f18849fb05e5e5e86222748aacb2d4ef16c13571d630874ebfa9830ea43337235a398c93b40b9e8e5a6a63ba051f1651dffc9a95171c31a6e56bdbe0727"}]}, 0x2, [{0x4, &(0x7f0000003580)=@lang_id={0x4, 0x3, 0x814}}, {0x83, &(0x7f00000035c0)=@string={0x83, 0x3, "282f94fb3daa180708d2421e87654f7607e3b9184064b6d9ace1c917e0948f88d9d11bde141eb84bd475ad85af13854df72473c590c6a1d3fbb711f17050c08260c3151c8b1894e3eb0febb4832a66d3f4fcd002272424d130de0e8e0c75ae83a62eb465f520a7b4c3e59bd69c57c53a1eb1ca3e7fad640a7a1d037e0296c1ce1c"}}]}) r5 = syz_usb_connect$printer(0x1, 0x36, &(0x7f00000036c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3f, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x8, 0xfe, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0x0, 0x40}}]}}}]}}]}}, &(0x7f0000003ac0)={0xa, &(0x7f0000003700)={0xa, 0x6, 0x310, 0x1f, 0x9, 0x7f, 0x20, 0x2}, 0x8, &(0x7f0000003740)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000003780)=@lang_id={0x4, 0x3, 0x40c}}, {0xd6, &(0x7f00000037c0)=@string={0xd6, 0x3, "566645786959d913d3653295ea0d961c19fa9eef3b4c6e3076270d6439292332f542b14a2966bb8723cf715e09fb51f9a9ac9a8fb829be3e94462b0f94b998bc73c07dd6fae7400d99f0ffb4265481bd1f52db855844164d272335bdd237c2276062b91b5b095a19dc70de1240fef199107cce6d952be1bec51f7ec9a6ea7624bdfb20658258e494f0f8df3a2ffa330654196d41e804237a4ea2d27671c6aee1e02809e6191c16fe11540aac6678857da056fb953b4d8cd1433733edd0a75644a94ceaaeba66cbbc21ae71bfbdbb0f86468fcda7"}}, {0x4, &(0x7f00000038c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000003900)=@lang_id={0x4, 0x3, 0x1c01}}, {0xb8, &(0x7f0000003940)=@string={0xb8, 0x3, "1d152d8f8b977df00d44516968355e8a493ab75cb8ff9cd38b70a242eb2783b42e9641b7aeeb1bcb30e58afb50ff7562ad8c4b4876fdfbd02bc77e02bfa1d98f8c3ed44d75f0b6b5abed3ea14cff705250e7ef5f1d881d16af683c6c97d5ca24b46768569b4ffd52b240fe0ce9c761901327a5c4739de17e3d34164da72cada13658350572f7aa6a57e6d6acae59de8e209920baaf6b9523316f415a92dc9282b1b7fa53a80b8db45a6ea08a91ef1d36848009b8c128"}}, {0x64, &(0x7f0000003a00)=@string={0x64, 0x3, "b5d7c09cf54efa43220365b711476306a61a46bab1589bc4631bcf27afe57a1c3f6f72b12476546fb65b7c83384d8c785f61f5f47da98b291fd892d906812afb15cfcc4e27b8d7acdfaa7f06c9a923edffaceb7e74f94fc060a4d714c5aed9152f01"}}, {0x4, &(0x7f0000003a80)=@lang_id={0x4}}]}) syz_usb_ep_read(r5, 0x8, 0x3b, &(0x7f0000003b40)=""/59) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000003bc0)={&(0x7f0000003b80)=""/54, 0x36}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003d00)={&(0x7f0000003c80)={0x78, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000000}, 0x41) 22:02:52 executing program 2: write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x75, 0x1, {0x15, "4457c5879db614f61e7c5eeeb494e5154f2419bb26"}}, 0x20) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffff) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xffffffffffffffc1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/249, 0xf9}, {&(0x7f00000001c0)=""/123, 0x7b}], 0x2, &(0x7f0000000280)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x2000) ioctl$BTRFS_IOC_GET_FEATURES(r7, 0x80189439, &(0x7f0000000380)) ioctl$LOOP_SET_DIRECT_IO(r6, 0x4c08, 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x78957bd1}}, './file0\x00'}) write$bt_hci(r11, &(0x7f0000000400)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x92, 0x6, 0x6, 0x7f, "44017c32f1ed5841536cc82e5c81db4781f6e27411e598507d95a48ebbad52"}}}, 0x27) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) setsockopt$bt_hci_HCI_FILTER(r13, 0x0, 0x2, &(0x7f00000004c0)={0x5, [0x1, 0x6d], 0x800}, 0x10) r14 = openat$cgroup_ro(r3, &(0x7f00000006c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r14, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x40001) r15 = syz_open_procfs(r4, &(0x7f0000000800)='net/rt6_stats\x00') recvmmsg$unix(r8, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000840)=""/179, 0xb3}, {&(0x7f0000000900)=""/151, 0x97}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/42, 0x2a}, {&(0x7f0000002a00)=""/16, 0x10}, {&(0x7f0000002a40)=""/148, 0x94}, {&(0x7f0000002b00)=""/232, 0xe8}], 0x8, &(0x7f0000002c80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x1, 0x2142, &(0x7f0000002d40)={0x77359400}) write$P9_RGETATTR(r15, &(0x7f0000002d80)={0xa0, 0x19, 0x1, {0x21, {0x0, 0x4, 0x7}, 0x4, r5, r16, 0x7, 0x6, 0x7, 0x40, 0x80000001, 0x2, 0x80000001, 0x4755, 0x7, 0x34d3, 0x8000, 0x3, 0xff, 0x7f, 0x5}}, 0xa0) write$bt_hci(r1, &(0x7f0000002e40)={0x1, @accept_logical_link={{0x439, 0x21}, {0xc9, {0x0, 0xd1, 0x3, 0x10000, 0x7fffffff, 0x2}, {0xec, 0x6, 0xfffe, 0x10001, 0x0, 0x3}}}}, 0x25) syz_open_dev$vcsu(&(0x7f0000002e80), 0xd3a, 0x420000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000002ec0)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) ioctl$LOOP_GET_STATUS64(r17, 0x4c05, &(0x7f0000002f00)) 22:02:52 executing program 7: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, 0xa, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}]}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bond0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x20}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3a}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ip_tables_names\x00') sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x62}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9c62}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(r2, &(0x7f0000007100)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000580)=""/51, 0x33}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/183, 0xb7}, {&(0x7f0000000780)=""/159, 0x9f}, {&(0x7f0000000840)=""/118, 0x76}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000000940)=""/150, 0x96}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f0000000b00)=""/13, 0xd}], 0x9, &(0x7f0000000c00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x90}}, {{&(0x7f0000000cc0), 0x6e, &(0x7f0000003080)=[{&(0x7f0000000d40)=""/90, 0x5a}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/125, 0x7d}, {&(0x7f0000001e40)=""/67, 0x43}, {&(0x7f0000001ec0)=""/113, 0x71}, {&(0x7f0000001f40)=""/121, 0x79}, {&(0x7f0000001fc0)=""/51, 0x33}, {&(0x7f0000002000)=""/127, 0x7f}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x9, &(0x7f0000003140)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000003180)=""/167, 0xa7}], 0x1, &(0x7f0000003280)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000003340), 0x6e, &(0x7f0000003580)=[{&(0x7f00000033c0)=""/103, 0x67}, {&(0x7f0000003440)=""/86, 0x56}, {&(0x7f00000034c0)=""/161, 0xa1}], 0x3}}, {{&(0x7f00000035c0), 0x6e, &(0x7f0000004800)=[{&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/146, 0x92}, {&(0x7f0000004700)=""/252, 0xfc}], 0x3}}, {{&(0x7f0000004840)=@abs, 0x6e, &(0x7f0000005ac0)=[{&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f00000058c0)=""/248, 0xf8}, {&(0x7f00000059c0)=""/108, 0x6c}, {&(0x7f0000005a40)=""/116, 0x74}], 0x4, &(0x7f0000005b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005b40), 0x6e, &(0x7f0000005e00)=[{&(0x7f0000005bc0)=""/69, 0x45}, {&(0x7f0000005c40)=""/150, 0x96}, {&(0x7f0000005d00)=""/248, 0xf8}], 0x3, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000005f80)=@abs, 0x6e, &(0x7f00000070c0)=[{&(0x7f0000006000)=""/30, 0x1e}, {&(0x7f0000006040)=""/4096, 0x1000}, {&(0x7f0000007040)=""/80, 0x50}], 0x3}}], 0x8, 0x40002121, &(0x7f0000007300)) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000007340), 0x286040, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000007380)={0x0, 0x3, r7, 0xa710, 0x80000}) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000074c0)={&(0x7f00000073c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007480)={&(0x7f0000007400)={0x78, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14}]}, 0x78}, 0x1, 0x0, 0x0, 0x20044000}, 0x48080) r9 = eventfd2(0x769df480, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000007500)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000007600)={&(0x7f0000007540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000075c0)={&(0x7f0000007580)={0x28, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x800) 22:02:52 executing program 3: prctl$PR_CAPBSET_DROP(0x18, 0x22) prctl$PR_GET_THP_DISABLE(0x2a) setfsuid(0xffffffffffffffff) ioprio_set$uid(0x0, 0xee01, 0x2007) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x0, 0x0, 0x40, @mcast1, @private0, 0x80, 0x0, 0x8, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f00000001c0)={0x5dc, 0x0, 0x20a, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7644, 0xd8, 0x43, 0x7fffffff}, {0x899e, 0xd4, 0x9, 0x5}]}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7aaa30ca}}}]}}, {{0x8, 0x1, r0}, {0xc4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xfff9, 0x4c, 0x8, 0x2}, {0xc, 0x36, 0x0, 0x4}, {0x20, 0xfc, 0x9, 0x2}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1ff, 0x1, 0x84, 0xffffff90}]}}}]}}, {{0x8, 0x1, r1}, {0x220, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xed7c}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x80, 0x7, 0x3, 0xe494}, {0x6, 0x7e, 0x0, 0x6}, {0x2, 0x0, 0x9, 0x3}, {0x2, 0x3, 0x9, 0xffffffe1}, {0x1ff, 0x16, 0x6, 0x4}, {0x1000, 0x80, 0x0, 0x80}, {0x2, 0xbb, 0x2, 0x1}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x20000002}, 0x40044) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000900)={'sit0\x00', r1, 0x29, 0xff, 0x7f, 0x7ff, 0xa, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x7800, 0x6, 0x6}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000009c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000a00)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl1\x00', r3, 0x29, 0x0, 0x1f, 0x3f, 0x4, @mcast2, @private0, 0x7, 0x1f, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000b40)={'syztnl2\x00', r2, 0x29, 0x7f, 0x8, 0x303, 0x23, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x8000, 0x8000, 0x2, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'syztnl0\x00', r0, 0x4, 0x82, 0x67, 0x20, 0x0, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x700, 0x800, 0x5}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f0000000cc0)={0x688, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x108, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r1}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2513}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}, {{0x8, 0x1, r1}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8, 0x1, r1}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfe6}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x688}, 0x1, 0x0, 0x0, 0x4000811}, 0x4010) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000001400)) write$bt_hci(0xffffffffffffffff, &(0x7f0000001440)={0x1, @write_auth_payload_to={{0xc7c, 0x4}, {0xc9, 0xf52}}}, 0x8) 22:02:52 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2, 0xc1, 0xd5, 0xfffffffe}, {0xffff, 0x8, 0x3, 0x3}]}) keyctl$session_to_parent(0x12) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0xd4fa, 0x840c0) ioctl$SNAPSHOT_FREE(r1, 0x3305) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0xc00, 0x17, 0x11, 0x22}]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x6, &(0x7f00000001c0)=0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x800) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0xa301, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) io_submit(r3, 0x3, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x6, r4, &(0x7f0000000240)="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", 0xfa, 0x10000, 0x0, 0x0, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000003c0)="0b6cc3486691da3de5f6db13c6964dfd3d4203ea1d293f221e5501d2ab2794daec2fea053494cfbf6da44782dc2e7bfc9f084512970ef6219e048f927dfc2d038ead682c9542335f641bf3c3e0d4ce000253b9b52c7e407457ff4872b5becf9d63e38e7f8d4dbef045557f07ab2404d052f2d2a2a9a9df54b27b29e65bba78ae", 0x80, 0x3, 0x0, 0x1, r1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000480)="515211345b50a4badbaf5e58cd9fa4cb3e41feb7fffe322ed72b0b3db6895138c3dd64842b42ca8c77bdc4b6b1e094b33d50ce72879ed1318fc9fb3a9d39a8306edad52e72b23cf32c3b0bf28c712d2dfc963ba9332c6efb6f152919c8d9b840566dc8113ab82e22c118b38eb4a5d277f039ece07b39d731cecff279fa7338040223f032bf7d4faf68b8fcee14363ec1574f1977c32f4dc7fd3d26bcb2b8", 0x9e, 0x8, 0x0, 0x2, r6}]) io_setup(0x8, &(0x7f0000000600)) accept$unix(r1, 0x0, &(0x7f0000000640)) write$bt_hci(r5, &(0x7f0000000680)={0x1, @read_link_policy={{0x80c, 0x2}, {0xc8}}}, 0x6) socketpair(0x5, 0x1, 0xfffffffb, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r7, &(0x7f0000001ec0)=[{{&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000780)=""/234, 0xea}, {&(0x7f0000000880)=""/66, 0x42}, {&(0x7f0000000900)=""/153, 0x99}, {&(0x7f00000009c0)=""/174, 0xae}, {&(0x7f0000000a80)=""/212, 0xd4}, {&(0x7f0000000b80)=""/217, 0xd9}], 0x6, &(0x7f0000000d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000000dc0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000e40)=""/18, 0x12}, {&(0x7f0000000e80)=""/4096, 0x1000}], 0x2}}], 0x2, 0x0, &(0x7f0000001f40)) timerfd_gettime(0xffffffffffffffff, &(0x7f0000001f80)) ioctl$LOOP_SET_FD(r9, 0x4c00, r8) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000001fc0)=0x3ff) [ 71.032715] audit: type=1400 audit(1763244172.142:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:02:52 executing program 5: io_getevents(0x0, 0x0, 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x0) clock_gettime(0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000100)={0x3, 0x1, 0x9, 0x513, 0x1, 0xd6, 0x3, 0x6}, &(0x7f0000000140)={0x1dce, 0x1, 0x577b, 0x5, 0x9, 0x3f, 0x1}, &(0x7f0000000180)={0x400, 0x6, 0x2, 0x2, 0x5, 0x9, 0x2, 0xe23}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x4]}, 0x8}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/148, 0x94}], 0x1, &(0x7f0000000380)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/155, 0x9b}, {&(0x7f0000000480)=""/205, 0xcd}, {&(0x7f0000000580)=""/20, 0x14}], 0x3, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000680), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000008c0)=""/224, 0xe0}, {&(0x7f00000009c0)=""/41, 0x29}, {&(0x7f0000000a00)=""/231, 0xe7}, {&(0x7f0000000b00)=""/85, 0x55}], 0x6, &(0x7f0000000c00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x160}}, {{&(0x7f0000000d80), 0x6e, &(0x7f0000001040)=[{&(0x7f0000000e00)=""/102, 0x66}, {&(0x7f0000000e80)=""/50, 0x32}, {&(0x7f0000000ec0)=""/235, 0xeb}, {&(0x7f0000000fc0)=""/104, 0x68}, {0xfffffffffffffffd}], 0x5, &(0x7f00000010c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000001200), 0x6e, &(0x7f0000001640)=[{&(0x7f0000001280)=""/130, 0x82}, {&(0x7f0000001340)=""/215, 0xd7}, {&(0x7f0000001440)=""/102, 0x66}, {&(0x7f00000014c0)=""/181, 0xb5}, {&(0x7f0000001580)=""/120, 0x78}, {&(0x7f0000001600)=""/44, 0x2c}], 0x6, &(0x7f00000016c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000001780), 0x6e, &(0x7f0000001800), 0x0, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000001980), 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001a00)=""/42, 0x2a}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/79, 0x4f}, {&(0x7f0000001bc0)=""/17, 0x11}, {&(0x7f0000001c00)=""/134, 0x86}, {&(0x7f0000001cc0)=""/76, 0x4c}], 0x6, &(0x7f0000001dc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001f00)=""/108, 0x6c}, {&(0x7f0000001f80)=""/127, 0x7f}, {&(0x7f0000002000)=""/150, 0x96}, {&(0x7f00000020c0)=""/151, 0x97}, {&(0x7f0000002180)=""/176, 0xb0}], 0x5}}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000022c0)=""/1, 0x1}, {&(0x7f0000002300)=""/182, 0xb6}], 0x2, &(0x7f0000002400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x9, 0x1, &(0x7f00000026c0)) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000002700)) sched_rr_get_interval(r2, &(0x7f0000002740)) pselect6(0x40, &(0x7f0000002780)={0x1, 0xffffffffffffff12, 0x2, 0x6668, 0x84e4, 0x3, 0x8, 0x6665}, &(0x7f00000027c0)={0x4, 0x7, 0x7, 0xfffffffffffffffd, 0x3, 0x100, 0x9b, 0x3}, &(0x7f0000002800)={0x3f, 0x823e, 0x6, 0x0, 0xc95, 0x9, 0x5c6, 0x1}, &(0x7f0000002840), &(0x7f00000028c0)={&(0x7f0000002880)={[0xffffffff]}, 0x8}) recvmmsg$unix(r4, &(0x7f0000005740)=[{{&(0x7f0000002900), 0x6e, &(0x7f0000003c40)=[{&(0x7f0000002980)=""/41, 0x29}, {&(0x7f00000029c0)=""/73, 0x49}, {&(0x7f0000002a40)=""/201, 0xc9}, {&(0x7f0000002b40)=""/160, 0xa0}, {&(0x7f0000002c00)=""/24, 0x18}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x6, &(0x7f0000003cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003d80), 0x6e, &(0x7f0000004200)=[{&(0x7f0000003e00)=""/107, 0x6b}, {&(0x7f0000003e80)=""/144, 0x90}, {&(0x7f0000003f40)=""/233, 0xe9}, {&(0x7f0000004040)=""/35, 0x23}, {&(0x7f0000004080)=""/189, 0xbd}, {&(0x7f0000004140)=""/1, 0x1}, {&(0x7f0000004180)=""/99, 0x63}], 0x7, &(0x7f0000004280)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000004340)=@abs, 0x6e, &(0x7f00000045c0)=[{&(0x7f00000043c0)=""/112, 0x70}, {&(0x7f0000004440)=""/190, 0xbe}, {&(0x7f0000004500)=""/164, 0xa4}], 0x3, &(0x7f0000004600)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000004700)=""/198, 0xc6}, {&(0x7f0000004800)=""/21, 0x15}, {&(0x7f0000004840)=""/1, 0x1}, {&(0x7f0000004880)=""/195, 0xc3}, {&(0x7f0000004980)=""/228, 0xe4}, {&(0x7f0000004a80)=""/105, 0x69}], 0x6, &(0x7f0000004b80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004bc0)=@abs, 0x6e, &(0x7f0000005100)=[{&(0x7f0000004c40)=""/224, 0xe0}, {&(0x7f0000004d40)=""/212, 0xd4}, {&(0x7f0000004e40)=""/39, 0x27}, {&(0x7f0000004e80)=""/184, 0xb8}, {&(0x7f0000004f40)=""/207, 0xcf}, {&(0x7f0000005040)=""/149, 0x95}], 0x6, &(0x7f0000005180)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f00000051c0), 0x6e, &(0x7f00000052c0)=[{&(0x7f0000005240)=""/106, 0x6a}], 0x1, &(0x7f0000005300)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{0x0, 0x0, &(0x7f00000054c0)=[{&(0x7f0000005380)=""/186, 0xba}, {&(0x7f0000005440)=""/114, 0x72}], 0x2, &(0x7f0000005500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000005580), 0x6e, &(0x7f00000056c0)=[{&(0x7f0000005600)=""/132, 0x84}], 0x1, &(0x7f0000005700)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x8, 0x20, &(0x7f0000005940)={0x77359400}) recvmmsg$unix(r6, &(0x7f0000009ec0)=[{{&(0x7f0000005980), 0x6e, &(0x7f0000005d00)=[{&(0x7f0000005a00)=""/15, 0xf}, {&(0x7f0000005a40)=""/163, 0xa3}, {&(0x7f0000005b00)=""/130, 0x82}, {&(0x7f0000005bc0)=""/68, 0x44}, {&(0x7f0000005c40)}, {&(0x7f0000005c80)=""/113, 0x71}], 0x6, &(0x7f0000005d80)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000005ec0)=@abs, 0x6e, &(0x7f0000006040)=[{&(0x7f0000005f40)=""/197, 0xc5}], 0x1, &(0x7f0000006080)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000006100)=@abs, 0x6e, &(0x7f0000006400)=[{&(0x7f0000006180)=""/41, 0x29}, {&(0x7f00000061c0)=""/50, 0x32}, {&(0x7f0000006200)=""/204, 0xcc}, {&(0x7f0000006300)=""/249, 0xf9}], 0x4, &(0x7f0000006440)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}}, {{&(0x7f00000064c0), 0x6e, &(0x7f0000006900)=[{&(0x7f0000006540)=""/1, 0x1}, {&(0x7f0000006580)=""/248, 0xf8}, {&(0x7f0000006680)=""/19, 0x13}, {&(0x7f00000066c0)=""/191, 0xbf}, {&(0x7f0000006780)=""/139, 0x8b}, {&(0x7f0000006840)=""/190, 0xbe}], 0x6, &(0x7f0000006980)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000006a00)=@abs, 0x6e, &(0x7f0000009e40)=[{&(0x7f0000006a80)=""/44, 0x2c}, {&(0x7f0000006ac0)=""/4096, 0x1000}, {&(0x7f0000007ac0)=""/100, 0x64}, {&(0x7f0000007b40)=""/205, 0xcd}, {&(0x7f0000007c40)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/252, 0xfc}, {&(0x7f0000008d40)=""/219, 0xdb}, {&(0x7f0000008e40)=""/4096, 0x1000}], 0x8}}], 0x5, 0x10020, &(0x7f000000a000)={0x0, 0x3938700}) clock_gettime(0x0, &(0x7f000000a040)={0x0, 0x0}) clock_settime(0x5, &(0x7f000000a080)={r9, r10+10000000}) r11 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x1ff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f000000a280)={0xac, 0x0, &(0x7f000000a180)=[@dead_binder_done, @free_buffer, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}, @exit_looper, @release={0x40046306, 0x4}, @free_buffer={0x40086303, r11}, @dead_binder_done, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f000000a0c0)={@flat=@handle={0x73682a85, 0x1}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @fda={0x66646185, 0x2, 0x1, 0x2c}}, &(0x7f000000a140)={0x0, 0x18, 0x30}}}], 0x31, 0x0, &(0x7f000000a240)="46fe0e2d81e0b699ec874bc063fef57d17ea63a7a70842fe98b200b77c13cfe3f13c76d60aeb31d50ed6053376bd484282"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f000000a2c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$HCIINQUIRY(r12, 0x800448f0, &(0x7f000000a300)={0x4, 0x800, "026c28", 0x0, 0x2}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000a400)={&(0x7f000000a340)={0x10, 0x0, 0x0, 0x81000081}, 0xc, &(0x7f000000a3c0)={&(0x7f000000a380)={0x28, 0x0, 0x501, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4) nanosleep(&(0x7f000000a440)={0x0, 0x989680}, &(0x7f000000a480)) clock_gettime(0x0, &(0x7f000000a580)={0x0, 0x0}) pselect6(0x40, &(0x7f000000a4c0)={0xff, 0xfff, 0x100000000, 0x1, 0x3e, 0x5, 0x7f, 0x5}, &(0x7f000000a500)={0x0, 0x0, 0x8, 0x101, 0x4, 0x80000000000000, 0x1, 0x3}, &(0x7f000000a540)={0xff, 0x0, 0x3, 0x1, 0xff, 0x5, 0x20, 0x7}, &(0x7f000000a5c0)={r13, r14+10000000}, &(0x7f000000a640)={&(0x7f000000a600)={[0x8000]}, 0x8}) clock_getres(0x0, &(0x7f000000a680)) 22:02:52 executing program 6: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, 0xffffffffffffffff, 0x3270e9c0}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4}, 0x6) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x5efe) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000000c0)) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0xe, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000300)='net/anycast6\x00') recvmmsg$unix(r2, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f00000003c0)=""/162, 0xa2}, {&(0x7f0000000480)=""/211, 0xd3}, {&(0x7f0000000580)=""/64, 0x40}, {&(0x7f00000005c0)=""/2, 0x2}, {&(0x7f0000000600)=""/36, 0x24}, {&(0x7f0000000640)=""/69, 0x45}, {&(0x7f00000006c0)=""/11, 0xb}, {&(0x7f0000000700)=""/49, 0x31}], 0x9, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000840)}, {&(0x7f0000000880)=""/159, 0x9f}], 0x2, &(0x7f0000000980)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/250, 0xfa}], 0x1, &(0x7f0000000b80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000cc0)=""/110, 0x6e}, {&(0x7f0000000d40)=""/244, 0xf4}], 0x2, &(0x7f0000000e80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}}], 0x4, 0x40000100, &(0x7f00000010c0)={0x0, 0x3938700}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) write$snapshot(r7, &(0x7f0000001140)="6a3a2d9a6b157e81666d25f8b6d19264d2ca0dfb80bfe0857cbac56048d6a78a2d46f05e47905b44ccc10db277344ac93dfabebfc37ce7eff045cab55b277c377f720cc5b645d9e1b268db0b7029b2b1f12325b078af6d2adab1b5891f72567fa083f807955201931ce31d6a3788e18ceab1233b4cb2bca09437662b562ffb5683e1a3d8f8fba1df3304dd5bef172e9061e28fd31086368c74dc1cdc310d89ad1a6406fabf53bb173f378999d787ca8f495cb71927a37b96ec8300f9a7deab023934b22d2e", 0xc5) prctl$PR_SET_FP_MODE(0x2d, 0x3) io_getevents(0x0, 0x200, 0x4, &(0x7f0000001240)=[{}, {}, {}, {}], &(0x7f00000012c0)={0x0, 0x989680}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001300)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x22000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0xe, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40d0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000001440)={{0x1, 0x1, 0x18, r3, {0xe3c4}}, './file0\x00'}) ioctl$LOOP_SET_FD(r9, 0x4c00, r4) [ 72.190002] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.192866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.197461] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.201406] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.204417] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.315837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.320450] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.322258] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.335273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.342601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.400026] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.401616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.404163] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.406505] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.407688] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.410561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.420942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.421889] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.424237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.425443] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.452081] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.467701] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.469631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.472392] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.474333] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.474699] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.479199] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.481284] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.481368] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 72.484855] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 72.486680] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.497667] ================================================================== [ 72.497764] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 72.498723] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 72.500608] Read of size 2 at addr ffff88800bd8f7b8 by task kworker/u11:5/309 [ 72.502130] [ 72.503012] CPU: 1 UID: 0 PID: 309 Comm: kworker/u11:5 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 72.503053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 72.503073] Workqueue: hci5 hci_cmd_work [ 72.503113] Call Trace: [ 72.503123] [ 72.503134] dump_stack_lvl+0xca/0x120 [ 72.503173] print_report+0xcb/0x610 [ 72.503211] ? __virt_addr_valid+0x100/0x5d0 [ 72.503245] ? hci_cmd_work+0x66d/0x6d0 [ 72.503283] ? hci_cmd_work+0x66d/0x6d0 [ 72.503321] kasan_report+0xca/0x100 [ 72.503360] ? hci_cmd_work+0x66d/0x6d0 [ 72.503403] hci_cmd_work+0x66d/0x6d0 [ 72.503443] process_one_work+0x8e1/0x19c0 [ 72.503495] ? __pfx_process_one_work+0x10/0x10 [ 72.503538] ? move_linked_works+0x172/0x270 [ 72.503571] ? assign_work+0x196/0x240 [ 72.503614] worker_thread+0x67e/0xe90 [ 72.503657] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 72.503694] ? __pfx_worker_thread+0x10/0x10 [ 72.503737] kthread+0x3c8/0x740 [ 72.503775] ? __pfx_kthread+0x10/0x10 [ 72.503812] ? ret_from_fork+0x79/0x7a0 [ 72.503842] ? lock_release+0xc8/0x290 [ 72.503887] ? __pfx_kthread+0x10/0x10 [ 72.503926] ret_from_fork+0x67a/0x7a0 [ 72.503955] ? __pfx_ret_from_fork+0x10/0x10 [ 72.503986] ? __switch_to+0x759/0x1060 [ 72.504043] ? __pfx_kthread+0x10/0x10 [ 72.504082] ret_from_fork_asm+0x1a/0x30 [ 72.504132] [ 72.504142] [ 72.525524] Allocated by task 290: [ 72.526017] kasan_save_stack+0x24/0x50 [ 72.526585] kasan_save_track+0x14/0x30 [ 72.527139] __kasan_slab_alloc+0x59/0x70 [ 72.527725] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 72.528458] __alloc_skb+0x2ab/0x370 [ 72.528986] hci_cmd_sync_alloc+0x34/0x300 [ 72.529582] __hci_cmd_sync_sk+0xf7/0x5c0 [ 72.530166] hci_read_dev_class_sync+0x2c/0x170 [ 72.530814] hci_dev_open_sync+0x1874/0x1f60 [ 72.531424] hci_power_on+0xdb/0x5d0 [ 72.531952] process_one_work+0x8e1/0x19c0 [ 72.532556] worker_thread+0x67e/0xe90 [ 72.533108] kthread+0x3c8/0x740 [ 72.533589] ret_from_fork+0x67a/0x7a0 [ 72.534131] ret_from_fork_asm+0x1a/0x30 [ 72.534703] [ 72.534944] Freed by task 308: [ 72.535391] kasan_save_stack+0x24/0x50 [ 72.535951] kasan_save_track+0x14/0x30 [ 72.536514] kasan_save_free_info+0x3a/0x60 [ 72.537120] __kasan_slab_free+0x43/0x70 [ 72.537686] kmem_cache_free+0x26f/0x500 [ 72.538269] kfree_skbmem+0x18a/0x1f0 [ 72.538811] sk_skb_reason_drop+0x10e/0x1b0 [ 72.539408] vhci_read+0x3d5/0x5d0 [ 72.539914] vfs_read+0x1eb/0xc70 [ 72.540409] ksys_read+0x121/0x240 [ 72.540905] do_syscall_64+0xbf/0x430 [ 72.541440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.542150] [ 72.542392] The buggy address belongs to the object at ffff88800bd8f780 [ 72.542392] which belongs to the cache skbuff_head_cache of size 232 [ 72.544182] The buggy address is located 56 bytes inside of [ 72.544182] freed 232-byte region [ffff88800bd8f780, ffff88800bd8f868) [ 72.545873] [ 72.546125] The buggy address belongs to the physical page: [ 72.546914] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xbd8f [ 72.548027] flags: 0x100000000000000(node=0|zone=1) [ 72.548746] page_type: f5(slab) [ 72.549232] raw: 0100000000000000 ffff8880096c78c0 dead000000000122 0000000000000000 [ 72.550326] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 72.551373] page dumped because: kasan: bad access detected [ 72.552166] [ 72.552411] Memory state around the buggy address: [ 72.553077] ffff88800bd8f680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.554055] ffff88800bd8f700: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 72.555038] >ffff88800bd8f780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.556032] ^ [ 72.556738] ffff88800bd8f800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 72.557736] ffff88800bd8f880: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 72.558731] ================================================================== [ 72.559801] Disabling lock debugging due to kernel taint [ 72.563240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.565611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.571276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.577384] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.580803] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 72.581236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.582706] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 72.585660] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.221254] Bluetooth: hci0: command tx timeout [ 74.413205] Bluetooth: hci1: command tx timeout [ 74.477210] Bluetooth: hci3: command tx timeout [ 74.477612] Bluetooth: hci2: command tx timeout [ 74.605199] Bluetooth: hci7: command tx timeout [ 74.605643] Bluetooth: hci4: command tx timeout [ 74.669186] Bluetooth: hci5: command tx timeout [ 74.669588] Bluetooth: hci6: command tx timeout [ 76.270146] Bluetooth: hci0: command tx timeout [ 76.461200] Bluetooth: hci1: command tx timeout [ 76.526141] Bluetooth: hci3: command tx timeout [ 76.526546] Bluetooth: hci2: command tx timeout [ 76.653711] Bluetooth: hci4: command tx timeout [ 76.654153] Bluetooth: hci7: command tx timeout [ 76.717205] Bluetooth: hci6: command tx timeout [ 76.717598] Bluetooth: hci5: command tx timeout [ 78.318014] Bluetooth: hci0: command tx timeout [ 78.509162] Bluetooth: hci1: command tx timeout [ 78.573668] Bluetooth: hci2: command tx timeout [ 78.574081] Bluetooth: hci3: command tx timeout [ 78.701995] Bluetooth: hci4: command tx timeout [ 78.702496] Bluetooth: hci7: command tx timeout [ 78.765236] Bluetooth: hci6: command tx timeout [ 78.765687] Bluetooth: hci5: command tx timeout [ 80.365226] Bluetooth: hci0: command tx timeout [ 80.557437] Bluetooth: hci1: command tx timeout [ 80.621187] Bluetooth: hci3: command tx timeout [ 80.621593] Bluetooth: hci2: command tx timeout [ 80.749209] Bluetooth: hci7: command tx timeout [ 80.749626] Bluetooth: hci4: command tx timeout [ 80.813207] Bluetooth: hci6: command tx timeout [ 80.813637] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 22:02:53 Registers: info registers vcpu 0 RAX=ffff88800d626d00 RBX=ffff88800db54e48 RCX=ffff88800d64b080 RDX=ffff88800d877ad8 RSI=ffff88800d64b000 RDI=0000000000000000 RBP=ffff8880097efcb8 RSP=ffff888016e27928 R8 =0000000000000000 R9 =ffffed1002dc4f17 R10=0000000000000003 R11=0000000000000001 R12=ffff88800d64b000 R13=0000000000000080 R14=0000000000000001 R15=0000000000000286 RIP=ffffffff81b63e36 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555557374400 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f989b787efc CR3=0000000014057000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f989b7fd7c000007f989b7fd7c8 XMM02=00007f989b7fd7e000007f989b7fd7c0 XMM03=00007f989b7fd7c800007f989b7fd7c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000045 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8293dd05 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff88801706f618 R8 =0000000000000000 R9 =ffffed10013ff046 R10=0000000000000045 R11=000000003a555043 R12=0000000000000045 R13=0000000000000010 R14=ffffffff88974780 R15=ffffffff8293dcf0 RIP=ffffffff8293dd5d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe0b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa546ee2170 CR3=000000001d1ee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f0623b827c000007f0623b827c8 XMM02=00007f0623b827e000007f0623b827c0 XMM03=00007f0623b827c800007f0623b827c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000