Warning: Permanently added '[localhost]:32648' (ECDSA) to the list of known hosts. 2025/11/15 00:04:34 fuzzer started 2025/11/15 00:04:34 dialing manager at localhost:37161 syzkaller login: [ 50.491509] cgroup: Unknown subsys name 'net' [ 50.562680] cgroup: Unknown subsys name 'cpuset' [ 50.584792] cgroup: Unknown subsys name 'rlimit' 2025/11/15 00:04:44 syscalls: 2214 2025/11/15 00:04:44 code coverage: enabled 2025/11/15 00:04:44 comparison tracing: enabled 2025/11/15 00:04:44 extra coverage: enabled 2025/11/15 00:04:44 setuid sandbox: enabled 2025/11/15 00:04:44 namespace sandbox: enabled 2025/11/15 00:04:44 Android sandbox: enabled 2025/11/15 00:04:44 fault injection: enabled 2025/11/15 00:04:44 leak checking: enabled 2025/11/15 00:04:44 net packet injection: enabled 2025/11/15 00:04:44 net device setup: enabled 2025/11/15 00:04:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/15 00:04:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/15 00:04:44 USB emulation: enabled 2025/11/15 00:04:44 hci packet injection: enabled 2025/11/15 00:04:44 wifi device emulation: enabled 2025/11/15 00:04:44 802.15.4 emulation: enabled 2025/11/15 00:04:44 fetching corpus: 50, signal 25947/27751 (executing program) 2025/11/15 00:04:44 fetching corpus: 100, signal 37067/40540 (executing program) 2025/11/15 00:04:45 fetching corpus: 150, signal 47420/52369 (executing program) 2025/11/15 00:04:45 fetching corpus: 200, signal 53561/59948 (executing program) 2025/11/15 00:04:45 fetching corpus: 250, signal 58168/65957 (executing program) 2025/11/15 00:04:45 fetching corpus: 300, signal 65229/74238 (executing program) 2025/11/15 00:04:45 fetching corpus: 350, signal 70128/80339 (executing program) 2025/11/15 00:04:45 fetching corpus: 400, signal 73735/85155 (executing program) 2025/11/15 00:04:45 fetching corpus: 450, signal 76437/89080 (executing program) 2025/11/15 00:04:45 fetching corpus: 500, signal 79785/93586 (executing program) 2025/11/15 00:04:45 fetching corpus: 550, signal 82940/97866 (executing program) 2025/11/15 00:04:45 fetching corpus: 600, signal 84356/100506 (executing program) 2025/11/15 00:04:46 fetching corpus: 650, signal 88038/105161 (executing program) 2025/11/15 00:04:46 fetching corpus: 700, signal 90439/108635 (executing program) 2025/11/15 00:04:46 fetching corpus: 750, signal 94102/113158 (executing program) 2025/11/15 00:04:46 fetching corpus: 800, signal 95784/115947 (executing program) 2025/11/15 00:04:46 fetching corpus: 850, signal 97611/118777 (executing program) 2025/11/15 00:04:48 fetching corpus: 900, signal 99761/121899 (executing program) 2025/11/15 00:04:48 fetching corpus: 950, signal 102085/125136 (executing program) 2025/11/15 00:04:48 fetching corpus: 1000, signal 103443/127513 (executing program) 2025/11/15 00:04:48 fetching corpus: 1050, signal 104307/129432 (executing program) 2025/11/15 00:04:48 fetching corpus: 1100, signal 106005/132075 (executing program) 2025/11/15 00:04:48 fetching corpus: 1150, signal 108330/135148 (executing program) 2025/11/15 00:04:48 fetching corpus: 1200, signal 109697/137444 (executing program) 2025/11/15 00:04:49 fetching corpus: 1250, signal 111243/139867 (executing program) 2025/11/15 00:04:49 fetching corpus: 1300, signal 112530/142030 (executing program) 2025/11/15 00:04:49 fetching corpus: 1350, signal 113711/144099 (executing program) 2025/11/15 00:04:49 fetching corpus: 1400, signal 115484/146605 (executing program) 2025/11/15 00:04:49 fetching corpus: 1450, signal 117049/148941 (executing program) 2025/11/15 00:04:49 fetching corpus: 1500, signal 118091/150831 (executing program) 2025/11/15 00:04:49 fetching corpus: 1550, signal 119052/152710 (executing program) 2025/11/15 00:04:49 fetching corpus: 1600, signal 120393/154808 (executing program) 2025/11/15 00:04:49 fetching corpus: 1650, signal 121983/157062 (executing program) 2025/11/15 00:04:49 fetching corpus: 1700, signal 123369/159186 (executing program) 2025/11/15 00:04:50 fetching corpus: 1750, signal 124710/161227 (executing program) 2025/11/15 00:04:50 fetching corpus: 1800, signal 125616/162887 (executing program) 2025/11/15 00:04:50 fetching corpus: 1850, signal 127040/164960 (executing program) 2025/11/15 00:04:50 fetching corpus: 1900, signal 128071/166671 (executing program) 2025/11/15 00:04:50 fetching corpus: 1950, signal 129237/168472 (executing program) 2025/11/15 00:04:50 fetching corpus: 2000, signal 130030/170044 (executing program) 2025/11/15 00:04:50 fetching corpus: 2050, signal 131625/172122 (executing program) 2025/11/15 00:04:50 fetching corpus: 2100, signal 133024/174051 (executing program) 2025/11/15 00:04:50 fetching corpus: 2150, signal 133880/175607 (executing program) 2025/11/15 00:04:50 fetching corpus: 2200, signal 135183/177406 (executing program) 2025/11/15 00:04:51 fetching corpus: 2250, signal 137043/179574 (executing program) 2025/11/15 00:04:51 fetching corpus: 2300, signal 138235/181242 (executing program) 2025/11/15 00:04:51 fetching corpus: 2350, signal 139138/182722 (executing program) 2025/11/15 00:04:51 fetching corpus: 2400, signal 139989/184182 (executing program) 2025/11/15 00:04:51 fetching corpus: 2450, signal 140955/185685 (executing program) 2025/11/15 00:04:51 fetching corpus: 2500, signal 141865/187145 (executing program) 2025/11/15 00:04:51 fetching corpus: 2550, signal 142661/188529 (executing program) 2025/11/15 00:04:51 fetching corpus: 2600, signal 143532/189957 (executing program) 2025/11/15 00:04:51 fetching corpus: 2650, signal 144274/191322 (executing program) 2025/11/15 00:04:51 fetching corpus: 2700, signal 144875/192573 (executing program) 2025/11/15 00:04:52 fetching corpus: 2750, signal 145719/193982 (executing program) 2025/11/15 00:04:52 fetching corpus: 2800, signal 146291/195163 (executing program) 2025/11/15 00:04:52 fetching corpus: 2850, signal 147295/196630 (executing program) 2025/11/15 00:04:52 fetching corpus: 2900, signal 148164/197995 (executing program) 2025/11/15 00:04:52 fetching corpus: 2950, signal 148821/199224 (executing program) 2025/11/15 00:04:52 fetching corpus: 3000, signal 149479/200434 (executing program) 2025/11/15 00:04:52 fetching corpus: 3050, signal 150122/201687 (executing program) 2025/11/15 00:04:52 fetching corpus: 3100, signal 150950/202983 (executing program) 2025/11/15 00:04:52 fetching corpus: 3150, signal 152100/204374 (executing program) 2025/11/15 00:04:52 fetching corpus: 3200, signal 153054/205657 (executing program) 2025/11/15 00:04:53 fetching corpus: 3250, signal 153674/206714 (executing program) 2025/11/15 00:04:53 fetching corpus: 3300, signal 154290/207786 (executing program) 2025/11/15 00:04:53 fetching corpus: 3350, signal 155024/208944 (executing program) 2025/11/15 00:04:53 fetching corpus: 3400, signal 155592/209958 (executing program) 2025/11/15 00:04:53 fetching corpus: 3450, signal 156136/211026 (executing program) 2025/11/15 00:04:53 fetching corpus: 3500, signal 156769/212090 (executing program) 2025/11/15 00:04:53 fetching corpus: 3550, signal 157471/213168 (executing program) 2025/11/15 00:04:53 fetching corpus: 3600, signal 158379/214326 (executing program) 2025/11/15 00:04:53 fetching corpus: 3650, signal 158876/215312 (executing program) 2025/11/15 00:04:54 fetching corpus: 3700, signal 159577/216409 (executing program) 2025/11/15 00:04:54 fetching corpus: 3750, signal 160339/217514 (executing program) 2025/11/15 00:04:54 fetching corpus: 3800, signal 160888/218497 (executing program) 2025/11/15 00:04:54 fetching corpus: 3850, signal 161651/219554 (executing program) 2025/11/15 00:04:54 fetching corpus: 3900, signal 162384/220613 (executing program) 2025/11/15 00:04:54 fetching corpus: 3950, signal 162997/221578 (executing program) 2025/11/15 00:04:54 fetching corpus: 4000, signal 164106/222753 (executing program) 2025/11/15 00:04:54 fetching corpus: 4050, signal 164445/223647 (executing program) 2025/11/15 00:04:54 fetching corpus: 4100, signal 164856/224529 (executing program) 2025/11/15 00:04:54 fetching corpus: 4150, signal 165513/225490 (executing program) 2025/11/15 00:04:54 fetching corpus: 4200, signal 166987/226722 (executing program) 2025/11/15 00:04:55 fetching corpus: 4250, signal 167563/227637 (executing program) 2025/11/15 00:04:55 fetching corpus: 4300, signal 167994/228510 (executing program) 2025/11/15 00:04:55 fetching corpus: 4350, signal 168824/229508 (executing program) 2025/11/15 00:04:55 fetching corpus: 4400, signal 169532/230442 (executing program) 2025/11/15 00:04:55 fetching corpus: 4450, signal 169948/231261 (executing program) 2025/11/15 00:04:55 fetching corpus: 4500, signal 170458/232102 (executing program) 2025/11/15 00:04:55 fetching corpus: 4550, signal 171205/232996 (executing program) 2025/11/15 00:04:55 fetching corpus: 4600, signal 171825/233848 (executing program) 2025/11/15 00:04:55 fetching corpus: 4650, signal 172237/234634 (executing program) 2025/11/15 00:04:56 fetching corpus: 4700, signal 172928/235454 (executing program) 2025/11/15 00:04:56 fetching corpus: 4750, signal 173351/236245 (executing program) 2025/11/15 00:04:56 fetching corpus: 4800, signal 173983/237098 (executing program) 2025/11/15 00:04:56 fetching corpus: 4850, signal 174334/237823 (executing program) 2025/11/15 00:04:56 fetching corpus: 4900, signal 174885/238635 (executing program) 2025/11/15 00:04:56 fetching corpus: 4950, signal 175311/239384 (executing program) 2025/11/15 00:04:56 fetching corpus: 5000, signal 175693/240077 (executing program) 2025/11/15 00:04:56 fetching corpus: 5050, signal 176360/240853 (executing program) 2025/11/15 00:04:56 fetching corpus: 5100, signal 176701/241552 (executing program) 2025/11/15 00:04:56 fetching corpus: 5150, signal 177624/242383 (executing program) 2025/11/15 00:04:56 fetching corpus: 5200, signal 178017/243064 (executing program) 2025/11/15 00:04:57 fetching corpus: 5250, signal 178524/243738 (executing program) 2025/11/15 00:04:57 fetching corpus: 5300, signal 179089/244525 (executing program) 2025/11/15 00:04:57 fetching corpus: 5350, signal 179536/245258 (executing program) 2025/11/15 00:04:57 fetching corpus: 5400, signal 180054/245948 (executing program) 2025/11/15 00:04:57 fetching corpus: 5450, signal 180595/246645 (executing program) 2025/11/15 00:04:57 fetching corpus: 5500, signal 180974/247307 (executing program) 2025/11/15 00:04:57 fetching corpus: 5550, signal 181224/247989 (executing program) 2025/11/15 00:04:57 fetching corpus: 5600, signal 181637/248606 (executing program) 2025/11/15 00:04:57 fetching corpus: 5650, signal 182023/249243 (executing program) 2025/11/15 00:04:57 fetching corpus: 5700, signal 182660/249955 (executing program) 2025/11/15 00:04:58 fetching corpus: 5750, signal 182929/250583 (executing program) 2025/11/15 00:04:58 fetching corpus: 5800, signal 183289/251187 (executing program) 2025/11/15 00:04:58 fetching corpus: 5850, signal 183688/251816 (executing program) 2025/11/15 00:04:58 fetching corpus: 5900, signal 184255/252435 (executing program) 2025/11/15 00:04:58 fetching corpus: 5950, signal 184658/253049 (executing program) 2025/11/15 00:04:58 fetching corpus: 6000, signal 185311/253671 (executing program) 2025/11/15 00:04:58 fetching corpus: 6050, signal 185621/254286 (executing program) 2025/11/15 00:04:58 fetching corpus: 6100, signal 186037/254856 (executing program) 2025/11/15 00:04:59 fetching corpus: 6150, signal 186412/255435 (executing program) 2025/11/15 00:04:59 fetching corpus: 6200, signal 186839/256023 (executing program) 2025/11/15 00:04:59 fetching corpus: 6250, signal 187241/256577 (executing program) 2025/11/15 00:04:59 fetching corpus: 6300, signal 187616/257140 (executing program) 2025/11/15 00:04:59 fetching corpus: 6350, signal 187916/257737 (executing program) 2025/11/15 00:04:59 fetching corpus: 6400, signal 188462/258333 (executing program) 2025/11/15 00:04:59 fetching corpus: 6450, signal 188803/258874 (executing program) 2025/11/15 00:04:59 fetching corpus: 6500, signal 189259/259164 (executing program) 2025/11/15 00:04:59 fetching corpus: 6550, signal 189767/259164 (executing program) 2025/11/15 00:04:59 fetching corpus: 6600, signal 190119/259164 (executing program) 2025/11/15 00:05:00 fetching corpus: 6650, signal 190563/259164 (executing program) 2025/11/15 00:05:00 fetching corpus: 6700, signal 190805/259164 (executing program) 2025/11/15 00:05:00 fetching corpus: 6750, signal 191127/259164 (executing program) 2025/11/15 00:05:00 fetching corpus: 6800, signal 191804/259164 (executing program) 2025/11/15 00:05:00 fetching corpus: 6850, signal 192276/259164 (executing program) 2025/11/15 00:05:00 fetching corpus: 6900, signal 192614/259164 (executing program) 2025/11/15 00:05:00 fetching corpus: 6950, signal 192978/259164 (executing program) 2025/11/15 00:05:00 fetching corpus: 7000, signal 193395/259164 (executing program) 2025/11/15 00:05:00 fetching corpus: 7050, signal 193795/259164 (executing program) 2025/11/15 00:05:00 fetching corpus: 7100, signal 194054/259166 (executing program) 2025/11/15 00:05:00 fetching corpus: 7150, signal 194567/259166 (executing program) 2025/11/15 00:05:01 fetching corpus: 7200, signal 195009/259166 (executing program) 2025/11/15 00:05:01 fetching corpus: 7250, signal 195416/259166 (executing program) 2025/11/15 00:05:01 fetching corpus: 7300, signal 195716/259166 (executing program) 2025/11/15 00:05:01 fetching corpus: 7350, signal 196170/259166 (executing program) 2025/11/15 00:05:01 fetching corpus: 7400, signal 196580/259166 (executing program) 2025/11/15 00:05:01 fetching corpus: 7450, signal 197004/259166 (executing program) 2025/11/15 00:05:01 fetching corpus: 7500, signal 197375/259166 (executing program) 2025/11/15 00:05:01 fetching corpus: 7550, signal 197697/259166 (executing program) 2025/11/15 00:05:01 fetching corpus: 7600, signal 197931/259166 (executing program) 2025/11/15 00:05:02 fetching corpus: 7650, signal 198283/259166 (executing program) 2025/11/15 00:05:02 fetching corpus: 7700, signal 198493/259166 (executing program) 2025/11/15 00:05:02 fetching corpus: 7750, signal 198782/259166 (executing program) 2025/11/15 00:05:02 fetching corpus: 7800, signal 199469/259166 (executing program) 2025/11/15 00:05:02 fetching corpus: 7850, signal 199758/259166 (executing program) 2025/11/15 00:05:02 fetching corpus: 7900, signal 199983/259166 (executing program) 2025/11/15 00:05:02 fetching corpus: 7950, signal 200258/259166 (executing program) 2025/11/15 00:05:02 fetching corpus: 8000, signal 200619/259166 (executing program) 2025/11/15 00:05:02 fetching corpus: 8050, signal 200911/259166 (executing program) 2025/11/15 00:05:02 fetching corpus: 8100, signal 201203/259166 (executing program) 2025/11/15 00:05:02 fetching corpus: 8150, signal 201478/259171 (executing program) 2025/11/15 00:05:03 fetching corpus: 8200, signal 201756/259171 (executing program) 2025/11/15 00:05:03 fetching corpus: 8250, signal 201989/259174 (executing program) 2025/11/15 00:05:03 fetching corpus: 8300, signal 202333/259174 (executing program) 2025/11/15 00:05:03 fetching corpus: 8350, signal 202668/259174 (executing program) 2025/11/15 00:05:03 fetching corpus: 8400, signal 203163/259174 (executing program) 2025/11/15 00:05:03 fetching corpus: 8450, signal 203446/259174 (executing program) 2025/11/15 00:05:03 fetching corpus: 8500, signal 203665/259174 (executing program) 2025/11/15 00:05:03 fetching corpus: 8550, signal 203983/259174 (executing program) 2025/11/15 00:05:03 fetching corpus: 8600, signal 204186/259174 (executing program) 2025/11/15 00:05:04 fetching corpus: 8650, signal 204478/259174 (executing program) 2025/11/15 00:05:04 fetching corpus: 8700, signal 204940/259174 (executing program) 2025/11/15 00:05:04 fetching corpus: 8750, signal 205324/259174 (executing program) 2025/11/15 00:05:04 fetching corpus: 8800, signal 205548/259174 (executing program) 2025/11/15 00:05:04 fetching corpus: 8850, signal 205825/259174 (executing program) 2025/11/15 00:05:04 fetching corpus: 8900, signal 206055/259174 (executing program) 2025/11/15 00:05:04 fetching corpus: 8950, signal 206325/259174 (executing program) 2025/11/15 00:05:04 fetching corpus: 9000, signal 206547/259174 (executing program) 2025/11/15 00:05:04 fetching corpus: 9050, signal 206796/259174 (executing program) 2025/11/15 00:05:04 fetching corpus: 9100, signal 207061/259174 (executing program) 2025/11/15 00:05:05 fetching corpus: 9150, signal 207350/259174 (executing program) 2025/11/15 00:05:05 fetching corpus: 9200, signal 207575/259174 (executing program) 2025/11/15 00:05:05 fetching corpus: 9250, signal 207789/259174 (executing program) 2025/11/15 00:05:05 fetching corpus: 9300, signal 208140/259174 (executing program) 2025/11/15 00:05:05 fetching corpus: 9350, signal 208402/259174 (executing program) 2025/11/15 00:05:05 fetching corpus: 9400, signal 208622/259174 (executing program) 2025/11/15 00:05:05 fetching corpus: 9450, signal 208937/259174 (executing program) 2025/11/15 00:05:05 fetching corpus: 9500, signal 209207/259174 (executing program) 2025/11/15 00:05:05 fetching corpus: 9550, signal 209540/259174 (executing program) 2025/11/15 00:05:05 fetching corpus: 9600, signal 209809/259187 (executing program) 2025/11/15 00:05:06 fetching corpus: 9650, signal 210208/259187 (executing program) 2025/11/15 00:05:06 fetching corpus: 9700, signal 210495/259187 (executing program) 2025/11/15 00:05:06 fetching corpus: 9750, signal 210789/259187 (executing program) 2025/11/15 00:05:06 fetching corpus: 9800, signal 211062/259187 (executing program) 2025/11/15 00:05:06 fetching corpus: 9850, signal 211264/259187 (executing program) 2025/11/15 00:05:06 fetching corpus: 9900, signal 211656/259187 (executing program) 2025/11/15 00:05:06 fetching corpus: 9950, signal 211867/259187 (executing program) 2025/11/15 00:05:06 fetching corpus: 10000, signal 212078/259187 (executing program) 2025/11/15 00:05:06 fetching corpus: 10050, signal 212317/259189 (executing program) 2025/11/15 00:05:06 fetching corpus: 10100, signal 212682/259189 (executing program) 2025/11/15 00:05:06 fetching corpus: 10150, signal 212935/259189 (executing program) 2025/11/15 00:05:07 fetching corpus: 10200, signal 213129/259189 (executing program) 2025/11/15 00:05:07 fetching corpus: 10250, signal 213342/259189 (executing program) 2025/11/15 00:05:07 fetching corpus: 10300, signal 213575/259189 (executing program) 2025/11/15 00:05:07 fetching corpus: 10350, signal 213835/259189 (executing program) 2025/11/15 00:05:07 fetching corpus: 10400, signal 214041/259189 (executing program) 2025/11/15 00:05:07 fetching corpus: 10450, signal 214289/259196 (executing program) 2025/11/15 00:05:07 fetching corpus: 10500, signal 214559/259196 (executing program) 2025/11/15 00:05:07 fetching corpus: 10550, signal 214781/259196 (executing program) 2025/11/15 00:05:07 fetching corpus: 10600, signal 215062/259197 (executing program) 2025/11/15 00:05:07 fetching corpus: 10650, signal 215254/259197 (executing program) 2025/11/15 00:05:07 fetching corpus: 10700, signal 215562/259197 (executing program) 2025/11/15 00:05:08 fetching corpus: 10750, signal 215759/259197 (executing program) 2025/11/15 00:05:08 fetching corpus: 10800, signal 216030/259197 (executing program) 2025/11/15 00:05:08 fetching corpus: 10850, signal 216369/259197 (executing program) 2025/11/15 00:05:08 fetching corpus: 10900, signal 216569/259197 (executing program) 2025/11/15 00:05:08 fetching corpus: 10950, signal 216806/259197 (executing program) 2025/11/15 00:05:08 fetching corpus: 11000, signal 217036/259197 (executing program) 2025/11/15 00:05:08 fetching corpus: 11050, signal 217372/259198 (executing program) 2025/11/15 00:05:08 fetching corpus: 11100, signal 217521/259198 (executing program) 2025/11/15 00:05:08 fetching corpus: 11150, signal 217768/259198 (executing program) 2025/11/15 00:05:08 fetching corpus: 11200, signal 217984/259198 (executing program) 2025/11/15 00:05:09 fetching corpus: 11250, signal 218305/259198 (executing program) 2025/11/15 00:05:09 fetching corpus: 11300, signal 219251/259198 (executing program) 2025/11/15 00:05:09 fetching corpus: 11350, signal 219509/259198 (executing program) 2025/11/15 00:05:09 fetching corpus: 11400, signal 219669/259198 (executing program) 2025/11/15 00:05:09 fetching corpus: 11450, signal 219887/259198 (executing program) 2025/11/15 00:05:09 fetching corpus: 11500, signal 220067/259199 (executing program) 2025/11/15 00:05:09 fetching corpus: 11550, signal 220298/259199 (executing program) 2025/11/15 00:05:09 fetching corpus: 11600, signal 220596/259199 (executing program) 2025/11/15 00:05:09 fetching corpus: 11650, signal 220780/259199 (executing program) 2025/11/15 00:05:09 fetching corpus: 11700, signal 221007/259199 (executing program) 2025/11/15 00:05:10 fetching corpus: 11750, signal 221284/259199 (executing program) 2025/11/15 00:05:10 fetching corpus: 11800, signal 221579/259199 (executing program) 2025/11/15 00:05:10 fetching corpus: 11850, signal 221902/259200 (executing program) 2025/11/15 00:05:10 fetching corpus: 11900, signal 222072/259200 (executing program) 2025/11/15 00:05:10 fetching corpus: 11950, signal 222292/259200 (executing program) 2025/11/15 00:05:10 fetching corpus: 12000, signal 222522/259201 (executing program) 2025/11/15 00:05:10 fetching corpus: 12050, signal 222721/259201 (executing program) 2025/11/15 00:05:10 fetching corpus: 12100, signal 222917/259201 (executing program) 2025/11/15 00:05:10 fetching corpus: 12150, signal 223078/259201 (executing program) 2025/11/15 00:05:10 fetching corpus: 12200, signal 223283/259201 (executing program) 2025/11/15 00:05:10 fetching corpus: 12250, signal 223469/259201 (executing program) 2025/11/15 00:05:10 fetching corpus: 12300, signal 223704/259201 (executing program) 2025/11/15 00:05:11 fetching corpus: 12350, signal 223975/259212 (executing program) 2025/11/15 00:05:11 fetching corpus: 12400, signal 224236/259212 (executing program) 2025/11/15 00:05:11 fetching corpus: 12450, signal 224378/259212 (executing program) 2025/11/15 00:05:11 fetching corpus: 12500, signal 224653/259212 (executing program) 2025/11/15 00:05:11 fetching corpus: 12550, signal 224890/259212 (executing program) 2025/11/15 00:05:11 fetching corpus: 12600, signal 225182/259212 (executing program) 2025/11/15 00:05:11 fetching corpus: 12650, signal 225375/259212 (executing program) 2025/11/15 00:05:11 fetching corpus: 12700, signal 225640/259212 (executing program) 2025/11/15 00:05:11 fetching corpus: 12750, signal 225838/259212 (executing program) 2025/11/15 00:05:11 fetching corpus: 12800, signal 226153/259212 (executing program) 2025/11/15 00:05:11 fetching corpus: 12850, signal 226299/259212 (executing program) 2025/11/15 00:05:11 fetching corpus: 12900, signal 226466/259212 (executing program) 2025/11/15 00:05:12 fetching corpus: 12950, signal 226690/259215 (executing program) 2025/11/15 00:05:12 fetching corpus: 13000, signal 226970/259215 (executing program) 2025/11/15 00:05:12 fetching corpus: 13050, signal 227204/259215 (executing program) 2025/11/15 00:05:12 fetching corpus: 13100, signal 227360/259215 (executing program) 2025/11/15 00:05:12 fetching corpus: 13150, signal 227709/259215 (executing program) 2025/11/15 00:05:12 fetching corpus: 13200, signal 228028/259215 (executing program) 2025/11/15 00:05:12 fetching corpus: 13250, signal 228312/259215 (executing program) 2025/11/15 00:05:12 fetching corpus: 13300, signal 228548/259215 (executing program) 2025/11/15 00:05:12 fetching corpus: 13350, signal 228784/259215 (executing program) 2025/11/15 00:05:12 fetching corpus: 13400, signal 228914/259215 (executing program) 2025/11/15 00:05:13 fetching corpus: 13450, signal 229191/259215 (executing program) 2025/11/15 00:05:13 fetching corpus: 13500, signal 229320/259215 (executing program) 2025/11/15 00:05:13 fetching corpus: 13550, signal 229445/259215 (executing program) 2025/11/15 00:05:13 fetching corpus: 13600, signal 229666/259215 (executing program) 2025/11/15 00:05:13 fetching corpus: 13650, signal 230495/259215 (executing program) 2025/11/15 00:05:13 fetching corpus: 13700, signal 230828/259215 (executing program) 2025/11/15 00:05:13 fetching corpus: 13750, signal 231015/259215 (executing program) 2025/11/15 00:05:13 fetching corpus: 13800, signal 231197/259215 (executing program) 2025/11/15 00:05:13 fetching corpus: 13850, signal 231403/259215 (executing program) 2025/11/15 00:05:13 fetching corpus: 13900, signal 231581/259215 (executing program) 2025/11/15 00:05:13 fetching corpus: 13950, signal 231785/259215 (executing program) 2025/11/15 00:05:14 fetching corpus: 14000, signal 232001/259215 (executing program) 2025/11/15 00:05:14 fetching corpus: 14050, signal 232214/259215 (executing program) 2025/11/15 00:05:14 fetching corpus: 14100, signal 232420/259215 (executing program) 2025/11/15 00:05:14 fetching corpus: 14150, signal 232571/259215 (executing program) 2025/11/15 00:05:14 fetching corpus: 14200, signal 232810/259215 (executing program) 2025/11/15 00:05:14 fetching corpus: 14250, signal 233002/259215 (executing program) 2025/11/15 00:05:14 fetching corpus: 14300, signal 233136/259215 (executing program) 2025/11/15 00:05:14 fetching corpus: 14350, signal 233506/259215 (executing program) 2025/11/15 00:05:14 fetching corpus: 14400, signal 233633/259215 (executing program) 2025/11/15 00:05:14 fetching corpus: 14450, signal 233912/259215 (executing program) 2025/11/15 00:05:14 fetching corpus: 14500, signal 234162/259215 (executing program) 2025/11/15 00:05:15 fetching corpus: 14550, signal 234316/259215 (executing program) 2025/11/15 00:05:15 fetching corpus: 14600, signal 234497/259215 (executing program) 2025/11/15 00:05:15 fetching corpus: 14650, signal 234609/259215 (executing program) 2025/11/15 00:05:15 fetching corpus: 14700, signal 234788/259215 (executing program) 2025/11/15 00:05:15 fetching corpus: 14750, signal 234954/259215 (executing program) 2025/11/15 00:05:15 fetching corpus: 14800, signal 235123/259215 (executing program) 2025/11/15 00:05:15 fetching corpus: 14850, signal 235250/259215 (executing program) 2025/11/15 00:05:15 fetching corpus: 14900, signal 235482/259215 (executing program) 2025/11/15 00:05:15 fetching corpus: 14950, signal 235656/259215 (executing program) 2025/11/15 00:05:15 fetching corpus: 15000, signal 235922/259217 (executing program) 2025/11/15 00:05:15 fetching corpus: 15050, signal 236121/259217 (executing program) 2025/11/15 00:05:16 fetching corpus: 15100, signal 236338/259217 (executing program) 2025/11/15 00:05:16 fetching corpus: 15150, signal 236515/259218 (executing program) 2025/11/15 00:05:16 fetching corpus: 15200, signal 236688/259218 (executing program) 2025/11/15 00:05:16 fetching corpus: 15250, signal 236875/259218 (executing program) 2025/11/15 00:05:16 fetching corpus: 15300, signal 237012/259218 (executing program) 2025/11/15 00:05:16 fetching corpus: 15350, signal 237265/259218 (executing program) 2025/11/15 00:05:16 fetching corpus: 15400, signal 237420/259218 (executing program) 2025/11/15 00:05:16 fetching corpus: 15450, signal 237612/259218 (executing program) 2025/11/15 00:05:16 fetching corpus: 15492, signal 237808/259218 (executing program) 2025/11/15 00:05:16 fetching corpus: 15492, signal 237808/259218 (executing program) 2025/11/15 00:05:19 starting 8 fuzzer processes 00:05:19 executing program 0: r0 = pidfd_open(0x0, 0x0) sync_file_range(r0, 0x20, 0x9, 0x2) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x3b1880, 0x20) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x5) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x3) fsetxattr$security_evm(r3, &(0x7f0000000180), &(0x7f00000001c0)=@ng={0x4, 0x11, '>\v'}, 0x4, 0x2) openat(r2, &(0x7f0000000200)='./file0\x00', 0x200000, 0x1) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x1c58c1, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x800) syncfs(r0) r5 = syz_open_dev$evdev(&(0x7f0000000380), 0x7, 0x414000) signalfd4(r5, &(0x7f00000003c0)={[0x1]}, 0x8, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000400)={{0x0, 0x10000, 0xfffffffffffffffb, 0x7090b3, 0x400, 0x9, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x2, 0x101, 0x5}}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000001400)={0x0, 0x3253, 0x3, 0x1, 0x5}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000001440), &(0x7f0000001480), 0x2, 0x1) 00:05:19 executing program 1: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x5, 0x9, 0x20, 0x661, 0xf}}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x7, 0x1, 0x7fff, 0x7, 0xe, "9c6f4385ec0368a771f843edf0086ffa187de9"}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x4, 0x5, 0x600, 0x8, 0xf}}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000000c0)=0xffffffff) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x141000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_open_dev$ttys(0xc, 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0xef, 0xc1, 0x4, 0x81, 0x5, 0x0, 0x3e, 0x9, 0x3b9, 0x38, 0x18f, 0x5, 0x8240, 0x20, 0x2, 0x6c73, 0x8, 0x5}, [{0x6, 0x0, 0xffffffff, 0x7ff, 0x80, 0x1, 0x6, 0x6}], "eba2d85c21b1021a0af2ceb8884d12516007310e671322f3bfa32c8dea70d30f", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x778) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000980)=0x3) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000dc0)={0x19, 0x0, &(0x7f00000009c0)="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"}) r2 = openat$incfs(r1, &(0x7f0000000e00)='.log\x00', 0x10001, 0x58fa47c6ae13a1a5) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000e40)={0xc1f9, 0xfffffff7, 0x1, 0x800, 0xd, "db8c79a536915910f64962356b9fd7b2cf605c"}) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$TIOCSIG(r1, 0x40045436, 0x39) 00:05:19 executing program 7: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$sndseq(r0, &(0x7f0000000040)=[{0x3f, 0x7, 0x40, 0x0, @time={0x1, 0xfffffff8}, {0x9, 0xc}, {0x56, 0x3}, @connect={{0xff, 0x4}, {0x1}}}, {0x0, 0x2, 0x5, 0x1, @time={0x80, 0x2}, {0x3, 0xf8}, {0xe, 0xe1}, @quote={{0x80, 0x5}, 0x4}}, {0x9, 0xa1, 0x0, 0x22, @tick=0x80, {0x4, 0xf7}, {0x7, 0x4}, @raw8={"46726a278c9f05c6eda2052e"}}], 0x54) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0xfff, 0x2, {0x2, 0x3, 0x8, 0x2, 0x3}, 0x3}) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000140)={0x2, 0xffffffff}) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x0, r0, 0x1, 0xd, 0x3f, 0xaee9}) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x30000, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ppoll(&(0x7f0000000240)=[{r2, 0x8180}, {r3, 0x200}], 0x2, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f00000002c0)={[0x8]}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000300)={0x8, 0x1a, 0x6}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, @in_args={0x1}}, './file0/file0\x00'}) fcntl$setstatus(r3, 0x4, 0x42800) recvmsg$unix(r2, &(0x7f0000000dc0)={&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f00000007c0)=""/171, 0xab}, {&(0x7f0000000880)=""/113, 0x71}, {&(0x7f0000000900)=""/244, 0xf4}, {&(0x7f0000000a00)=""/214, 0xd6}, {&(0x7f0000000b00)=""/135, 0x87}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)=""/237, 0xed}], 0x7, &(0x7f0000000d80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x40}, 0x2000) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0xe7, 0x5, &(0x7f00000006c0)=[{&(0x7f0000000440)="de605de64fc81b680432fa1562d82ff82fa2aae19400983ea0e29b1027f3d5d780845fc1c0b9adf4d69a4017e5c089bf8684d54df57c01adb491afc77b7deec0c8d166bb58d93543590d2a651d64104b889bfda8f563a9fbc9b1d599a929261b1f7f4ca660e1637c2fb9f31d38a1a343e26048339e9fb6e0472c459b4be85cf133c09f217292106fa17848a7e2", 0x8d, 0x401}, {&(0x7f0000000500)="7ad9d61f1aac84ef3daf814716bbf25e0dc5979531fbfc5e6579565c80", 0x1d, 0x6f}, {&(0x7f0000000540)="895cdfcd26116e4bbd8e516533adb217a4071727ea1b26d7f3ea4e833efaff8c0206cfc78492e29a853cd4e06f6d03158ce4b97e298939001c0dec45767e7e1cda355dad42ff40ca", 0x48, 0x7ff}, {&(0x7f00000005c0)="c677c8d8d5d90c2e09c7467c05be3b1974e9b22d274a98571e72c6241fcc3558e560cf30e77ea5332be13993db612db9eaee623dbb2b4e56e098c3a7f9c567e65582f0310b6aed4e7b5288b352c290220008417d9bc535e5d836a736fce993a6dfc6610465e4ee51295ef55fff5c085ed329eb3fb30804b2ac5645cb", 0x7c, 0x7}, {&(0x7f0000000640)="a641a595053cdecb2e0f9542926460ab11fa5fb868bf0fb2e7ad1ccc727acde05adbffd588d0ba071ae59006a757f1297ad5270a06d5f6f4c953cc4bd83a939832f4ff72fc25af0d857743f0685c47e56512a2f58b118fa349e4676fd31348d62893fdcf39a0bcee9c04b308ab7fac5fdb5ac7bc", 0x74, 0xfffffffffffffbff}], 0x1450, &(0x7f0000000e00)={[{@shortname_mixed}], [{@subj_type={'subj_type', 0x3d, '\x00'}}, {@euid_eq={'euid', 0x3d, r6}}, {@subj_role={'subj_role', 0x3d, '\\$+V'}}, {@hash}, {@context={'context', 0x3d, 'root'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@dont_appraise}, {@audit}]}) pwrite64(r2, &(0x7f0000000e80)="26a4a8fe1d348fa01741c9e892af701501fd81b4590bd67bf3190a5fefe9450dfdfe6e3a8037d95975b3a6a3b0e8460fa3551c12bbd963bc47c6f69895ec60a7815fb6eb4ce9c10d03c9a84b9ad38ac208c6a9bcb63d200fef1833342cc759d21571040d", 0x64, 0x2) fgetxattr(r0, &(0x7f0000000f00)=@random={'security.', 'euid'}, &(0x7f0000000f40)=""/144, 0x90) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000001000)=0x1) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000001040)) accept(0xffffffffffffffff, &(0x7f0000001080)=@phonet, &(0x7f0000001100)=0x80) 00:05:19 executing program 2: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x5}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x3, 0x2, 0x47}, {0x20, 0x20, 0x0, 0x10001}]}, 0x10) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x2000, 0x0, 0x1, 0x7}, {0xb673, 0x1, 0x1f, 0x8}, {0x1ff, 0x4, 0x9, 0xffffffff}]}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req={0xc540, 0x42, 0x5, 0x349}, 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000001c0)={0x9, 0x7, 0x3, 0x26, 0x2, [0x0, 0x4b36, 0x9, 0x6377102c]}) sendto$packet(r1, &(0x7f0000000200)="b4afac351ac9bda73d45307a8e91755c38a9763631de829d5c64dcfc925258bb688ea5fc95a4776be0e382f868f503ad1bc1666b1f7fc777451fd1c8a9b76412855b77450e154b7285d46b9615f63d60f1057a84ddeb119b233d63e6d553ed797ae5770fcdc7d3c93f91de62693a03873a02d164e3788260094d9ebfdd4fa45a64fcf697d687b00e3925a5c11c7599821f3ea81f00844eb2c0", 0x99, 0x8000, &(0x7f00000002c0)={0x11, 0x1c, 0x0, 0x1, 0x1f, 0x6, @remote}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$VT_DISALLOCATE(r2, 0x5608) renameat2(r2, &(0x7f0000000300)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00', 0x1) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000380)={0x3f, "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"}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {0x8, 0x6}}, './file0\x00'}) r5 = geteuid() mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname={'aname', 0x3d, '{\\'}}, {@cache_loose}, {@cache_fscache}, {@fscache}], [{@uid_eq={'uid', 0x3d, r5}}, {@context={'context', 0x3d, 'user_u'}}]}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000840)=0xe8) setresuid(r5, 0x0, r6) socketpair(0x21, 0x800, 0x6, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000008c0)={'veth1_to_bridge\x00'}) symlink(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='./file0\x00') [ 94.892009] audit: type=1400 audit(1763165119.173:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:05:19 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x3f]}, 0x8, 0x80000) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000040)=0xec, 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000000c0)) r3 = accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14, 0x1000) fcntl$setflags(r3, 0x2, 0x1) r4 = pidfd_getfd(r0, r0, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000001c0)=0x1e, 0x4) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c45f5a0a4d4e6f1d874c081ae3"}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) setsockopt$inet_int(r1, 0x0, 0xe, &(0x7f0000000300)=0x9, 0x4) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000340)={0x12, 0x81, 0x7ff, 0x354, 0x800}) r5 = pidfd_getfd(r1, r0, 0x0) connect$inet6(r5, &(0x7f0000000900)={0xa, 0x4e24, 0x23d, @ipv4={'\x00', '\xff\xff', @local}, 0x101}, 0x1c) move_mount(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x14) sendto$inet(r5, &(0x7f00000009c0)="f099aaecde5a84eec52d5af5852ec7a751b27c74c23c7fb46eb693d3c8d4ae5725f087593e92dab6bdff9686a4f6d0b4463360015c7160c0faf175db7f9a218992e4f849f5c081c19b3bcc52e5bbf9f954f4a60b080c7edc3351ce4f29e1a3263b8554dd95466733b47f", 0x6a, 0x20000000, &(0x7f0000000a40)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x1a0, 0x32, 0x100, 0x70bd26, 0x25dfdbfb, {0x17}, [@typed={0x8, 0x84, 0x0, 0x0, @u32=0x7}, @generic="cdc2f6a9b8fca217bf4ba5ce7ccb93a948e5f4d052c35e1dcdea9f0ba25a7e477efb0c8411e9d5b6a0135156b8b584cf08deef2e3d278213a031583a8cea5d565ea31261f961651d85fe9c78b4df6e7d83c45df528d130e523eb4ffc4948dcf656ac40db5b", @typed={0x5, 0x6d, 0x0, 0x0, @str='\x00'}, @generic="82b47bc30e2bf4f0631ae2f67c764f1290bd0ae0b3a6000bd1d8e12080b377280ee24369e64d5c62eb8caf4c1042053213eaff135d512c47c2670341558a4da2f5a0718002ef0a8a03bf14b0d0163ce8db18e64ef9bc243fc55552c04888b2b7950b4255f771152565e820b94588ca", @nested={0x18, 0x3f, 0x0, 0x1, [@typed={0x14, 0x63, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @typed={0x8, 0x2d, 0x0, 0x0, @pid}, @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x73, 0x7d, 0x0, 0x0, @binary="596a7e2703f307323cc330786f755c0ec0dfa8fb678c5ac6c43507abe8c381c3ba3b14ca2fd7d09338022a8525ffc408ae4c7759d53e7c701750795d2528c1038243135a43c568c98020fa72f8ad0fb96da2520a727bd510813e0740fdff999089253c39547827f40e1c1befa49740"}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r6 = socket$inet6_udp(0xa, 0x2, 0x0) close(r6) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:05:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'veth1_macvtap\x00', {'ipvlan1\x00'}, 0x2}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0x0, @dev}}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000100)={0x2, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x8, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000380)={'veth1_vlan\x00', {0x2, 0x0, @remote}}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000003c0)={0x77359400}, 0x10) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000400)={0x6, {{0x2, 0x4e22, @loopback}}, 0x1, 0x1, [{{0x2, 0x4e24, @local}}]}, 0x110) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0xb, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x7, 0x1, '%/\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x84) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r1) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000840}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0xb00, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x3b}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x200}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x8044) mkdir(&(0x7f0000000940)='./file0\x00', 0x105) r4 = fcntl$dupfd(r1, 0x0, r1) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000002dc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002480)={0x8d0, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x359}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7, 0x1f, 0x3, 0x4ce}, {0x3, 0x40, 0xfa, 0x7}, {0x3, 0x1, 0x0, 0x2}, {0x1, 0xe8, 0xff, 0x3}, {0x6, 0x6, 0xd4, 0x200}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1000, 0xbd}, {0x1, 0x0, 0x20, 0x6}, {0x395a, 0x3f, 0x1, 0x1}, {0x2, 0x6, 0x9, 0x7}, {0x7, 0x1, 0x3}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}, {{0x8}, {0x298, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5b0}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0xff, 0x7, 0x5}, {0x0, 0xb7, 0x1, 0x6}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x8d0}}, 0x200008c0) 00:05:19 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) rt_tgsigqueueinfo(0xffffffffffffffff, r0, 0x36, &(0x7f0000000040)={0x2a, 0x8, 0x7fff}) rt_tgsigqueueinfo(r0, 0xffffffffffffffff, 0x1, &(0x7f00000000c0)={0x25, 0x81, 0x9}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x1}, &(0x7f00000001c0)=0x28) rt_tgsigqueueinfo(r0, r0, 0x15, &(0x7f0000000200)={0x7, 0x647, 0xaa}) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000280), 0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'ipvlan1\x00'}) ptrace$setsig(0x4203, r0, 0x371a, &(0x7f0000000300)={0x18, 0x8000, 0x1}) rt_tgsigqueueinfo(r0, r0, 0x3a, &(0x7f0000000380)={0x3c, 0x100, 0x10001}) syz_open_procfs$namespace(r0, &(0x7f0000000400)='ns/mnt\x00') rt_tgsigqueueinfo(r0, r0, 0x29, &(0x7f0000000440)={0x1a, 0xff, 0x7ff}) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000004c0)=0x3, 0x4) write$P9_RWRITE(r2, &(0x7f0000000500)={0xb, 0x77, 0x1, 0x401}, 0xb) ioctl(0xffffffffffffffff, 0x366, &(0x7f0000000540)="22c73ce62f199d91cf3b93a228910069d59158d19fa7faa5ad607deaffd055ab477313f3eb20b526e42f33f476cb1b8392102249ffa6274635417d5aa0cef2dd9abc6499c2225fa817be44ea6f8fd772a0e9a01c5ad7e72d915d238cc6ecf124b8c231c3369c5a61b16bedd3452076d73b82f6e7bd2e65706b73e373dc12c0763bf7def420c8823ba352d6c14fe90f7c3ac879bac8f895e3a39ed7108d5ba0") rt_tgsigqueueinfo(0x0, r0, 0x20, &(0x7f0000000600)={0x34, 0x5, 0x5503}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000680)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000006c0)={0x0, 0x0}) rt_tgsigqueueinfo(r4, r5, 0x21, &(0x7f0000000740)={0x36, 0x6, 0x3}) 00:05:19 executing program 6: sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x44}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40011}, 0x40) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4d}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x81}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x86}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xff}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xd5}]}, 0x64}}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x20042, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x140, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4008050}, 0x4040c04) sendmsg$netlink(r1, &(0x7f0000000680)={&(0x7f0000000600)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x4000000}, 0x4010) r3 = io_uring_setup(0x4f12, &(0x7f00000006c0)={0x0, 0x5e16, 0x8, 0x2, 0x2bc, 0x0, r1}) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000740)={{r0}, 0x3449, 0x1, 0xc9e2}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780), 0x40, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) socketpair(0x3f, 0x4, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x22040402}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x3fa, 0x8, 0x70bd27, 0x25dfdbfe, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x801) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x85484b5820b897aa, 0x70bd27, 0x100, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c00)={'erspan0\x00', &(0x7f0000000b40)={'syztnl0\x00', 0x0, 0x40, 0x80, 0xffff, 0x8001, {{0x1a, 0x4, 0x0, 0x3, 0x68, 0x67, 0x0, 0x81, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}, {[@rr={0x7, 0xb, 0xe2, [@dev={0xac, 0x14, 0x14, 0x2a}, @multicast2]}, @rr={0x7, 0x7, 0x7a, [@private=0xa010102]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x2}, {0x1, 0x10, "2e3b12f9db59ce52775b9387caba"}]}, @lsrr={0x83, 0xf, 0xbd, [@broadcast, @broadcast, @loopback]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x55, [@multicast1, @broadcast, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x18}, @empty]}]}}}}}) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000d00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x24042041) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000d40), 0x12800, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x714, 0x3b}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffd}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008004}, 0x24008010) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000e80), 0x11200, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r9, {0x9}}, './file0\x00'}) [ 96.066248] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.069187] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.071876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.073397] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.075202] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.076673] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.079253] ================================================================== [ 96.079420] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.080641] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 96.080701] Read of size 2 at addr ffff88800d811038 by task kworker/u11:4/298 [ 96.082363] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.083236] [ 96.083251] CPU: 0 UID: 0 PID: 298 Comm: kworker/u11:4 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 96.083286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 96.083304] Workqueue: hci1 hci_cmd_work [ 96.083340] Call Trace: [ 96.083349] [ 96.083359] dump_stack_lvl+0xca/0x120 [ 96.083393] print_report+0xcb/0x610 [ 96.083427] ? __virt_addr_valid+0x100/0x5d0 [ 96.083458] ? hci_cmd_work+0x66d/0x6d0 [ 96.083492] ? hci_cmd_work+0x66d/0x6d0 [ 96.083526] kasan_report+0xca/0x100 [ 96.083560] ? hci_cmd_work+0x66d/0x6d0 [ 96.083598] hci_cmd_work+0x66d/0x6d0 [ 96.083634] process_one_work+0x8e1/0x19c0 [ 96.083679] ? __pfx_process_one_work+0x10/0x10 [ 96.083717] ? move_linked_works+0x172/0x270 [ 96.083747] ? assign_work+0x196/0x240 [ 96.083785] worker_thread+0x67e/0xe90 [ 96.083822] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 96.083855] ? __pfx_worker_thread+0x10/0x10 [ 96.083894] kthread+0x3c8/0x740 [ 96.083927] ? __pfx_kthread+0x10/0x10 [ 96.083961] ? trace_irq_enable.constprop.0+0x26/0x100 [ 96.083988] ? _raw_spin_unlock_irq+0x23/0x40 [ 96.084031] ? __pfx_kthread+0x10/0x10 [ 96.084065] ret_from_fork+0x67a/0x7a0 [ 96.084093] ? __pfx_ret_from_fork+0x10/0x10 [ 96.084121] ? __switch_to+0x759/0x1060 [ 96.084157] ? __pfx_kthread+0x10/0x10 [ 96.084192] ret_from_fork_asm+0x1a/0x30 [ 96.084236] [ 96.084245] [ 96.114238] Allocated by task 292: [ 96.114937] kasan_save_stack+0x24/0x50 [ 96.115726] kasan_save_track+0x14/0x30 [ 96.116522] __kasan_slab_alloc+0x59/0x70 [ 96.117333] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 96.118347] __alloc_skb+0x2ab/0x370 [ 96.119094] hci_cmd_sync_alloc+0x34/0x300 [ 96.119937] __hci_cmd_sync_sk+0xf7/0x5c0 [ 96.120782] hci_read_local_version_sync+0x2c/0x170 [ 96.121655] hci_dev_open_sync+0x145c/0x1f60 [ 96.122305] hci_power_on+0xdb/0x5d0 [ 96.122866] process_one_work+0x8e1/0x19c0 [ 96.123494] worker_thread+0x67e/0xe90 [ 96.124078] kthread+0x3c8/0x740 [ 96.124608] ret_from_fork+0x67a/0x7a0 [ 96.125189] ret_from_fork_asm+0x1a/0x30 [ 96.125801] [ 96.126061] Freed by task 297: [ 96.126542] kasan_save_stack+0x24/0x50 [ 96.127145] kasan_save_track+0x14/0x30 [ 96.127753] kasan_save_free_info+0x3a/0x60 [ 96.128411] __kasan_slab_free+0x43/0x70 [ 96.129023] kmem_cache_free+0x26f/0x500 [ 96.129637] kfree_skbmem+0x18a/0x1f0 [ 96.130215] sk_skb_reason_drop+0x10e/0x1b0 [ 96.130862] vhci_read+0x3d5/0x5d0 [ 96.131400] vfs_read+0x1eb/0xc70 [ 96.131918] ksys_read+0x121/0x240 [ 96.132468] do_syscall_64+0xbf/0x430 [ 96.133058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.133837] [ 96.134099] The buggy address belongs to the object at ffff88800d811000 [ 96.134099] which belongs to the cache skbuff_head_cache of size 232 [ 96.135977] The buggy address is located 56 bytes inside of [ 96.135977] freed 232-byte region [ffff88800d811000, ffff88800d8110e8) [ 96.137736] [ 96.137998] The buggy address belongs to the physical page: [ 96.138817] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xd811 [ 96.139965] anon flags: 0x100000000000000(node=0|zone=1) [ 96.140776] page_type: f5(slab) [ 96.141282] raw: 0100000000000000 ffff8880096c78c0 ffffea000039c0c0 0000000000000007 [ 96.142426] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 96.143570] page dumped because: kasan: bad access detected [ 96.144405] [ 96.144667] Memory state around the buggy address: [ 96.145390] ffff88800d810f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.146463] ffff88800d810f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.147539] >ffff88800d811000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.148618] ^ [ 96.149387] ffff88800d811080: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 96.150469] ffff88800d811100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 96.151547] ================================================================== [ 96.152709] Disabling lock debugging due to kernel taint [ 96.154665] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.157254] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.158977] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.160227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.164950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.166365] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.168331] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.192326] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.197819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.199459] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.236088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.240970] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.250823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.252162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.258848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 96.260822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.261988] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 96.264058] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 96.265866] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 96.267906] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 96.269109] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.272204] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 96.273529] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.275589] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 96.277225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.281336] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 96.285747] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 96.293751] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 96.296141] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 96.304830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.307889] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.312842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.218625] Bluetooth: hci0: command tx timeout [ 98.219072] Bluetooth: hci1: command tx timeout [ 98.281771] Bluetooth: hci2: command tx timeout [ 98.345613] Bluetooth: hci5: command tx timeout [ 98.346649] Bluetooth: hci3: command tx timeout [ 98.410659] Bluetooth: hci7: command tx timeout [ 98.410776] Bluetooth: hci4: command tx timeout [ 98.602054] Bluetooth: hci6: command tx timeout [ 100.265761] Bluetooth: hci0: command tx timeout [ 100.266853] Bluetooth: hci1: command tx timeout [ 100.329675] Bluetooth: hci2: command tx timeout [ 100.393688] Bluetooth: hci3: command tx timeout [ 100.393714] Bluetooth: hci5: command tx timeout [ 100.457618] Bluetooth: hci4: command tx timeout [ 100.457697] Bluetooth: hci7: command tx timeout [ 100.650601] Bluetooth: hci6: command tx timeout [ 102.313725] Bluetooth: hci1: command tx timeout [ 102.313740] Bluetooth: hci0: command tx timeout [ 102.378593] Bluetooth: hci2: command tx timeout [ 102.441669] Bluetooth: hci5: command tx timeout [ 102.441703] Bluetooth: hci3: command tx timeout [ 102.505614] Bluetooth: hci4: command tx timeout [ 102.505681] Bluetooth: hci7: command tx timeout [ 102.698942] Bluetooth: hci6: command tx timeout [ 104.361614] Bluetooth: hci0: command tx timeout [ 104.361663] Bluetooth: hci1: command tx timeout [ 104.425622] Bluetooth: hci2: command tx timeout [ 104.489631] Bluetooth: hci3: command tx timeout [ 104.489698] Bluetooth: hci5: command tx timeout [ 104.553589] Bluetooth: hci7: command tx timeout [ 104.553601] Bluetooth: hci4: command tx timeout [ 104.745647] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 00:05:20 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=1ffff11002d33f29 RCX=ffffffff815592bf RDX=ffff88801bb7b780 RSI=ffffffff815592ad RDI=0000000000000001 RBP=0000000000000001 RSP=ffff88801699f940 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff888016e9d340 R15=ffff88801699fa20 RIP=ffffffff815592af RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007eff78877070 CR3=000000000d602000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007eff7893a7c000007eff7893a7c8 XMM02=00007eff7893a7e000007eff7893a7c0 XMM03=00007eff7893a7c800007eff7893a7c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=840000001acc1025 RCX=ffffffff81a0dceb RDX=ffff888016670000 RSI=0000000000000001 RDI=00000000ffffff7b RBP=840000001acc1005 RSP=ffff88801447f6c8 R8 =0000000000000000 R9 =fffff940000d6608 R10=0000000000000001 R11=0000000000000001 R12=0000000000000010 R13=00007fc7c8a1a000 R14=0000000000000001 R15=ffff88800c01a0d0 RIP=ffffffff81752f18 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc7c93138c0 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc1ce12a890 CR3=000000000eaa1000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000415ebee14e3b826c XMM01=00000000000000003f847ae147ae147b XMM02=00000000000000000000000000000000 XMM03=00000000000000003f71efa600dbc745 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=000000000000000a000000c000014016 XMM09=000000000000002a000000c000016000 XMM10=0000000000000009000000c000014040 XMM11=0000000000000007000000c000014049 XMM12=000000000000001c000000c000018000 XMM13=0000000000000041000000c00001a000 XMM14=000000000000000c000000c000014050 XMM15=000000000000000d000000c000014060