Warning: Permanently added '[localhost]:57800' (ECDSA) to the list of known hosts.
2025/11/15 02:42:41 fuzzer started
2025/11/15 02:42:41 dialing manager at localhost:37161
syzkaller login: [   43.788212] cgroup: Unknown subsys name 'net'
[   43.868564] cgroup: Unknown subsys name 'cpuset'
[   43.886083] cgroup: Unknown subsys name 'rlimit'
2025/11/15 02:42:51 syscalls: 2214
2025/11/15 02:42:51 code coverage: enabled
2025/11/15 02:42:51 comparison tracing: enabled
2025/11/15 02:42:51 extra coverage: enabled
2025/11/15 02:42:51 setuid sandbox: enabled
2025/11/15 02:42:51 namespace sandbox: enabled
2025/11/15 02:42:51 Android sandbox: enabled
2025/11/15 02:42:51 fault injection: enabled
2025/11/15 02:42:51 leak checking: enabled
2025/11/15 02:42:51 net packet injection: enabled
2025/11/15 02:42:51 net device setup: enabled
2025/11/15 02:42:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/11/15 02:42:51 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/11/15 02:42:51 USB emulation: enabled
2025/11/15 02:42:51 hci packet injection: enabled
2025/11/15 02:42:51 wifi device emulation: enabled
2025/11/15 02:42:51 802.15.4 emulation: enabled
2025/11/15 02:42:51 fetching corpus: 50, signal 17090/18951 (executing program)
2025/11/15 02:42:52 fetching corpus: 100, signal 37326/40721 (executing program)
2025/11/15 02:42:52 fetching corpus: 150, signal 43445/48384 (executing program)
2025/11/15 02:42:52 fetching corpus: 200, signal 50322/56707 (executing program)
2025/11/15 02:42:52 fetching corpus: 250, signal 60117/67723 (executing program)
2025/11/15 02:42:52 fetching corpus: 300, signal 64101/73038 (executing program)
2025/11/15 02:42:52 fetching corpus: 350, signal 67884/78171 (executing program)
2025/11/15 02:42:52 fetching corpus: 400, signal 70256/81886 (executing program)
2025/11/15 02:42:52 fetching corpus: 450, signal 73577/86426 (executing program)
2025/11/15 02:42:52 fetching corpus: 500, signal 77145/91218 (executing program)
2025/11/15 02:42:53 fetching corpus: 550, signal 80065/95303 (executing program)
2025/11/15 02:42:53 fetching corpus: 600, signal 85141/101303 (executing program)
2025/11/15 02:42:53 fetching corpus: 650, signal 88442/105613 (executing program)
2025/11/15 02:42:53 fetching corpus: 700, signal 90364/108659 (executing program)
2025/11/15 02:42:53 fetching corpus: 750, signal 93896/113097 (executing program)
2025/11/15 02:42:53 fetching corpus: 800, signal 97090/117181 (executing program)
2025/11/15 02:42:53 fetching corpus: 850, signal 100076/121075 (executing program)
2025/11/15 02:42:53 fetching corpus: 900, signal 101666/123661 (executing program)
2025/11/15 02:42:53 fetching corpus: 950, signal 104037/126896 (executing program)
2025/11/15 02:42:53 fetching corpus: 1000, signal 105322/129195 (executing program)
2025/11/15 02:42:54 fetching corpus: 1050, signal 107616/132319 (executing program)
2025/11/15 02:42:54 fetching corpus: 1100, signal 110148/135632 (executing program)
2025/11/15 02:42:54 fetching corpus: 1150, signal 111325/137833 (executing program)
2025/11/15 02:42:54 fetching corpus: 1200, signal 113194/140524 (executing program)
2025/11/15 02:42:54 fetching corpus: 1250, signal 114382/142614 (executing program)
2025/11/15 02:42:54 fetching corpus: 1300, signal 116654/145514 (executing program)
2025/11/15 02:42:54 fetching corpus: 1350, signal 117930/147594 (executing program)
2025/11/15 02:42:54 fetching corpus: 1400, signal 119627/150007 (executing program)
2025/11/15 02:42:55 fetching corpus: 1450, signal 120911/152104 (executing program)
2025/11/15 02:42:55 fetching corpus: 1500, signal 122131/154078 (executing program)
2025/11/15 02:42:55 fetching corpus: 1550, signal 123693/156351 (executing program)
2025/11/15 02:42:55 fetching corpus: 1600, signal 125049/158425 (executing program)
2025/11/15 02:42:55 fetching corpus: 1650, signal 127616/161336 (executing program)
2025/11/15 02:42:55 fetching corpus: 1700, signal 128881/163310 (executing program)
2025/11/15 02:42:55 fetching corpus: 1750, signal 130282/165371 (executing program)
2025/11/15 02:42:55 fetching corpus: 1800, signal 131737/167400 (executing program)
2025/11/15 02:42:55 fetching corpus: 1850, signal 132689/169074 (executing program)
2025/11/15 02:42:55 fetching corpus: 1900, signal 134132/171102 (executing program)
2025/11/15 02:42:56 fetching corpus: 1950, signal 135297/172892 (executing program)
2025/11/15 02:42:56 fetching corpus: 2000, signal 136522/174688 (executing program)
2025/11/15 02:42:56 fetching corpus: 2050, signal 137468/176304 (executing program)
2025/11/15 02:42:56 fetching corpus: 2100, signal 138334/177801 (executing program)
2025/11/15 02:42:56 fetching corpus: 2150, signal 139530/179516 (executing program)
2025/11/15 02:42:56 fetching corpus: 2200, signal 140380/180970 (executing program)
2025/11/15 02:42:56 fetching corpus: 2250, signal 141020/182357 (executing program)
2025/11/15 02:42:56 fetching corpus: 2300, signal 141735/183761 (executing program)
2025/11/15 02:42:56 fetching corpus: 2350, signal 142600/185224 (executing program)
2025/11/15 02:42:56 fetching corpus: 2400, signal 143235/186535 (executing program)
2025/11/15 02:42:56 fetching corpus: 2450, signal 143961/187870 (executing program)
2025/11/15 02:42:57 fetching corpus: 2500, signal 144890/189394 (executing program)
2025/11/15 02:42:57 fetching corpus: 2550, signal 145646/190771 (executing program)
2025/11/15 02:42:57 fetching corpus: 2600, signal 146338/192049 (executing program)
2025/11/15 02:42:57 fetching corpus: 2650, signal 147233/193446 (executing program)
2025/11/15 02:42:57 fetching corpus: 2700, signal 147948/194718 (executing program)
2025/11/15 02:42:57 fetching corpus: 2750, signal 148642/195971 (executing program)
2025/11/15 02:42:57 fetching corpus: 2800, signal 149223/197203 (executing program)
2025/11/15 02:42:57 fetching corpus: 2850, signal 150018/198501 (executing program)
2025/11/15 02:42:57 fetching corpus: 2900, signal 150585/199680 (executing program)
2025/11/15 02:42:57 fetching corpus: 2950, signal 151330/200950 (executing program)
2025/11/15 02:42:58 fetching corpus: 3000, signal 152060/202185 (executing program)
2025/11/15 02:42:58 fetching corpus: 3050, signal 152692/203380 (executing program)
2025/11/15 02:42:58 fetching corpus: 3100, signal 153568/204703 (executing program)
2025/11/15 02:42:58 fetching corpus: 3150, signal 154329/205927 (executing program)
2025/11/15 02:42:58 fetching corpus: 3200, signal 155252/207257 (executing program)
2025/11/15 02:42:58 fetching corpus: 3250, signal 155790/208350 (executing program)
2025/11/15 02:42:58 fetching corpus: 3300, signal 156474/209493 (executing program)
2025/11/15 02:42:58 fetching corpus: 3350, signal 157415/210750 (executing program)
2025/11/15 02:42:58 fetching corpus: 3400, signal 158099/211884 (executing program)
2025/11/15 02:42:58 fetching corpus: 3450, signal 158853/213015 (executing program)
2025/11/15 02:42:59 fetching corpus: 3500, signal 159832/214221 (executing program)
2025/11/15 02:42:59 fetching corpus: 3550, signal 160711/215396 (executing program)
2025/11/15 02:42:59 fetching corpus: 3600, signal 161273/216436 (executing program)
2025/11/15 02:42:59 fetching corpus: 3650, signal 161973/217575 (executing program)
2025/11/15 02:42:59 fetching corpus: 3700, signal 162564/218559 (executing program)
2025/11/15 02:42:59 fetching corpus: 3750, signal 163111/219562 (executing program)
2025/11/15 02:42:59 fetching corpus: 3800, signal 163591/220504 (executing program)
2025/11/15 02:42:59 fetching corpus: 3850, signal 164329/221485 (executing program)
2025/11/15 02:42:59 fetching corpus: 3900, signal 165022/222540 (executing program)
2025/11/15 02:42:59 fetching corpus: 3950, signal 165722/223538 (executing program)
2025/11/15 02:42:59 fetching corpus: 4000, signal 166191/224481 (executing program)
2025/11/15 02:43:00 fetching corpus: 4050, signal 166730/225426 (executing program)
2025/11/15 02:43:00 fetching corpus: 4100, signal 167245/226365 (executing program)
2025/11/15 02:43:00 fetching corpus: 4150, signal 167645/227241 (executing program)
2025/11/15 02:43:00 fetching corpus: 4200, signal 168531/228272 (executing program)
2025/11/15 02:43:00 fetching corpus: 4250, signal 168949/229141 (executing program)
2025/11/15 02:43:00 fetching corpus: 4300, signal 169247/229978 (executing program)
2025/11/15 02:43:00 fetching corpus: 4350, signal 169655/230817 (executing program)
2025/11/15 02:43:00 fetching corpus: 4400, signal 170112/231649 (executing program)
2025/11/15 02:43:00 fetching corpus: 4450, signal 170595/232484 (executing program)
2025/11/15 02:43:00 fetching corpus: 4500, signal 171053/233324 (executing program)
2025/11/15 02:43:00 fetching corpus: 4550, signal 171431/234172 (executing program)
2025/11/15 02:43:01 fetching corpus: 4600, signal 171818/235003 (executing program)
2025/11/15 02:43:01 fetching corpus: 4650, signal 172364/235807 (executing program)
2025/11/15 02:43:01 fetching corpus: 4700, signal 172901/236638 (executing program)
2025/11/15 02:43:01 fetching corpus: 4750, signal 173425/237455 (executing program)
2025/11/15 02:43:01 fetching corpus: 4800, signal 173992/238284 (executing program)
2025/11/15 02:43:01 fetching corpus: 4850, signal 174672/239123 (executing program)
2025/11/15 02:43:01 fetching corpus: 4900, signal 175299/239937 (executing program)
2025/11/15 02:43:01 fetching corpus: 4950, signal 175889/240761 (executing program)
2025/11/15 02:43:01 fetching corpus: 5000, signal 176179/241483 (executing program)
2025/11/15 02:43:01 fetching corpus: 5050, signal 177164/242359 (executing program)
2025/11/15 02:43:02 fetching corpus: 5100, signal 177697/243107 (executing program)
2025/11/15 02:43:02 fetching corpus: 5150, signal 178368/243870 (executing program)
2025/11/15 02:43:02 fetching corpus: 5200, signal 178809/244584 (executing program)
2025/11/15 02:43:02 fetching corpus: 5250, signal 179208/245284 (executing program)
2025/11/15 02:43:02 fetching corpus: 5300, signal 179742/246028 (executing program)
2025/11/15 02:43:02 fetching corpus: 5350, signal 180230/246723 (executing program)
2025/11/15 02:43:02 fetching corpus: 5400, signal 180660/247415 (executing program)
2025/11/15 02:43:02 fetching corpus: 5450, signal 181025/248101 (executing program)
2025/11/15 02:43:02 fetching corpus: 5500, signal 181346/248751 (executing program)
2025/11/15 02:43:02 fetching corpus: 5550, signal 181782/249427 (executing program)
2025/11/15 02:43:02 fetching corpus: 5600, signal 182052/250045 (executing program)
2025/11/15 02:43:02 fetching corpus: 5650, signal 182732/250717 (executing program)
2025/11/15 02:43:03 fetching corpus: 5700, signal 183110/251377 (executing program)
2025/11/15 02:43:03 fetching corpus: 5750, signal 183761/252085 (executing program)
2025/11/15 02:43:03 fetching corpus: 5800, signal 184033/252701 (executing program)
2025/11/15 02:43:03 fetching corpus: 5850, signal 184654/253348 (executing program)
2025/11/15 02:43:03 fetching corpus: 5900, signal 185275/253970 (executing program)
2025/11/15 02:43:03 fetching corpus: 5950, signal 185850/254601 (executing program)
2025/11/15 02:43:03 fetching corpus: 6000, signal 186175/255206 (executing program)
2025/11/15 02:43:03 fetching corpus: 6050, signal 186842/255839 (executing program)
2025/11/15 02:43:03 fetching corpus: 6100, signal 187238/256456 (executing program)
2025/11/15 02:43:03 fetching corpus: 6150, signal 187622/257052 (executing program)
2025/11/15 02:43:04 fetching corpus: 6200, signal 187998/257623 (executing program)
2025/11/15 02:43:04 fetching corpus: 6250, signal 188285/258231 (executing program)
2025/11/15 02:43:04 fetching corpus: 6300, signal 188544/258789 (executing program)
2025/11/15 02:43:04 fetching corpus: 6350, signal 188914/259377 (executing program)
2025/11/15 02:43:04 fetching corpus: 6400, signal 189616/259968 (executing program)
2025/11/15 02:43:04 fetching corpus: 6450, signal 190571/260537 (executing program)
2025/11/15 02:43:04 fetching corpus: 6500, signal 190989/261040 (executing program)
2025/11/15 02:43:04 fetching corpus: 6550, signal 191334/261379 (executing program)
2025/11/15 02:43:04 fetching corpus: 6600, signal 191764/261379 (executing program)
2025/11/15 02:43:04 fetching corpus: 6650, signal 192085/261379 (executing program)
2025/11/15 02:43:04 fetching corpus: 6700, signal 192666/261379 (executing program)
2025/11/15 02:43:05 fetching corpus: 6750, signal 192977/261379 (executing program)
2025/11/15 02:43:05 fetching corpus: 6800, signal 193235/261379 (executing program)
2025/11/15 02:43:05 fetching corpus: 6850, signal 193605/261379 (executing program)
2025/11/15 02:43:05 fetching corpus: 6900, signal 194041/261379 (executing program)
2025/11/15 02:43:05 fetching corpus: 6950, signal 194663/261380 (executing program)
2025/11/15 02:43:05 fetching corpus: 7000, signal 195021/261380 (executing program)
2025/11/15 02:43:05 fetching corpus: 7050, signal 195351/261380 (executing program)
2025/11/15 02:43:05 fetching corpus: 7100, signal 195605/261380 (executing program)
2025/11/15 02:43:05 fetching corpus: 7150, signal 196023/261380 (executing program)
2025/11/15 02:43:05 fetching corpus: 7200, signal 196390/261392 (executing program)
2025/11/15 02:43:06 fetching corpus: 7250, signal 196691/261392 (executing program)
2025/11/15 02:43:06 fetching corpus: 7300, signal 196995/261392 (executing program)
2025/11/15 02:43:06 fetching corpus: 7350, signal 197345/261392 (executing program)
2025/11/15 02:43:06 fetching corpus: 7400, signal 197728/261392 (executing program)
2025/11/15 02:43:06 fetching corpus: 7450, signal 198011/261392 (executing program)
2025/11/15 02:43:06 fetching corpus: 7500, signal 198290/261392 (executing program)
2025/11/15 02:43:06 fetching corpus: 7550, signal 198563/261392 (executing program)
2025/11/15 02:43:06 fetching corpus: 7600, signal 198865/261392 (executing program)
2025/11/15 02:43:06 fetching corpus: 7650, signal 199414/261392 (executing program)
2025/11/15 02:43:06 fetching corpus: 7700, signal 199707/261392 (executing program)
2025/11/15 02:43:06 fetching corpus: 7750, signal 200037/261392 (executing program)
2025/11/15 02:43:07 fetching corpus: 7800, signal 200375/261392 (executing program)
2025/11/15 02:43:07 fetching corpus: 7850, signal 200738/261392 (executing program)
2025/11/15 02:43:07 fetching corpus: 7900, signal 201014/261392 (executing program)
2025/11/15 02:43:07 fetching corpus: 7950, signal 201262/261392 (executing program)
2025/11/15 02:43:07 fetching corpus: 8000, signal 201501/261392 (executing program)
2025/11/15 02:43:07 fetching corpus: 8050, signal 201810/261392 (executing program)
2025/11/15 02:43:07 fetching corpus: 8100, signal 202087/261392 (executing program)
2025/11/15 02:43:07 fetching corpus: 8150, signal 202352/261394 (executing program)
2025/11/15 02:43:07 fetching corpus: 8200, signal 202625/261394 (executing program)
2025/11/15 02:43:07 fetching corpus: 8250, signal 202999/261394 (executing program)
2025/11/15 02:43:07 fetching corpus: 8300, signal 203344/261394 (executing program)
2025/11/15 02:43:08 fetching corpus: 8350, signal 204371/261396 (executing program)
2025/11/15 02:43:08 fetching corpus: 8400, signal 204640/261396 (executing program)
2025/11/15 02:43:08 fetching corpus: 8450, signal 204875/261398 (executing program)
2025/11/15 02:43:08 fetching corpus: 8500, signal 205154/261398 (executing program)
2025/11/15 02:43:08 fetching corpus: 8550, signal 205424/261398 (executing program)
2025/11/15 02:43:08 fetching corpus: 8600, signal 205732/261398 (executing program)
2025/11/15 02:43:08 fetching corpus: 8650, signal 206075/261398 (executing program)
2025/11/15 02:43:08 fetching corpus: 8700, signal 206324/261398 (executing program)
2025/11/15 02:43:08 fetching corpus: 8750, signal 206741/261398 (executing program)
2025/11/15 02:43:08 fetching corpus: 8800, signal 207117/261398 (executing program)
2025/11/15 02:43:08 fetching corpus: 8850, signal 207382/261398 (executing program)
2025/11/15 02:43:09 fetching corpus: 8900, signal 207699/261398 (executing program)
2025/11/15 02:43:09 fetching corpus: 8950, signal 208118/261398 (executing program)
2025/11/15 02:43:09 fetching corpus: 9000, signal 208407/261398 (executing program)
2025/11/15 02:43:09 fetching corpus: 9050, signal 208657/261398 (executing program)
2025/11/15 02:43:09 fetching corpus: 9100, signal 208932/261398 (executing program)
2025/11/15 02:43:09 fetching corpus: 9150, signal 209352/261398 (executing program)
2025/11/15 02:43:09 fetching corpus: 9200, signal 209836/261398 (executing program)
2025/11/15 02:43:09 fetching corpus: 9250, signal 210137/261398 (executing program)
2025/11/15 02:43:09 fetching corpus: 9300, signal 210461/261398 (executing program)
2025/11/15 02:43:09 fetching corpus: 9350, signal 210709/261398 (executing program)
2025/11/15 02:43:09 fetching corpus: 9400, signal 211073/261398 (executing program)
2025/11/15 02:43:10 fetching corpus: 9450, signal 211319/261398 (executing program)
2025/11/15 02:43:10 fetching corpus: 9500, signal 211481/261398 (executing program)
2025/11/15 02:43:10 fetching corpus: 9550, signal 211897/261398 (executing program)
2025/11/15 02:43:10 fetching corpus: 9600, signal 212228/261398 (executing program)
2025/11/15 02:43:10 fetching corpus: 9650, signal 212466/261398 (executing program)
2025/11/15 02:43:10 fetching corpus: 9700, signal 212770/261398 (executing program)
2025/11/15 02:43:10 fetching corpus: 9750, signal 212955/261398 (executing program)
2025/11/15 02:43:10 fetching corpus: 9800, signal 213167/261398 (executing program)
2025/11/15 02:43:10 fetching corpus: 9850, signal 213446/261398 (executing program)
2025/11/15 02:43:10 fetching corpus: 9900, signal 213633/261399 (executing program)
2025/11/15 02:43:11 fetching corpus: 9950, signal 213869/261399 (executing program)
2025/11/15 02:43:11 fetching corpus: 10000, signal 214166/261399 (executing program)
2025/11/15 02:43:11 fetching corpus: 10050, signal 214371/261399 (executing program)
2025/11/15 02:43:11 fetching corpus: 10100, signal 214584/261399 (executing program)
2025/11/15 02:43:11 fetching corpus: 10150, signal 214804/261399 (executing program)
2025/11/15 02:43:11 fetching corpus: 10200, signal 215046/261399 (executing program)
2025/11/15 02:43:11 fetching corpus: 10250, signal 215336/261399 (executing program)
2025/11/15 02:43:11 fetching corpus: 10300, signal 215646/261400 (executing program)
2025/11/15 02:43:11 fetching corpus: 10350, signal 215857/261400 (executing program)
2025/11/15 02:43:11 fetching corpus: 10400, signal 216093/261400 (executing program)
2025/11/15 02:43:11 fetching corpus: 10450, signal 216419/261400 (executing program)
2025/11/15 02:43:12 fetching corpus: 10500, signal 216797/261400 (executing program)
2025/11/15 02:43:12 fetching corpus: 10550, signal 217007/261400 (executing program)
2025/11/15 02:43:12 fetching corpus: 10600, signal 217241/261400 (executing program)
2025/11/15 02:43:12 fetching corpus: 10650, signal 217578/261400 (executing program)
2025/11/15 02:43:12 fetching corpus: 10700, signal 217781/261400 (executing program)
2025/11/15 02:43:12 fetching corpus: 10750, signal 218106/261400 (executing program)
2025/11/15 02:43:12 fetching corpus: 10800, signal 218397/261401 (executing program)
2025/11/15 02:43:12 fetching corpus: 10850, signal 218653/261401 (executing program)
2025/11/15 02:43:12 fetching corpus: 10900, signal 218926/261401 (executing program)
2025/11/15 02:43:12 fetching corpus: 10950, signal 219139/261401 (executing program)
2025/11/15 02:43:13 fetching corpus: 11000, signal 219542/261401 (executing program)
2025/11/15 02:43:13 fetching corpus: 11050, signal 219737/261401 (executing program)
2025/11/15 02:43:13 fetching corpus: 11100, signal 219920/261401 (executing program)
2025/11/15 02:43:13 fetching corpus: 11150, signal 220282/261401 (executing program)
2025/11/15 02:43:13 fetching corpus: 11200, signal 220455/261401 (executing program)
2025/11/15 02:43:13 fetching corpus: 11250, signal 220644/261401 (executing program)
2025/11/15 02:43:13 fetching corpus: 11300, signal 220851/261401 (executing program)
2025/11/15 02:43:13 fetching corpus: 11350, signal 221075/261401 (executing program)
2025/11/15 02:43:13 fetching corpus: 11400, signal 221241/261401 (executing program)
2025/11/15 02:43:13 fetching corpus: 11450, signal 221512/261401 (executing program)
2025/11/15 02:43:13 fetching corpus: 11500, signal 221790/261401 (executing program)
2025/11/15 02:43:14 fetching corpus: 11550, signal 221977/261401 (executing program)
2025/11/15 02:43:14 fetching corpus: 11600, signal 222175/261401 (executing program)
2025/11/15 02:43:14 fetching corpus: 11650, signal 222393/261401 (executing program)
2025/11/15 02:43:14 fetching corpus: 11700, signal 222605/261401 (executing program)
2025/11/15 02:43:14 fetching corpus: 11750, signal 222825/261401 (executing program)
2025/11/15 02:43:14 fetching corpus: 11800, signal 223029/261401 (executing program)
2025/11/15 02:43:14 fetching corpus: 11850, signal 223296/261401 (executing program)
2025/11/15 02:43:14 fetching corpus: 11900, signal 223458/261401 (executing program)
2025/11/15 02:43:14 fetching corpus: 11950, signal 223696/261401 (executing program)
2025/11/15 02:43:14 fetching corpus: 12000, signal 223882/261401 (executing program)
2025/11/15 02:43:15 fetching corpus: 12050, signal 224115/261401 (executing program)
2025/11/15 02:43:15 fetching corpus: 12100, signal 224347/261401 (executing program)
2025/11/15 02:43:15 fetching corpus: 12150, signal 224586/261401 (executing program)
2025/11/15 02:43:15 fetching corpus: 12200, signal 224759/261401 (executing program)
2025/11/15 02:43:15 fetching corpus: 12250, signal 224950/261401 (executing program)
2025/11/15 02:43:15 fetching corpus: 12300, signal 225112/261401 (executing program)
2025/11/15 02:43:15 fetching corpus: 12350, signal 225277/261401 (executing program)
2025/11/15 02:43:15 fetching corpus: 12400, signal 225480/261401 (executing program)
2025/11/15 02:43:15 fetching corpus: 12450, signal 225653/261401 (executing program)
2025/11/15 02:43:16 fetching corpus: 12500, signal 225799/261401 (executing program)
2025/11/15 02:43:16 fetching corpus: 12550, signal 226018/261401 (executing program)
2025/11/15 02:43:16 fetching corpus: 12600, signal 226170/261401 (executing program)
2025/11/15 02:43:16 fetching corpus: 12650, signal 226361/261401 (executing program)
2025/11/15 02:43:16 fetching corpus: 12700, signal 226581/261401 (executing program)
2025/11/15 02:43:16 fetching corpus: 12750, signal 227283/261420 (executing program)
2025/11/15 02:43:16 fetching corpus: 12800, signal 227431/261420 (executing program)
2025/11/15 02:43:16 fetching corpus: 12850, signal 227665/261420 (executing program)
2025/11/15 02:43:16 fetching corpus: 12900, signal 227850/261420 (executing program)
2025/11/15 02:43:16 fetching corpus: 12950, signal 227988/261420 (executing program)
2025/11/15 02:43:16 fetching corpus: 13000, signal 228180/261420 (executing program)
2025/11/15 02:43:17 fetching corpus: 13050, signal 228451/261420 (executing program)
2025/11/15 02:43:17 fetching corpus: 13100, signal 228714/261420 (executing program)
2025/11/15 02:43:17 fetching corpus: 13150, signal 228904/261420 (executing program)
2025/11/15 02:43:17 fetching corpus: 13200, signal 229167/261420 (executing program)
2025/11/15 02:43:17 fetching corpus: 13250, signal 229470/261421 (executing program)
2025/11/15 02:43:17 fetching corpus: 13300, signal 229675/261421 (executing program)
2025/11/15 02:43:17 fetching corpus: 13350, signal 229828/261421 (executing program)
2025/11/15 02:43:17 fetching corpus: 13400, signal 230022/261421 (executing program)
2025/11/15 02:43:17 fetching corpus: 13450, signal 230201/261421 (executing program)
2025/11/15 02:43:17 fetching corpus: 13500, signal 230424/261421 (executing program)
2025/11/15 02:43:18 fetching corpus: 13550, signal 230624/261423 (executing program)
2025/11/15 02:43:18 fetching corpus: 13600, signal 230772/261423 (executing program)
2025/11/15 02:43:18 fetching corpus: 13650, signal 230985/261423 (executing program)
2025/11/15 02:43:18 fetching corpus: 13700, signal 231166/261423 (executing program)
2025/11/15 02:43:18 fetching corpus: 13750, signal 231355/261423 (executing program)
2025/11/15 02:43:18 fetching corpus: 13800, signal 231571/261423 (executing program)
2025/11/15 02:43:18 fetching corpus: 13850, signal 231764/261423 (executing program)
2025/11/15 02:43:18 fetching corpus: 13900, signal 231988/261433 (executing program)
2025/11/15 02:43:18 fetching corpus: 13950, signal 232146/261433 (executing program)
2025/11/15 02:43:18 fetching corpus: 14000, signal 232309/261436 (executing program)
2025/11/15 02:43:19 fetching corpus: 14050, signal 232496/261436 (executing program)
2025/11/15 02:43:19 fetching corpus: 14100, signal 232684/261436 (executing program)
2025/11/15 02:43:19 fetching corpus: 14150, signal 232890/261436 (executing program)
2025/11/15 02:43:19 fetching corpus: 14200, signal 233215/261436 (executing program)
2025/11/15 02:43:19 fetching corpus: 14250, signal 233385/261436 (executing program)
2025/11/15 02:43:19 fetching corpus: 14300, signal 233596/261436 (executing program)
2025/11/15 02:43:19 fetching corpus: 14350, signal 233766/261436 (executing program)
2025/11/15 02:43:19 fetching corpus: 14400, signal 233983/261436 (executing program)
2025/11/15 02:43:19 fetching corpus: 14450, signal 234150/261436 (executing program)
2025/11/15 02:43:20 fetching corpus: 14500, signal 234249/261436 (executing program)
2025/11/15 02:43:20 fetching corpus: 14550, signal 234421/261436 (executing program)
2025/11/15 02:43:20 fetching corpus: 14600, signal 234582/261436 (executing program)
2025/11/15 02:43:20 fetching corpus: 14650, signal 234888/261436 (executing program)
2025/11/15 02:43:20 fetching corpus: 14700, signal 235061/261436 (executing program)
2025/11/15 02:43:20 fetching corpus: 14750, signal 235208/261436 (executing program)
2025/11/15 02:43:20 fetching corpus: 14800, signal 235368/261436 (executing program)
2025/11/15 02:43:20 fetching corpus: 14850, signal 235497/261436 (executing program)
2025/11/15 02:43:20 fetching corpus: 14900, signal 235718/261436 (executing program)
2025/11/15 02:43:20 fetching corpus: 14950, signal 235857/261436 (executing program)
2025/11/15 02:43:21 fetching corpus: 15000, signal 236029/261436 (executing program)
2025/11/15 02:43:21 fetching corpus: 15050, signal 236168/261436 (executing program)
2025/11/15 02:43:21 fetching corpus: 15100, signal 236362/261436 (executing program)
2025/11/15 02:43:21 fetching corpus: 15150, signal 236569/261436 (executing program)
2025/11/15 02:43:21 fetching corpus: 15200, signal 236745/261436 (executing program)
2025/11/15 02:43:21 fetching corpus: 15250, signal 236988/261436 (executing program)
2025/11/15 02:43:21 fetching corpus: 15300, signal 237227/261436 (executing program)
2025/11/15 02:43:21 fetching corpus: 15350, signal 237409/261436 (executing program)
2025/11/15 02:43:21 fetching corpus: 15400, signal 237587/261436 (executing program)
2025/11/15 02:43:22 fetching corpus: 15450, signal 237831/261436 (executing program)
2025/11/15 02:43:22 fetching corpus: 15500, signal 238080/261436 (executing program)
2025/11/15 02:43:22 fetching corpus: 15550, signal 238226/261436 (executing program)
2025/11/15 02:43:22 fetching corpus: 15560, signal 238252/261438 (executing program)
2025/11/15 02:43:22 fetching corpus: 15560, signal 238252/261438 (executing program)
2025/11/15 02:43:23 starting 8 fuzzer processes
02:43:23 executing program 0:
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
ioctl$int_out(r0, 0x0, &(0x7f0000000040))
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x240)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[r1, r2, r0, r3, r4, r0], 0x6)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x100002, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f00000002c0)={0x394, r6, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x1de, 0x2a, [@fast_bss_trans={0x37, 0xa3, {0x0, 0x3, "41a630ad734671d78a2a29af35ab5243", "8099c34daab9cb39671d7ec682306506b9f8c03ecd57187fbd61d2be2c438864", "83d376a87f7031deeb12b7791d038430a85e4578d679993173e7f55f7bb015f3", [{0x1, 0x23, "3f885cb9ba072d65969274bc009b9ec11cb7f5cc1f357e8bc6af5e707cb9406847d454"}, {0x2, 0x6, "00b6e1f6ff16"}, {0x2, 0x22, "549f2804e1dcde9bef4527dfc85b82822f3479ac4deb16c5e51d9947afc288d42ede"}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x60}}, @peer_mgmt={0x75, 0x16, {0x1, 0x0, @val=0x1, @void, @val="fe01013aeca586484680eea1020591a7"}}, @perr={0x84, 0x107, {0x0, 0xf, [@not_ext={{}, @broadcast, 0x8, "", 0x1b}, @ext={{}, @device_a, 0x3, @device_a, 0x42}, @ext={{}, @device_a, 0x0, @device_b, 0x29}, @ext={{}, @device_a, 0x20, @device_a, 0x2f}, @not_ext={{}, @device_b, 0x7, "", 0x13}, @ext={{}, @device_b, 0x80000001, @device_a, 0x37}, @ext={{}, @broadcast, 0x2, @device_b, 0x31}, @not_ext={{}, @device_a, 0x8, "", 0x30}, @ext={{}, @broadcast, 0x2, @device_b, 0xf}, @ext={{}, @broadcast, 0x81, @device_a, 0x17}, @ext={{}, @device_b, 0x7f, @device_a, 0x33}, @ext={{}, @broadcast, 0xffffffff, @device_a, 0x2c}, @ext={{}, @broadcast, 0x4, @device_b, 0x22}, @not_ext={{}, @device_a, 0xfffffff9, "", 0x11}, @ext={{}, @device_a, 0x0, @device_a, 0x6}]}}, @channel_switch={0x25, 0x3, {0x0, 0xe, 0x3}}, @chsw_timing={0x68, 0x4, {0x7ff, 0x328c}}]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x117}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x76}], @NL80211_ATTR_BSS_SELECT={0x14, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x6, 0x1}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8}]}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x1, 0x3f, 0x0, 0x81, 0x0, 0x0, 0x1}, 0x1, 0x2, 0x1}}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x80000, {0x8, 0x3, 0xc5, 0x1f}}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_PMK={0x102, 0xfe, "6f867a4f629c1baa58d75bd2b2426dc54dbe5b8c2ef0941338f36046a5757c4cf1c18cb128aabffc894579c8d7caf8689c45bb196f11600e737c1490aaa8309ba91af1ba32e071c5832f8b1c6181e508e1db41009b1d14c1170f007af6e9cf19172b300904dd99509f88e8357bfc7f3c6ac65a245f5884fad3610473d5d4941cbc55d9bf513845eb065f524b8b061402fb5310fa748044ec346c8e602ec5bd9cc038ed7dec3726d109be0c8347c7f1b49c11b7be1f8e29efd9b204312d857640340b4907865abd965e699f727575a3441183a49a4288285227a575c7b198783ef0f48ddbd8627615bb5274dedb791555e38c2d05f4de9f21f76fb4293134"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac04}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x394}, 0x1, 0x0, 0x0, 0x4000004}, 0x841)
r8 = accept(r5, 0x0, &(0x7f0000000700))
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000007c0)={0x3, 0x0, 0x1, 'queue0\x00', 0xfff})
setxattr$security_selinux(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), &(0x7f0000000900)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a, 0x1)
mknodat$null(r5, &(0x7f0000000940)='./file1\x00', 0x8000, 0x103)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r9, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000001200)={&(0x7f0000000a80), 0xc, &(0x7f00000011c0)={&(0x7f0000000b00)={0x688, r9, 0x809, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0x17, 0x34, @random="eb047c4723e027374526b3875fa0ec601c17a5"}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x40, 0x115, "354207b3cd77675a9c9549d798172ca8413e54a12c3809f2bd11b3206b1ea3d15f5bc18e768de94a8e93a5b412bcc5e40c994ff81f237aa48d15090b"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x5}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x2a8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xd7, 0x2, "52c2e265d6d6d06f5c30c6cf02a75a635c840915241a58234f93093ceb1bd0102e26bd9aa3a84038a57cfa9b52c34b05659d9627f02f1b473aa514d9c8555657418506ca653a4e100a4b28984ec4ed800e94452eae8ecdb9872d000c30e7e695cc87d60a22d53eb1e4394c1e1e3ca4ce2797f285a4eb76936c7e4fd33b533b3eb9d1749ecedf05b362cdd5de359f4bc8ae9c8d86d630d7a96bc15b5e784a846db83fa0366ae88e507eb53786ad9c60b2504c0bc3d66e6b905c1db34001b8de0cb74c06eb313ae22293ba318c4667c59046ed3c"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x19, 0x3, "b38545c14547599de6585668bbce6b7126a7ce629c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1c, 0x3, "4813902d249729fe2d9587d08407f592fd7cea2ed20bddf4"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xcb, 0x3, "1d8e6543891bf3131aabb75f2d547b56f83cf2e076d63dfa6b25d3a747990d2d14adda389178de513f7b542398aece372c8c4e46bbf0b6cd628eaf391b9a9d71d26296535e417fde1fd57bf4587951bdaf2838c41eb588908aa62ffaf8b21273167718c12ee85e89773dfddbf2558180b06885a7f688a42a3b739ac2f30069138ee2c759ca051e227f68eaffff5f607a54bec15a5ed59837ca9ee1135718726c35b6fe248d00f7bf0fffb32b02ec86c553d41b6301a342febef9af040bb51d7bb2cd92fba826e8"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbc, 0x3, "f6551ceb8317350034049169be7859013244fba8a4bcc95a4fc65ea48cf1c594766c20e8b0af37d1521e1667dbfe9a06d7e02ae48cf6ba6463e40de6eaf7de8f3ebd3283e37371dcd8131237945044753760f38c9976bb40714f93f8e6699f0a7d06fc8c1187509fa233b2a4015ebaf96e7e3d945c521d48634a1a29e798c45e35f3c1c0656bd33e7911900d4692159700b989632c23d417e1008ef6273c56eb28cd59aebb8bf28a833eb6cafc44c7412ca4928bfb911ef5"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x139, 0x80, [@mic={0x8c, 0x18, {0xa0, "b3ef063ef421", @long="8d0ae0799a7a675e629066b7438e06d9"}}, @mesh_chsw={0x76, 0x6, {0x7, 0x1f, 0x1a, 0x1}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x80, 0x20, @broadcast, 0x4, 0x400, 0xfffffffb}}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x0, 0x4, @device_b, 0x5, 0x10001, 0x66bd}}, @random_vendor={0xdd, 0xda, "ab3daacd434d464a0d28a4a98a41d379d4280562fd5b2eb86d7ba820b2bfced19e732a22e59634924e8a0482a385cd8ad105be81f6827ab7346762ef66f473dfbc4cc779e231cd7ffd114f25a8f4ee318d2c3bc4a6c06a1256b2c6560c99ab55dc6bb3c9cf84eff855e10688f31c6a68d57e311f1fdc750f64d01ed9424c0eac88d8b3e70ad3640ef29f85310f401409910b896afa966d73934d3a98522895022b040e8d5d8819cab7a57ef27534babe6ab37376bd66a77c62a2a2adc8a0833dcb2a7e471c7a36444f1ba9aecdf3f7921629be1fcb20e7381ad9"}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x81, 0x40}}]}, @NL80211_ATTR_BEACON_TAIL={0x82, 0xf, [@perr={0x84, 0x7c, {0x0, 0x8, [@ext={{}, @broadcast, 0x80000001, @broadcast, 0x32}, @not_ext={{}, @device_b, 0x81, "", 0x3}, @not_ext={{}, @broadcast, 0x4, "", 0x14}, @ext={{}, @broadcast, 0x3f, @broadcast, 0x1a}, @not_ext={{}, @broadcast, 0x8, "", 0x1e}, @not_ext={{}, @device_a, 0x2d9, "", 0x19}, @ext={{}, @device_b, 0x3, @broadcast, 0x1f}, @not_ext={{}, @broadcast, 0x0, "", 0x39}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xac, 0x7f, [@random={0x9, 0x43, "0a9590222c4ae349b1e623656009e5ffb8f97435b0b73dfe934b0fee9e33cbbe5bf86204fb37108dfc0466ead78c8257a6e3460530fd13edf6854a7a676e3c75b4ede2"}, @mic={0x8c, 0x10, {0xb1e, "922748c639f7", @short="1776bbb7bcce0cca"}}, @prep={0x83, 0x1f, @not_ext={{}, 0xee, 0x8, @device_b, 0x3f, "", 0x6680, 0x8, @device_b, 0x4}}, @ssid={0x0, 0xe, @random="da7761b3203d68443392f9df4866"}, @peer_mgmt={0x75, 0x16, {0x1, 0x100, @void, @val=0x11, @val="bc7eb3562a7f046afea02a4927bee737"}}, @cf={0x4, 0x6, {0x71, 0xd0, 0x4, 0xfff}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xe3, 0x7f, [@peer_mgmt={0x75, 0x14, {0x1, 0x1000, @void, @void, @val="7e4752d562f8dceaa5edd9c44d86f717"}}, @measure_req={0x26, 0x6b, {0x1f, 0x6, 0x5, "8e77a655d094b30ef71c2dc7e180da6be4d116eb050b749ceea4eb1ce6cd976037eecf702b94816189d38512b997d277dff2f0bf1f6d434b1c8928a8fdc7e20730ed6bc3dcadc293d95e5a6997ac4ddc51f94a2c4daa7978b0a241339494bb9ac436797ad0fe6a4c"}}, @preq={0x82, 0x41, @ext={{0x1, 0x1, 0x1}, 0x20, 0x1c, 0x8, @device_a, 0x7e, @device_b, 0xe471, 0x200, 0x3, [{{}, @device_a, 0x5}, {{0x1}, @device_a, 0x56}, {{0x0, 0x0, 0x1}, @device_b, 0x8001}]}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x4}}, @cf={0x4, 0x6, {0x1f, 0x1, 0xa8f, 0x8}}, @peer_mgmt={0x75, 0x6, {0x0, 0xc3c1, @void, @val=0x2e, @void}}]}], @NL80211_ATTR_SMPS_MODE={0x5}]}, 0x688}, 0x1, 0x0, 0x0, 0x8000}, 0x10)

02:43:23 executing program 1:
fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000000))
fallocate(0xffffffffffffffff, 0x39, 0x5, 0xfff)
sendto$unix(0xffffffffffffffff, &(0x7f0000000040)="ade015dd0cc47b13b8128e8115351b0c8b4fa62d6052256810815dddc41a03f0dd9875ba45373e68924e34e687b024fd1730ede52e9ab8fdc758e841a1efcb5cb30ee9bad2122923fcfd2d6361f307abe813afe557a670791d9cbbdcc8e6e854da2ea3faa3084d83f9eaa3e98d4024", 0x6f, 0x800, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$sock(r0, &(0x7f0000001600)={&(0x7f0000000140)=@nl=@kern={0x10, 0x0, 0x0, 0x100000}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="9e7440ad606696c22d3879351d58970b87d80f1559989e84128aa9f956cc92671e224a72d2b74a39da989f860c2aece26f7ad49965917bd9d49861d59f39ae3cb4011233e277d72a631a7d6594e0946da3b0406aba451043cd96bfa2ee0a05273f657e39332c", 0x66}, {&(0x7f0000001240)="3eb3a3de08595506909cc733d8fb8c75b575b688001ae5f49208f4170f296490b6888510572702fee6c2896b78819167e9a353f7eac45facca8adf05fed1489e000be69d6a17af638c2a789f6380be18f0de95458f309d0456c965d16486753926be449a8368002451bb23af16dc869710d6ee1ef764a3e80c58682f69b31d68a3c073778dfd5165d02c45c426172d5cb098a29d2e12628dabda95670eec6133f8fed8c0b8ab432f1a5065fe0b9795e531fe7dbf9ab8", 0xb6}, {&(0x7f0000001300)="e72fde42741f8ac83e2504fc3ed2d10e18d094878107b1101984b9e9f50ae556a67220a78f22dcfe736bbf2d978b1f4ee4e21766729930f1a21fa29d72415740399afec4895068e21797ae", 0x4b}, {&(0x7f0000001380)="238dd9618c5dea16aebc1d7801a1327bbef635fac5493f9d6226ed60982b81778cb3bca46c39c662a0d7e755b0eea20cffb96bc93ebf", 0x36}, {&(0x7f00000013c0)="c3c693b8eef27858ea7a17212972eb5006175fb936d41eb8e3adfadacb54ce13644a48969fd7487bb811b1a10eaf999b2ae8917d48121bf5ab3a64120cfd54501f27e6f67279d7d3fcfe55eb110b72a3f0eeb6f11e7e223339cd9ef7660d2236b50bde982e39302e168ea17bb63124ddf6cc0638ff0f0cba08e4acd1ce21fbb19957e1dc99c818c93624da2cd94a3d380d8c4c7209b9d4b4d44fd549bcc4b9989762e84c4f600949e78b62fd03bdaa7ee2287b7dfe9335005ffc4449ae289fd1aa27bf7739a9f91a665693329c489bdb12db6d63405d78586dffac19d696c4af4d432aa3ee84a2f693909b8b40221335c4fc8d", 0xf3}], 0x6, &(0x7f0000001540)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x90}, 0x4000)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001640)=[@timestamp, @sack_perm, @timestamp], 0x3)
bind$bt_sco(r0, &(0x7f0000001680)={0x1f, @none}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000016c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xe99, 0xffffffff}}, './file0\x00'})
getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000001700), &(0x7f0000001740)=0x4)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001780)={0x0, 0x1, 0x4, 0x10000})
bind$bt_sco(r0, &(0x7f00000017c0), 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001800)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x7, 0x1, 0x0, 0x8, 0x6, 0x1}, 0xffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001840)={{0x1, 0x1, 0x18, <r2=>r1, {0x7}}, './file0\x00'})
sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x28, 0x3f7, 0x10, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x200040c1}, 0x4800)
ioctl(r1, 0x7, &(0x7f0000001980)="467cab989a8e4ad1e44f6f2b1272baf071e9b3fdca29117f97291962872d1317377960e78cb14ac96d817465374a902804872a0dc3332b0f1d75fc2ec6a8aab18b0e90c1f42685c45c588c385645388b5d5de1f0451047f698aa1d6fb49bc795322db8ae9cbcf4e097d93ea0c002a6d8336e7ee8511910ac23768a654f529aa3cfae722257928e587180117a098420d6760fd12e508fe00443c5f7a9a10d41e76f84f3e74335fdcb33fe96c971dcf5a728b104802148843069ddc20e1fe5f4e1f066a9e92276c703d7468850f85476df36b11e4b74a1415083fe03b400c5e0e23b24adba4e65")
recvmsg(r0, &(0x7f0000002080)={&(0x7f0000001a80)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001b00)=""/161, 0xa1}, {&(0x7f0000001bc0)=""/222, 0xde}, {&(0x7f0000001cc0)=""/191, 0xbf}, {&(0x7f0000001d80)=""/123, 0x7b}, {&(0x7f0000001e00)=""/209, 0xd1}, {&(0x7f0000001f00)=""/8, 0x8}], 0x6, &(0x7f0000001fc0)=""/190, 0xbe}, 0x20)
syncfs(r1)
getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f00000020c0), &(0x7f0000002100)=0xc)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000002140)=0x9, &(0x7f0000002180)=0x2)

02:43:24 executing program 2:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r0=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r1=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x104, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0xbc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffd}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x101}]}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffd08f34da}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x24a8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x104}, 0x1, 0x0, 0x0, 0x4841}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x81}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000024)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r2)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', <r3=>0x0, 0x700, 0x9, 0x4, 0xfffffffa, {{0x16, 0x4, 0x3, 0x8, 0x58, 0x68, 0x0, 0x3, 0x2f, 0x0, @broadcast, @empty, {[@lsrr={0x83, 0xb, 0x85, [@dev={0xac, 0x14, 0x14, 0x24}, @multicast2]}, @lsrr={0x83, 0x13, 0x90, [@dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, @local, @loopback]}, @generic={0x86, 0x7, "e379d9ef92"}, @timestamp_prespec={0x44, 0x1c, 0x98, 0x3, 0x0, [{@loopback, 0x2}, {@loopback, 0x80000}, {@loopback, 0x7}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x90, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8005}, 0x4041015)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000780)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x80, r3})
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000800)={0x208, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ID={0x50, 0x3, "8f2286789b036a7662b8bdaf67048d0cef293961ef728f7a7819cdb7b76e1994c16530ce7425f10a60ed3ffbb43fc5dabad9de7cd28d19df90606b4a6d69b26c932e17452337f92909cbd053"}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e0}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x312e0640}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x24000000}, 0x800)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b00)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4000)
r6 = syz_mount_image$nfs(&(0x7f0000000c00), &(0x7f0000000c40)='./file0\x00', 0x9, 0x1, &(0x7f0000000d80)=[{&(0x7f0000000c80)="b7a4ece64e0c497d8161ee7a3a60ea3d626e938f740c3dae06809d4eb0eba5857b423e5cc39a461e61ae0f5a9c926f084d359d5de13ebc4aef357ebda4eed82c1f4ff193d79b446bed3f5757f17ee97d12c972939569490004bf7c638f7bd87e042ba6d41c09e0561e5f82436290fd504ceb9b7f19e3f2c927d87f2ef686dbbac099cea0f6fcddc7314b506e6aba2f844effdf8b1fdcb170fed1ff0723f47eade0fc7bf4e1d0f98b6d2dc624caddfe2b9218fa8d18bd6be1bfa046daf7cbcccdc0352a131db93c027374ab42", 0xcc, 0x20}], 0x400, &(0x7f0000000dc0)={[{'/)-'}, {',%[+:\\}\\(>-{+'}, {'\x00'}, {'wpan4\x00'}, {']'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@subj_role={'subj_role', 0x3d, 'udp\x00'}}, {@euid_gt={'euid>', 0xee00}}, {@hash}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]})
r7 = openat(r6, &(0x7f0000000e40)='./file0\x00', 0x8000, 0x24)
fstat(r6, &(0x7f0000000e80))
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x48, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x38, 0xd, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008010}, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004090}, 0x240040c0)

02:43:24 executing program 3:
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)={0x32, 0x203, '\x00', [@generic={0x9, 0x1000, "70190cb19567dc6373d1967599b96697be66740ffafabbc0fb043661a3695223f5a73c4b79cb39594352817d2dfdb999470605a24971227a44984f3229c7307bff3fd712830023df6ccb55c41cd71748f9af9b8eeb370b9fe7da34ac3b708aeb5d5fdf07bd37c1ff52c365602bb68f3cf923d58ee3b36c495a9f6bbed69708bdb12cfbe9de5e13be6c2d7085aae270e2260934a81ba70157aa106883e3938143bf354d3c8573d6f4232dd958239b5768333e5ed554641739f92e6214bf5c310b32ec86dbc1cf1c7a941785f69db16691b60a65747854db66500fe8e40d4a12c5003e42eb70ffbfd41a37d395bd23bd9520e7d5bd6ce7409e03717539bc0fa3a84a42dc20a4708ce3a7ebefad4b6ba5a117d77386fcc1e252b7d295e7dab66a675c599bd905f42f0ea7ebc4e3a65a1af789bd1b64967ff08b312020be013eca61775bfd4602a59663a147489b55e7eb25643676dde5a63cee0c725f379388c0a6ad1f9845a2d44e0db6aaf113ea86ed8fe6d54271409881c4eeb4109d74083d46d6f6cee10aabd20aaea9bd0c2f1b1f5c436b68a27f4ee4e75a8a4536286c2c0f371bb7d42accb0f213e6b1aa5ab4068bfdfd11cd08b26d935634c81ef53cb513b57af53cf61869027c105c81ce465fa51536059fdafd97e51f4d65b571b5e9a4df19c3c4f2112b7159bad9711781926313f1e31c927ef450b38e2ac62d3afd2b0262b760f2c93e1ee4f6195049a2d13c8d38986bb429e8016cccc62db17fb052f27d89692ea5e1059abaec30aac09ad016c9e893e8b0994abf56a27cc25b8dd0c53599dba59f35a447652efdbd66aada801f107115b683bdb3b948f95d64c65b3f70e80b44c20aafc0a2e7f8f1f91f7f0c212e923f5d954911ec0c947c3caae2372320bc3c7af1c5176f323d9a2da1854cdc9817532d2616a2fddbe7d460961f9b1a7eeba2a22e51b2b04e620d3fb525bed2a9a30b366c97cd4892ec1be5a063eadc05cf05cab1c057bb94f4d48478af378a09d9f06261c4a1e8cf3319d70411d21120e4feeebb03138fd30f98e19810ae14c2df6bf368d581c23dbc0598c55198602d69906873177e8ce74d6285a2316961370cc40902384d460ad9ac7aae04281413593bd0a37d19f1c363de1710665d58f101bd0a0c3114839ffa7bbd869a0e59b45992a785b48193ec60a07ff1aeb79bf305c2e53d3916bc9feb0d600ef41d5d40b5e2a2992ba8a36794640205dd33b3f7e4cd2715c2825589c2af5b617cd9a7fa34876f6b3c34d6d0b2ef9634339f5287b73b2d0523e5382d347b658f18e049229bbde990c75dea9931cec085fa5512f86491de903ac312e8e2eacee5624456174b7759432342bf5b7d73087587392c4e4567878e9f75675808fc12ca4fa5056c1485c26d0f6d5ef5ff4e3834477d3bb39f33e2d5168d58c5fb7cc4f1cf2b66e8edac1ce67cbb336c98710b23c34eaa2e361bfefcc94c47aadc8a179957ac5f9e2e242e0c7f49a9c8d8200c20c43b2db3ee56d2b6c3cb7ea73418c8bcf080211ce312e87b66eceef4b77b0d20998bf27646d886f83842ac5a1a9a9dabf3106ffbe5cf0104222f2f0de88dde9d9b2db5c9f4decaa306f86fd018131555f85abc1c268aae2caf7c6e8634824a2c7745c13ae2e421b92b93d752920e7d67f969382d2d5671d14d881335eb9a263f0f38f1bb385140a74381a6e3f795941cc56a3e1e3c269c8e51ddab0bd9dc094df28473e956a90da355104e54d8b91deaacaa5ae98bc0594ca60ea7a5f3369e97172b3e1dbf41abd90f0d4846ca5fe458d062fb265541613487c7dcbbd23a31eaafa1d509f42318b3b4c44e1f887e126f0e9f53793300ccbf5385e13c7f6102c7d1e1b6398e9186f2ad6818dde1b0241df3d55b12b1dc12d5c9529e8e3f16b1d86a04420088d77bbefd2829abf950415eb8f9b95c06af4b9e77c42afabca03ccf1455487bc0efd23951693909b9633ce3c5b0410e04c58248bdf8bbd2af30247cb2514cbeda3096e041321b6801f108e53ad1f91bcd8a69d53abe7f37f212ff2b1f945c3eef1393aae80928ff424ca81b5c6d78a69ddaeb6c4fe6e83b48f99b714f786222ec643b5e10a7676dba343d8526997ea770c61449d82be001446fee518afe321124b8c67c31de3cdb2158c6b778614ed9daa9d17337faa77a148ae5dfaee25a5fb834d29cf899afbfa5a020932f06b921814d673cf67320cb9390f399a83bee99e1ba8f6c34badde938912c526cd74ecabe51fe95600c5d182b1ae46c9a2e88fa4594b2296322179a0a04078003d0ec30aca4bdf77a3095c21d057404ad6228ef7705ab14eabf6e0684d439947c73f376a0eefb5182fb311229c684001ef3643065d67b45133c9fefeb77ed14fcd36e2fd0c3acfccc2f27d2e40f12a2702d4740f35483a117e7189ad190bdf33c8e8f410df117b6da1717108d21e9444812366c84687ef164beb7014e5d4e93cc0c9488ad9b90ebda7f2d9cf00561b5cae8d4618b917f3fddaf7e730fc1d7e7bac22c5f67968a1305451427764798d6ef691d862b1b5015f4dede9e0fa9a6aa4aec01978554c22379a3a4889bafee1217a2f010ca8ef1bd4c44c7f985b07ba043022479593b06357bdc5fd120d728437eabf40d0b6a2a0ea3a95228781073b4ce9655de3ca6c839f040ddead43beeb722d9dae053c55872bbc8501d412f7482a401dc5bf044c4ff99cbfbed68879b0a7632ac810726e1a8b99bd813c24de378d57905160c77ac4597b1cadf069c4f57193fd3f7074b81aa25f6da2122266eca9c2a894eef3ef2fb6541e2d53a0e60d248840a4f30df2a691f1321d074c904aef48a203a3107b03bea1f91663273d901e518ca6fb9447cd11ef6e82f8df9ea9c86c403a2ecf466bafe5de670850fedf67c16011c72fb40721d2d4456741e62f443670fba601688a0fcdd192697aa1bf622ac0feefbc1b2d3cbe1115fbdd93515ac964a61d6ded7cae92c460c697301059e7614483220b83814b7b88029e78ea0a5cc85cfb6ddde61084a2367b25def219729f50d130e43c0d39fff838bf5cf1dbedbfa5b2ebb014fe5dc94e3ae34c91dbd929abe167fb1f8b977b5347f94da08e1c4fc6bd206bb41b517b3042ea7ba7ea75e744baabea01068af4bd5e30e1d5228066f809cc543fbdabbb9f827962a1b2dc41a01539b53ddbad44867aa73a3dc463bfbaa3e2c31ad6550264a96f9c922a259ba8511ad4cc4788a0f7ddd1f87d6d453489b326540480145c9cd3f9f9b5bc9ce04f6f66f967ea117f7b80143022a840b580e0d8ab11a8a343ed2785d63ab0679d49423de07ec5fb4df6884e63ee802b735bc898cad8c52f97d02651e8efffd80f7d5f2551eb579679f55cd405bbbc8cbd57bdfbc33be7d28df2ec8c1bd7d0ac252b0eb07f3d23fe7e832105908390d99c17b61d532bc6478289b327907e7bfafebc4e920794d93add51a9429d40c1fe10cf4fa1db52cd51948d60ba7d858b4d6d208d5fd145eeb073f2b14a15b8814fc3cb0f173f89050469a2011d1c63f2b02e7c345f537fec42bd9fa279b19ce1c09200a46179aeca9b5c1b0ee457e190ef3bd03d020d5ea483e64e9987a729f9ca76fc7fdbef3e475426916192d77a116a84b50e6b30f663fdc67ecf3ad6a3785531cf435e96bfbc083ec32c661164aaf8f5b88ee37f4d02eab04b39b7c0c583527b4069cd41af20cf01a11db5ee72300cc26ee00055ecb833b280bfb4fba15c40023e4ca590f1d1260d82565bb36d7d2c9e74877202f50ecc17f534d2ab600e5197db2c673a7efb0590e80dd2c4f2be61c87bd3d13a9fd9e76d8e574678eb47d0910c1a3c1ea627adab93e8e952f7382332a3e14b255c9e48d9a72bd99487e2439a589e6b35e1da90e6ff28904c2f2b20a0950bf3434cc304fc92616e0ee841b265d157f47441cdb590f872ff0b8d661b7c83689f71054645fea4145c94e60de0b5e90098c618a02fc43939052f919fd11f219859dce5b94c1184c2437809fa78528e7152aafea22f9d48e831dc997fb9f55709088c625cf09eb96a5693d5c86aa399ab51fe55a2155f69bad659faeb1f0adc6b3e898927c1b6df8306335bb7749675854414e5f114c0868ab96aa84e3c9f7195460d8b1340918d96967e6bbe32ad8f4d3283aba852b94f8b1b0d5bd7ab9aea091ce5f06a38fc192661b1452e21cd81149eaa0fbf61b783d0403678c3575df0317c27664ca192f877ee951f73e58af09fb4870d2f2c3bb62347b17524076ea9090d9869e049141804b913ed08b73856b25f2f1984458eafc9f1ec8ae3407eb4736f894d8cab073a3b104fdd8b86dabc2533f24e56ead36f5e91e210336b014348d1eeb4d9241275834ebdb0d153ac2e48d7e2e1fa12ee2291eea77aca28e496edc4d297416fbf3fc2a9cece5a11ca99b872a7570db91badadc24834b5043ad09ba8a0a2d99863e8e161f043c5620b7aa84a6cd0ed5e5318726a7044b64c3994e0c64a78e3c7838fb1515ce30d800bd2c02bf5c9935213bdf3b7fb2954a3fb3c72cc7f969658ade3074bd090be42ebf4a74acc06cf6bea09df14e3f151e090ad917a7b524361f27738dbf182c8d5859aa5d26df88c4a23f9442b5c124c126a026292b985d947217098cea7cfc6cbe29b00437c937f712121eac9bbc25ec1330c27fcfef900f1c3e5f642ed245b844c98e08205b0fb283ef0139e078800be2acc074a90908720820f48f319c463cdc39fae8ec3b945b0134b15cf7de8d171f8a8119c14a5e6f6b54f9090c6f92d200a4c9b6216904cd258323ece2724d9d69523393977fd9d0c5d2ffa32b846157aed4b7961c140d29dc19cee10f38024d493a3d48530261d0ee3256bea647abd18daaaf79bc4fc9871007bb19deadcacf2d704eb5c9e42ca220b7e14978dc383f84d968e711221bbe5b258b95146cbbfb92f573330c3f3d8764b7d1002609b75e86625f1a6507c6703f87d20a3743fcf58571ae0b35d81492dd7ca8fc2871a54e9a1a734f64e51e88286ac9ba62a8f6b61a5eba7f633d6dc6b9a4793ac1ed9f41c5247aac20cae6ac875a4262ccbb07bb9847e0517e852528e10a6eea8bd8b7d9bbeca808e57bfccc2e6a546fa684ddbc276dc9d46f8a3f269d817f429bc76a019d8bb0730b5a8eb75a68f417d2bba399bd47dac14bf934b540c93427eabb2abb482ba673b77ced8706bbbb1ec52ebb126be361d58169a64f51344eb9bc1d4e3c0f2dc7bb7673a48fb21750413552ea391afb87fca23066c57a0c315805c44ee679c9f8782a39bfbd5cfa9406cdc42c7ced8e93f2f23fbba1fcea3caa9a50c2dcb23c791a001b1422b9ebdd7904716e7af8d56fc4c2f4433ea93a9de8d9681cfdb3b2736d67ce0d35cebdb727aebebce40161473b48ce4ba86658df87c36d8d257665d36740cf342c675696c77ad60ca84c9e3b2161440106d3fbe7027bf8485f1542a507300649c767764d24acaf9add79e116d4a142106ee337f73feca3f09be6d871019ea6825138bb2e1bffc0b47d325f0a7f639b69abf5b9cd23e91774e8634c4ffb1d5aabb7a44102159f6ac70d6809a04f7cc0eff5a7fa4aedbb0b6b984c66cc4d1015c4a883039145974a346ec791478906d5e210e4ab215db0c824ebdde4b2a866a6fd8b489df914cb5362b739ad5d8ff8040985905c9dc08b2f1cda51a524af07ff6997bbcbcb4be39c9e0b16f084cd1c61eb035510aa83c1b042fb25a74e2b148c7b534665547c95a337496e01673c5193702dedb0063003e7fd40"}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x3ff8}, @pad1]}, 0x1028)
r0 = syz_open_dev$mouse(&(0x7f0000001040), 0x7, 0x3837c0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001080)={0x8a, 0x0, '\x00', [@enc_lim, @pad1]}, 0x10)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000010c0)={0x8001, {{0xa, 0x4e23, 0x0, @loopback}}}, 0x88)
recvfrom$inet6(r0, &(0x7f0000001180)=""/120, 0x78, 0x102, &(0x7f0000001200)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c)
r1 = accept$unix(r0, &(0x7f0000001240), &(0x7f00000012c0)=0x6e)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000001300)={'geneve1\x00'})
accept4$inet6(0xffffffffffffffff, &(0x7f0000001340)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000001380)=0x1c, 0x800)
pipe(&(0x7f00000013c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvfrom$unix(r2, &(0x7f0000001400)=""/135, 0x87, 0x12000, &(0x7f00000014c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000001540)=0x145c, 0x4)
vmsplice(r2, &(0x7f0000001780)=[{&(0x7f0000001580)="1b5b950399fbbba01184c1b25b2d3fac2d687a707b956c675e7b2b8edf876275a17f4430b5a9ec7a67e4fb3822345135ff953f297a4905673191b834b5c77408d071cd0898a57337d5918c7871c514474d19ddce6d6f4b501beced", 0x5b}, {&(0x7f0000001600)}, {&(0x7f0000001640)="4fd54aced4ca0aea041037d83d8733bd6410e5b2c8dbe76f55573b56956134ae6a7717d9e25aa1741d571e45edc27f7d3103f768ee4d4083f646fcac0b8d3cc52e82b4c3574c5200805791644e960378b3832e9cd5fcda330a8a3a366e59de8eed8a008cbbde56d2bd5d4e1cd19da0a03f8068b2d123d1d5493c0201a8fa96c841a9540a975a069994598b88ada39cc35e70f672958096e229c5414103110bb591f201643a01afc1545c558026e2c2720ce06220fbe6bef5212f45740c703ad1d5b7a6850710c0adc4cfa72383bface3a3e78082491a1a6717ea2b3c093291f369de9886ded6ac3624", 0xe9}, {&(0x7f0000001740)="34309423ba0aadae16fd0c1b0ee84849a3faa852f9d27ef796248cddc0f30c800e81f520ac9daf2a", 0x28}], 0x4, 0x4)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r4)
r5 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000017c0)={{0x1, 0x1, 0x18, <r6=>r5, {0xfffffffe, 0x3}}, './file0\x00'})
sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000001a40)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a00)={&(0x7f0000001840)={0x1b0, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff80}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x368}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9fb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a92}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x872}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdea5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0xc8010}, 0x20000040)
getsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000001a80)=""/43, &(0x7f0000001ac0)=0x2b)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000001b00)={0x2, 0x9, '\x00', [@hao={0xc9, 0x10, @mcast2}, @generic={0x7, 0x1f, "4077b8f6f80e7586f17ead94f05ec055ad17af5cc31afb11980fe966e9bdee"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x58)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001b80)='nr0\x00', 0x10)

02:43:24 executing program 4:
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/217, 0xd9}, {&(0x7f0000000180)=""/15, 0xf}], 0x2, &(0x7f0000000200)=""/246, 0xf6}, 0x2000)
recvfrom(r0, &(0x7f0000000340)=""/199, 0xc7, 0x12040, &(0x7f0000000440)=@l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0x80)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, <r1=>0x0}, &(0x7f00000005c0)=0xc)
recvmmsg$unix(r0, &(0x7f0000006040)=[{{&(0x7f0000000600), 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000680)=""/163, 0xa3}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/202, 0xca}, {&(0x7f0000001840)=""/76, 0x4c}, {&(0x7f00000018c0)=""/50, 0x32}, {&(0x7f0000001900)=""/83, 0x53}, {&(0x7f0000001980)=""/203, 0xcb}, {&(0x7f0000001a80)=""/158, 0x9e}], 0x8, &(0x7f0000001bc0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000001c40)=@abs, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/215, 0xd7}, {&(0x7f0000002dc0)=""/134, 0x86}, {&(0x7f0000002e80)=""/147, 0x93}, {&(0x7f0000002f40)=""/10, 0xa}], 0x5, &(0x7f0000003000)=[@cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000003080)=@abs, 0x6e, &(0x7f00000032c0)=[{&(0x7f0000003100)=""/40, 0x28}, {&(0x7f0000003140)=""/3, 0x3}, {&(0x7f0000003180)=""/117, 0x75}, {&(0x7f0000003200)=""/155, 0x9b}], 0x4, &(0x7f0000003300)=[@cred={{0x1c, 0x1, 0x2, {0x0, <r6=>0x0}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f00000033c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000003440)=""/204, 0xcc}, {&(0x7f0000003540)=""/240, 0xf0}, {&(0x7f0000003640)=""/191, 0xbf}], 0x3, &(0x7f0000003740)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000003800), 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003880)=""/35, 0x23}, {&(0x7f00000038c0)=""/59, 0x3b}, {&(0x7f0000003900)=""/252, 0xfc}, {&(0x7f0000003a00)=""/23, 0x17}, {&(0x7f0000003a40)=""/202, 0xca}], 0x5, &(0x7f0000003bc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003c00)=@abs, 0x6e, &(0x7f0000003d80)=[{&(0x7f0000003c80)=""/241, 0xf1}], 0x1, &(0x7f0000003dc0)=[@rights={{0x28, 0x1, 0x1, [<r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000003e00)=@abs, 0x6e, &(0x7f0000006000)=[{&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/186, 0xba}, {&(0x7f0000004f40)=""/177, 0xb1}, {&(0x7f0000005000)=""/4096, 0x1000}], 0x4}}], 0x7, 0x40000000, &(0x7f0000006200)={0x0, 0x3938700})
mount$9p_unix(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x2102410, &(0x7f0000006240)={'trans=unix,', {[{@version_u}, {@version_9p2000}, {@access_user}, {@afid={'afid', 0x3d, 0x2dc0}}, {@debug={'debug', 0x3d, 0x6}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@seclabel}, {@uid_lt={'uid<', r1}}, {@uid_gt={'uid>', r6}}, {@fowner_gt}]}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f00000063c0)={'syztnl2\x00', &(0x7f0000006340)={'syztnl1\x00', <r10=>0x0, 0x27, 0x9, 0x81, 0x80000001, 0x30, @private0, @private2, 0x40, 0x7, 0x7ff, 0x8000}})
setsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f0000006400)={@private0, r10}, 0x14)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000006440)='./binderfs/custom0\x00', 0x800, 0x0)
dup3(r11, r8, 0x80000)
r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000006480), 0x24a00, 0x0)
connect$inet6(r12, &(0x7f00000064c0)={0xa, 0x4e21, 0x9, @local, 0x8}, 0x1c)
dup(r2)
r13 = syz_open_dev$mouse(&(0x7f0000006500), 0x7fffffff, 0x802)
recvmsg$unix(r13, &(0x7f0000007a40)={&(0x7f0000006540)=@abs, 0x6e, &(0x7f00000079c0)=[{&(0x7f00000065c0)=""/207, 0xcf}, {&(0x7f00000066c0)=""/90, 0x5a}, {&(0x7f0000006740)=""/65, 0x41}, {&(0x7f00000067c0)=""/205, 0xcd}, {&(0x7f00000068c0)=""/4096, 0x1000}, {&(0x7f00000078c0)=""/221, 0xdd}], 0x6}, 0x20)
fchdir(r9)
r14 = open_tree(r8, &(0x7f0000007a80)='./file0\x00', 0x81000)
ioctl$sock_SIOCADDRT(r14, 0x890b, &(0x7f0000007ac0)={0x0, @ax25={0x3, @default}, @isdn={0x22, 0x7, 0x20, 0x9, 0x7f}, @xdp={0x2c, 0xd, r10, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x7, 0x3f})
setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000007b40)=0x3, 0x4)
r15 = gettid()
kcmp(r3, r15, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)

02:43:24 executing program 5:
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)=0x3)
r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xffffffffffffc739, 0x3, &(0x7f0000000380)=[{&(0x7f00000000c0)="88e091ad47e44e5f30891e10e15ba130e448dcae8cc882c66b3519a1bc7b6c1614e8cc1d23e9ff35705e694f54ae3f730617272ccc42317db8192347425fd67ea1301602de0478b5c068c9ee3aad96a0d71e29388713b72f4e9ba04a1644f88f7f1f863956aea08155243f84c38d1607bb7d485dacef41b91c8b78d719b50315f88af7207c1fc0d53db10e4718bd22a79e550c8421cb66996eeb0dc63320d9a60ae3d438c796c9960981a7c1fdefe417c7ce9f5b6b5948d0635acfa4b514c940e6b5a1cdf43f8026b453ed1da97ddea5a959d9009089f117e6fdb84374218b1153b6", 0xe2, 0x2}, {&(0x7f00000001c0)="c99704c2742efe923e0bcab2bcb86dc11634c430d378beb5c8414fa32b6b47cb0bda9ad479119bbbf27724fbd236c25082afc1feacc7db212588ee93671a2989db8f395a3bdebcab2e714f03f471de90e7bf7a88a9c57d347008d6858ed52a36261b7f2c6836b404fcbecc38dee47d0e98efd5471d1f5a01dd995acf5e9a59fa876435517023dde4c19f4467d9ddbf83f3cc8a0fc68c2e6c27e6bfa4ceb6deda86ab3c8dfbb22e749d0f720280221575507ea67635611bfbb71f140e3263e4d860512708bb9ee488ed215e20c048b20975982397f044a45656dd2e820efe099c9bc6b62c8ffeeb570078e104b54ac038a328", 0xf2, 0x179}, {&(0x7f00000002c0)="ba1fc2cdae635ade0ceb3a15d4b807ec4590af0ec8bcb8b00d43b29c1cb57e3bdce4fdf9b70e8bb89a7e002f092c19c070a88f5705821a202ffd71fc767dca66d7b00b7c11a49e2bd7ff93857ecb7e3f67029caa4a68bb95d46f54a4520dcb5b0288f8fe4e47f4690082c0d1f538be74fc3e7ea612f24220fa4abf9496a906b0873e15072ca8d031e84e04a2de8b25225124058e132821b1be8638c6b0dfc22d66", 0xa1, 0x4}], 0xc000, &(0x7f0000000400)={[{@sbsector={'sbsector', 0x3d, 0x1}}, {@gid={'gid', 0x3d, 0xee01}}, {@mode={'mode', 0x3d, 0x5}}, {@block={'block', 0x3d, 0x600}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@cruft}, {@overriderock}, {@check_relaxed}, {@hide}, {@nojoliet}], [{@uid_eq}, {@appraise}, {@obj_type={'obj_type', 0x3d, '&}'}}, {@obj_user}, {@smackfsdef={'smackfsdef', 0x3d, '{'}}, {@obj_role}]})
r1 = syz_mount_image$nfs4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x7, 0x1, &(0x7f0000000680)=[{&(0x7f00000005c0)="95250b813c7720d783ad4757c85bc49f82da65b6d0d6215841965ce344232c97fed4a7cbd5760d5357ef9709345419bfb6e9534a7547f6bb9f3df566424e2b2fc4d20193b01cc088146f490e331378c8e2bf37891245dbeae044098980adc6bc329606b20cbba4d8e7498f97b6eea77df8c470292bcc1f8d3d7aade01e4d835c907a32673700e2b79e459f35dd67cccaffcc6e044e6ad942d7008294137dfa55d2187e501d57d8cc", 0xa8, 0x9}], 0x0, &(0x7f00000006c0)={[{}, {':'}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ')'}}, {@audit}]})
renameat2(r0, &(0x7f0000000500)='./file0\x00', r1, &(0x7f0000000700)='./file0\x00', 0x0)
mount(&(0x7f0000000740)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='esdfs\x00', 0x2000, &(0x7f0000000800)='cruft')
r2 = creat(&(0x7f0000000840)='./file0\x00', 0x4)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x200900, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f00000008c0))
recvmmsg$unix(r2, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000900)=""/57, 0x39}, {&(0x7f0000000940)=""/95, 0x5f}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001a00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000001ac0), 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001b40)=""/1, 0x1}, {&(0x7f0000001b80)=""/11, 0xb}, {&(0x7f0000001bc0)=""/110, 0x6e}], 0x3, &(0x7f0000001c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}], 0x2, 0x12101, &(0x7f0000001e80)={0x0, 0x3938700})
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
accept(r9, &(0x7f0000001ec0)=@phonet, &(0x7f0000001f40)=0x80)
ioctl$TIOCGISO7816(r8, 0x80285442, &(0x7f0000001f80))
r10 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000001fc0)={{{@in6=@private1}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f00000020c0)=0xe8)
ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000002100)=0x1)
link(&(0x7f0000002140)='./file0\x00', &(0x7f0000002180)='./file0\x00')
move_mount(r7, &(0x7f00000021c0)='./file0\x00', r6, &(0x7f0000002200)='./file0\x00', 0x10)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000002240)='wg0\x00', 0x4)
mount(&(0x7f0000002280)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000022c0)='./file0\x00', &(0x7f0000002300)='ramfs\x00', 0x8000, &(0x7f0000002340)='\x00')
recvmmsg$unix(r5, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002380)=""/153, 0x99}, {&(0x7f0000002440)=""/127, 0x7f}, {&(0x7f00000024c0)=""/160, 0xa0}, {&(0x7f0000002580)=""/183, 0xb7}], 0x4, &(0x7f0000002680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002740), 0x6e, &(0x7f0000002880)=[{&(0x7f00000027c0)=""/190, 0xbe}], 0x1, &(0x7f00000028c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000029c0)=""/22, 0x16}, {&(0x7f0000002a00)=""/129, 0x81}], 0x2, &(0x7f0000002b00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000002c40), 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002cc0)=""/130, 0x82}], 0x1, &(0x7f0000002dc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000002e80), 0x6e, &(0x7f0000003640)=[{&(0x7f0000002f00)=""/179, 0xb3}, {&(0x7f0000002fc0)=""/92, 0x5c}, {&(0x7f0000003040)=""/78, 0x4e}, {&(0x7f00000030c0)=""/152, 0x98}, {&(0x7f0000003180)=""/215, 0xd7}, {&(0x7f0000003280)=""/227, 0xe3}, {&(0x7f0000003380)=""/225, 0xe1}, {&(0x7f0000003480)=""/50, 0x32}, {&(0x7f00000034c0)=""/96, 0x60}, {&(0x7f0000003540)=""/243, 0xf3}], 0xa, &(0x7f0000003700)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f00000037c0)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000003840)=""/170, 0xaa}, {&(0x7f0000003900)=""/64, 0x40}], 0x2, &(0x7f0000003980)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x6, 0x10020, &(0x7f0000003c00))

02:43:24 executing program 7:
chroot(&(0x7f0000000000)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0xc)
lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_tmpfiles_exec_t:s0\x00', 0x2d, 0x1)
r0 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x6, 0x2, &(0x7f0000000380)=[{&(0x7f00000001c0)="e6df9d29414f05780a3aabdb07ff12423d828a83fd5943e61c1b03649ce0e900372529a40e94d991eaeabc9c20ca7c9f8344a58fa25b874206ec6b2aa93a3ca8b7cfb3d4cc17814e81dd3033811e5485a77daeaab511be58824dd1d86b0aed3d6e09f3e8ac47d015256d553f7c43909d1d6f78abd96fe1f60e10bcbb32c9e154935ea477f666138f3710c448204fa79c4f", 0x91, 0x6}, {&(0x7f0000000280)="6dc44172350aaca3811861d06905bfa2280fafe31b4f8eb22f034f931cd3f0c31cec0e0d452ac7591180faa3beca1ead258f5776added99d2e8c7f7f8b0b39994529dd17ed2c0a0193d017a5982ae3e153c9db5d745ee2b2d7ec7d6be2bc06eb09251cdb167d4abd48fbcd8395f3586b00a93fba65349c85117805b60f04e96b27be05043714cf232ae7edf396c62626b527cfa755b365def1a3d6d01e628c99ed133c434abcafe11f30ac9eeec4251be40d7e4230c0d38aac064612ea883a69ba", 0xc1, 0x3}], 0x1202402, &(0x7f00000003c0)={[{@rodir}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffec7}}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@utf8no}, {@rodir}], [{@subj_role={'subj_role', 0x3d, 'security.selinux\x00'}}, {@audit}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x1b}}]})
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x1000, 0x0)
mount(&(0x7f0000000540)=@sr0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='qnx6\x00', 0x100002, 0x0)
open$dir(&(0x7f0000000600)='./file0\x00', 0x688000, 0x14)
mkdirat(r0, &(0x7f0000000640)='./file0\x00', 0x65)
rmdir(&(0x7f0000000680)='./file0\x00')
r1 = open(&(0x7f00000006c0)='./file0\x00', 0x280200, 0x84)
mount_setattr(r1, &(0x7f0000000700)='./file0\x00', 0x1000, &(0x7f0000000740)={0xfa, 0x8, 0xc0000, {r1}}, 0x20)
mkdirat(r1, &(0x7f0000000780)='./file0\x00', 0x6)
sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x1, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfffffffffffffff8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xb37}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x5c}}, 0x81)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000900)={<r2=>r1, 0x1ff, 0x0, 0x7f})
r3 = openat(r2, &(0x7f0000000940)='./file0\x00', 0x100, 0x5c)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000980)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
chmod(&(0x7f0000000a00)='./file0\x00', 0x19)
getdents64(r4, &(0x7f0000000a40)=""/4096, 0x1000)
setxattr$system_posix_acl(&(0x7f0000001a40)='./file0/file0\x00', &(0x7f0000001a80)='system.posix_acl_default\x00', &(0x7f0000004040)={{}, {0x1, 0x1}, [{0x2, 0x2}, {0x2, 0x6}, {0x2, 0x4, 0xee00}, {0x2, 0x1}, {0x2, 0xd8b3211a176022b1}], {0x4, 0x6}, [{0x8, 0x9cd492b478f593e}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x4}, {0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x3, 0xee00}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x84, 0x2)

[   86.004015] audit: type=1400 audit(1763174604.071:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
02:43:24 executing program 6:
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x6, 0xa2}, {0x1, 0xc0}, 0x1ff, 0x2})
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0xa040, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000000c0)={0x4, 0x2, 0x1, 'queue1\x00', 0x5})
r1 = accept4$packet(r0, 0x0, &(0x7f0000000180), 0x80800)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000240)={0x3f, 0x0, [0x10001, 0x4, 0xc21, 0x3ff], &(0x7f0000000200)})
r3 = dup3(r1, r2, 0x80000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x2, 0xa38, 0x0, 'queue0\x00', 0x5de18081})
ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000340)={0x5})
r4 = accept4$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14, 0x80000)
ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000700))
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000740)={0x9, 0x8, 0x3, 0xfffffc00, 0x2, [{0x7, 0x8001, 0xecb, '\x00', 0x1008}, {0x8d, 0x6, 0x401, '\x00', 0x108b}]})
fcntl$setstatus(r3, 0x4, 0x40000)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000800), 0x84100, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000840)={0x0, 0x1, 0x9, 0x6})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
r7 = open_tree(r0, &(0x7f0000000ac0)='./file0\x00', 0x9800)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f000006e940)={0x3, [], 0x6, "df8cff236fdc97"})

[   87.155569] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.156720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.159858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.165157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.166830] ==================================================================
[   87.168104] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0
[   87.169002] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.169303] Read of size 2 at addr ffff88800d2c4df8 by task kworker/u11:4/296
[   87.170171] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.176722] 
[   87.176742] CPU: 1 UID: 0 PID: 296 Comm: kworker/u11:4 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) 
[   87.176777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[   87.176794] Workqueue: hci0 hci_cmd_work
[   87.176828] Call Trace:
[   87.176837]  <TASK>
[   87.176847]  dump_stack_lvl+0xca/0x120
[   87.176879]  print_report+0xcb/0x610
[   87.176911]  ? __virt_addr_valid+0x100/0x5d0
[   87.176940]  ? hci_cmd_work+0x66d/0x6d0
[   87.176971]  ? hci_cmd_work+0x66d/0x6d0
[   87.177003]  kasan_report+0xca/0x100
[   87.177034]  ? hci_cmd_work+0x66d/0x6d0
[   87.177069]  hci_cmd_work+0x66d/0x6d0
[   87.177102]  process_one_work+0x8e1/0x19c0
[   87.177144]  ? __pfx_process_one_work+0x10/0x10
[   87.177180]  ? move_linked_works+0x172/0x270
[   87.177208]  ? assign_work+0x196/0x240
[   87.177243]  worker_thread+0x67e/0xe90
[   87.177278]  ? trace_irq_enable.constprop.0+0xc2/0x100
[   87.177308]  ? __pfx_worker_thread+0x10/0x10
[   87.177344]  kthread+0x3c8/0x740
[   87.177375]  ? __pfx_kthread+0x10/0x10
[   87.177406]  ? ret_from_fork+0x79/0x7a0
[   87.177438]  ? lock_release+0xc8/0x290
[   87.177495]  ? __pfx_kthread+0x10/0x10
[   87.177544]  ret_from_fork+0x67a/0x7a0
[   87.177581]  ? __pfx_ret_from_fork+0x10/0x10
[   87.177639]  ? save_fpregs_to_fpstate+0x145/0x270
[   87.177691]  ? __switch_to+0x759/0x1060
[   87.177744]  ? __pfx_kthread+0x10/0x10
[   87.177794]  ret_from_fork_asm+0x1a/0x30
[   87.177859]  </TASK>
[   87.177872] 
[   87.179210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.179655] Allocated by task 292:
[   87.180463] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.180859]  kasan_save_stack+0x24/0x50
[   87.203189]  kasan_save_track+0x14/0x30
[   87.203923]  __kasan_slab_alloc+0x59/0x70
[   87.204683]  kmem_cache_alloc_node_noprof+0x228/0x6b0
[   87.205641]  __alloc_skb+0x2ab/0x370
[   87.206320]  hci_cmd_sync_alloc+0x34/0x300
[   87.207099]  __hci_cmd_sync_sk+0xf7/0x5c0
[   87.207857]  hci_read_bd_addr_sync+0x2c/0x170
[   87.208691]  hci_dev_open_sync+0x145c/0x1f60
[   87.209488]  hci_power_on+0xdb/0x5d0
[   87.210159]  process_one_work+0x8e1/0x19c0
[   87.210919]  worker_thread+0x67e/0xe90
[   87.211622]  kthread+0x3c8/0x740
[   87.212222]  ret_from_fork+0x67a/0x7a0
[   87.212945]  ret_from_fork_asm+0x1a/0x30
[   87.213708] 
[   87.214017] Freed by task 294:
[   87.214597]  kasan_save_stack+0x24/0x50
[   87.215301]  kasan_save_track+0x14/0x30
[   87.216014]  kasan_save_free_info+0x3a/0x60
[   87.216814]  __kasan_slab_free+0x43/0x70
[   87.217552]  kmem_cache_free+0x26f/0x500
[   87.218302]  kfree_skbmem+0x18a/0x1f0
[   87.218998]  sk_skb_reason_drop+0x10e/0x1b0
[   87.219768]  vhci_read+0x3d5/0x5d0
[   87.220414]  vfs_read+0x1eb/0xc70
[   87.221067]  ksys_read+0x121/0x240
[   87.221735]  do_syscall_64+0xbf/0x430
[   87.222411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.223340] 
[   87.223667] The buggy address belongs to the object at ffff88800d2c4dc0
[   87.223667]  which belongs to the cache skbuff_head_cache of size 232
[   87.225932] The buggy address is located 56 bytes inside of
[   87.225932]  freed 232-byte region [ffff88800d2c4dc0, ffff88800d2c4ea8)
[   87.228016] 
[   87.228322] The buggy address belongs to the physical page:
[   87.229317] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xd2c4
[   87.230720] flags: 0x100000000000000(node=0|zone=1)
[   87.231602] page_type: f5(slab)
[   87.232196] raw: 0100000000000000 ffff8880096c78c0 ffffea000034b240 0000000000000002
[   87.233570] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000
[   87.234894] page dumped because: kasan: bad access detected
[   87.235724] 
[   87.235985] Memory state around the buggy address:
[   87.236712]  ffff88800d2c4c80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   87.237786]  ffff88800d2c4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc
[   87.238848] >ffff88800d2c4d80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[   87.239893]                                                                 ^
[   87.240938]  ffff88800d2c4e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   87.242036]  ffff88800d2c4e80: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc
[   87.243088] ==================================================================
[   87.244393] Disabling lock debugging due to kernel taint
[   87.258034] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.260996] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.261846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.262823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.265187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.275118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.279019] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.325792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.329347] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.330776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.334359] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.337278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.344067] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.346359] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.352155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.364789] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   87.365468] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   87.371207] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.375287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   87.376517] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   87.377585] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.377913] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   87.378776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   87.381386] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   87.386990] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   87.387566] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   87.389734] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   87.513341] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   87.517281] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   87.519593] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   87.522165] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   87.524740] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   89.321062] Bluetooth: hci0: command tx timeout
[   89.321510] Bluetooth: hci1: command tx timeout
[   89.386078] Bluetooth: hci3: command tx timeout
[   89.386837] Bluetooth: hci2: command tx timeout
[   89.449172] Bluetooth: hci4: command tx timeout
[   89.513126] Bluetooth: hci6: command tx timeout
[   89.513202] Bluetooth: hci5: command tx timeout
[   89.640997] Bluetooth: hci7: command tx timeout
[   91.370450] Bluetooth: hci1: command tx timeout
[   91.370507] Bluetooth: hci0: command tx timeout
[   91.433034] Bluetooth: hci3: command tx timeout
[   91.434027] Bluetooth: hci2: command tx timeout
[   91.496959] Bluetooth: hci4: command tx timeout
[   91.561039] Bluetooth: hci5: command tx timeout
[   91.562555] Bluetooth: hci6: command tx timeout
[   91.688964] Bluetooth: hci7: command tx timeout
[   93.417260] Bluetooth: hci1: command tx timeout
[   93.418056] Bluetooth: hci0: command tx timeout
[   93.482034] Bluetooth: hci2: command tx timeout
[   93.482058] Bluetooth: hci3: command tx timeout
[   93.546402] Bluetooth: hci4: command tx timeout
[   93.610983] Bluetooth: hci6: command tx timeout
[   93.611003] Bluetooth: hci5: command tx timeout
[   93.738022] Bluetooth: hci7: command tx timeout
[   95.465984] Bluetooth: hci0: command tx timeout
[   95.466111] Bluetooth: hci1: command tx timeout
[   95.529080] Bluetooth: hci3: command tx timeout
[   95.531958] Bluetooth: hci2: command tx timeout
[   95.593000] Bluetooth: hci4: command tx timeout
[   95.658029] Bluetooth: hci6: command tx timeout
[   95.658038] Bluetooth: hci5: command tx timeout
[   95.785978] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
02:43:25  Registers:
info registers vcpu 0
RAX=0000000000013eec RBX=1ffff11002e41ef3 RCX=ffffc90011889000 RDX=0000000000040000
RSI=ffffffff815592ad RDI=0000000000000001 RBP=0000000000000001 RSP=ffff88801720f790
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000035 R13=0000000000000200 R14=ffff88801768d340 R15=ffff88801720f870
RIP=ffffffff815592af RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e538f000 00000000 00000000
LDT=0000 fffffe6d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1bd69b8fe0 CR3=000000000e455000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f4ce899a7c000007f4ce899a7c8
XMM02=00007f4ce899a7e000007f4ce899a7c0 XMM03=00007f4ce899a7c800007f4ce899a7c0
XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8293dd05 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff88801651f618
R8 =0000000000000000 R9 =ffffed100167e046 R10=0000000000000072 R11=6430303838386652
R12=0000000000000072 R13=0000000000000010 R14=ffffffff88974780 R15=ffffffff8293dcf0
RIP=ffffffff8293dd5d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e548f000 00000000 00000000
LDT=0000 fffffe3300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4ce88d7070 CR3=000000000f5b1000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000ff0000000000ff0000 XMM03=0000563086c718700000563086c4d0a0
XMM04=ffffffff000000030000563086c71870 XMM05=0000563086ca5e700000563086ca5e50
XMM06=000000000000000000000000ffffffff XMM07=00000003000000010000563086c4d080
XMM08=732f636f72702f006b63616d7300632e XMM09=00000000000000000000000000000000
XMM10=00000000200000000000000020000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000