Warning: Permanently added '[localhost]:59060' (ECDSA) to the list of known hosts. 2025/11/14 18:20:14 fuzzer started 2025/11/14 18:20:15 dialing manager at localhost:37161 syzkaller login: [ 59.738516] cgroup: Unknown subsys name 'net' [ 59.826824] cgroup: Unknown subsys name 'cpuset' [ 59.850707] cgroup: Unknown subsys name 'rlimit' 2025/11/14 18:20:25 syscalls: 204 2025/11/14 18:20:25 code coverage: enabled 2025/11/14 18:20:25 comparison tracing: enabled 2025/11/14 18:20:25 extra coverage: enabled 2025/11/14 18:20:25 setuid sandbox: enabled 2025/11/14 18:20:25 namespace sandbox: enabled 2025/11/14 18:20:25 Android sandbox: enabled 2025/11/14 18:20:25 fault injection: enabled 2025/11/14 18:20:25 leak checking: enabled 2025/11/14 18:20:25 net packet injection: enabled 2025/11/14 18:20:25 net device setup: enabled 2025/11/14 18:20:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/14 18:20:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/14 18:20:25 USB emulation: enabled 2025/11/14 18:20:25 hci packet injection: enabled 2025/11/14 18:20:25 wifi device emulation: enabled 2025/11/14 18:20:25 802.15.4 emulation: enabled 2025/11/14 18:20:25 fetching corpus: 0, signal 0/0 (executing program) 2025/11/14 18:20:27 starting 8 fuzzer processes 18:20:27 executing program 0: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x7, 0x6, 0x8, 0x9, "d047c593120863dd3d2c0c6517e6914e1d8be71705e6b2ae9819921c2b590e9c50c2d06097d437684011a1e97e1b0c7b5a4e4b21bb304d9afb9e784cd555b107", "9b8f40b816cf2843d452b64d3a48cc2d3ee690c418fa83baee6bd1d43b8d4548", [0x6, 0x12ae]}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x8) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000280)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x22) ioctl$LOOP_CLR_FD(r1, 0x4c01) r2 = openat(r0, &(0x7f00000003c0)='./file0\x00', 0xa0b40, 0x40) readlinkat(r2, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=""/247, 0xf7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000580)=""/212) openat$cgroup_int(r2, &(0x7f0000000680)='io.latency\x00', 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f00000006c0), 0x80000001, 0x200000) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x4) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000700)='.log\x00', 0x0, 0x40) ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f0000000740)) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000007c0)={0xfff, 0x80000000, 0x10001, 0x61b4, 0x4, 0xdd20}) 18:20:27 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x400000, 0x120) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000080)=""/255) ioctl$LOOP_CLR_FD(r1, 0x4c01) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3e8, 0x100, 0x70bd26, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x708e13054ca31fbb}, 0x4004001) r4 = openat$cgroup(r1, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000003c0), 0x2, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000400), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x40) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) select(0x40, &(0x7f0000000580)={0x7, 0x1, 0x5a5, 0x7, 0x19e, 0x1, 0x8, 0xfffffffffffffffe}, &(0x7f00000005c0)={0x6, 0xf9, 0x4, 0xfffffffffffffffc, 0x8000, 0x9, 0x1000, 0x7fff}, &(0x7f0000000600)={0x1, 0x3, 0x7ff, 0x200020000, 0xe3f, 0x0, 0x0, 0x1000}, &(0x7f0000000680)={r6, r7/1000+60000}) epoll_create(0x7) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000006c0)=0x80000001) memfd_secret(0x0) 18:20:27 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x9, 0x5, &(0x7f0000001300)=[{&(0x7f0000000080)="97079be1c65be650970b4f1870d33e6642a6a593a61fdb32df7ff6e78568d52e41472126d40ea82f7f12283a", 0x2c, 0x2c8c}, {&(0x7f00000000c0)="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", 0x1000, 0x7}, {&(0x7f00000010c0)="8d5119773c4f56f33bf98a40cde00994729f591eb4aa42fb6b7b86407d7e5db26091c1d92b310cf9498bc08d8be21f20d571f067a4a4f4c4087741c71933e8d7056eb4afc77eed87f99ef52a5bcd6bceac7011f20d8d54b26b3a85fa629cd92cdf0512d0d0bac1784365ad8c8d017434e61e6af787b862d2ba6a57bc34fff071e7f71516e764a452087abe9df952e8e12e00c6de33e49e9254c218e547176350f5403a4ea9d3d4d3b493ee491cbe03fd478e7e008609ed", 0xb7}, {&(0x7f0000001180)="6bc38d330e9c295ea8384d5ab50ffc3a3561778bb41e8c5eb4efe7a323264dec4c2af72ada436b6312b99776aff63d80a5c97b6a4aa9a506a9090008d9159adcc9c79d13c1755d25ce12ade9dcbd5f48c2b45479cad5b0c0e7c798b66b988871fbe501912908c018f79df6423e4c87944be12502991768c8e45444db22c0acc651af9428c942165b7277c2e9a915a10c", 0x90, 0xfffffffffffffff8}, {&(0x7f0000001240)="7dedb36f364e63d1dd8df4cff248e565467509efb1a96143d5786b0f658ddcde9ff651d59e5bc51825abdf2f935779747fd7449857db16639b41a626e8bccd5a5238889c144cfdcd1af31078fefa794f6aa0107ad773df6063315269482c3a57746deb5848bbd8a6de0447907a6580d6781dcba3b961d046e4464a9711fcc10f2d19bc170cdf7e0ab41f245d1f185529ba5fca017ca1", 0x96, 0x8}], 0x2000, &(0x7f0000001380)={[{@nonumtail}], [{@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, ')/@@[&)'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_user={'subj_user', 0x3d, '}]S.-'}}]}) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000001400)='.log\x00', 0x103, 0x10) getpeername$unix(r1, &(0x7f0000001440)=@abs, &(0x7f00000014c0)=0x6e) openat$autofs(0xffffffffffffff9c, &(0x7f0000001500), 0x8180, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001540)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000001580)='net_cls.classid\x00', 0x2, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000015c0)='syz0\x00', 0x200002, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$cgroup_type(r3, &(0x7f0000001600), 0x2, 0x0) r4 = openat$cgroup(r3, &(0x7f00000016c0)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000001640)={0x5, 0x80, 0x8, 0x0, 0x6, 0x11, 0x0, 0x101, 0x4a00, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcd, 0x1, @perf_config_ext={0x7}, 0x8042, 0x6, 0xffff, 0x8, 0xffffffff, 0xfffffffc, 0x9, 0x0, 0x7fff, 0x0, 0x200}, r4, 0x8, r1, 0x1) openat$cgroup_pressure(r3, &(0x7f0000001700)='io.pressure\x00', 0x2, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000001740)={0x3, 0xffffffff, 0x7f, 0xb4, 0x0, 0x101}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x4c, r5, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffff00000001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80000}, 0x4000001) mkdirat(r0, &(0x7f0000001900)='./file0\x00', 0x84) r6 = openat$cgroup_ro(r1, &(0x7f0000001940)='blkio.bfq.io_queued\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000001980)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000019c0)=0xfc5) open$dir(&(0x7f0000001a00)='./file0\x00', 0x40000, 0x321) 18:20:27 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x1, 0x1) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000040)={0x1, 0x2, 0x1, 0xaf, 0x5, 0x7, 0x201, 0x9, 0x2, 0x1, 0x7, 0x2da, 0x6, 0x5}) socketpair(0x23, 0x5, 0x1, &(0x7f0000000080)) r1 = shmget(0x1, 0x1000, 0x10, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000000c0)=""/126) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x3, 0xc6dff44d76ad4597, 0x2, 0x6, 0x80000001, 0x1}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x11, r0, 0x8000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) r4 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x4, 0x2, &(0x7f0000000400)=[{&(0x7f0000000240)="dd74dc9dc4a43c9cc5c9b55bfbc519a4ac3ac87f13ff3968242c46db49475f6f68d65d77aba93ef22eeedb84e5f1416511569fc7376f2db2333f8dfb461fcd31e606c7cf57aa2d2e84a1b016f12ef19eb814d2dea3d6531a274e8df0f068b84f3be487e6eee6de9684cfcd1968bebc4277e9b88add783fef547851aaac0b3a2f93dbb282a4b5276ca48a942041e0d76de2d2bcb967c125ca02a064ebafbc84422de4108d32c67ffa8db823620eba9c23c3c1b84de254f07620659533401c6de8d4ffbf96f17e63a90d203b7087691a34f75f6dc08e88fe371f8b6038e8a03ad0fc5efcbe1d7497c3c5c24725ea753312", 0xf0, 0xcd}, {&(0x7f0000000340)="14a77bf53d42743075ed5f0a6321ef5ace25c14f2136e1bf091aa6e686532c6d16e6e9159afe1f683f90eee163c002eccd7c176100e4e285e10761d519fc94beb7c678b27b2ca8c0038118cab55dc4591355640f303830a1a799b8c8d9a761657d0512cd21b718da3d8f757ab405c5598adcfbf299fafc73c9d8afcc0fd2733e635cf70c4be285aaf559b7945f3e70a8499837a1a369338204403c5505e5e09d101b619de7aa1665c8464485", 0xac, 0x6de7}], 0x0, &(0x7f0000000440)={[{@huge_always}, {@huge_never}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, ']#\\'}}, {@subj_user}, {@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@permit_directio}]}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000580)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r4, &(0x7f0000000500)={0x82, 0x20, 0x11}, &(0x7f0000000540)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) getuid() r5 = open$dir(&(0x7f00000005c0)='./file0\x00', 0x1000, 0x110) readlinkat(r5, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=""/211, 0xd3) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x10, 0x3f8, 0x1, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x44802) io_uring_setup(0x3c72, &(0x7f0000000840)={0x0, 0x561b, 0x1, 0x1, 0x27c, 0x0, r0}) syz_mount_image$ext4(&(0x7f00000008c0)='ext3\x00', &(0x7f0000000900)='\x00', 0x4, 0x4, &(0x7f0000000c40)=[{&(0x7f0000000940)="6aaf38faf71266c29bf99e5b887fe9c4ee054bdc76dad4ad1c9ab4de741c0d9379db47badf1817eaa2ce8fcbcf2ce8ba7232a1c701bc1e16a07fa4b02abf7099a90fd13c2258d5eb960336e20331eda1d9dacc46af7a805a83f389a62141907d758f5e4f9b70fd875a2d4b98f140e64c9a515fc1de645e1df4faac4f01e10941e0cdb627e552c547910d87fdaa8d642a903631714832f26fe4c5ff884c3523404487b3614d4a9a", 0xa7, 0x6}, {&(0x7f0000000a00)="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", 0xfb, 0x1}, {&(0x7f0000000b00)="9b18a8ec4d7f591c214472c4be4521eb4fef9c96a285fb1e", 0x18, 0xffffffff}, {&(0x7f0000000b40)="106983d4ff896483fcb07c60f44139fd35d44d0867c8aacf7020cd8922f9e7056253ea8dd7d9eea45b812c59baa45d0b0e18dd2396b4f1f75ae4d60f38ad6c97414a6524913b7975a82552ab606dc38aa614e49ad61d0ff8484154ce15502c5aa47ab4a61e1456063c177b6001fb9d99dde2b0cdf0c9f49517f194030dc48317fac552bdb205bd120ed8683c1d0cb1fd4de49735e4de8d28c46163782f4ae013290594ba701125fda0ddcd0725247087539b6a3b8df9963611bd8b88fa7d504bd09363599c62983d2ae4c8c116003ec9789984dfd4836140541e2a4a9d1c43b9c85e78b0db3974173a", 0xe9, 0x7fffffff}], 0x40000, &(0x7f0000000cc0)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x65, 0x31, 0x63, 0x36, 0x66, 0x39, 0x61], 0x2d, [0x65, 0x36, 0x37, 0x39], 0x2d, [0x65, 0x31, 0x63, 0x63], 0x2d, [0x37, 0x6, 0x65, 0x39], 0x2d, [0x66, 0x62, 0x65, 0x38, 0x54, 0x31, 0x5a, 0x35]}}}, {@pcr={'pcr', 0x3d, 0x23}}]}) 18:20:27 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20000, 0x1) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000000c0)=""/120) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7, 0xc10f, 0xff, 0x0, 0x20, 0x5}) r2 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000180)={r2}) r3 = openat(r1, &(0x7f00000001c0)='./file0\x00', 0x2000, 0xc1) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x12, 0x1f, 0xc, "6283ddd0442d7024b16bfd9bc2650a6693bc7ed6462ab0e656787eea7abd1492752ee192346992add96a7e86a47104436d3eddbc49cb6da11a7013d36befbb1e", "05474647f2ca8bf21e3d66c0ecea06052e98fc121d60fb795d1141a6edd799283b78a1533acc9f231659f1c34891166bb4d903c9b1e5233a82b43f4e8c537326", "312498b86315e24598c8f7b6c67bafd73f130436d5cf0e783faf932b9028fa9c", [0x7fffffff, 0x800]}) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000300)=""/81) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x51, 0x0, 0xfff8, {0x7421, 0x8}, {0x0, 0x8a4c}, @period={0x59, 0x499, 0x7ff, 0x2, 0x0, {0x2, 0x1, 0x86d}, 0x1, &(0x7f0000000380)=[0xffed]}}) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb4, 0x0, 0x22, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "8c5c524581466c9d805f1fefc2c82fd0be5eb1595b953fd1570d0fc04eef6ba5375ef3"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "fb7391e2ebb87fb7adf1ea5ab512f36c37b49979bfd0f1"}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20002810}, 0x890) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000580)={0x0, {}, 0x0, {}, 0x6, 0xa, 0x12, 0x0, "72e4cbaf3f745a6e5f7c40753093cfee323d54b1d438533aa39802038a3a7f0774592670fe537230d52acc937b27270c55585d3f10a54a8026238ada9e54a721", "48a2896d7a8c799d298654b4a75fa71fc0da56595e6c3614f6807422081d93dc", [0x3f, 0x5]}) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0xffff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000680)='cgroup.procs\x00', 0x2, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000006c0)={0x55, 0x0, 0x6000, {0x7ff, 0xfff}, {0x0, 0x5}, @const={0x9, {0x7, 0x10, 0xffda, 0x6}}}) syz_mount_image$ext4(&(0x7f0000000700)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x1e0bbb7e, 0x7, &(0x7f0000001b40)=[{&(0x7f0000000780)="03dee1af109271d9ef0db3ad03a38b3b5024241779e4de1f2bf74c9f1246cc07ae2dc849f95326da164bf712c5fb637726ec214dfd8d985bbfc48ac3252fe451f54f7bd595596040fa057f315c07e52751752e13a4f9e9127834ca685a832b3bacf275651f9c85fb80da3228139ffc75eb38aa4e0361e544df", 0x79, 0x101}, {&(0x7f0000000800)="6c92", 0x2, 0x3}, {&(0x7f0000000840)="e755731d45fe841f3f37ffc0f9eea41a526610f68efc109a204e2da92714a02a16c17d9b6c70d70a37a542d89449424375abbdd40057eb92af792e313a152fce6f18dc1ee8309ae1d14d225732f88e4a4c3f564edea7e217c6f9286f649249fdae8621e62564a4f3168db80085c2a1e445be9aca465bc1fa372cc5c8881c337ac768cb80640be6c99a2fc73f62c449c2c6a170da3fd4cae3f5090178ad36e64569fee5090a3ca2b1ba34d828e654a159aa74ff2c20c090a9d8b2ba58f4a6b7025fdc5f1fbefcce90fecd2f99d9c917e02820383ab6f80e727df8a35b1ffa36a43e71ceb2a0", 0xe5, 0x4}, {&(0x7f0000000940)="b11ef3befed7531356e34bb4ebc333f5b53312bc3d67c65fb248009b6f951743db784d8b0b5854c79076d3afecd3b327e80544fd789277b5400e223424fbed8250497151e15f640709e7fc51a7602b978c3ba9e9633685142e5fc321a7a6faa2534232c2ab59b614c580b498d990fc107618c0625d49654ebf01fad233f7c77ff95217935778b1ae77029ee79740db26787abc9fbbe412f27d5fd61fbfacf279e251e8d7d02510f099", 0xa9, 0x4}, {&(0x7f0000000a00)="da2b48ccb35135304bc00d68b91fec4d560d640d486060827d2d94d1b8625d058bfa4152e4b4", 0x26, 0x4}, {&(0x7f0000000a40)="725d10ec48a874bbe4cdd9239cde7da1903e0888e67dc5e4cbab748bda1d26eb61d7c2871747d5b6843ed660cef9cc664c7882c0fd160684f93aca39430599b1785b8fb47abdd5e26c4c185402c3d630c8f5573ee1f87fe7133d7b1806a4e754e5bcc5a01cd0ad57fcbdb26233848753c180e9032a7b9964815bd9f341924b54094670760b2460dc8a95937131cc55aeb0026b7b84271a181f77fc134aa0f4d0d950f5ff1a3312c96d3ff44bd09c1a2061a0ee93997d2d55d4141e1f4f0cd58cda196f6fbbbe314a78b9124a68f28698edde2c8e122058f0ad44f9213319699034bc221e6875950c0a9f13d82ed7d361e28f50dfa00b1393694785e72120ab5e7063e3c82cde86107f7eb2c6446ff98b413ae62d20c270dd876431e40a6679ad68cfa1ccd2a9436654a5eb4955bd122fedda84f96d5db0d39c8d49120380b4003f755fd66156c07a83265b8bcaeddd4c6cd150366b7c1db1418c0b142393c1a35f61cf2055c1209f204df474277822e0f741dbc0d6c00e1f26ae5ee3e5a07cd9fc6b3108f6e97a71b795b2bc3ef67d0f88fefba388c861c7a2e948db71cc3bebc6f4dee3c81033736ce60772e7fa8cc7830038fb4418aca5402380036d04c0150ee3f13705eb5e8dbadc1d051ca0b336b771a6ab19a42168d08ce7710d8a9a2c9290316ec1d5ccb1a7c10a7ad6ccf3f98c45323bdecad2de71595e15d2000bcb296188a2f633628b4518bf878509b8eb3997dc5e84cb996b2271fc129d632ea67eba1d3716f89395ee78fe6a7c4d78de9d8fa9cc159e5d959b85f1ac57bd77321b3a30925d7ba511331e0b76a7d438165e44005918b33a74e6eea9cf4c2a6950a97cbe98dee038017e1bafa8f2a13452e268eab59e1ba5ec4b94d9ce914d6383b7bac8f307ab77935efc0f2dddb206c8527e2b2f1efc6e73ac82cff6c1d8a7f66b18b276615daacd14ba3e4a9f47fd03e11e32bfdc47f747b1e8fe0d17cf4f728449a155cbf26fa863f385b387f5588296f8e71cb39f4fe0e894cf5f9867f5bc7c27e8b2cf7981abfd64fd193e63394b2efe0bb696dcedeb28a3d5551aca9dcd4a82454d6ef193401e66a42eb1ec216c6c18f5221f248937a063370e945a959205a906971db616112435bb650523fc1b84aa492f576ee840dae7993284e5ddad9bc0ad1142abaa6735af5d20832b1f59c26b19d09e700f0f59b9062d975232a97a420c2c379fc4b9f399b5ed3e45b5aa8b90aade5b4ebec066b0ffba0e6c4e9d228435bc5ee181fa9137de2f8ca37d515e3cb33650b87f1421a70f12ad91b3463db1558d86de77f19a070d99e39f2413c7bb4e1ef37e0fec591fcf61de61eb5d65b03f8880fce71794a65c258539af47b35f097716da119657c1d76b5404cf54edc800dd062d1007759a510d5616767dbb78cb717a30412395453f6fe6794fff3f0ce1d3c6ca505ad12f16bd4fa79220cd837e89651a96d4639e6a1133720230505d4ffb0d7eb14413bd6954ae48904d04ab551f3c3f1ee79e0ba7c9f09f4f8fabb5190b04231f8f02e56170fe77df6af3cefb8bdc148a1cc094c42f208ef649bb4a0e0f0400fc542818418b364f3e6c4056a091f8d10ae72bf0ab53516deb3365a9c7c0d6eee4ac38641a7b07864aec2ccb504b5abc771d7f83e335ed04d6988b8ecf11b1f6cab3322c1eb6e6e5a8128a3e0b6d41c0535ee044d759c34df0ce9085532cff2c808d0709c8c20312b3cec64f65dda326e833ac6e75ed73e9bd67017b5311238d6e709266efb41e5bcd21d319f71eda74a1bd8a449113e5fd0ce1956dee2ccf24fe55ded490dfb7e37d301d71ccbe1bbd110243d03d2d8c9f1a16696fd94a7bd5c3f9c8e952f1078bf499283779039a5d5e99d8e21d01bba3050d74ed5d2498bdeb1c4b9c25e52c29ea7e8db76bafe8f20f4733d73a7c3a9c452aec381c697d7054a88364c3761c41fb6261b06c2e338e379cb75f26d6e5cce2431547edbd470fe32e1ce655b1764d886fdeafd91f2ebf2ebf94d2969f61e434e6acdadd92f60523acccdda367600c5e9804a45f6d81c005236c385ab509188e2254976a430c057a47f89631169f79f77c5e3b64af7bbdece63e06c3d62e51b0d552fb0cc4be24207a6b8b9d0291f03a1ca4b4b2a4c9a2a18f18a1789c46d1a10bd328a67dfd51653cc498de74b20a11d49de48ce2abde115775ad366f40a241e3e05cf94cba02d5a6a8a0f6c3673be6ce7673e6ef248d6c1abb9f54a7f6d6e0e16128147f31ab64d43429ef73173221c085405ed755dae080628b0b0b5e7c292a8b6f8a317a384de07749948a24cdbc12ad6bc282841445b847ed76f6e91f724bc0b1ac7aade4d24a5a20b4d51e7619e6ef6b6629fc65f6813ac4af4550c6dd3424f7bbde434d4f30a4f6429517414f27b4a766baa78021e440910dc3f6575619e313b3636e7e142d3caec490044784cf78f529631416eca537a4e983838aad5d2526fb3b9d5f6a254b5982ca5d783ddca1a34666803641a0fd4fc08a066889c5aa73c5639a9456d4bc36585e82efe42c49de96e73e50b046809cf1a2c1a3d8a259f1108b0e2b6c18613d6f3981f471073246399d73a33682141d8e69ac25a3e749c9840a7d93fefe80ab547202c3f8b3fb5947eff3d268ef18c53cd5712414b72e746c2efc532fbf55f26ac2eedcac479b572da6ef8b3b91b1b57720293ee4268286b53d58470e0da19ade7e82ddb89a8239b446d70c7daa2d77216f7923838ed44c8fffe7e782411e5fa9dc6f3b446aec90a7a3d052958308de737d315c6b3c5fd011e32afc29a44903072a05f1bab7ca5042e7f2a61acc8d6284aa5de78b9a1666b27072f845098c8d5560d10cf98c0dfe4529facc1efef8e2f8e4af915feab67f363c6ba4e20d7da1b6219764018d6a0ae14724a0b7c30d16eb6177111139c4b422a2ecb897a8dcb2b2911cb91f37ddbda08c48fa12aa1f24149e8a32c9c3033f0af8c1941da10db11f2059e741479cfc6e4ead1e2216a0f9479b44a3cecbdba1d74440590e2d87f739efe083f8b29bba56180c0daba56d8b61aa6530bf8ca495a4e8a8c431e331a778df5c100c5a996876dacbc462c9adf641d55462bf1ac397b9e5f23ce0b2d31deb39a29ae409ce3224e5d9c868e4cc296a08589965d0da76c221dc1e330dcd9c68974bee6f19a7215396f770b57091bffaf049783c7a6976caefcbc4f075ed4138a32076cd7a057d8fafd6697a7fce3bd3a526ae411e83c9dc88774afcc2f53b780f25ffb913911c39debd8d89239f8b65ad78ed7de4a11d6d4fc539cef371d1a6f0a9fce08a2eed1736b9d95ecf4cc535351bca17455dd9f83eecb3205d04a2ef7117c80e6b6749a58b2e03341bf0ce3c2688e2adecbb625f08e203f3df4cf957c98a29d018aa72881694f1a08ec97999fb92b92551a3ac46644479260ce3dcc4e39ed637f2d2dd32178bdf474601c010250500f856241d73f36dc9c3e275026843984c16ba730a86adb85b2bf9770ff25d5db752127e3b6121390987bdd736ec59e505e00128071db1ad17afe4c245bd92d62f14f19f5c5fabde057d560b703e7cce0212bfb31ebca1fb496e1ded0fb1b1c6a405a2c7957c779758aa98de771842e06b192dae2b6dadda0dcd04a168b9a96c903b19e4a30064dae631d227a7b56b9e33a54834e3055ff6e0055b56f67b04d73597f6f0e15e8a2ffee3ea5ca126064115562543a202f30a0ab21840fd869f0376b2c5eb9e8611301111b2bca7efd38a897017f69caa84a899c601f5375bcfda9c6294cccc1475cf2c9a7c417b0ab5b5b2f0030f44388f5f56244631f77b4f15689a3a31ddd6f4aba88055f820e0690c47479452926b201290e064dbbc9dade76718f25b4b4ec707c788b2f0b1ffd3e0556aedcdd4536d2fe4aff44839e15189a4918497ccefc676dffbe18b3b251aa2e38aae5a15362b6f40cf2b4c4c4592df8e1cd5566d04afdddcfb423ad848544babaed4d4ec7b563f003d76c1498071dc463cf3a4714c4acb0e1b9aa10a000498dba9e23b373af8d49057c3922198fee3dbad0ebefed3d024e655f39d8e999c7aa5b09c73809134f3a97eb1262f474cb48233daee202b7a3d07cda754b80cab9ebc8a44e2247c439fba34b03d215468c0086e113564ec70be778d37d29c2804cbbb279081e403ce4f2dfce64276b1257fcdf74ddc088224427fb428e82169921724d40184d76905f7e0c471233446694cba3302f7b29b4d23056f2c5d338628d7b77fc264e461e3b8a756522c89ad918c05a70d9a143998e655f192d10d1c7f28c1966462c9e47ba5be25fca19b602a1a9a3aaecbcd09a4f53223442db590dedff64890e0dd1abc0a09d573522d35a50c9dbe2c10360eb460c6bd14adaea26576bc4764fac122f9627bf2dedf5f9dd633adcc493f9be218fd52e66234d09e6601f69b612c7ba0cf1a930442024f3f604080477732f0f7288d9e415c293e7228b8cdafe2055bcd06880b0b6e100d62783bd9d56ee8e289572ad18c5c57f28cf39b6550a2f53ac4e250c4d2e42e4ea0003962b11871df6e32cd33175988687cf33ad6f23bf0dffc8d2ff498f4256ec06c08caeabf9f0ae99a17089380181307d1f3bcd22a9fa13744e7e9066564b80360c5394c4b8f795a3010522497ce363f62447c09b752d3a398ee0a9b238a4c5c32e8c2fcc84239be902326131d1d82056d71622f8d4137ed1b34d596ff01cb637845f7e8a4dc2ea4228392bbc525510115fb768b8c0064a33d9910ba064d8eff2c0a0841de30ea8799d95d5c7d1905793fbabd5b265f76c65259cd7d32af7a637df41eccf1ce302a7dab16d53f1b4aa38b0bee551c64ae473729ca1503a6aab04f6ef4c1535352a59914a4a6ad791011fa54e5bc10a622da5ee781951f7deff170ce49740fa1c80be8c9a6b77072c7ea1ba5e9ff2599031462db4be43e89d0b531766eb0e05b1c5a3994fd9becac321a5e28920ecde41c4e88544cb8d0a26d7cc8d961ce078e8c12f5bb7521d9028cbcce1cecc9cd309247a95d0c39660d7f5cbf2f3bcae5bfd5f7e518a3338444f3de7457bcc4809fac3fb570e797365264ec5227a5652740dc851120a401f33287f43a2fc5ba4c893d125dc9d9e5e74fd2e38d1ba28425a03afc8a928ba38c146a0e28eda06da4a815652c57fe5afe19792f94daf46c27f4681abb847c12abe8405842743daeaccfe9ed34868189286d51f0b029c91b65527262a8fde7dec2b1480f260cb658bc15764c07140782860c16e745a7202efcab893bd8b0cde4c9ef1c56f26669aaa18a4197257bcee9b9bfb2272b9ced613216912ba2001ca80e7dfbf86eff2651b53c2922e245a06cacfa0eab5538fe01f7b06d73785ae1a810c32f60182e2a04c442536f62b98e595027a38df631cd053bad9ec414dc7565c2cf8a7397952276bbc5bb6227dab19858f2045fe73e427b648b894656be0468b0495a36df0ff9d004c977206dfb270966ac36e8b9737b1149c6e36d22b0ed71b31e8f35270a2559d6f843d2eb952eae2dd8709cf6ebe968afdd66a589526a1c77801fe6a1f70a82ad5ee2834e911b7b13774bb89e3a5ce28adb730b70c74247ae7a6e67eb26b4551bcaf6affcb8b8ed2c51b1741a2f4d9489a69c0f256571849b8b8656a10303478d7272db94a62e009343529a4b11325b78d1b4bf423c510d0503633d321af109c6e05ec8546c16204eb82d4a6762c079a508e1c23786eb4de5bc0c09ff3bf50fa8198bcb5bfaef0025ffb59f2f61a239a6", 0x1000, 0x3}, {&(0x7f0000001a40)="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", 0xfe, 0x1}], 0x1001, &(0x7f0000001c00)={[{@data_err_ignore}], [{@audit}, {@audit}]}) recvmsg$unix(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001e80)=""/106, 0x6a}, {&(0x7f0000001f00)=""/40, 0x28}, {&(0x7f0000001f40)=""/95, 0x5f}, {&(0x7f0000001fc0)=""/171, 0xab}, {&(0x7f0000002080)=""/224, 0xe0}], 0x5, &(0x7f0000002200)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0xbd2fc7ac03af2c43) clone3(&(0x7f00000022c0)={0x10080, &(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0), {0x3b}, &(0x7f0000001d00)=""/151, 0x97, &(0x7f0000001dc0)=""/152, &(0x7f0000002280)=[r2, r5, r2, r2, r2, 0x0, r2, r2], 0x8, {r0}}, 0x58) 18:20:27 executing program 3: r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget(0x3, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/148) r2 = shmget(0x2, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f00000000c0)=""/133) timer_gettime(0x0, &(0x7f0000000180)) r3 = shmget(0x2, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f00000001c0)=""/107) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000240)=""/63) r4 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffb000/0x1000)=nil) shmctl$IPC_RMID(r4, 0x0) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000280)=""/94) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000300)=""/220) shmat(r3, &(0x7f0000ffc000/0x1000)=nil, 0x1000) clone3(&(0x7f00000015c0)={0x200200000, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0, {0x32}, &(0x7f00000004c0)=""/176, 0xb0, &(0x7f0000000580)=""/4096, &(0x7f0000001580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) shmctl$IPC_SET(r4, 0x1, &(0x7f0000001640)={{0x1, 0xee00, 0xee01, 0xffffffffffffffff, 0xee01, 0x2, 0xfff9}, 0xfffffff9, 0x6, 0x100000000, 0xfffffffffffff2fb, 0x0, r5}) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000016c0)=""/5) syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) shmctl$IPC_SET(r3, 0x1, &(0x7f0000001940)={{0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x120, 0x8000}, 0x2, 0x8c1, 0x224, 0x17, 0x0, 0x0, 0x4a9}) 18:20:27 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x401, 0x400040) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000040)) r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x1, 0x400) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)}, 0x2) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd=r1, 0x3f, 0x0, 0x7393, 0x5, 0x0, {0x2}}, 0x3) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x2) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3f7, 0x4, 0x70bd2d, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x844}, 0x8000) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000280)='.pending_reads\x00', 0x10800, 0xa8) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f00000002c0)={{0x2, 0x100, 0x101, 0x3, 0x8, 0x7fffffff}, 0x2ed, [0x5, 0x5, 0x3, 0x0, 0x8, 0xd2db, 0x7, 0xffffffff, 0x83, 0x4, 0x28, 0x5, 0x7fffffff, 0x2, 0x4, 0x20, 0x1, 0x977, 0x9, 0x0, 0x3, 0x9a1, 0x2, 0x0, 0x43c3170a, 0x0, 0xa1, 0x7, 0xa2be, 0x0, 0x0, 0x3ff, 0x20, 0x5, 0x4, 0x800, 0x4, 0x1, 0x1f, 0x5, 0x9, 0xfffffffa, 0x3, 0x0, 0x3, 0x37, 0x100, 0x7, 0x9, 0xfff, 0x101, 0x7fffffff, 0x8, 0x8, 0x639, 0x9, 0x94, 0x1, 0x6, 0xfffffffa, 0x1, 0x40000000, 0x40, 0x7fff, 0xeb, 0x498, 0x8001, 0x0, 0xffffff81, 0xa614, 0xfffffffe, 0x5, 0x6, 0x7, 0x0, 0x401, 0x0, 0x2, 0xbee6, 0x401, 0x3, 0x81, 0xff, 0x80000000, 0x8, 0x80000000, 0x56faff8c, 0x401, 0x3, 0x2, 0x8, 0x5, 0x6, 0x800, 0x40, 0x8, 0x200, 0x1, 0xfffff242, 0x5, 0x10000, 0xfffff578, 0x5, 0x4e5a, 0x2, 0x5, 0x525, 0x400, 0x9, 0x800, 0x0, 0x4, 0x10c, 0x80000000, 0x7, 0x5, 0x93, 0x1, 0x3, 0x727d, 0xf2, 0x5, 0x3f, 0x1000, 0x3, 0xfffffffe, 0x7, 0x7fff, 0x100, 0xfff, 0x100, 0x100, 0x95, 0x40, 0x7, 0x4, 0x9, 0x86, 0x6, 0x7fffffff, 0x1f, 0x3, 0x0, 0x9, 0x1b2, 0x2, 0x8, 0x7f, 0x6, 0x3, 0x6, 0x101, 0x1, 0x3, 0x400, 0x10000, 0x6, 0x7fffffff, 0x101, 0x6, 0x100, 0x7fff, 0x0, 0x1, 0x1ff, 0x3, 0x5, 0x5, 0x7, 0x9, 0x841c, 0x7, 0xff, 0x800, 0x7cd, 0x401, 0x81, 0x8, 0x4, 0xd, 0x10001, 0x401, 0x1, 0xffffffff, 0x6, 0x4, 0x8001, 0xa6, 0x4, 0x3ff, 0x2, 0x8000, 0x29d, 0x5, 0x7, 0xfffffff9, 0xdb03, 0x7, 0x200, 0x7, 0x401, 0x7ff, 0x100, 0x6, 0x3ff, 0xfffffb98, 0x4000, 0x3ff, 0x80000000, 0x0, 0x1ff, 0x0, 0xad, 0x86, 0x6, 0x11a570ad, 0x8, 0x400, 0x9, 0x5, 0x1ff, 0x80000001, 0x100, 0x4, 0x20, 0xb60, 0x5, 0x1, 0x91, 0x9, 0x6, 0x7ff, 0x4, 0xc13, 0x200, 0x40, 0x9, 0x7fffffff, 0x2, 0x81, 0xbc, 0x3, 0x3, 0x9, 0x800, 0xffff, 0x10000, 0x788d6c34, 0xff, 0x0, 0x2, 0x2, 0x64, 0xffffffff, 0x80, 0x1ff, 0x0, 0x0, 0x0, 0xb5, 0x101, 0x1, 0x1, 0x3, 0x6, 0x1, 0x6, 0x3, 0x4, 0x1, 0x5, 0x3, 0xfff, 0x0, 0x0, 0x7ff, 0x0, 0xfffffffb, 0x9, 0xb9, 0x9, 0x7, 0x2, 0x1, 0x7, 0x7, 0x6, 0x2, 0x2a4, 0x4, 0x0, 0x3, 0xbfb1, 0x6, 0x3, 0x1, 0x5d3, 0x1, 0x4, 0x5, 0x7, 0x2e, 0x70a, 0x0, 0x0, 0x0, 0x2, 0x8, 0x7ff, 0x3, 0x4be8, 0x2, 0x7b21, 0x3, 0x8001, 0xfffffff7, 0x3f, 0x5, 0x8, 0x3f, 0x7fffffff, 0x5, 0x3, 0x1, 0x2, 0x1, 0x3f, 0x3f, 0x8, 0x20, 0x10000, 0x2, 0x0, 0x8f, 0x0, 0x8024, 0xff, 0x20, 0x8001, 0x0, 0x2, 0x5, 0x3f, 0x82, 0x6, 0xae6c, 0x6, 0x71c5, 0x3, 0x8, 0x0, 0x7fff, 0x1, 0x9, 0x6, 0x2, 0x7f, 0x20000, 0x9, 0xfff, 0x10001, 0x80008, 0x0, 0x400, 0x4388, 0x4, 0x5, 0x1, 0x8b0, 0x3, 0x0, 0x2f, 0x8000, 0x5b67, 0x9, 0x8, 0x8, 0x3, 0x0, 0x0, 0x8, 0x20, 0x7fffffff, 0x6, 0x63, 0x7, 0x1, 0xfffff800, 0x8, 0x1, 0x5, 0x5, 0x5, 0x80, 0x1, 0x3ff, 0x80, 0x80000000, 0xb1a, 0xffff, 0x6, 0x800, 0x200, 0x8, 0x62, 0x8, 0x8000, 0x8, 0x9, 0xfffffeff, 0xab30, 0x80000001, 0x1f, 0x1ff, 0x8001, 0x0, 0x8, 0x5, 0x200, 0x5, 0x8, 0xdef, 0x3, 0x7f, 0x80, 0x6ea3, 0x1000, 0x4, 0xfffffff7, 0x1, 0x5, 0x79b, 0x2, 0x0, 0x7fff, 0x0, 0x4, 0xfffffffd, 0x3, 0x0, 0xfffffffa, 0x3, 0xf35, 0x1000, 0xfffffffc, 0x0, 0x1, 0x5a43, 0x9, 0x1, 0x4, 0xfd7, 0x1, 0x3ff, 0x10000, 0x4, 0x8, 0x988, 0x226, 0xfb, 0x2, 0x5, 0x4, 0x3, 0x8, 0x800, 0x3, 0x7, 0x4, 0x7, 0x1, 0x7ff, 0x0, 0x80000001, 0x81, 0x80000001, 0x80, 0xc0c, 0x6, 0x0, 0x0, 0x8, 0x4, 0x9, 0x1, 0xfd, 0x1, 0x2, 0x2, 0x3, 0xffffff81, 0x3, 0x5, 0xfffffffa, 0x9, 0x3, 0x8001, 0xffffff1a, 0x1, 0x3ff, 0x41, 0xe6, 0x401, 0x2, 0x3f, 0x9, 0xa47, 0x1, 0xdf0, 0x2, 0x4, 0x7ff, 0xd4a, 0x48000000, 0x4177, 0x7, 0x9, 0x1, 0xec, 0x886, 0x5, 0x80000000, 0x5e1c79f0, 0x1, 0x1, 0x6, 0x3f, 0x2, 0x35ed, 0x3, 0x2, 0x1000, 0x3, 0x14, 0x6, 0x2, 0x8, 0x0, 0x2, 0x31401f8d, 0x7750, 0x200, 0x3ff, 0x1000, 0xfffffffc, 0x20, 0x6, 0x40000000, 0x1f, 0x7, 0x4, 0x0, 0x7, 0x97, 0x20, 0xa20d, 0x0, 0x2, 0x9, 0x1300000, 0x38b2, 0x6, 0x5, 0x2, 0x6b2, 0x2, 0xaa7, 0x2, 0x8, 0x7, 0x401, 0x2, 0x80000000, 0xfff, 0x2, 0x83f, 0x8, 0x3ff, 0x0, 0xff, 0xa01, 0x10000, 0xffffffc1, 0x1, 0x400, 0x738, 0x80000000, 0x2, 0x9, 0x0, 0x80, 0x8, 0xed19, 0x1500000, 0x80000001, 0x6, 0x2, 0x2, 0xe06, 0x7, 0x3, 0x548, 0xecc4, 0x2, 0x0, 0x800, 0x7ff, 0x52ba, 0x1647, 0xb9ec, 0x7fffffff, 0x1df, 0x7f, 0xfff, 0x10001, 0x5, 0x5, 0x8bb, 0x800, 0x7f, 0x7, 0x47f, 0x6, 0x1ff, 0xe0a, 0xd3, 0x8, 0x6, 0x80000000, 0xffffffff, 0x5, 0x7, 0x1fc943c2, 0x36, 0xffff, 0x1, 0x6, 0x650, 0x7246, 0xc22, 0x4, 0x4, 0xffff, 0x9, 0xfffffcca, 0x4, 0x3, 0x3, 0x8, 0x7, 0x8, 0x8, 0x400, 0x7, 0x7, 0xa4, 0x0, 0x7, 0x8, 0xf51a, 0x0, 0x7ff, 0x80, 0x10001, 0x2441, 0x6, 0x200, 0x5, 0x1f, 0x7, 0x0, 0x8, 0x40, 0xffff, 0xffff782e, 0xfffffffb, 0xff, 0xaba, 0x6, 0x4, 0xfffffffc, 0x1c98, 0xcd, 0x7, 0x8, 0xc80, 0xff, 0x3, 0x8, 0x3, 0x1eb, 0x80000001, 0x7, 0x1, 0xbd1, 0x100, 0x6, 0x6b0, 0xffff, 0x5, 0x7, 0xefc, 0x48, 0x8, 0x3f, 0xb8e, 0x40, 0x0, 0x1f, 0x8, 0x1d, 0x0, 0x32c, 0x6a7d, 0x20, 0x0, 0x9c, 0x0, 0x1, 0x1, 0xffffffff, 0x6b, 0x9, 0xff, 0xef14, 0x8000, 0xe78c, 0x9, 0x2, 0x3f, 0x4, 0x0, 0xc00000, 0x1ff, 0x3e, 0xffffffff, 0x9, 0x6, 0x43, 0x2, 0x3ff, 0x9, 0x91, 0x9, 0x5, 0x488, 0x4, 0x6, 0x6, 0x5, 0x8, 0x81, 0x4, 0x0, 0x7c8, 0x8, 0x2, 0x9, 0x1, 0x401, 0x3ff, 0x6, 0x8, 0x0, 0x7fff, 0x2, 0x7, 0x2, 0xc0, 0xfffffffb, 0x4, 0x7, 0x6, 0x0, 0x4, 0x400, 0x1ff, 0x3, 0x6, 0x7f, 0xe0, 0xe782, 0x80000000, 0x80000001, 0x6, 0x3, 0xff, 0x5, 0x2, 0x80000000, 0x8000, 0x9, 0xb1, 0x80, 0x6, 0x6235, 0x2, 0x1, 0x83f7, 0xffff0050, 0x101, 0x2, 0x57, 0x8, 0x4, 0xdf7, 0x8, 0x7ff, 0x2, 0x3, 0x5, 0x10001, 0x7, 0x492, 0x81, 0x100, 0x68, 0x80000000, 0x8000, 0xffff7fff, 0x3, 0x0, 0x8, 0x4, 0xfffffff8, 0x270c, 0x3ff, 0xfe, 0x8000, 0x4, 0xc4b, 0x0, 0x1, 0x5, 0x2, 0x40000000, 0xab1, 0x6, 0x7, 0x6, 0x8, 0x0, 0x8, 0x7, 0x9a9, 0x5, 0x1cb, 0x1bd, 0x8, 0x80000001, 0xfff, 0x10000, 0xca, 0x7ff, 0x5, 0x80000000, 0x1, 0x9, 0x0, 0x3, 0x0, 0xd567, 0x8, 0x6, 0x80000001, 0x8001, 0xffffffff, 0x8, 0x125da3c4, 0x7, 0x8000, 0x2, 0x7fffffff, 0x7ff, 0x3, 0x3, 0x200, 0x1, 0xfffeffff, 0xfffffff9, 0x3f, 0x10001, 0x4, 0x6, 0x81, 0x1, 0x66a, 0x0, 0x40, 0x1, 0x3, 0x8, 0x2, 0x2, 0x10001, 0x8, 0x5, 0x2, 0x1af4, 0x0, 0x0, 0x7abb9f95, 0x7e8, 0x0, 0xfffffffa, 0x4, 0x9, 0x1, 0x80, 0x7, 0xfff, 0x6, 0x8000, 0x81, 0x4, 0x6, 0x8001, 0x7, 0x80000000, 0x200, 0x5, 0x6, 0x4, 0x8, 0x8152, 0x80000001, 0x2, 0x8000, 0x3, 0x81, 0xcad0, 0x2, 0x9, 0x3, 0x80, 0x3, 0x80, 0x2, 0xffffffff, 0x1f, 0x0, 0x800, 0x80000000, 0x401, 0x9, 0x29, 0x200, 0x973, 0x7, 0x9, 0x1, 0x3, 0xdbf7, 0xbb, 0x3, 0xffff, 0x3, 0x190d, 0xffffff80, 0x8, 0x7ebe4177, 0x0, 0x42, 0x101, 0x0, 0x9, 0x0, 0x968, 0xfff, 0x3f, 0x1, 0x8cb, 0xffff, 0x4d, 0xffffff79, 0x9, 0x4, 0x9, 0x0, 0x2, 0xd5f00000, 0x7fffffff, 0xfff, 0x7, 0x80, 0xfffffff8, 0x16, 0x101, 0x400, 0x7, 0x4, 0x0, 0x101, 0x53f704be, 0x10000, 0x7, 0x3ff, 0x7f, 0x0, 0x800, 0x7, 0x7ff, 0x6, 0x7, 0x1f, 0x4, 0xc1, 0x7, 0x8, 0x2, 0x4, 0x8000, 0x2e9, 0x8, 0x3, 0xffff, 0x0, 0x2, 0xfffffffc, 0xd0, 0x3, 0x6, 0xd06, 0xffff0965]}) socketpair(0xa, 0x1, 0x5d, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001400)={'syztnl2\x00', &(0x7f0000001340)={'gre0\x00', 0x0, 0x20, 0x80, 0x4, 0x3, {{0x24, 0x4, 0x3, 0x2, 0x90, 0x68, 0x0, 0x9, 0x29, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x18, 0xae, 0x0, 0x4, [0x6, 0x34626d2f, 0xff, 0x6, 0x8001]}, @lsrr={0x83, 0x2b, 0x7c, [@empty, @remote, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast]}, @timestamp={0x44, 0x2c, 0x66, 0x0, 0x9, [0x4f0, 0x4, 0x263b, 0x4, 0x5, 0x200800, 0x8d33, 0x1, 0x1, 0x100]}, @ssrr={0x89, 0xb, 0x17, [@multicast2, @rand_addr=0x64010102]}]}}}}}) r6 = openat(r3, &(0x7f0000001440)='./file0\x00', 0x2, 0xc) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x28, 0x3f7, 0x20, 0x70bd2c, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001640)={'ip_vti0\x00', &(0x7f0000001580)={'gretap0\x00', r5, 0x10, 0x1, 0x0, 0x3, {{0x24, 0x4, 0x2, 0x10, 0x90, 0x64, 0x0, 0xfa, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @remote, {[@timestamp={0x44, 0x20, 0xfa, 0x0, 0x0, [0x8, 0x80000000, 0x33704865, 0x1, 0x80000001, 0x7, 0x6]}, @ssrr={0x89, 0x27, 0xd7, [@broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @broadcast, @multicast1, @local]}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0xd, [0x185]}, @timestamp={0x44, 0x10, 0x39, 0x0, 0x5, [0x1ff, 0xfffff801, 0x4]}, @generic={0x503b1c8fe85feec3, 0xb, "0176d3c1a326a8696c"}, @rr={0x7, 0x3, 0x3f}, @rr={0x7, 0xf, 0xe, [@private=0xa010102, @remote, @rand_addr=0x64010102]}]}}}}}) syz_open_dev$rtc(&(0x7f0000001680), 0x2, 0x20000) ioctl$HIDIOCSFLAG(r6, 0x4004480f, &(0x7f00000016c0)=0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) [ 70.978629] audit: type=1400 audit(1763144427.398:7): avc: denied { execmem } for pid=280 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:20:27 executing program 5: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = memfd_secret(0x80000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x3, 0x0, @fd=r1, 0x3, &(0x7f0000000000)="b3bdba2eb012ad80ef0b7a0f38d18713825857b4f4847cb0342f21201b67f9a1e0029cf3a93a9d209adcfa4b1fb8edb808b8e5b5039fc92cffa72afe8eb926f4b4b6d7d9aa128f7852551bc5c8be2fe474bed0d4889a", 0x56, 0x8}, 0x2) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0xffffffffffffff4b) r2 = memfd_secret(0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x10000000) syz_io_uring_submit(r0, r3, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2004, @fd_index=0x2, 0x8, &(0x7f00000000c0)=""/177, 0xb1, 0x9}, 0xffff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) openat$cgroup(r4, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x10, 0x7, 0x8001, 0x9, {{0x37, 0x4, 0x3, 0x24, 0xdc, 0x65, 0x0, 0x0, 0xa, 0x0, @empty, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x50, 0x0, [{0x1, 0x6, 'K}Xz'}, {0x1, 0x7, "2933a7bfde"}, {0x7, 0x4, "21b0"}, {0x6, 0x12, "66432560f6a67afa694b01598e4eddb5"}, {0x2, 0x5, "83c1ee"}, {0x6, 0xe, "f48c2d0156c0cebc8f6c6954"}, {0x7, 0x9, "7dc59853405dbb"}, {0x0, 0xb, "110bbe08abc56e0c17"}]}, @timestamp_addr={0x44, 0x1c, 0x55, 0x1, 0x8, [{@empty}, {@remote, 0x20}, {@rand_addr=0x64010102, 0x3}]}, @noop, @timestamp_prespec={0x44, 0xc, 0xf6, 0x3, 0x6, [{@broadcast, 0x8}]}, @rr={0x7, 0x2b, 0x27, [@empty, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101, @multicast1, @remote]}, @timestamp={0x44, 0x8, 0xd8, 0x0, 0x2, [0x101]}, @timestamp={0x44, 0xc, 0xad, 0x0, 0x7, [0x8, 0x3]}, @rr={0x7, 0xb, 0xb5, [@loopback, @local]}]}}}}}) ioctl$RTC_AIE_ON(r1, 0x7001) r6 = memfd_secret(0x0) ioctl$HIDIOCGREPORT(r6, 0x400c4807, &(0x7f00000003c0)={0x3, 0x1, 0x3}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r7, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x200088d1}, 0x0) r8 = openat$incfs(r1, &(0x7f0000000580)='.log\x00', 0x82, 0x20) openat$cgroup(r8, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', r2, &(0x7f00000006c0)='./file0\x00', 0x1400) [ 72.115014] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.118242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.120367] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.125993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.129100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.309165] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.314545] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.321013] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.323800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.326152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.329657] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.331390] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.338713] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.341188] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.343261] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.344999] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.346066] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.355300] ================================================================== [ 72.356485] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 72.357561] Read of size 2 at addr ffff88800b955b78 by task kworker/u11:4/307 [ 72.361841] [ 72.362666] CPU: 1 UID: 0 PID: 307 Comm: kworker/u11:4 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 72.362698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 72.362714] Workqueue: hci2 hci_cmd_work [ 72.362746] Call Trace: [ 72.362754] [ 72.362764] dump_stack_lvl+0xca/0x120 [ 72.362794] print_report+0xcb/0x610 [ 72.362824] ? __virt_addr_valid+0x100/0x5d0 [ 72.362851] ? hci_cmd_work+0x66d/0x6d0 [ 72.362880] ? hci_cmd_work+0x66d/0x6d0 [ 72.362910] kasan_report+0xca/0x100 [ 72.362940] ? hci_cmd_work+0x66d/0x6d0 [ 72.362972] hci_cmd_work+0x66d/0x6d0 [ 72.363003] process_one_work+0x8e1/0x19c0 [ 72.363043] ? __pfx_process_one_work+0x10/0x10 [ 72.363076] ? move_linked_works+0x172/0x270 [ 72.363102] ? assign_work+0x196/0x240 [ 72.363134] worker_thread+0x67e/0xe90 [ 72.363167] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 72.363196] ? __pfx_worker_thread+0x10/0x10 [ 72.363229] kthread+0x3c8/0x740 [ 72.363259] ? __pfx_kthread+0x10/0x10 [ 72.363287] ? ret_from_fork+0x79/0x7a0 [ 72.363310] ? lock_release+0xc8/0x290 [ 72.363346] ? __pfx_kthread+0x10/0x10 [ 72.363376] ret_from_fork+0x67a/0x7a0 [ 72.363398] ? __pfx_ret_from_fork+0x10/0x10 [ 72.363423] ? __switch_to+0x759/0x1060 [ 72.363468] ? __pfx_kthread+0x10/0x10 [ 72.363498] ret_from_fork_asm+0x1a/0x30 [ 72.363536] [ 72.363544] [ 72.385673] Allocated by task 298: [ 72.386289] kasan_save_stack+0x24/0x50 [ 72.386864] kasan_save_track+0x14/0x30 [ 72.387437] __kasan_slab_alloc+0x59/0x70 [ 72.388043] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 72.388882] __alloc_skb+0x2ab/0x370 [ 72.389531] hci_cmd_sync_alloc+0x34/0x300 [ 72.390251] __hci_cmd_sync_sk+0xf7/0x5c0 [ 72.390859] hci_write_ca_timeout_sync+0x8f/0x1e0 [ 72.391556] hci_dev_open_sync+0x1874/0x1f60 [ 72.392183] hci_power_on+0xdb/0x5d0 [ 72.392814] process_one_work+0x8e1/0x19c0 [ 72.393542] worker_thread+0x67e/0xe90 [ 72.394217] kthread+0x3c8/0x740 [ 72.394819] ret_from_fork+0x67a/0x7a0 [ 72.395474] ret_from_fork_asm+0x1a/0x30 [ 72.396064] [ 72.396311] Freed by task 308: [ 72.396786] kasan_save_stack+0x24/0x50 [ 72.397360] kasan_save_track+0x14/0x30 [ 72.397934] kasan_save_free_info+0x3a/0x60 [ 72.398559] __kasan_slab_free+0x43/0x70 [ 72.399142] kmem_cache_free+0x26f/0x500 [ 72.399742] kfree_skbmem+0x18a/0x1f0 [ 72.400295] sk_skb_reason_drop+0x10e/0x1b0 [ 72.400910] vhci_read+0x3d5/0x5d0 [ 72.401430] vfs_read+0x1eb/0xc70 [ 72.401934] ksys_read+0x121/0x240 [ 72.402447] do_syscall_64+0xbf/0x430 [ 72.402997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.403737] [ 72.403987] The buggy address belongs to the object at ffff88800b955b40 [ 72.403987] which belongs to the cache skbuff_head_cache of size 232 [ 72.405803] The buggy address is located 56 bytes inside of [ 72.405803] freed 232-byte region [ffff88800b955b40, ffff88800b955c28) [ 72.407479] [ 72.407730] The buggy address belongs to the physical page: [ 72.408520] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb955 [ 72.409632] memcg:ffff88800c24f501 [ 72.410135] anon flags: 0x100000000000000(node=0|zone=1) [ 72.410907] page_type: f5(slab) [ 72.411388] raw: 0100000000000000 ffff8880096c78c0 ffffea00002fd640 dead000000000003 [ 72.412488] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff88800c24f501 [ 72.413567] page dumped because: kasan: bad access detected [ 72.414358] [ 72.414607] Memory state around the buggy address: [ 72.415294] ffff88800b955a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.416318] ffff88800b955a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 72.417346] >ffff88800b955b00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 72.418362] ^ [ 72.419368] ffff88800b955b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.420410] ffff88800b955c00: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 72.421426] ================================================================== [ 72.422600] Disabling lock debugging due to kernel taint [ 72.424569] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.425656] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.433066] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.437909] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.442036] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.449873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.452040] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.464708] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.464768] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.467655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.471045] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.475398] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.477193] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.482064] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 72.488570] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 72.491289] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 72.491303] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.499104] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.503147] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 72.503162] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.508202] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 72.512615] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.529255] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.206053] Bluetooth: hci0: command tx timeout [ 74.463611] Bluetooth: hci4: command tx timeout [ 74.463655] Bluetooth: hci2: command tx timeout [ 74.526977] Bluetooth: hci3: command tx timeout [ 74.527354] Bluetooth: hci1: command tx timeout [ 74.527601] Bluetooth: hci5: command tx timeout [ 74.589891] Bluetooth: hci6: command tx timeout [ 74.591385] Bluetooth: hci7: command tx timeout [ 76.254917] Bluetooth: hci0: command tx timeout [ 76.510258] Bluetooth: hci2: command tx timeout [ 76.510963] Bluetooth: hci4: command tx timeout [ 76.573928] Bluetooth: hci5: command tx timeout [ 76.574526] Bluetooth: hci3: command tx timeout [ 76.575139] Bluetooth: hci1: command tx timeout [ 76.639010] Bluetooth: hci7: command tx timeout [ 76.639590] Bluetooth: hci6: command tx timeout [ 78.301892] Bluetooth: hci0: command tx timeout [ 78.558130] Bluetooth: hci2: command tx timeout [ 78.558544] Bluetooth: hci4: command tx timeout [ 78.621940] Bluetooth: hci1: command tx timeout [ 78.622345] Bluetooth: hci3: command tx timeout [ 78.622711] Bluetooth: hci5: command tx timeout [ 78.685887] Bluetooth: hci6: command tx timeout [ 78.686297] Bluetooth: hci7: command tx timeout [ 80.350004] Bluetooth: hci0: command tx timeout [ 80.606203] Bluetooth: hci4: command tx timeout [ 80.607012] Bluetooth: hci2: command tx timeout [ 80.670242] Bluetooth: hci5: command tx timeout [ 80.671122] Bluetooth: hci3: command tx timeout [ 80.671952] Bluetooth: hci1: command tx timeout [ 80.735878] Bluetooth: hci7: command tx timeout [ 80.735918] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 18:20:28 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff8880166475d8 RCX=ffffffff81a77e5e RDX=1ffff11002cc8ebc RSI=ffffffff81a77e6c RDI=ffff8880166475e0 RBP=ffff8880166478d0 RSP=ffff888016647518 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88800de8e000 R13=0000000000000000 R14=ffff888016647944 R15=0000000000000000 RIP=ffffffff817533e0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faa713d21f0 CR3=00000000172ce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=000055719bf8bc20ffffffff00000004 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000200000000000000020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8293dc70 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff888018db7620 R8 =00000000ffffffff R9 =ffffed10031b6eb5 R10=0000000000000000 R11=000000003a555043 R12=0000000000000076 R13=ffffffff889747d0 R14=ffffffff88974780 R15=ffffffff88974a40 RIP=ffffffff8293dcc5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd5ec447320 CR3=000000001d694000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fd8529e27c000007fd8529e27c8 XMM02=00007fd8529e27e000007fd8529e27c0 XMM03=00007fd8529e27c800007fd8529e27c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000