Warning: Permanently added '[localhost]:14983' (ECDSA) to the list of known hosts. 2025/11/16 23:31:03 fuzzer started 2025/11/16 23:31:03 dialing manager at localhost:37161 syzkaller login: [ 48.385395] cgroup: Unknown subsys name 'net' [ 48.454638] cgroup: Unknown subsys name 'cpuset' [ 48.476313] cgroup: Unknown subsys name 'rlimit' 2025/11/16 23:31:13 syscalls: 2214 2025/11/16 23:31:13 code coverage: enabled 2025/11/16 23:31:13 comparison tracing: enabled 2025/11/16 23:31:13 extra coverage: enabled 2025/11/16 23:31:13 setuid sandbox: enabled 2025/11/16 23:31:13 namespace sandbox: enabled 2025/11/16 23:31:13 Android sandbox: enabled 2025/11/16 23:31:13 fault injection: enabled 2025/11/16 23:31:13 leak checking: enabled 2025/11/16 23:31:13 net packet injection: enabled 2025/11/16 23:31:13 net device setup: enabled 2025/11/16 23:31:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/16 23:31:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/16 23:31:13 USB emulation: enabled 2025/11/16 23:31:13 hci packet injection: enabled 2025/11/16 23:31:13 wifi device emulation: enabled 2025/11/16 23:31:13 802.15.4 emulation: enabled 2025/11/16 23:31:13 fetching corpus: 50, signal 18497/20378 (executing program) 2025/11/16 23:31:13 fetching corpus: 100, signal 34923/38448 (executing program) 2025/11/16 23:31:13 fetching corpus: 150, signal 46914/51923 (executing program) 2025/11/16 23:31:13 fetching corpus: 200, signal 53928/60424 (executing program) 2025/11/16 23:31:13 fetching corpus: 250, signal 62165/70038 (executing program) 2025/11/16 23:31:13 fetching corpus: 300, signal 70030/79162 (executing program) 2025/11/16 23:31:13 fetching corpus: 350, signal 72428/82957 (executing program) 2025/11/16 23:31:14 fetching corpus: 400, signal 77286/89041 (executing program) 2025/11/16 23:31:14 fetching corpus: 450, signal 80802/93779 (executing program) 2025/11/16 23:31:14 fetching corpus: 500, signal 85157/99262 (executing program) 2025/11/16 23:31:14 fetching corpus: 550, signal 87599/102897 (executing program) 2025/11/16 23:31:14 fetching corpus: 600, signal 90517/106974 (executing program) 2025/11/16 23:31:14 fetching corpus: 650, signal 92509/110129 (executing program) 2025/11/16 23:31:14 fetching corpus: 700, signal 95049/113791 (executing program) 2025/11/16 23:31:14 fetching corpus: 750, signal 96695/116582 (executing program) 2025/11/16 23:31:14 fetching corpus: 800, signal 99723/120602 (executing program) 2025/11/16 23:31:14 fetching corpus: 850, signal 101542/123513 (executing program) 2025/11/16 23:31:15 fetching corpus: 900, signal 103319/126328 (executing program) 2025/11/16 23:31:15 fetching corpus: 950, signal 105304/129380 (executing program) 2025/11/16 23:31:15 fetching corpus: 1000, signal 108032/132989 (executing program) 2025/11/16 23:31:15 fetching corpus: 1050, signal 109608/135574 (executing program) 2025/11/16 23:31:15 fetching corpus: 1100, signal 111760/138621 (executing program) 2025/11/16 23:31:15 fetching corpus: 1150, signal 113179/141021 (executing program) 2025/11/16 23:31:15 fetching corpus: 1200, signal 115623/144256 (executing program) 2025/11/16 23:31:15 fetching corpus: 1250, signal 117499/147016 (executing program) 2025/11/16 23:31:15 fetching corpus: 1300, signal 119646/149938 (executing program) 2025/11/16 23:31:16 fetching corpus: 1350, signal 120419/151722 (executing program) 2025/11/16 23:31:16 fetching corpus: 1400, signal 122123/154258 (executing program) 2025/11/16 23:31:16 fetching corpus: 1450, signal 123307/156360 (executing program) 2025/11/16 23:31:16 fetching corpus: 1500, signal 126136/159716 (executing program) 2025/11/16 23:31:16 fetching corpus: 1550, signal 127320/161756 (executing program) 2025/11/16 23:31:16 fetching corpus: 1600, signal 128498/163787 (executing program) 2025/11/16 23:31:16 fetching corpus: 1650, signal 129908/165999 (executing program) 2025/11/16 23:31:16 fetching corpus: 1700, signal 131144/168025 (executing program) 2025/11/16 23:31:16 fetching corpus: 1750, signal 131990/169808 (executing program) 2025/11/16 23:31:16 fetching corpus: 1800, signal 133452/171996 (executing program) 2025/11/16 23:31:16 fetching corpus: 1850, signal 134569/173921 (executing program) 2025/11/16 23:31:17 fetching corpus: 1900, signal 135919/176017 (executing program) 2025/11/16 23:31:17 fetching corpus: 1950, signal 137185/177984 (executing program) 2025/11/16 23:31:17 fetching corpus: 2000, signal 138127/179693 (executing program) 2025/11/16 23:31:17 fetching corpus: 2050, signal 139270/181563 (executing program) 2025/11/16 23:31:17 fetching corpus: 2100, signal 140073/183164 (executing program) 2025/11/16 23:31:17 fetching corpus: 2150, signal 140806/184674 (executing program) 2025/11/16 23:31:17 fetching corpus: 2200, signal 141781/186390 (executing program) 2025/11/16 23:31:17 fetching corpus: 2250, signal 142533/187953 (executing program) 2025/11/16 23:31:17 fetching corpus: 2300, signal 143308/189517 (executing program) 2025/11/16 23:31:17 fetching corpus: 2350, signal 144060/191030 (executing program) 2025/11/16 23:31:17 fetching corpus: 2400, signal 144842/192549 (executing program) 2025/11/16 23:31:18 fetching corpus: 2450, signal 145477/193949 (executing program) 2025/11/16 23:31:18 fetching corpus: 2500, signal 146659/195698 (executing program) 2025/11/16 23:31:18 fetching corpus: 2550, signal 147325/197108 (executing program) 2025/11/16 23:31:18 fetching corpus: 2600, signal 148276/198696 (executing program) 2025/11/16 23:31:18 fetching corpus: 2650, signal 148905/200083 (executing program) 2025/11/16 23:31:18 fetching corpus: 2700, signal 149841/201639 (executing program) 2025/11/16 23:31:18 fetching corpus: 2750, signal 150479/202995 (executing program) 2025/11/16 23:31:18 fetching corpus: 2800, signal 151112/204334 (executing program) 2025/11/16 23:31:18 fetching corpus: 2850, signal 151791/205733 (executing program) 2025/11/16 23:31:18 fetching corpus: 2900, signal 152520/207118 (executing program) 2025/11/16 23:31:18 fetching corpus: 2950, signal 153081/208429 (executing program) 2025/11/16 23:31:18 fetching corpus: 3000, signal 153721/209750 (executing program) 2025/11/16 23:31:19 fetching corpus: 3050, signal 154495/211118 (executing program) 2025/11/16 23:31:19 fetching corpus: 3100, signal 155066/212296 (executing program) 2025/11/16 23:31:19 fetching corpus: 3150, signal 155745/213646 (executing program) 2025/11/16 23:31:19 fetching corpus: 3200, signal 156398/214969 (executing program) 2025/11/16 23:31:19 fetching corpus: 3250, signal 157238/216322 (executing program) 2025/11/16 23:31:19 fetching corpus: 3300, signal 157928/217615 (executing program) 2025/11/16 23:31:19 fetching corpus: 3350, signal 158763/218945 (executing program) 2025/11/16 23:31:19 fetching corpus: 3400, signal 159435/220205 (executing program) 2025/11/16 23:31:19 fetching corpus: 3450, signal 160079/221461 (executing program) 2025/11/16 23:31:20 fetching corpus: 3500, signal 160949/222823 (executing program) 2025/11/16 23:31:20 fetching corpus: 3550, signal 161448/223967 (executing program) 2025/11/16 23:31:20 fetching corpus: 3600, signal 162379/225325 (executing program) 2025/11/16 23:31:20 fetching corpus: 3650, signal 163082/226570 (executing program) 2025/11/16 23:31:20 fetching corpus: 3700, signal 163578/227649 (executing program) 2025/11/16 23:31:20 fetching corpus: 3750, signal 164356/228966 (executing program) 2025/11/16 23:31:20 fetching corpus: 3800, signal 164817/230067 (executing program) 2025/11/16 23:31:20 fetching corpus: 3850, signal 165347/231220 (executing program) 2025/11/16 23:31:20 fetching corpus: 3900, signal 165842/232311 (executing program) 2025/11/16 23:31:21 fetching corpus: 3950, signal 166394/233431 (executing program) 2025/11/16 23:31:21 fetching corpus: 4000, signal 166938/234525 (executing program) 2025/11/16 23:31:21 fetching corpus: 4050, signal 167628/235653 (executing program) 2025/11/16 23:31:21 fetching corpus: 4100, signal 168057/236715 (executing program) 2025/11/16 23:31:21 fetching corpus: 4150, signal 168780/237849 (executing program) 2025/11/16 23:31:21 fetching corpus: 4200, signal 169291/238875 (executing program) 2025/11/16 23:31:21 fetching corpus: 4250, signal 170000/239990 (executing program) 2025/11/16 23:31:21 fetching corpus: 4300, signal 170807/241132 (executing program) 2025/11/16 23:31:21 fetching corpus: 4350, signal 171596/242307 (executing program) 2025/11/16 23:31:21 fetching corpus: 4400, signal 172306/243345 (executing program) 2025/11/16 23:31:21 fetching corpus: 4450, signal 173036/244413 (executing program) 2025/11/16 23:31:22 fetching corpus: 4500, signal 173461/245361 (executing program) 2025/11/16 23:31:22 fetching corpus: 4550, signal 173993/246419 (executing program) 2025/11/16 23:31:22 fetching corpus: 4600, signal 174320/247329 (executing program) 2025/11/16 23:31:22 fetching corpus: 4650, signal 174778/248320 (executing program) 2025/11/16 23:31:22 fetching corpus: 4700, signal 175370/249322 (executing program) 2025/11/16 23:31:22 fetching corpus: 4750, signal 175946/250290 (executing program) 2025/11/16 23:31:22 fetching corpus: 4800, signal 176308/251219 (executing program) 2025/11/16 23:31:22 fetching corpus: 4850, signal 176873/252211 (executing program) 2025/11/16 23:31:22 fetching corpus: 4900, signal 177480/253178 (executing program) 2025/11/16 23:31:22 fetching corpus: 4950, signal 177849/254051 (executing program) 2025/11/16 23:31:23 fetching corpus: 5000, signal 178325/254958 (executing program) 2025/11/16 23:31:23 fetching corpus: 5050, signal 178824/255842 (executing program) 2025/11/16 23:31:23 fetching corpus: 5100, signal 179072/256688 (executing program) 2025/11/16 23:31:23 fetching corpus: 5150, signal 179790/257659 (executing program) 2025/11/16 23:31:23 fetching corpus: 5200, signal 180254/258543 (executing program) 2025/11/16 23:31:23 fetching corpus: 5250, signal 180810/259411 (executing program) 2025/11/16 23:31:23 fetching corpus: 5300, signal 181149/260272 (executing program) 2025/11/16 23:31:23 fetching corpus: 5350, signal 181650/261148 (executing program) 2025/11/16 23:31:23 fetching corpus: 5400, signal 182111/262008 (executing program) 2025/11/16 23:31:23 fetching corpus: 5450, signal 182540/262864 (executing program) 2025/11/16 23:31:24 fetching corpus: 5500, signal 182941/263729 (executing program) 2025/11/16 23:31:24 fetching corpus: 5550, signal 183298/264564 (executing program) 2025/11/16 23:31:24 fetching corpus: 5600, signal 183737/265406 (executing program) 2025/11/16 23:31:24 fetching corpus: 5650, signal 184339/266256 (executing program) 2025/11/16 23:31:24 fetching corpus: 5700, signal 184717/267062 (executing program) 2025/11/16 23:31:24 fetching corpus: 5750, signal 185264/267884 (executing program) 2025/11/16 23:31:24 fetching corpus: 5800, signal 185841/268686 (executing program) 2025/11/16 23:31:24 fetching corpus: 5850, signal 186250/269491 (executing program) 2025/11/16 23:31:24 fetching corpus: 5900, signal 186735/270307 (executing program) 2025/11/16 23:31:24 fetching corpus: 5950, signal 187163/271111 (executing program) 2025/11/16 23:31:25 fetching corpus: 6000, signal 187477/271896 (executing program) 2025/11/16 23:31:25 fetching corpus: 6050, signal 187844/272658 (executing program) 2025/11/16 23:31:25 fetching corpus: 6100, signal 188251/273423 (executing program) 2025/11/16 23:31:25 fetching corpus: 6150, signal 188649/274176 (executing program) 2025/11/16 23:31:25 fetching corpus: 6200, signal 189060/274910 (executing program) 2025/11/16 23:31:25 fetching corpus: 6250, signal 189410/275697 (executing program) 2025/11/16 23:31:25 fetching corpus: 6300, signal 189695/276394 (executing program) 2025/11/16 23:31:25 fetching corpus: 6350, signal 190975/277246 (executing program) 2025/11/16 23:31:25 fetching corpus: 6400, signal 191439/278019 (executing program) 2025/11/16 23:31:25 fetching corpus: 6450, signal 191843/278786 (executing program) 2025/11/16 23:31:26 fetching corpus: 6500, signal 192274/279472 (executing program) 2025/11/16 23:31:26 fetching corpus: 6550, signal 192652/280204 (executing program) 2025/11/16 23:31:26 fetching corpus: 6600, signal 193007/280887 (executing program) 2025/11/16 23:31:26 fetching corpus: 6650, signal 193281/281524 (executing program) 2025/11/16 23:31:26 fetching corpus: 6700, signal 193714/282202 (executing program) 2025/11/16 23:31:26 fetching corpus: 6750, signal 194610/282908 (executing program) 2025/11/16 23:31:26 fetching corpus: 6800, signal 194937/283587 (executing program) 2025/11/16 23:31:26 fetching corpus: 6850, signal 195417/284282 (executing program) 2025/11/16 23:31:26 fetching corpus: 6900, signal 195855/284960 (executing program) 2025/11/16 23:31:26 fetching corpus: 6950, signal 196297/285627 (executing program) 2025/11/16 23:31:26 fetching corpus: 7000, signal 196574/286287 (executing program) 2025/11/16 23:31:27 fetching corpus: 7050, signal 197129/286942 (executing program) 2025/11/16 23:31:27 fetching corpus: 7100, signal 197466/287579 (executing program) 2025/11/16 23:31:27 fetching corpus: 7150, signal 197776/288219 (executing program) 2025/11/16 23:31:27 fetching corpus: 7200, signal 198134/288839 (executing program) 2025/11/16 23:31:27 fetching corpus: 7250, signal 198461/289167 (executing program) 2025/11/16 23:31:27 fetching corpus: 7300, signal 198987/289167 (executing program) 2025/11/16 23:31:27 fetching corpus: 7350, signal 199512/289181 (executing program) 2025/11/16 23:31:27 fetching corpus: 7400, signal 199866/289181 (executing program) 2025/11/16 23:31:27 fetching corpus: 7450, signal 200191/289181 (executing program) 2025/11/16 23:31:27 fetching corpus: 7500, signal 200521/289181 (executing program) 2025/11/16 23:31:27 fetching corpus: 7550, signal 200828/289181 (executing program) 2025/11/16 23:31:28 fetching corpus: 7600, signal 201171/289183 (executing program) 2025/11/16 23:31:28 fetching corpus: 7650, signal 201445/289183 (executing program) 2025/11/16 23:31:28 fetching corpus: 7700, signal 201721/289185 (executing program) 2025/11/16 23:31:28 fetching corpus: 7750, signal 201987/289185 (executing program) 2025/11/16 23:31:28 fetching corpus: 7800, signal 202413/289185 (executing program) 2025/11/16 23:31:28 fetching corpus: 7850, signal 202753/289185 (executing program) 2025/11/16 23:31:28 fetching corpus: 7900, signal 203044/289185 (executing program) 2025/11/16 23:31:28 fetching corpus: 7950, signal 203330/289185 (executing program) 2025/11/16 23:31:28 fetching corpus: 8000, signal 203713/289185 (executing program) 2025/11/16 23:31:28 fetching corpus: 8050, signal 204148/289185 (executing program) 2025/11/16 23:31:28 fetching corpus: 8100, signal 204520/289185 (executing program) 2025/11/16 23:31:28 fetching corpus: 8150, signal 204773/289185 (executing program) 2025/11/16 23:31:29 fetching corpus: 8200, signal 204999/289185 (executing program) 2025/11/16 23:31:29 fetching corpus: 8250, signal 205360/289185 (executing program) 2025/11/16 23:31:29 fetching corpus: 8300, signal 205635/289185 (executing program) 2025/11/16 23:31:29 fetching corpus: 8350, signal 206035/289185 (executing program) 2025/11/16 23:31:29 fetching corpus: 8400, signal 206338/289185 (executing program) 2025/11/16 23:31:29 fetching corpus: 8450, signal 206627/289185 (executing program) 2025/11/16 23:31:29 fetching corpus: 8500, signal 206858/289185 (executing program) 2025/11/16 23:31:29 fetching corpus: 8550, signal 207074/289185 (executing program) 2025/11/16 23:31:29 fetching corpus: 8600, signal 207361/289185 (executing program) 2025/11/16 23:31:29 fetching corpus: 8650, signal 207803/289185 (executing program) 2025/11/16 23:31:29 fetching corpus: 8700, signal 208054/289185 (executing program) 2025/11/16 23:31:30 fetching corpus: 8750, signal 208341/289185 (executing program) 2025/11/16 23:31:30 fetching corpus: 8800, signal 208557/289185 (executing program) 2025/11/16 23:31:30 fetching corpus: 8850, signal 208817/289185 (executing program) 2025/11/16 23:31:30 fetching corpus: 8900, signal 209045/289185 (executing program) 2025/11/16 23:31:30 fetching corpus: 8950, signal 209296/289185 (executing program) 2025/11/16 23:31:30 fetching corpus: 9000, signal 209646/289185 (executing program) 2025/11/16 23:31:30 fetching corpus: 9050, signal 209979/289185 (executing program) 2025/11/16 23:31:30 fetching corpus: 9100, signal 210254/289185 (executing program) 2025/11/16 23:31:30 fetching corpus: 9150, signal 210639/289185 (executing program) 2025/11/16 23:31:30 fetching corpus: 9200, signal 211227/289185 (executing program) 2025/11/16 23:31:30 fetching corpus: 9250, signal 211560/289185 (executing program) 2025/11/16 23:31:31 fetching corpus: 9300, signal 211880/289185 (executing program) 2025/11/16 23:31:31 fetching corpus: 9350, signal 212073/289185 (executing program) 2025/11/16 23:31:31 fetching corpus: 9400, signal 212308/289196 (executing program) 2025/11/16 23:31:31 fetching corpus: 9450, signal 212536/289196 (executing program) 2025/11/16 23:31:31 fetching corpus: 9500, signal 212875/289198 (executing program) 2025/11/16 23:31:31 fetching corpus: 9550, signal 213099/289198 (executing program) 2025/11/16 23:31:31 fetching corpus: 9600, signal 213302/289198 (executing program) 2025/11/16 23:31:31 fetching corpus: 9650, signal 213497/289198 (executing program) 2025/11/16 23:31:31 fetching corpus: 9700, signal 213776/289198 (executing program) 2025/11/16 23:31:32 fetching corpus: 9750, signal 214079/289198 (executing program) 2025/11/16 23:31:32 fetching corpus: 9800, signal 214466/289198 (executing program) 2025/11/16 23:31:32 fetching corpus: 9850, signal 214731/289198 (executing program) 2025/11/16 23:31:32 fetching corpus: 9900, signal 215032/289198 (executing program) 2025/11/16 23:31:32 fetching corpus: 9950, signal 215325/289200 (executing program) 2025/11/16 23:31:32 fetching corpus: 10000, signal 215590/289201 (executing program) 2025/11/16 23:31:32 fetching corpus: 10050, signal 215992/289201 (executing program) 2025/11/16 23:31:32 fetching corpus: 10100, signal 216267/289201 (executing program) 2025/11/16 23:31:32 fetching corpus: 10150, signal 216522/289201 (executing program) 2025/11/16 23:31:33 fetching corpus: 10200, signal 216747/289201 (executing program) 2025/11/16 23:31:33 fetching corpus: 10250, signal 216929/289201 (executing program) 2025/11/16 23:31:33 fetching corpus: 10300, signal 217161/289201 (executing program) 2025/11/16 23:31:33 fetching corpus: 10350, signal 217400/289201 (executing program) 2025/11/16 23:31:33 fetching corpus: 10400, signal 217675/289201 (executing program) 2025/11/16 23:31:33 fetching corpus: 10450, signal 217891/289201 (executing program) 2025/11/16 23:31:33 fetching corpus: 10500, signal 218276/289201 (executing program) 2025/11/16 23:31:33 fetching corpus: 10550, signal 218599/289201 (executing program) 2025/11/16 23:31:33 fetching corpus: 10600, signal 218810/289201 (executing program) 2025/11/16 23:31:34 fetching corpus: 10650, signal 219134/289201 (executing program) 2025/11/16 23:31:34 fetching corpus: 10700, signal 219373/289201 (executing program) 2025/11/16 23:31:34 fetching corpus: 10750, signal 219518/289201 (executing program) 2025/11/16 23:31:34 fetching corpus: 10800, signal 219862/289201 (executing program) 2025/11/16 23:31:34 fetching corpus: 10850, signal 220333/289201 (executing program) 2025/11/16 23:31:34 fetching corpus: 10900, signal 220533/289201 (executing program) 2025/11/16 23:31:34 fetching corpus: 10950, signal 220767/289201 (executing program) 2025/11/16 23:31:34 fetching corpus: 11000, signal 221040/289201 (executing program) 2025/11/16 23:31:34 fetching corpus: 11050, signal 221263/289201 (executing program) 2025/11/16 23:31:34 fetching corpus: 11100, signal 221491/289201 (executing program) 2025/11/16 23:31:34 fetching corpus: 11150, signal 221714/289201 (executing program) 2025/11/16 23:31:35 fetching corpus: 11200, signal 222273/289201 (executing program) 2025/11/16 23:31:35 fetching corpus: 11250, signal 222418/289201 (executing program) 2025/11/16 23:31:35 fetching corpus: 11300, signal 222619/289201 (executing program) 2025/11/16 23:31:35 fetching corpus: 11350, signal 222852/289201 (executing program) 2025/11/16 23:31:35 fetching corpus: 11400, signal 223137/289201 (executing program) 2025/11/16 23:31:35 fetching corpus: 11450, signal 223338/289201 (executing program) 2025/11/16 23:31:35 fetching corpus: 11500, signal 223539/289201 (executing program) 2025/11/16 23:31:35 fetching corpus: 11550, signal 223733/289201 (executing program) 2025/11/16 23:31:35 fetching corpus: 11600, signal 223980/289201 (executing program) 2025/11/16 23:31:35 fetching corpus: 11650, signal 224202/289201 (executing program) 2025/11/16 23:31:36 fetching corpus: 11700, signal 224457/289201 (executing program) 2025/11/16 23:31:36 fetching corpus: 11750, signal 224618/289201 (executing program) 2025/11/16 23:31:36 fetching corpus: 11800, signal 224856/289201 (executing program) 2025/11/16 23:31:36 fetching corpus: 11850, signal 225060/289201 (executing program) 2025/11/16 23:31:36 fetching corpus: 11900, signal 225271/289201 (executing program) 2025/11/16 23:31:36 fetching corpus: 11950, signal 225458/289201 (executing program) 2025/11/16 23:31:36 fetching corpus: 12000, signal 225593/289201 (executing program) 2025/11/16 23:31:36 fetching corpus: 12050, signal 225771/289201 (executing program) 2025/11/16 23:31:36 fetching corpus: 12100, signal 226125/289201 (executing program) 2025/11/16 23:31:36 fetching corpus: 12150, signal 226343/289201 (executing program) 2025/11/16 23:31:36 fetching corpus: 12200, signal 226535/289201 (executing program) 2025/11/16 23:31:36 fetching corpus: 12250, signal 226734/289201 (executing program) 2025/11/16 23:31:37 fetching corpus: 12300, signal 227067/289201 (executing program) 2025/11/16 23:31:37 fetching corpus: 12350, signal 227233/289201 (executing program) 2025/11/16 23:31:37 fetching corpus: 12400, signal 227435/289202 (executing program) 2025/11/16 23:31:37 fetching corpus: 12450, signal 227639/289202 (executing program) 2025/11/16 23:31:37 fetching corpus: 12500, signal 227817/289202 (executing program) 2025/11/16 23:31:37 fetching corpus: 12550, signal 228056/289205 (executing program) 2025/11/16 23:31:37 fetching corpus: 12600, signal 228264/289205 (executing program) 2025/11/16 23:31:37 fetching corpus: 12650, signal 228455/289205 (executing program) 2025/11/16 23:31:37 fetching corpus: 12700, signal 228663/289205 (executing program) 2025/11/16 23:31:37 fetching corpus: 12750, signal 228831/289205 (executing program) 2025/11/16 23:31:37 fetching corpus: 12800, signal 228995/289205 (executing program) 2025/11/16 23:31:38 fetching corpus: 12850, signal 229295/289205 (executing program) 2025/11/16 23:31:38 fetching corpus: 12900, signal 229498/289205 (executing program) 2025/11/16 23:31:38 fetching corpus: 12950, signal 229674/289205 (executing program) 2025/11/16 23:31:38 fetching corpus: 13000, signal 229853/289205 (executing program) 2025/11/16 23:31:38 fetching corpus: 13050, signal 229987/289205 (executing program) 2025/11/16 23:31:38 fetching corpus: 13100, signal 230138/289205 (executing program) 2025/11/16 23:31:38 fetching corpus: 13150, signal 230359/289205 (executing program) 2025/11/16 23:31:38 fetching corpus: 13200, signal 230571/289205 (executing program) 2025/11/16 23:31:38 fetching corpus: 13250, signal 230699/289205 (executing program) 2025/11/16 23:31:38 fetching corpus: 13300, signal 230824/289205 (executing program) 2025/11/16 23:31:38 fetching corpus: 13350, signal 230995/289205 (executing program) 2025/11/16 23:31:39 fetching corpus: 13400, signal 231207/289224 (executing program) 2025/11/16 23:31:39 fetching corpus: 13450, signal 231398/289224 (executing program) 2025/11/16 23:31:39 fetching corpus: 13500, signal 231554/289224 (executing program) 2025/11/16 23:31:39 fetching corpus: 13550, signal 231752/289224 (executing program) 2025/11/16 23:31:39 fetching corpus: 13600, signal 231873/289224 (executing program) 2025/11/16 23:31:39 fetching corpus: 13650, signal 232102/289224 (executing program) 2025/11/16 23:31:39 fetching corpus: 13700, signal 232304/289224 (executing program) 2025/11/16 23:31:39 fetching corpus: 13750, signal 232475/289224 (executing program) 2025/11/16 23:31:39 fetching corpus: 13800, signal 232622/289224 (executing program) 2025/11/16 23:31:39 fetching corpus: 13850, signal 232802/289224 (executing program) 2025/11/16 23:31:39 fetching corpus: 13900, signal 233084/289225 (executing program) 2025/11/16 23:31:39 fetching corpus: 13950, signal 233247/289225 (executing program) 2025/11/16 23:31:40 fetching corpus: 14000, signal 233377/289225 (executing program) 2025/11/16 23:31:40 fetching corpus: 14050, signal 233562/289225 (executing program) 2025/11/16 23:31:40 fetching corpus: 14100, signal 233740/289225 (executing program) 2025/11/16 23:31:40 fetching corpus: 14150, signal 233932/289225 (executing program) 2025/11/16 23:31:40 fetching corpus: 14200, signal 234103/289225 (executing program) 2025/11/16 23:31:40 fetching corpus: 14250, signal 234235/289225 (executing program) 2025/11/16 23:31:40 fetching corpus: 14300, signal 234451/289225 (executing program) 2025/11/16 23:31:40 fetching corpus: 14350, signal 234630/289225 (executing program) 2025/11/16 23:31:40 fetching corpus: 14400, signal 234803/289225 (executing program) 2025/11/16 23:31:40 fetching corpus: 14450, signal 234983/289225 (executing program) 2025/11/16 23:31:40 fetching corpus: 14500, signal 235129/289225 (executing program) 2025/11/16 23:31:41 fetching corpus: 14550, signal 235279/289225 (executing program) 2025/11/16 23:31:41 fetching corpus: 14600, signal 235457/289225 (executing program) 2025/11/16 23:31:41 fetching corpus: 14650, signal 235677/289225 (executing program) 2025/11/16 23:31:41 fetching corpus: 14700, signal 235853/289225 (executing program) 2025/11/16 23:31:41 fetching corpus: 14750, signal 236008/289225 (executing program) 2025/11/16 23:31:41 fetching corpus: 14800, signal 236153/289225 (executing program) 2025/11/16 23:31:41 fetching corpus: 14850, signal 236294/289225 (executing program) 2025/11/16 23:31:41 fetching corpus: 14900, signal 236507/289225 (executing program) 2025/11/16 23:31:41 fetching corpus: 14950, signal 236714/289225 (executing program) 2025/11/16 23:31:41 fetching corpus: 15000, signal 236873/289225 (executing program) 2025/11/16 23:31:42 fetching corpus: 15050, signal 237033/289225 (executing program) 2025/11/16 23:31:42 fetching corpus: 15100, signal 237217/289225 (executing program) 2025/11/16 23:31:42 fetching corpus: 15150, signal 237389/289225 (executing program) 2025/11/16 23:31:42 fetching corpus: 15200, signal 237544/289225 (executing program) 2025/11/16 23:31:42 fetching corpus: 15250, signal 237702/289225 (executing program) 2025/11/16 23:31:42 fetching corpus: 15300, signal 237841/289225 (executing program) 2025/11/16 23:31:42 fetching corpus: 15350, signal 238087/289225 (executing program) 2025/11/16 23:31:42 fetching corpus: 15400, signal 238251/289225 (executing program) 2025/11/16 23:31:42 fetching corpus: 15450, signal 238400/289225 (executing program) 2025/11/16 23:31:42 fetching corpus: 15500, signal 238552/289225 (executing program) 2025/11/16 23:31:42 fetching corpus: 15550, signal 238715/289225 (executing program) 2025/11/16 23:31:43 fetching corpus: 15600, signal 238865/289225 (executing program) 2025/11/16 23:31:43 fetching corpus: 15650, signal 239064/289225 (executing program) 2025/11/16 23:31:43 fetching corpus: 15700, signal 239268/289225 (executing program) 2025/11/16 23:31:43 fetching corpus: 15750, signal 239436/289225 (executing program) 2025/11/16 23:31:43 fetching corpus: 15800, signal 239610/289225 (executing program) 2025/11/16 23:31:43 fetching corpus: 15850, signal 239766/289225 (executing program) 2025/11/16 23:31:43 fetching corpus: 15900, signal 239975/289225 (executing program) 2025/11/16 23:31:43 fetching corpus: 15950, signal 240174/289225 (executing program) 2025/11/16 23:31:43 fetching corpus: 16000, signal 240336/289225 (executing program) 2025/11/16 23:31:44 fetching corpus: 16050, signal 240476/289226 (executing program) 2025/11/16 23:31:44 fetching corpus: 16100, signal 240615/289226 (executing program) 2025/11/16 23:31:44 fetching corpus: 16150, signal 240761/289226 (executing program) 2025/11/16 23:31:44 fetching corpus: 16200, signal 240897/289226 (executing program) 2025/11/16 23:31:44 fetching corpus: 16250, signal 241027/289226 (executing program) 2025/11/16 23:31:44 fetching corpus: 16300, signal 241147/289226 (executing program) 2025/11/16 23:31:44 fetching corpus: 16350, signal 241336/289226 (executing program) 2025/11/16 23:31:44 fetching corpus: 16400, signal 241507/289226 (executing program) 2025/11/16 23:31:44 fetching corpus: 16450, signal 241657/289226 (executing program) 2025/11/16 23:31:44 fetching corpus: 16500, signal 241866/289226 (executing program) 2025/11/16 23:31:45 fetching corpus: 16550, signal 242047/289226 (executing program) 2025/11/16 23:31:45 fetching corpus: 16600, signal 242198/289226 (executing program) 2025/11/16 23:31:45 fetching corpus: 16650, signal 242326/289226 (executing program) 2025/11/16 23:31:45 fetching corpus: 16700, signal 242474/289226 (executing program) 2025/11/16 23:31:45 fetching corpus: 16743, signal 242601/289226 (executing program) 2025/11/16 23:31:45 fetching corpus: 16743, signal 242601/289226 (executing program) 2025/11/16 23:31:47 starting 8 fuzzer processes 23:31:47 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000040)={0x5, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000180)={0x0, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @loopback}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000002c0)={0xfff, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x0, 0x1, [{{0x2, 0x4e24, @loopback}}]}, 0x110) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000440)={0x5, {{0x2, 0x4e24, @multicast2}}, 0x0, 0x2, [{{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e22, @loopback}}]}, 0x190) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000640)={{0x5e, @remote, 0x4e23, 0x4, 'dh\x00', 0x2d, 0x4, 0x20}, {@private=0xa010102, 0x4e21, 0x0, 0x800, 0x1}}, 0x44) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000006c0)={0x4, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}, {{0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x108) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000800)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x6, [@loopback, @private=0xa010100, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010102]}, 0x28) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000840)={0x33, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 'wlc\x00', 0x3, 0x7, 0x38}, 0x2c) r2 = creat(&(0x7f0000000880)='./file0\x00', 0x40) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0x0, [0x9, 0x100, 0x755c3a9e]}, &(0x7f0000000980)=0x44) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f00000009c0)={0x9, 0xfff, 0x4, 0x6, 0x2}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000a80)={0x9, &(0x7f0000000a00)=[{0x5, 0x40, 0x20, 0x7}, {0xff80, 0x40, 0x2, 0x3}, {0x1, 0x80, 0x6, 0xc8}, {0x1, 0x81, 0x80, 0xc644}, {0x6, 0x3, 0x0, 0x8001}, {0x8, 0x5, 0x1, 0x4}, {0x5, 0x0, 0x5, 0x1}, {0x4bfc, 0x1, 0x6}, {0x80, 0x5, 0x9, 0x3a90}]}) r5 = socket$inet(0x2, 0x6, 0x8) dup3(r4, r5, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000ac0)={@rand_addr=0x64010102, @local, @remote}, 0xc) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x3c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x71}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0xbb}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 23:31:47 executing program 1: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x40, 0x8]) r0 = fsopen(&(0x7f0000000040)='nilfs2\x00', 0x1) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), &(0x7f00000000c0)={'U+', 0x1}, 0x16, 0x2) r1 = fsmount(r0, 0x0, 0x1) r2 = fsmount(r1, 0x1, 0x8) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x40001) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000140)={0x6, 0x100000001, 0x5, 0xfffffffffffffff9, 0x9}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$CDROM_GET_CAPABILITY(r4, 0x5331) r5 = fsmount(r1, 0x0, 0x70) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000200)) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x10002, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000000400)={0x0, 0x7fff}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000440)='devtmpfs\x00', 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:udev_rules_t:s0\x00', 0x22, 0x0) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000000500)=""/176) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x4101, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x80010, r8, 0x8000000) 23:31:47 executing program 2: write$9p(0xffffffffffffffff, &(0x7f0000000000)="8b6b11ae50c72a408447f7a4aef155e6a39cad8fb0bb15e70fa13b4ce71ffd920c0e2b53f280990a6639ddf44f4d907a7b2fac6a51fc6e8d47fc13520cd3399613d1e72e3f7df355a7ee292dab0df6485643f6f421bdfc0147d64ea392", 0x5d) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x37, 0x2, {0x0, 0x0, 0x6, 0xffffffffffffffff, 0x5, '+&}@.'}}, 0x23) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x14080) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x8}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000140)=0x4) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0xfb, 0x5c, 0x2, 0x7f, "3fdbbdcec0185888e4e857a8f845833c", "e3dfae814490bbb6d2dc66dd96b7e7a88f9ee57c19eeb0903d4436ad2e38fb8d42916ae6ac9414bc90de62303265920b7102db49e1c3db29d0ede9909ee7daf864d8938de0079b"}, 0x5c, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x100, 0x100000000, 0x401, 0x8}) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0)="d9ad893046286d7d977cc88ce6126d10a967db1f861c846602d6e0f8a8179d49e75a5cb50b22dced527d4ed84fb2c25a6b869e04db172df4555b35ebc4aa1997ffca75a9b44b31887dc167d175546c394a45b60b4b51da95dc4a6dc3112ba8c295520b26f6b5ec6db134730a37d106fdd777993ab1368571ee44b4f0cedf4e96c3c7aca9e6d88b8cdf7406098415f6cb24de781b65e210eb01162e1be2c34159", 0xa0, r3}, 0x68) ioctl$LOOP_CLR_FD(r0, 0x4c01) syz_open_dev$sg(&(0x7f0000000400), 0x8f, 0x40002) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f00000004c0)=0x311f, 0x4) signalfd(r3, &(0x7f0000000500)={[0x100000000]}, 0x8) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000540)}, {&(0x7f0000000580)=""/149, 0x95}], 0x2) 23:31:47 executing program 3: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000000c0)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000100)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000140)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000180)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000001c0)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000200)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000240)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000280)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000002c0)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000300)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000340)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000380)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000003c0)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000400)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000440)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000480)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000004c0)) [ 92.500343] audit: type=1400 audit(1763335907.673:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:31:47 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfff, 0x2800) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x2, 0x9, 0x9, 0x8000, 0xb0}) ioctl$KDENABIO(r0, 0x4b36) r1 = signalfd(r0, &(0x7f0000000300)={[0x10001]}, 0x8) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000340)) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x2000, 0x4) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000003c0)=0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000400)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000440)={0x7, 0x6, 0x2, 0x3, 0xf, "fd6837333cc722be"}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000480)) r4 = inotify_init() ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000004c0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "0c8498bdb48666"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f00000014c0)={{r5, 0x2, 0x6d6, 0x1ff, 0x3, 0x40, 0x80000001, 0x2, 0x100, 0x3, 0x3f, 0x100000000, 0x200, 0x0, 0x10000}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000001580)={0x3, 0xdd}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000015c0)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000001600)) 23:31:47 executing program 5: ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)=0xfffffffffffffe00) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x120, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x80}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1ff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x1ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0x200}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x240448c1) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) fcntl$getflags(r0, 0xb) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r1, &(0x7f0000001540)={&(0x7f0000000380)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000400)="89c80443c9cdbc34b3d06f7bc048dc00220e2d6a19915dd0130a7a299703e81c085f70db481821f22d50bf206c", 0x2d}, {&(0x7f0000000440)="2d29674d66d130e9442d15", 0xb}], 0x2, &(0x7f00000004c0)=[{0x20, 0x29, 0xffff7fff, "ab684519f272172021"}, {0x30, 0x88, 0x8, "9d7bf2b92cdc73221d03ab191f0d859833468568cc179e6b531d9218f940ff"}, {0x1010, 0x88, 0x81, "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"}], 0x1060}, 0x44000) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001580)={0x6}, 0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000015c0), 0x10600, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000001600)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000001700), 0x101043, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001740)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001780)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000017c0)={0x0, 0x3, 0xcd8}) io_setup(0x7, &(0x7f0000001bc0)=0x0) r7 = eventfd2(0x3, 0x80801) r8 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) io_submit(r6, 0x4, &(0x7f0000001f80)=[&(0x7f0000001c80)={0x0, 0x0, 0x0, 0x1, 0x37, r0, &(0x7f0000001c00)="bd1d80c256ffd7de65376da64d6d0bd403e151e5e010b65fcfe46c1e1fe52442b8c9430e7e27c7c99d96ba53574c62aa13c32fde98020e8614fa6d23f8d79a2991014744bbc4169bb97cc8b9b65b29c6102deb06c5ebb19a21c5e5", 0x5b, 0x3, 0x0, 0x1, r5}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x6, 0x83e5, r3, &(0x7f0000001cc0)="6b2b8655bd6227fd8ca5c4fac322a8bfa8399b9a783e279fd240c34c37c4e7e4287b664a42087bf7d4f7e030bf2ad7b985c07e53a75042c5d0f45abe43535450c8e9f61f648abe70ba4ce3fd293a512a92defddb522b43f14bb5b2fcfc12fbcdea49269a74326aa3cb86860a677f5400d885440ea4d65169a520d38533", 0x7d, 0x1, 0x0, 0x0, r7}, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x5, 0x0, r8, &(0x7f0000001d80)="ab464b18fc80664d0a94ce3635c930d42c52488c36b8b42b6d245f9eb1bd556d6b9822cc02d80bef475922ebaaafbd9de6ccb918662f1e36c4a11a4bb11e18906f740c5f99c96bba3895cad7dd195a81ead30a3a19", 0x55, 0x100000000, 0x0, 0x0, r5}, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x6, 0x1ff, r0, &(0x7f0000001e40)="ca01d3ee6cd4c0d46d4d88fa959e2726d5f62b9b54e655335f49874ce1554779fe74785b1d918ce8627d740455fc50005c113865ea09bcc73983fd2a6cfda58d26095e5cac7e762b6cca3acfffeca6528e70c1e149d8d271defeeffaff8599958859e88e948774e24810dee6306f15040574263bbf7f2c66d6bf051d7d5613a22f0288cd5d7ca75d4f3d5d3ebc4ac60f0c97917427722c09a117d45ecc85773b1ba4409d33b57d38289dec178310d9427f84d5000d37afa7a1f3c9a1a88501ad79380c5ad06115aa521b74b5323032c413224c47aa91b6b8c823b0642537004e803206", 0xe3, 0x0, 0x0, 0x3, r4}]) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000001fc0)) lsetxattr$trusted_overlay_opaque(&(0x7f0000002000)='./file0\x00', &(0x7f0000002040), &(0x7f0000002080), 0x2, 0x0) 23:31:47 executing program 7: r0 = dup(0xffffffffffffffff) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000003, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x3d7a, 0x3, &(0x7f0000000000)="2925938ce28ee15314dfd0ebc072fb0c1d72", 0xbc, 0x0, 0x0, {0x1}}, 0x10000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000080)={0x7, 'veth1_to_batadv\x00', {0x5}, 0x2}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x4000010, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r3}}, 0x6) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c001}, 0x404c800) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10010, r5, 0x8000000) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/218, 0xda}, {&(0x7f0000000380)=""/212, 0xd4}, {&(0x7f0000000480)=""/87, 0x57}, {&(0x7f0000000500)=""/244, 0xf4}, {&(0x7f0000000600)=""/131, 0x83}], 0x5) r7 = accept4$unix(r5, &(0x7f0000000740), &(0x7f00000007c0)=0x6e, 0x80000) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000800)=0x10) syz_io_uring_submit(r6, r1, &(0x7f0000000840)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x28}, 0x1}, 0x9492dabd) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000880), 0x240040, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000008c0)={@desc={0x1, 0x0, @desc4}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000900)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r9, 0x8010661b, &(0x7f0000000940)) connect$unix(r9, &(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e) 23:31:47 executing program 6: ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000000)={0x0, 0x0, [0x100000001, 0x100, 0x1, 0xf5cd, 0x3, 0x2]}) r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xff, 0x5, 0xf5, 0x1, 0x0, 0x6, 0x3000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x68, 0x4, 0x7, 0x2, 0xff, 0x8, 0x6, 0x0, 0xb923, 0x0, 0x90f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) inotify_init1(0x800) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x684}, 0x1c) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DESTROY(r1, &(0x7f0000001480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001440)={&(0x7f00000001c0)={0x1244, 0x15, 0x1, 0x70bd29, 0x25dfdbfe, {0xa, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x65, 0x1, "7c0c00210846961da68c8e2c61de5699493796391e43e40de61b9cafb383f8ab12ef0704f99f71ffd0431c47964b02afed0df814654b8b39e65a110e9d96dddd38650b941447824b7a664792eaf744a0e8984275913850dedad2cb7130608738e7"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "8ae44c7f6034270e7557f1f5ba7a33529afa3a58ba18117a278891e752432ccfba7162a4152ce346e91c9af0a395401bd3227dd609605bf9a2bd8a34a4c3c70cddf09d70f3680aa1b175ccbf93be7c72cfc26b6f6dbd899e02e5465a8c83e76629d9a2b6fb32d3aa3f5d28019bc8a95d4af10a2afeaa3e884ea2a00942a74c5c49dda6ed04faca2c0b03851df243c97abf11722e6a46a8bc778a68cc2d06047ab225713141e6ce4259f81454ed37049e9b726f13584c3768a4"}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "f084ea739730ef00990be9639c3a7c13a26c5777c9c9bc26b545cec12d9e87201882ce78cfd9256fb2d564098618d204b733f670974f2afb3df90271883028610303754756c7a819d19fec81babc3fe266fb1045d718135e3fb50df71ddd2231f234067f3a9bb8dc620143351f91a0d47600062a5b04842a42619537301ef3a9f32c421f757155210ca6ee4b54d3d9ce3a80dec12f48f40a58a1bb17"}, @INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "5cb287b157dedad1a2f97d659adb11d2c278974e7c864f5714fd09e103b559ceeec082a6c44728f3fe199a3920583837e6064ed86b2d2c3eb2949e69ac760e824b05f921796273ba60b39ae77f022b7f50ebc896dbbca9cb06819f"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x1244}, 0x1, 0x0, 0x0, 0x4000}, 0x881) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000014c0)) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001540)={0xe4, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbb28}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd07}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbdcf}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3c2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$TIOCEXCL(r2, 0x540c) r4 = syz_open_pts(r3, 0x8002) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f00000016c0)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000001700)="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") ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000001800)) ioctl$TIOCCBRK(r1, 0x5428) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x18, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x440}, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x100) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001980)={0xe4, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x24, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8000}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8}]}}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xf02}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000004}, 0x8010) [ 93.696810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.701631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.703670] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.705452] ================================================================== [ 93.706759] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 93.707947] Read of size 2 at addr ffff888009c07038 by task kworker/u11:2/292 [ 93.714743] [ 93.715062] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:2 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 93.715096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 93.715114] Workqueue: hci1 hci_cmd_work [ 93.715148] Call Trace: [ 93.715158] [ 93.715167] dump_stack_lvl+0xca/0x120 [ 93.715200] print_report+0xcb/0x610 [ 93.715233] ? __virt_addr_valid+0x100/0x5d0 [ 93.715263] ? hci_cmd_work+0x66d/0x6d0 [ 93.715295] ? hci_cmd_work+0x66d/0x6d0 [ 93.715327] kasan_report+0xca/0x100 [ 93.715359] ? hci_cmd_work+0x66d/0x6d0 [ 93.715395] hci_cmd_work+0x66d/0x6d0 [ 93.715429] process_one_work+0x8e1/0x19c0 [ 93.715472] ? __pfx_process_one_work+0x10/0x10 [ 93.715508] ? rcuwait_wake_up+0x27/0x290 [ 93.715544] ? move_linked_works+0x172/0x270 [ 93.715572] ? assign_work+0x196/0x240 [ 93.715608] worker_thread+0x67e/0xe90 [ 93.715644] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 93.715675] ? __pfx_worker_thread+0x10/0x10 [ 93.715712] kthread+0x3c8/0x740 [ 93.715744] ? __pfx_kthread+0x10/0x10 [ 93.715776] ? ret_from_fork+0x79/0x7a0 [ 93.715802] ? lock_release+0xc8/0x290 [ 93.715841] ? __pfx_kthread+0x10/0x10 [ 93.715873] ret_from_fork+0x67a/0x7a0 [ 93.715898] ? __pfx_ret_from_fork+0x10/0x10 [ 93.715925] ? __switch_to+0x759/0x1060 [ 93.715959] ? __pfx_kthread+0x10/0x10 [ 93.715992] ret_from_fork_asm+0x1a/0x30 [ 93.716034] [ 93.716042] [ 93.739283] Allocated by task 291: [ 93.739914] kasan_save_stack+0x24/0x50 [ 93.740628] kasan_save_track+0x14/0x30 [ 93.741321] __kasan_slab_alloc+0x59/0x70 [ 93.742048] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 93.742934] __alloc_skb+0x2ab/0x370 [ 93.743596] hci_cmd_sync_alloc+0x34/0x300 [ 93.744347] __hci_cmd_sync_sk+0xf7/0x5c0 [ 93.745078] hci_read_local_version_sync+0x2c/0x170 [ 93.745970] hci_dev_open_sync+0x145c/0x1f60 [ 93.746729] hci_power_on+0xdb/0x5d0 [ 93.747405] process_one_work+0x8e1/0x19c0 [ 93.748148] worker_thread+0x67e/0xe90 [ 93.748839] kthread+0x3c8/0x740 [ 93.749439] ret_from_fork+0x67a/0x7a0 [ 93.750168] ret_from_fork_asm+0x1a/0x30 [ 93.750887] [ 93.751188] Freed by task 294: [ 93.751747] kasan_save_stack+0x24/0x50 [ 93.752431] kasan_save_track+0x14/0x30 [ 93.753120] kasan_save_free_info+0x3a/0x60 [ 93.753895] __kasan_slab_free+0x43/0x70 [ 93.754627] kmem_cache_free+0x26f/0x500 [ 93.755336] kfree_skbmem+0x18a/0x1f0 [ 93.756001] sk_skb_reason_drop+0x10e/0x1b0 [ 93.756735] vhci_read+0x3d5/0x5d0 [ 93.757363] vfs_read+0x1eb/0xc70 [ 93.757980] ksys_read+0x121/0x240 [ 93.758606] do_syscall_64+0xbf/0x430 [ 93.759297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.760206] [ 93.760508] The buggy address belongs to the object at ffff888009c07000 [ 93.760508] which belongs to the cache skbuff_head_cache of size 232 [ 93.762583] The buggy address is located 56 bytes inside of [ 93.762583] freed 232-byte region [ffff888009c07000, ffff888009c070e8) [ 93.764263] [ 93.764515] The buggy address belongs to the physical page: [ 93.765312] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x9c07 [ 93.766448] flags: 0x100000000000000(node=0|zone=1) [ 93.767164] page_type: f5(slab) [ 93.767649] raw: 0100000000000000 ffff8880096c78c0 ffffea00003a1700 dead000000000004 [ 93.768732] raw: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 93.769836] page dumped because: kasan: bad access detected [ 93.770639] [ 93.770892] Memory state around the buggy address: [ 93.771594] ffff888009c06f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.772628] ffff888009c06f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.773664] >ffff888009c07000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.774697] ^ [ 93.775420] ffff888009c07080: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 93.776442] ffff888009c07100: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 93.777478] ================================================================== [ 93.778725] Disabling lock debugging due to kernel taint [ 93.779667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.781043] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.786048] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.789389] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.791326] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.792412] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.796270] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.812420] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.816972] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.819903] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.833825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.842718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.888895] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.891629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.893295] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.897147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.898760] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.904137] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.908777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.910675] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.911783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.913647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.942289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.955772] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.958172] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.961143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.964653] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.973030] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.973076] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.974290] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.977231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.979372] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.984497] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.988081] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.989507] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.990558] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.992907] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.851136] Bluetooth: hci0: command tx timeout [ 95.851595] Bluetooth: hci1: command tx timeout [ 95.915016] Bluetooth: hci2: command tx timeout [ 95.979104] Bluetooth: hci4: command tx timeout [ 95.979180] Bluetooth: hci3: command tx timeout [ 96.043086] Bluetooth: hci7: command tx timeout [ 96.043111] Bluetooth: hci6: command tx timeout [ 96.043129] Bluetooth: hci5: command tx timeout [ 97.898998] Bluetooth: hci1: command tx timeout [ 97.899703] Bluetooth: hci0: command tx timeout [ 97.963061] Bluetooth: hci2: command tx timeout [ 98.027087] Bluetooth: hci4: command tx timeout [ 98.027737] Bluetooth: hci3: command tx timeout [ 98.091075] Bluetooth: hci5: command tx timeout [ 98.091726] Bluetooth: hci6: command tx timeout [ 98.091751] Bluetooth: hci7: command tx timeout [ 99.947076] Bluetooth: hci1: command tx timeout [ 99.947524] Bluetooth: hci0: command tx timeout [ 100.012772] Bluetooth: hci2: command tx timeout [ 100.075245] Bluetooth: hci3: command tx timeout [ 100.075645] Bluetooth: hci4: command tx timeout [ 100.139208] Bluetooth: hci5: command tx timeout [ 100.139277] Bluetooth: hci6: command tx timeout [ 100.139612] Bluetooth: hci7: command tx timeout [ 101.995002] Bluetooth: hci0: command tx timeout [ 101.995023] Bluetooth: hci1: command tx timeout [ 102.058974] Bluetooth: hci2: command tx timeout [ 102.122974] Bluetooth: hci4: command tx timeout [ 102.122997] Bluetooth: hci3: command tx timeout [ 102.186977] Bluetooth: hci7: command tx timeout [ 102.187427] Bluetooth: hci6: command tx timeout [ 102.187802] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 23:31:49 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8293dc70 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff888015cf75c0 R8 =0000000000000000 R9 =ffffed1001637046 R10=00000000000fe503 R11=3930303838386652 R12=0000000000000823 R13=0000000000000020 R14=fffffbfff112e94a R15=dffffc0000000000 RIP=ffffffff8293dcc5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f78c10ffde0 CR3=0000000007265000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000bfe62e42fefa39ef XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff8880163bf910 RCX=ed4ae5eb40598492 RDX=0000000000000000 RSI=ffffffff81b58445 RDI=ffffffff85e1fd40 RBP=ffffea000038fcc0 RSP=ffff8880163bf868 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffff88800c675680 R14=dffffc0000000000 R15=ffff88800944cc80 RIP=ffffffff81529b06 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4a23c518c0 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6f47f9b700 CR3=000000000d9e7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000004142e0456a29a8d4 XMM01=00000000000000003f847ae147ae147b XMM02=00000000000000000000000000000000 XMM03=00000000000000003f70e8a563c36339 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=000000000000000a000000c000014016 XMM09=000000000000002a000000c000016000 XMM10=0000000000000009000000c000014040 XMM11=0000000000000007000000c000014049 XMM12=000000000000001c000000c000018000 XMM13=0000000000000041000000c00001a000 XMM14=000000000000000c000000c000014050 XMM15=000000000000000d000000c000014060