Warning: Permanently added '[localhost]:8781' (ECDSA) to the list of known hosts. 2025/07/02 18:54:06 fuzzer started 2025/07/02 18:54:06 dialing manager at localhost:45015 syzkaller login: [ 49.263788] cgroup: Unknown subsys name 'net' [ 49.334529] cgroup: Unknown subsys name 'cpuset' [ 49.354884] cgroup: Unknown subsys name 'rlimit' 2025/07/02 18:54:16 syscalls: 2214 2025/07/02 18:54:16 code coverage: enabled 2025/07/02 18:54:16 comparison tracing: enabled 2025/07/02 18:54:16 extra coverage: enabled 2025/07/02 18:54:16 setuid sandbox: enabled 2025/07/02 18:54:16 namespace sandbox: enabled 2025/07/02 18:54:16 Android sandbox: enabled 2025/07/02 18:54:16 fault injection: enabled 2025/07/02 18:54:16 leak checking: enabled 2025/07/02 18:54:16 net packet injection: enabled 2025/07/02 18:54:16 net device setup: enabled 2025/07/02 18:54:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/02 18:54:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/02 18:54:16 USB emulation: enabled 2025/07/02 18:54:16 hci packet injection: enabled 2025/07/02 18:54:16 wifi device emulation: enabled 2025/07/02 18:54:16 802.15.4 emulation: enabled 2025/07/02 18:54:17 fetching corpus: 50, signal 20173/21953 (executing program) 2025/07/02 18:54:17 fetching corpus: 100, signal 31222/34564 (executing program) 2025/07/02 18:54:17 fetching corpus: 150, signal 36040/40886 (executing program) 2025/07/02 18:54:17 fetching corpus: 200, signal 39039/45372 (executing program) 2025/07/02 18:54:17 fetching corpus: 250, signal 46085/53592 (executing program) 2025/07/02 18:54:17 fetching corpus: 300, signal 50841/59518 (executing program) 2025/07/02 18:54:17 fetching corpus: 350, signal 53262/63187 (executing program) 2025/07/02 18:54:17 fetching corpus: 400, signal 57211/68185 (executing program) 2025/07/02 18:54:17 fetching corpus: 450, signal 59006/71142 (executing program) 2025/07/02 18:54:17 fetching corpus: 500, signal 61194/74425 (executing program) 2025/07/02 18:54:17 fetching corpus: 550, signal 63361/77632 (executing program) 2025/07/02 18:54:17 fetching corpus: 600, signal 65848/81051 (executing program) 2025/07/02 18:54:17 fetching corpus: 650, signal 67305/83562 (executing program) 2025/07/02 18:54:18 fetching corpus: 700, signal 68795/86043 (executing program) 2025/07/02 18:54:18 fetching corpus: 750, signal 71189/89289 (executing program) 2025/07/02 18:54:18 fetching corpus: 800, signal 74225/93001 (executing program) 2025/07/02 18:54:18 fetching corpus: 850, signal 75485/95236 (executing program) 2025/07/02 18:54:18 fetching corpus: 900, signal 77150/97647 (executing program) 2025/07/02 18:54:18 fetching corpus: 950, signal 78571/99894 (executing program) 2025/07/02 18:54:18 fetching corpus: 1000, signal 80830/102709 (executing program) 2025/07/02 18:54:18 fetching corpus: 1050, signal 82180/104922 (executing program) 2025/07/02 18:54:18 fetching corpus: 1100, signal 83533/107016 (executing program) 2025/07/02 18:54:18 fetching corpus: 1150, signal 84828/109006 (executing program) 2025/07/02 18:54:18 fetching corpus: 1200, signal 86196/111022 (executing program) 2025/07/02 18:54:18 fetching corpus: 1250, signal 88305/113566 (executing program) 2025/07/02 18:54:18 fetching corpus: 1300, signal 89056/115109 (executing program) 2025/07/02 18:54:18 fetching corpus: 1350, signal 89876/116772 (executing program) 2025/07/02 18:54:18 fetching corpus: 1400, signal 91879/119163 (executing program) 2025/07/02 18:54:19 fetching corpus: 1450, signal 92833/120808 (executing program) 2025/07/02 18:54:19 fetching corpus: 1500, signal 93822/122463 (executing program) 2025/07/02 18:54:19 fetching corpus: 1550, signal 95730/124672 (executing program) 2025/07/02 18:54:19 fetching corpus: 1600, signal 96993/126457 (executing program) 2025/07/02 18:54:19 fetching corpus: 1650, signal 98202/128126 (executing program) 2025/07/02 18:54:19 fetching corpus: 1700, signal 100014/130137 (executing program) 2025/07/02 18:54:19 fetching corpus: 1750, signal 100945/131579 (executing program) 2025/07/02 18:54:19 fetching corpus: 1800, signal 102012/133100 (executing program) 2025/07/02 18:54:19 fetching corpus: 1850, signal 102775/134363 (executing program) 2025/07/02 18:54:19 fetching corpus: 1900, signal 103297/135491 (executing program) 2025/07/02 18:54:19 fetching corpus: 1950, signal 103774/136591 (executing program) 2025/07/02 18:54:19 fetching corpus: 2000, signal 104596/137881 (executing program) 2025/07/02 18:54:19 fetching corpus: 2050, signal 105528/139251 (executing program) 2025/07/02 18:54:19 fetching corpus: 2100, signal 106594/140618 (executing program) 2025/07/02 18:54:20 fetching corpus: 2150, signal 107239/141809 (executing program) 2025/07/02 18:54:20 fetching corpus: 2200, signal 108318/143118 (executing program) 2025/07/02 18:54:20 fetching corpus: 2250, signal 108907/144206 (executing program) 2025/07/02 18:54:20 fetching corpus: 2300, signal 109670/145351 (executing program) 2025/07/02 18:54:20 fetching corpus: 2350, signal 110116/146320 (executing program) 2025/07/02 18:54:20 fetching corpus: 2400, signal 111017/147499 (executing program) 2025/07/02 18:54:20 fetching corpus: 2450, signal 111642/148571 (executing program) 2025/07/02 18:54:20 fetching corpus: 2500, signal 112357/149626 (executing program) 2025/07/02 18:54:20 fetching corpus: 2550, signal 113228/150725 (executing program) 2025/07/02 18:54:20 fetching corpus: 2600, signal 114005/151768 (executing program) 2025/07/02 18:54:20 fetching corpus: 2650, signal 114576/152729 (executing program) 2025/07/02 18:54:21 fetching corpus: 2700, signal 115097/153641 (executing program) 2025/07/02 18:54:21 fetching corpus: 2750, signal 115627/154566 (executing program) 2025/07/02 18:54:21 fetching corpus: 2800, signal 116468/155599 (executing program) 2025/07/02 18:54:21 fetching corpus: 2850, signal 117001/156521 (executing program) 2025/07/02 18:54:21 fetching corpus: 2900, signal 117662/157416 (executing program) 2025/07/02 18:54:21 fetching corpus: 2950, signal 118330/158383 (executing program) 2025/07/02 18:54:21 fetching corpus: 3000, signal 118844/159226 (executing program) 2025/07/02 18:54:21 fetching corpus: 3050, signal 119279/160056 (executing program) 2025/07/02 18:54:21 fetching corpus: 3100, signal 119624/160810 (executing program) 2025/07/02 18:54:21 fetching corpus: 3150, signal 120066/161614 (executing program) 2025/07/02 18:54:21 fetching corpus: 3200, signal 120388/162342 (executing program) 2025/07/02 18:54:21 fetching corpus: 3250, signal 121000/163179 (executing program) 2025/07/02 18:54:21 fetching corpus: 3300, signal 121503/163951 (executing program) 2025/07/02 18:54:21 fetching corpus: 3350, signal 122117/164733 (executing program) 2025/07/02 18:54:21 fetching corpus: 3400, signal 122770/165513 (executing program) 2025/07/02 18:54:21 fetching corpus: 3450, signal 123669/166365 (executing program) 2025/07/02 18:54:22 fetching corpus: 3500, signal 124216/167120 (executing program) 2025/07/02 18:54:22 fetching corpus: 3550, signal 124543/167800 (executing program) 2025/07/02 18:54:22 fetching corpus: 3600, signal 124961/168500 (executing program) 2025/07/02 18:54:22 fetching corpus: 3650, signal 125447/169190 (executing program) 2025/07/02 18:54:22 fetching corpus: 3700, signal 125822/169856 (executing program) 2025/07/02 18:54:22 fetching corpus: 3750, signal 126225/170494 (executing program) 2025/07/02 18:54:22 fetching corpus: 3800, signal 126821/171177 (executing program) 2025/07/02 18:54:22 fetching corpus: 3850, signal 127090/171824 (executing program) 2025/07/02 18:54:22 fetching corpus: 3900, signal 127578/172459 (executing program) 2025/07/02 18:54:22 fetching corpus: 3950, signal 128033/173067 (executing program) 2025/07/02 18:54:22 fetching corpus: 4000, signal 128476/173687 (executing program) 2025/07/02 18:54:22 fetching corpus: 4050, signal 128700/174273 (executing program) 2025/07/02 18:54:22 fetching corpus: 4100, signal 129066/174862 (executing program) 2025/07/02 18:54:22 fetching corpus: 4150, signal 129330/175433 (executing program) 2025/07/02 18:54:22 fetching corpus: 4200, signal 129749/176057 (executing program) 2025/07/02 18:54:22 fetching corpus: 4250, signal 130272/176623 (executing program) 2025/07/02 18:54:22 fetching corpus: 4300, signal 130698/177215 (executing program) 2025/07/02 18:54:23 fetching corpus: 4350, signal 131505/177802 (executing program) 2025/07/02 18:54:23 fetching corpus: 4400, signal 131927/178321 (executing program) 2025/07/02 18:54:23 fetching corpus: 4450, signal 132257/178878 (executing program) 2025/07/02 18:54:23 fetching corpus: 4500, signal 132652/179174 (executing program) 2025/07/02 18:54:23 fetching corpus: 4550, signal 132933/179174 (executing program) 2025/07/02 18:54:23 fetching corpus: 4600, signal 133554/179174 (executing program) 2025/07/02 18:54:23 fetching corpus: 4650, signal 133960/179174 (executing program) 2025/07/02 18:54:23 fetching corpus: 4700, signal 134422/179174 (executing program) 2025/07/02 18:54:23 fetching corpus: 4750, signal 134793/179174 (executing program) 2025/07/02 18:54:23 fetching corpus: 4800, signal 135020/179174 (executing program) 2025/07/02 18:54:23 fetching corpus: 4850, signal 135197/179174 (executing program) 2025/07/02 18:54:23 fetching corpus: 4900, signal 136103/179174 (executing program) 2025/07/02 18:54:23 fetching corpus: 4950, signal 136389/179174 (executing program) 2025/07/02 18:54:24 fetching corpus: 5000, signal 136649/179174 (executing program) 2025/07/02 18:54:24 fetching corpus: 5050, signal 136959/179174 (executing program) 2025/07/02 18:54:24 fetching corpus: 5100, signal 137323/179174 (executing program) 2025/07/02 18:54:24 fetching corpus: 5150, signal 137657/179174 (executing program) 2025/07/02 18:54:24 fetching corpus: 5200, signal 137990/179174 (executing program) 2025/07/02 18:54:24 fetching corpus: 5250, signal 138484/179174 (executing program) 2025/07/02 18:54:24 fetching corpus: 5300, signal 138762/179174 (executing program) 2025/07/02 18:54:24 fetching corpus: 5350, signal 139049/179174 (executing program) 2025/07/02 18:54:24 fetching corpus: 5400, signal 139356/179174 (executing program) 2025/07/02 18:54:24 fetching corpus: 5450, signal 139600/179174 (executing program) 2025/07/02 18:54:24 fetching corpus: 5500, signal 139920/179174 (executing program) 2025/07/02 18:54:24 fetching corpus: 5550, signal 140312/179174 (executing program) 2025/07/02 18:54:24 fetching corpus: 5600, signal 140559/179174 (executing program) 2025/07/02 18:54:24 fetching corpus: 5650, signal 140782/179174 (executing program) 2025/07/02 18:54:24 fetching corpus: 5700, signal 141169/179174 (executing program) 2025/07/02 18:54:24 fetching corpus: 5750, signal 141500/179174 (executing program) 2025/07/02 18:54:24 fetching corpus: 5800, signal 141812/179174 (executing program) 2025/07/02 18:54:25 fetching corpus: 5850, signal 142109/179174 (executing program) 2025/07/02 18:54:25 fetching corpus: 5900, signal 142426/179175 (executing program) 2025/07/02 18:54:25 fetching corpus: 5950, signal 142828/179175 (executing program) 2025/07/02 18:54:25 fetching corpus: 6000, signal 143243/179175 (executing program) 2025/07/02 18:54:25 fetching corpus: 6050, signal 143547/179175 (executing program) 2025/07/02 18:54:25 fetching corpus: 6100, signal 143924/179175 (executing program) 2025/07/02 18:54:25 fetching corpus: 6150, signal 144249/179175 (executing program) 2025/07/02 18:54:25 fetching corpus: 6200, signal 144496/179175 (executing program) 2025/07/02 18:54:25 fetching corpus: 6250, signal 144908/179175 (executing program) 2025/07/02 18:54:25 fetching corpus: 6300, signal 145267/179175 (executing program) 2025/07/02 18:54:25 fetching corpus: 6350, signal 145605/179175 (executing program) 2025/07/02 18:54:25 fetching corpus: 6400, signal 145889/179175 (executing program) 2025/07/02 18:54:25 fetching corpus: 6450, signal 146126/179175 (executing program) 2025/07/02 18:54:25 fetching corpus: 6500, signal 146402/179175 (executing program) 2025/07/02 18:54:26 fetching corpus: 6550, signal 146736/179175 (executing program) 2025/07/02 18:54:26 fetching corpus: 6600, signal 147114/179175 (executing program) 2025/07/02 18:54:26 fetching corpus: 6650, signal 147346/179175 (executing program) 2025/07/02 18:54:26 fetching corpus: 6700, signal 147663/179175 (executing program) 2025/07/02 18:54:26 fetching corpus: 6750, signal 147939/179175 (executing program) 2025/07/02 18:54:26 fetching corpus: 6800, signal 148182/179175 (executing program) 2025/07/02 18:54:26 fetching corpus: 6850, signal 148432/179175 (executing program) 2025/07/02 18:54:26 fetching corpus: 6900, signal 148660/179175 (executing program) 2025/07/02 18:54:26 fetching corpus: 6950, signal 149005/179175 (executing program) 2025/07/02 18:54:26 fetching corpus: 7000, signal 149189/179175 (executing program) 2025/07/02 18:54:26 fetching corpus: 7050, signal 149806/179175 (executing program) 2025/07/02 18:54:26 fetching corpus: 7100, signal 150097/179175 (executing program) 2025/07/02 18:54:26 fetching corpus: 7150, signal 150422/179175 (executing program) 2025/07/02 18:54:26 fetching corpus: 7200, signal 150729/179175 (executing program) 2025/07/02 18:54:26 fetching corpus: 7250, signal 150914/179175 (executing program) 2025/07/02 18:54:27 fetching corpus: 7300, signal 151182/179175 (executing program) 2025/07/02 18:54:27 fetching corpus: 7350, signal 151396/179177 (executing program) 2025/07/02 18:54:27 fetching corpus: 7400, signal 151709/179177 (executing program) 2025/07/02 18:54:27 fetching corpus: 7450, signal 151922/179177 (executing program) 2025/07/02 18:54:27 fetching corpus: 7500, signal 152264/179177 (executing program) 2025/07/02 18:54:27 fetching corpus: 7550, signal 152493/179177 (executing program) 2025/07/02 18:54:27 fetching corpus: 7600, signal 152701/179177 (executing program) 2025/07/02 18:54:27 fetching corpus: 7650, signal 153064/179177 (executing program) 2025/07/02 18:54:27 fetching corpus: 7700, signal 153243/179177 (executing program) 2025/07/02 18:54:27 fetching corpus: 7750, signal 153579/179177 (executing program) 2025/07/02 18:54:27 fetching corpus: 7800, signal 153734/179177 (executing program) 2025/07/02 18:54:27 fetching corpus: 7850, signal 154036/179177 (executing program) 2025/07/02 18:54:28 fetching corpus: 7900, signal 154461/179177 (executing program) 2025/07/02 18:54:28 fetching corpus: 7950, signal 154815/179177 (executing program) 2025/07/02 18:54:28 fetching corpus: 8000, signal 155077/179177 (executing program) 2025/07/02 18:54:28 fetching corpus: 8050, signal 155268/179177 (executing program) 2025/07/02 18:54:28 fetching corpus: 8100, signal 155444/179177 (executing program) 2025/07/02 18:54:28 fetching corpus: 8150, signal 155660/179177 (executing program) 2025/07/02 18:54:28 fetching corpus: 8200, signal 156181/179177 (executing program) 2025/07/02 18:54:28 fetching corpus: 8250, signal 156408/179177 (executing program) 2025/07/02 18:54:28 fetching corpus: 8300, signal 156620/179178 (executing program) 2025/07/02 18:54:28 fetching corpus: 8350, signal 156863/179178 (executing program) 2025/07/02 18:54:28 fetching corpus: 8400, signal 157146/179178 (executing program) 2025/07/02 18:54:29 fetching corpus: 8450, signal 157395/179178 (executing program) 2025/07/02 18:54:29 fetching corpus: 8500, signal 157592/179178 (executing program) 2025/07/02 18:54:29 fetching corpus: 8550, signal 157822/179178 (executing program) 2025/07/02 18:54:29 fetching corpus: 8600, signal 158039/179178 (executing program) 2025/07/02 18:54:29 fetching corpus: 8650, signal 158297/179178 (executing program) 2025/07/02 18:54:29 fetching corpus: 8700, signal 158501/179178 (executing program) 2025/07/02 18:54:29 fetching corpus: 8750, signal 158750/179178 (executing program) 2025/07/02 18:54:29 fetching corpus: 8800, signal 158909/179178 (executing program) 2025/07/02 18:54:29 fetching corpus: 8850, signal 159429/179178 (executing program) 2025/07/02 18:54:29 fetching corpus: 8900, signal 159615/179178 (executing program) 2025/07/02 18:54:29 fetching corpus: 8950, signal 159785/179178 (executing program) 2025/07/02 18:54:29 fetching corpus: 9000, signal 160046/179178 (executing program) 2025/07/02 18:54:29 fetching corpus: 9050, signal 160820/179178 (executing program) 2025/07/02 18:54:30 fetching corpus: 9100, signal 161011/179178 (executing program) 2025/07/02 18:54:30 fetching corpus: 9150, signal 161309/179178 (executing program) 2025/07/02 18:54:30 fetching corpus: 9200, signal 161553/179178 (executing program) 2025/07/02 18:54:30 fetching corpus: 9250, signal 161701/179178 (executing program) 2025/07/02 18:54:30 fetching corpus: 9300, signal 161817/179178 (executing program) 2025/07/02 18:54:30 fetching corpus: 9350, signal 161997/179178 (executing program) 2025/07/02 18:54:30 fetching corpus: 9400, signal 162225/179178 (executing program) 2025/07/02 18:54:30 fetching corpus: 9450, signal 162360/179178 (executing program) 2025/07/02 18:54:30 fetching corpus: 9500, signal 162531/179178 (executing program) 2025/07/02 18:54:30 fetching corpus: 9550, signal 162734/179178 (executing program) 2025/07/02 18:54:30 fetching corpus: 9600, signal 162916/179179 (executing program) 2025/07/02 18:54:31 fetching corpus: 9650, signal 163114/179180 (executing program) 2025/07/02 18:54:31 fetching corpus: 9700, signal 163279/179180 (executing program) 2025/07/02 18:54:31 fetching corpus: 9750, signal 163764/179180 (executing program) 2025/07/02 18:54:31 fetching corpus: 9800, signal 163963/179180 (executing program) 2025/07/02 18:54:31 fetching corpus: 9850, signal 164186/179180 (executing program) 2025/07/02 18:54:31 fetching corpus: 9900, signal 164349/179180 (executing program) 2025/07/02 18:54:31 fetching corpus: 9950, signal 164744/179180 (executing program) 2025/07/02 18:54:31 fetching corpus: 10000, signal 164903/179180 (executing program) 2025/07/02 18:54:31 fetching corpus: 10050, signal 165214/179180 (executing program) 2025/07/02 18:54:31 fetching corpus: 10100, signal 165432/179180 (executing program) 2025/07/02 18:54:31 fetching corpus: 10150, signal 165678/179180 (executing program) 2025/07/02 18:54:31 fetching corpus: 10200, signal 165979/179180 (executing program) 2025/07/02 18:54:31 fetching corpus: 10250, signal 166276/179180 (executing program) 2025/07/02 18:54:31 fetching corpus: 10300, signal 166407/179180 (executing program) 2025/07/02 18:54:32 fetching corpus: 10350, signal 166591/179180 (executing program) 2025/07/02 18:54:32 fetching corpus: 10400, signal 166772/179180 (executing program) 2025/07/02 18:54:32 fetching corpus: 10450, signal 166963/179180 (executing program) 2025/07/02 18:54:32 fetching corpus: 10500, signal 167130/179180 (executing program) 2025/07/02 18:54:32 fetching corpus: 10550, signal 167280/179180 (executing program) 2025/07/02 18:54:32 fetching corpus: 10600, signal 167442/179180 (executing program) 2025/07/02 18:54:32 fetching corpus: 10635, signal 167575/179180 (executing program) 2025/07/02 18:54:32 fetching corpus: 10635, signal 167575/179180 (executing program) 2025/07/02 18:54:34 starting 8 fuzzer processes 18:54:34 executing program 0: keyctl$update(0x2, 0x0, &(0x7f0000000000)="77ce0b02dcaa8a3392ad9f7f1445708eb814ac9a05a03e786b05a79754c81c0c83147d349956f098abbc9216841f47371a928b2ef722e1aca60855a1458cc97d7e07922f501f7f0914472b89b98457754c497baea21ddbb8130242cb9c62440fa68205a646cfc187d2c81c703a90d3f65684db19acc8cd5c7fe29036054682e8fceae430d08715", 0x87) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000180)=[0x0, 0xee00, 0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0xee01]) keyctl$chown(0x4, 0x0, r0, r7) setgroups(0x1, &(0x7f00000001c0)=[r6]) keyctl$assume_authority(0x10, 0x0) getgroups(0x1, &(0x7f0000000200)=[r6]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, r3}}, './file0\x00'}) r13 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) r15 = getgid() getgroups(0x9, &(0x7f00000007c0)=[r9, r12, r8, r13, r5, r14, 0xffffffffffffffff, r15, r2]) getgroups(0x1, &(0x7f0000000800)=[r2]) setgroups(0x4, &(0x7f0000000840)=[r8, r7, r16, r4]) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) r17 = getuid() statx(r10, &(0x7f0000001400)='./file0\x00', 0x2000, 0x4, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1400) r20 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='system.posix_acl_access\x00', &(0x7f0000001600)={{}, {0x1, 0x7}, [{0x2, 0x2, r11}, {0x2, 0x0, r11}, {0x2, 0x1, r11}, {0x2, 0x2, r17}, {0x2, 0x6, r18}], {}, [{0x8, 0x0, r9}, {0x8, 0x2, r8}, {0x8, 0x0, r19}, {0x8, 0xd37a6ee3a6f8ab1e, r20}, {0x8, 0x0, r1}], {0x10, 0x3}, {0x20, 0x3}}, 0x74, 0x2) 18:54:34 executing program 1: mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1400, &(0x7f0000000040)={0x80, 0x80080, 0x80000}, 0x20) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/87, 0x57) r0 = syz_open_dev$hidraw(&(0x7f0000000140), 0x100, 0x410840) close(r0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x1, 0x3f, 0x2, 0x8001, 0x1, 0x6}) r1 = syz_io_uring_complete(0x0) fgetxattr(r1, &(0x7f00000001c0)=@random={'user.', '/dev/hidraw#\x00'}, &(0x7f0000000200)=""/185, 0xb9) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='memory.swap.high\x00', 0x2, 0x0) tee(r1, r2, 0x97b4, 0x7) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000300)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x88, 0x0) execveat(r1, &(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=[&(0x7f0000000440)='memory.swap.high\x00', &(0x7f0000000480)=',&\x00', &(0x7f00000004c0)='}\x00', &(0x7f0000000500)='&#X[*\x00', &(0x7f0000000540)='/dev/hidraw#\x00', &(0x7f0000000580)='\\\x00', &(0x7f00000005c0)='],,,\x00', &(0x7f0000000600)='/dev/hidraw#\x00'], &(0x7f00000008c0)=[&(0x7f0000000680)='pipefs\x00', &(0x7f00000006c0)='/dev/hidraw#\x00', &(0x7f0000000700)='&-.$]%\x00', &(0x7f0000000740)='*\xdf\x00', &(0x7f0000000780)='pipefs\x00', &(0x7f00000007c0)='pipefs\x00', &(0x7f0000000800)='/dev/hidraw#\x00', &(0x7f0000000840)='user.', &(0x7f0000000880)='%\x00'], 0x1000) syz_mount_image$vfat(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x0, 0x2, &(0x7f0000000b80)=[{&(0x7f00000009c0)="64145328fe0a6354b6b77efc12b707d80673b72ec91fa8be39b79e26240872229e520af1f6b59a9b11fd2a5ff401479496b2485df8782c9e6cd7dd59323563978047de5bc544a78a05c0bf83e9318635bb79004283022c48edc2aff6d3a2359de00b8d233130e81d698c942bde37735c6bc9ec1bd61df0251434790c7ff17e56b2d5bcec658745003f541c695cf2892c7e0d03dca86e4e27daa519c4eaf548eaccf09a3c34316b944736a7a946dd3252d109ec66de13f468b72acfc0bd02acf96786b119dcfec85832e0329a814196a286f2be14b4a6c3c1f9502e3f5e56fc6353dc3a415541ed53c8", 0xe9, 0x77eb}, {&(0x7f0000000ac0)="ca45d06092450f69fc3c738c41fcd83c124a0fb6163fcb819d171aa33225a40483150545b5506f0b9103d4953d69320e4adbdd17ca86295c72f98bfecc40612af40f0617bb150dac80d047250116f479e153e04a3524e14c4cc4578abdd1cfdf187ff1c0d0e175fc241893eb4bcfdd7ada7263b8099e4bf24fe913b041e22c406014eadc4199cbe504d01251f55b46748913ef7ea1e1b965d79408ecb10680b2d329fd60ac2159761546fd078b30b9b8442f1e6a", 0xb4, 0x1}], 0x0, &(0x7f0000000bc0)={[{@shortname_lower}, {@shortname_lower}], [{@dont_appraise}, {@subj_role={'subj_role', 0x3d, ']+'}}, {@subj_role={'subj_role', 0x3d, '{'}}]}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000c40), 0x109080, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000c80)={{{@in=@local, @in6=@initdev}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000d80)=0xe8) openat$dir(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', 0x400, 0x81) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000e00)={0x6e, "4841f4589442198e0308a5e9b68b160121ed3aea4d3ff9866d9ec258002ee49b53f3c68033036d28fa2fce407b8c7a27546430bab12bd74f577f34adbc9e10fa"}) openat(r1, &(0x7f0000000e80)='./file0\x00', 0xa000, 0xc0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000ec0), 0x400002, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x64, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x101]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x2]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xd5, 0x30, 0x1]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x64}, 0x1, 0x0, 0x0, 0x882}, 0x0) 18:54:34 executing program 2: ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000000)=""/219) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000100)=""/100) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x1000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000200)=0xba6) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000240), &(0x7f0000000280)={'U+', 0x9}, 0x16, 0x1) socketpair(0x1d, 0x8, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x2, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}, {0x8, 0x1, r1}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4001090}, 0x40000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) accept4$unix(r0, &(0x7f0000000480), &(0x7f0000000500)=0x6e, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) socket$inet(0x2, 0xe, 0x5) openat(r1, &(0x7f00000006c0)='./file0\x00', 0x402002, 0x103) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000700)=@buf) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000740)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f0000000b80)={0x14c, 0x14, &(0x7f0000000780)="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"}) [ 77.499686] audit: type=1400 audit(1751482474.923:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:54:34 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/151) r1 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffa000/0x2000)=nil, 0x3000) r2 = shmget(0x2, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f00000000c0)=""/92) shmctl$SHM_UNLOCK(0x0, 0xc) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_RMID(r0, 0x0) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(r2, &(0x7f0000ff9000/0x3000)=nil, 0x2000) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000140)=""/139) r3 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r4 = shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmdt(r4) r5 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000200)=""/102) 18:54:34 executing program 4: fallocate(0xffffffffffffffff, 0x1, 0xfffffffffffffeab, 0x5f02b2cf) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0xa22d) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x18, 0x1}, {0x0, 0x1}, {0x12}, {0x24}, {0x36}, {0x27}, {0x4}, {0x12}, {0x3d, 0x1}, {0x30}, {0x30, 0x1}, {0xb, 0x1}, {0x5}, {0xc}, {0x6}, {0x1b}, {0x6}, {0x9}, {0x1b, 0x1}, {0x6c, 0x1}, {0xc, 0x1}, {0x24}, {0xc}, {0x2, 0x1}, {0x36, 0x1}, {0x6}, {0x36}, {0x48, 0x1}, {0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40c4) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x6048080}, 0x8001) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x9) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000380)=0x6e) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000003c0)=0x5f) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000440)={0x38c, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x328, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x12, 0x4, 0x6c, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0xffff, 0x5, 0x4, 0x3f, 0x1, 0xa7ba, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x0, 0x1000, 0x7fff, 0x1, 0x554f, 0x1, 0x2c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4e9c, 0x8, 0x5, 0x9, 0x1, 0x1, 0x7, 0x1ade]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc1bc64e46585b3fd, 0x2, 0x18, 0x5, 0x5, 0xb, 0x2, 0x48, 0x6, 0x4, 0x18, 0x48, 0xc, 0x60, 0x24, 0x5, 0x2, 0x5]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x3, 0x1}, {0x5, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x5, 0x4}, {0x7}, {0x1, 0x9}, {0x1, 0x5}, {0x1, 0x9}, {0x5}, {0x1, 0x8}, {0x5, 0x9}, {0x6, 0xa}, {0x2, 0x4}, {0x2, 0x8}, {0x4, 0x8}, {0x2, 0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x4, 0x4}, {0x0, 0x3}, {0x6, 0x1}, {0x3, 0x7}, {0x0, 0x7}, {0x5, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x7}, {0x1}, {0x5, 0x1}, {0x7, 0xa}, {0x7, 0xa}, {0x2, 0x1}, {0x7}, {0x6, 0x8}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7}, {0x3, 0x7}, {}, {0x6, 0x6}, {0x5, 0x8}, {0x5, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x4, 0xdf, 0x26, 0xfff7, 0x8, 0x59]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xab, 0x4, 0x9, 0x1, 0x40, 0xe87, 0x6, 0x3]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7, 0x4}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x7}, {0x2, 0x4}, {0x3, 0x7}, {0x4, 0x5}, {0x5, 0x2}, {0x6, 0x5}, {0x6, 0xa}, {0x3, 0x6}, {0x1, 0x9}, {0x3, 0x4}, {0x1}, {0x6, 0x8}, {0x4, 0x7}, {0x4}, {0x3, 0x1}, {0x4, 0x5}, {0x2, 0x1}, {0x5, 0x9}, {0x1, 0x7}, {0x5}, {0x0, 0x5}, {0x2, 0x8}, {0x7, 0x4}, {0x0, 0x5}, {0x4, 0x6}, {0x4, 0x7}, {0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x0, 0xa}, {0x0, 0xa}, {0x7, 0x1}, {0x4, 0x2}, {0x5, 0x2}, {0x4, 0x7}, {0x7, 0xa}, {0x0, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x1b, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffff, 0xdb, 0x4, 0x6, 0xe4, 0xfff, 0x6]}}]}, @NL80211_BAND_6GHZ={0x12c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x88, 0x0, 0x6, 0x9, 0x6, 0x4, 0x1000]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x8}, {0x6}, {0x5, 0xa}, {0x2, 0x3}, {0x1, 0x3}, {0x2, 0x9}, {0x1, 0x4}, {0x6, 0x5}, {0x1, 0x2}, {0x5, 0x2}, {0x3, 0xa}, {0x0, 0x9}, {0x0, 0x4}, {0x7}, {0x7, 0x7}, {0x5, 0x7}, {0x4, 0x1}, {0x3, 0x6}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x8}, {0x3, 0xa}, {}, {0x2, 0x9}, {0x1, 0x2}, {0x1, 0xa}, {0x7, 0x7}, {0x6, 0x2}, {0x5, 0x3}, {0x4, 0x4}, {0x4, 0x1}, {0x6, 0x7}, {0x2, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x1, 0x1}, {0x7, 0x7}, {0x6, 0x5}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x9}, {0x5}, {0x0, 0x4}, {0x0, 0x7}, {0x4, 0xa}, {0x4, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x6, 0x5}, {0x1, 0x2}, {0x1, 0x2}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x9}, {0x1, 0x9}, {0x6, 0x2}, {0x1, 0x2}, {0x4, 0x8}, {0x2}, {0x3}, {0x0, 0x5}, {0x5}, {0x2, 0x6}, {0x0, 0x5}, {0x1, 0x9}, {0x2, 0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x2, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x3, 0x7}, {0x7, 0x9}, {0x3, 0x2}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x5}, {0x5, 0x3}, {0x2, 0xa}, {0x2, 0xa}, {0x7, 0x6}, {0x7, 0xa}, {0x7, 0x3}, {0x0, 0x7}, {0x2, 0x1}, {0x5, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x4, 0x4}, {0x3, 0xa}, {0x0, 0x6}, {0x6, 0x9}, {0x3, 0xa}, {0x1, 0x8}, {0x7, 0x9}, {0x1, 0x7}, {0x5, 0x6}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x9}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x7, 0x4, 0x4, 0xb7cb, 0xfff9, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x400, 0x8001, 0x9f7, 0x8, 0x3f, 0x7, 0x1]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x1, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x4, 0x5}, {0x6, 0xa}, {0x7, 0x4}, {0x4, 0x4}, {0x5, 0x4}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x9}, {0x1, 0x1}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0x3}, {0x1, 0x2}, {0x6, 0x8}, {0x7, 0x3}, {0x7, 0x5}, {0x3, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xffda, 0x800, 0x7, 0x5, 0x194, 0x7f, 0x2]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x1, 0x4}, {0x7, 0x3}, {0x1, 0x6}, {0x4, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x0, 0x8}, {0x3, 0x1}, {0x2, 0xa}, {0x5, 0xa}, {0x4, 0x2}, {0x2, 0x3}, {0x0, 0x4}, {0x3, 0xa}, {0x0, 0x1}, {0x7, 0x3}, {0x5}, {0x1, 0x1}, {0x7, 0x7}, {0x7, 0xa}, {0x7, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x1, 0x2}, {0x7, 0x9}, {0x0, 0x2}, {0x4, 0x2}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x7, 0x7}, {0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x4, 0x7}, {0x7, 0x7}, {0x7, 0x9}, {0x2, 0x7}, {0x1, 0x7}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0x6}, {0x1, 0x7}, {0x1, 0x7}, {0x6, 0xa}, {0x4, 0x1}, {0x5}, {0x2, 0x9}, {0x3, 0x4}, {0x6, 0x9}, {0x3, 0xa}, {0x2, 0x6}, {0x6, 0x1}, {0x7, 0x7}, {0x6, 0x9}]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0x3}, {0x3, 0x2}, {0x7, 0x5}, {0x2, 0x1}, {0x6, 0x5}, {0x1, 0xa}, {0x2, 0xa}, {0x6, 0x9}, {0x6, 0x9}, {0x3, 0xa}, {0x1, 0xa}, {0x3}, {0x1}, {0x7, 0x7}, {0x6, 0x9}, {0x6, 0x6}, {0x7, 0x7}, {0x5, 0x6}, {0x3, 0x5}, {0x5, 0x9}, {0x3, 0x7}, {0x1, 0x8}, {0x7, 0x1}, {0x1, 0x9}, {0x7, 0x7}, {0x4, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x3, 0x3}, {0x7, 0x2}, {0x4}, {0x3, 0x9}, {0x4}, {0x2, 0x7}, {0x3, 0x7}, {0x3, 0x2}, {0x3, 0x1}, {0x2, 0x4}, {0x2, 0x4}, {0x3, 0x4}, {0x3}, {0x7, 0x9}, {0x7, 0x8}, {0x2, 0x2}, {0x2, 0x6}, {0x1, 0x3}, {0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x1, 0x6128, 0x8000, 0xce9c, 0x5, 0xf24]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x90a2b97090652438}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x0, 0x60]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x1}, {0x0, 0x8}, {0x3, 0x6}, {0x2, 0x2}, {0x7, 0x7}, {0x1, 0xa}, {0x5, 0x2}, {0x7, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x7, 0x7}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x8}, {0x3, 0x2}, {0x1, 0x9}, {0x2, 0x8}, {0x6, 0x1}, {0x4, 0x8}, {0x1, 0x8}, {0x4}, {0x4, 0x2}, {0x2, 0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x2, 0x3}, {0x5, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x0, 0xa}, {0x0, 0x4}, {0x4, 0x2}, {0x7, 0x9}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x6}, {0x7, 0x8}, {0x6, 0x1}, {0x2}, {0x1, 0xa}, {0x5, 0x3}, {0x1, 0x5}, {0x4}, {0x6, 0x7}, {0x1, 0x3}, {0x0, 0x9}, {0x3, 0xa}, {0x5, 0x8}, {0x1, 0x6}, {0x2, 0x3}, {0x7, 0x5}, {0x1, 0x7}, {0x1, 0x1}, {0x3, 0x4}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x6, 0x7}, {0x3, 0x1}, {0x6, 0x7}, {0x3, 0x1}]}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x981a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x389}], @NL80211_ATTR_BSS_BASIC_RATES={0x22, 0x24, [{0x30}, {0x1, 0x1}, {0x61, 0x1}, {0x30}, {0x3, 0x1}, {0xc, 0x1}, {0xa, 0x1}, {0x1b, 0x1}, {0x6c}, {0x3}, {0x5}, {0x36}, {0x6c}, {0x18}, {0x68, 0x1}, {0x60}, {0x30, 0x1}, {0x4}, {0x47}, {0x3}, {0x1b, 0x1}, {0x1b}, {0x12}, {0x1b, 0x1}, {0x5, 0x1}, {0x48}, {0x24, 0x1}, {0x24, 0x1}, {0xb, 0x1}, {0x24, 0x1}]}]}, 0x38c}}, 0x800) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000880)) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f00000008c0)) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000900), 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xc8, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r2, {0xfffffff9}}, './file0\x00'}) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000b00)=0x3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x88, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4) renameat(r3, &(0x7f0000000cc0)='./file0\x00', r3, &(0x7f0000000d00)='./file0\x00') lsetxattr(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)=@random={'security.', '0000:00:10.0\x00'}, &(0x7f0000000dc0)='$*&(*%*\x00', 0x8, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x4e22, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}, 0x1c) 18:54:34 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x22}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x8c}}, 0x24000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x411, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xef3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x8001}}, './file1\x00'}) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40004) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x7, 0x801, 0x0, 0x0, {0xf, 0x0, 0x6}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4008000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r4, {0x7}}, './file1/../file0\x00'}) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000ac0)={[0xde2]}, 0x8, 0x0) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0xb, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}}]}]}, 0x24}}, 0x5) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r2, {0x72ee}}, './file1/../file0\x00'}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000c40)={0x1, 0x2, 0x7f, 0x7b30a07, 0x3f}) 18:54:34 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x3, &(0x7f0000000000)=0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0xaf7565a6e5c33783, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080)=0x20, 0x4) getsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) r2 = eventfd(0x5) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r2}], 0x1, &(0x7f0000000200)={r3, r4+10000000}, &(0x7f0000000240)={[0x6]}, 0x8) fremovexattr(r2, &(0x7f0000000280)=@known='trusted.overlay.upper\x00') bind(0xffffffffffffffff, &(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000340)={0x3, 0xc2, "eede3ce9aa34c35220b7d3c5539d52183068d631e9439e62c5b177dc04032c2943430fc5cb8bfcf5217ee866522867832f706554f0204a1370c0aa408f5eec6e8ce1bb3a8ae9a41adead244de75d3173870dfb591530975d0177a38999617041f2a503ffabbad495e2022d4c0d718d51dcad5f5dae879fc63cdbb7f9bc0a66a03757a84c5a13ea1414383911ff2e1267dd31703caf7961e3c013eafe172b9fdfd0b7d392ee2892412ca9e6ff60a7ee79611e3cab5477f62ec00730d4fff469198c3f"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8001, 0x5, &(0x7f0000000440)) r5 = pidfd_getfd(r1, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x40, 0x47, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x10, 0x20, 0x1}}) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000540)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x9, &(0x7f0000000580)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$FS_IOC_MEASURE_VERITY(r6, 0xc0046686, &(0x7f0000000600)={0x0, 0xc1, "e1516a09c3cfaf0831a1b0624a6500daae8e111a4147a270c129902d73588a856323d826ed16ba329e13dc8f772c18da0fbc73d5ef4dd60a64c187cc822f543c4100d020b717da51a70e0fd5f868431dc161b35d426fac38bc72217c063512f9000676ee606ef539db3cd10ad8c34d36ae3df43473721578b3bbc0bb2c4aa5af9b98f09e2f6d4f12c8da5a06e750ee8c13619d2160ca78e0addce13e460183ee7a76018fa8b4fa2a0e343913888f456705353637471f1cbefc60f8018eba5dfcc9"}) 18:54:35 executing program 7: r0 = syz_io_uring_setup(0x53af, &(0x7f0000000000)={0x0, 0x3459, 0x4, 0x0, 0x2da}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x2, @broadcast}}, 0x0, 0x0, 0x1}, 0x800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)={0x7, 'gre0\x00', {0x394}, 0x5}) r3 = syz_open_dev$vcsu(&(0x7f0000000200), 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, r3, &(0x7f0000000240)={0x4000}, r0, 0x3, 0x0, 0x1, {0x0, r4}}, 0x10000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x20010, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x3ff) r6 = syz_io_uring_setup(0x5e03, &(0x7f0000000300)={0x0, 0x7ff3, 0x8, 0x1, 0x1be, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) copy_file_range(r6, 0x0, r3, &(0x7f0000000400)=0x4, 0x9, 0x0) r7 = syz_io_uring_setup(0x6478, &(0x7f0000000440)={0x0, 0x26ac, 0x0, 0x1, 0x134, 0x0, r6}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) ppoll(&(0x7f0000000540)=[{r3, 0x3212}, {r0, 0x8000}, {r0, 0x400}, {r3, 0x4c2}, {r3, 0x200}, {}, {0xffffffffffffffff, 0x2000}, {r7}, {r6, 0x8000}], 0x9, &(0x7f0000000600)={r8, r9+60000000}, &(0x7f0000000640)={[0xc26]}, 0x8) sync_file_range(r6, 0x3, 0x81, 0x3) r10 = openat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x200002, 0x0) dup(r10) r11 = dup(r10) io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/28, 0x1c}, {&(0x7f0000000700)=""/50, 0x32}], 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) [ 78.827033] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.829361] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.831282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.842438] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.844611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.848777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.850349] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.854171] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.856543] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.859831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.864237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.864617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.865816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.881448] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.893967] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.916537] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.920350] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.928098] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 78.929444] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.930317] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.931683] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.933718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.935326] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.935791] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.938145] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 78.939771] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 78.945163] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.947216] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.949708] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.951564] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 78.953149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.954725] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.956782] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 78.961352] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 78.968615] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 78.974212] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 78.981317] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 78.987233] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 78.988888] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.994129] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 79.250741] [ 79.251463] ============================= [ 79.252117] WARNING: suspicious RCU usage [ 79.252719] 6.16.0-rc4-next-20250702 #1 Not tainted [ 79.253775] ----------------------------- [ 79.257098] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 79.260734] [ 79.260734] other info that might help us debug this: [ 79.260734] [ 79.261908] [ 79.261908] rcu_scheduler_active = 2, debug_locks = 1 [ 79.262901] 3 locks held by syz-executor.6/285: [ 79.263586] #0: ffff88800fe9a400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 79.264928] #1: ffff88800be4a618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 79.266429] #2: ffff8880090320d0 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 79.267802] [ 79.267802] stack backtrace: [ 79.268478] CPU: 1 UID: 0 PID: 285 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 79.268505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 79.268517] Call Trace: [ 79.268525] [ 79.268534] dump_stack_lvl+0xfa/0x120 [ 79.268559] lockdep_rcu_suspicious+0x152/0x1c0 [ 79.268585] proc_sys_compare+0x28a/0x340 [ 79.268606] ? __pfx_proc_sys_compare+0x10/0x10 [ 79.268630] d_same_name+0x229/0x2e0 [ 79.268653] d_alloc_parallel+0x7c1/0x1330 [ 79.268690] ? __pfx_d_alloc_parallel+0x10/0x10 [ 79.268718] ? __pfx_default_wake_function+0x10/0x10 [ 79.268749] ? __d_lookup+0x25f/0x490 [ 79.268782] lookup_open.isra.0+0x64f/0x1530 [ 79.268816] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 79.268867] ? mnt_get_write_access+0x81/0x2d0 [ 79.268888] ? mnt_get_write_access+0x1ea/0x2d0 [ 79.268917] path_openat+0xc26/0x2880 [ 79.268957] ? __lock_acquire+0x694/0x1b70 [ 79.268979] ? __pfx_path_openat+0x10/0x10 [ 79.269019] do_filp_open+0x1e8/0x450 [ 79.269050] ? __pfx_do_filp_open+0x10/0x10 [ 79.269092] ? find_held_lock+0x2b/0x80 [ 79.269121] ? alloc_fd+0x2c1/0x560 [ 79.269148] ? lock_release+0xc8/0x290 [ 79.269175] ? alloc_fd+0x2c1/0x560 [ 79.269213] do_sys_openat2+0x104/0x1b0 [ 79.269238] ? __pfx_do_sys_openat2+0x10/0x10 [ 79.269265] ? __fput+0x67b/0xb50 [ 79.269294] __x64_sys_openat+0x142/0x200 [ 79.269320] ? __pfx___x64_sys_openat+0x10/0x10 [ 79.269344] ? __pfx_fput_close_sync+0x10/0x10 [ 79.269380] do_syscall_64+0xbf/0x360 [ 79.269404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.269425] RIP: 0033:0x7f08ec688a04 [ 79.269442] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 79.269461] RSP: 002b:00007ffef35d2f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 79.269481] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f08ec688a04 [ 79.269494] RDX: 0000000000080001 RSI: 00007f08ec73f2bb RDI: 00000000ffffff9c [ 79.269507] RBP: 00007f08ec73f2bb R08: 0000000000000000 R09: 00007ffef35d2f50 [ 79.269520] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 79.269532] R13: 00007ffef35d3000 R14: 0000000000000000 R15: 00000000000000f8 [ 79.269561] [ 80.924285] Bluetooth: hci1: command tx timeout [ 80.924345] Bluetooth: hci0: command tx timeout [ 80.988266] Bluetooth: hci3: command tx timeout [ 80.988915] Bluetooth: hci2: command tx timeout [ 80.989121] Bluetooth: hci4: command tx timeout [ 81.051919] Bluetooth: hci7: command tx timeout [ 81.052983] Bluetooth: hci5: command tx timeout [ 81.053066] Bluetooth: hci6: command tx timeout [ 82.971987] Bluetooth: hci1: command tx timeout [ 82.974929] Bluetooth: hci0: command tx timeout [ 83.035926] Bluetooth: hci4: command tx timeout [ 83.037008] Bluetooth: hci3: command tx timeout [ 83.037401] Bluetooth: hci2: command tx timeout [ 83.101895] Bluetooth: hci5: command tx timeout [ 83.101915] Bluetooth: hci7: command tx timeout [ 83.102346] Bluetooth: hci6: command tx timeout [ 85.020955] Bluetooth: hci0: command tx timeout [ 85.021414] Bluetooth: hci1: command tx timeout [ 85.085040] Bluetooth: hci2: command tx timeout [ 85.085464] Bluetooth: hci3: command tx timeout [ 85.086868] Bluetooth: hci4: command tx timeout [ 85.148068] Bluetooth: hci7: command tx timeout [ 85.148504] Bluetooth: hci5: command tx timeout [ 85.148530] Bluetooth: hci6: command tx timeout [ 87.069172] Bluetooth: hci1: command tx timeout [ 87.069632] Bluetooth: hci0: command tx timeout [ 87.131946] Bluetooth: hci2: command tx timeout [ 87.132978] Bluetooth: hci3: command tx timeout [ 87.133364] Bluetooth: hci4: command tx timeout [ 87.196879] Bluetooth: hci6: command tx timeout [ 87.197901] Bluetooth: hci7: command tx timeout [ 87.198032] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 18:54:36 Registers: info registers vcpu 0 RAX=ffffffff867e459f RBX=0000000000000001 RCX=ffffffff867e459c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff867e459e RBP=ffff88800976f3e0 RSP=ffff88800976f318 R8 =1ffffffff0cfc8b3 R9 =ffff88800976f3c8 R10=000000000003bb04 R11=0000000000007dd6 R12=ffff88800976f3e8 R13=ffff88800976f3d0 R14=ffff88800976fb18 R15=ffff88800976f388 RIP=ffffffff81355349 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55ef000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcabdfdf320 CR3=000000000e91e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000000000000000000ff XMM02=000000000000000000000000000000ff XMM03=7465756c42205d3932313439392e3837 XMM04=636f72703d7373616c63742030733a74 XMM05=3a755f6d65747379733d747865746e6f XMM06=5f6d65747379733a755f6d6574737973 XMM07=00000000000000000000000000000000 XMM08=756c42205d3932313439392e38372000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828ba3e5 RDI=ffffffff88722060 RBP=ffffffff88722020 RSP=ffff88801650f2b8 R8 =0000000000000000 R9 =ffffed1001809046 R10=0000000000000073 R11=0000000000000001 R12=0000000000000073 R13=0000000000000010 R14=ffffffff88722020 R15=ffffffff828ba3d0 RIP=ffffffff828ba43d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556e111400 00000000 00000000 GS =0000 ffff8880e56ef000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005616f2d84080 CR3=000000003a1a1000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000417ef32780000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000