Warning: Permanently added '[localhost]:9738' (ECDSA) to the list of known hosts. 2025/11/15 18:31:36 fuzzer started 2025/11/15 18:31:37 dialing manager at localhost:37161 syzkaller login: [ 50.479760] cgroup: Unknown subsys name 'net' [ 50.545658] cgroup: Unknown subsys name 'cpuset' [ 50.559020] cgroup: Unknown subsys name 'rlimit' 2025/11/15 18:31:47 syscalls: 2214 2025/11/15 18:31:47 code coverage: enabled 2025/11/15 18:31:47 comparison tracing: enabled 2025/11/15 18:31:47 extra coverage: enabled 2025/11/15 18:31:47 setuid sandbox: enabled 2025/11/15 18:31:47 namespace sandbox: enabled 2025/11/15 18:31:47 Android sandbox: enabled 2025/11/15 18:31:47 fault injection: enabled 2025/11/15 18:31:47 leak checking: enabled 2025/11/15 18:31:47 net packet injection: enabled 2025/11/15 18:31:47 net device setup: enabled 2025/11/15 18:31:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/15 18:31:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/15 18:31:47 USB emulation: enabled 2025/11/15 18:31:47 hci packet injection: enabled 2025/11/15 18:31:47 wifi device emulation: enabled 2025/11/15 18:31:47 802.15.4 emulation: enabled 2025/11/15 18:31:47 fetching corpus: 50, signal 30308/32100 (executing program) 2025/11/15 18:31:47 fetching corpus: 100, signal 38259/41703 (executing program) 2025/11/15 18:31:47 fetching corpus: 150, signal 46452/51459 (executing program) 2025/11/15 18:31:48 fetching corpus: 200, signal 54301/60793 (executing program) 2025/11/15 18:31:48 fetching corpus: 250, signal 62970/70758 (executing program) 2025/11/15 18:31:48 fetching corpus: 300, signal 66356/75520 (executing program) 2025/11/15 18:31:48 fetching corpus: 350, signal 69408/79923 (executing program) 2025/11/15 18:31:48 fetching corpus: 400, signal 74946/86622 (executing program) 2025/11/15 18:31:48 fetching corpus: 450, signal 78825/91721 (executing program) 2025/11/15 18:31:48 fetching corpus: 500, signal 81572/95683 (executing program) 2025/11/15 18:31:48 fetching corpus: 550, signal 85219/100457 (executing program) 2025/11/15 18:31:48 fetching corpus: 600, signal 90037/106221 (executing program) 2025/11/15 18:31:48 fetching corpus: 650, signal 93448/110657 (executing program) 2025/11/15 18:31:49 fetching corpus: 700, signal 95163/113527 (executing program) 2025/11/15 18:31:49 fetching corpus: 750, signal 97396/116810 (executing program) 2025/11/15 18:31:49 fetching corpus: 800, signal 99462/119961 (executing program) 2025/11/15 18:31:49 fetching corpus: 850, signal 101683/123168 (executing program) 2025/11/15 18:31:49 fetching corpus: 900, signal 103277/125784 (executing program) 2025/11/15 18:31:49 fetching corpus: 950, signal 105143/128629 (executing program) 2025/11/15 18:31:49 fetching corpus: 1000, signal 106704/131187 (executing program) 2025/11/15 18:31:49 fetching corpus: 1050, signal 108894/134272 (executing program) 2025/11/15 18:31:49 fetching corpus: 1100, signal 110196/136578 (executing program) 2025/11/15 18:31:49 fetching corpus: 1150, signal 111564/138902 (executing program) 2025/11/15 18:31:50 fetching corpus: 1200, signal 113500/141687 (executing program) 2025/11/15 18:31:50 fetching corpus: 1250, signal 114934/144027 (executing program) 2025/11/15 18:31:50 fetching corpus: 1300, signal 116933/146831 (executing program) 2025/11/15 18:31:50 fetching corpus: 1350, signal 118333/149079 (executing program) 2025/11/15 18:31:50 fetching corpus: 1400, signal 119462/151139 (executing program) 2025/11/15 18:31:50 fetching corpus: 1450, signal 120817/153369 (executing program) 2025/11/15 18:31:50 fetching corpus: 1500, signal 122471/155808 (executing program) 2025/11/15 18:31:50 fetching corpus: 1550, signal 123503/157720 (executing program) 2025/11/15 18:31:50 fetching corpus: 1600, signal 124482/159620 (executing program) 2025/11/15 18:31:50 fetching corpus: 1650, signal 125582/161572 (executing program) 2025/11/15 18:31:51 fetching corpus: 1700, signal 126837/163628 (executing program) 2025/11/15 18:31:51 fetching corpus: 1750, signal 128293/165825 (executing program) 2025/11/15 18:31:51 fetching corpus: 1800, signal 130017/168193 (executing program) 2025/11/15 18:31:51 fetching corpus: 1850, signal 130847/169879 (executing program) 2025/11/15 18:31:51 fetching corpus: 1900, signal 132698/172252 (executing program) 2025/11/15 18:31:51 fetching corpus: 1950, signal 133998/174207 (executing program) 2025/11/15 18:31:51 fetching corpus: 2000, signal 134965/175950 (executing program) 2025/11/15 18:31:51 fetching corpus: 2050, signal 136640/178162 (executing program) 2025/11/15 18:31:51 fetching corpus: 2100, signal 137343/179650 (executing program) 2025/11/15 18:31:51 fetching corpus: 2150, signal 138204/181210 (executing program) 2025/11/15 18:31:52 fetching corpus: 2200, signal 139138/182853 (executing program) 2025/11/15 18:31:52 fetching corpus: 2250, signal 140147/184512 (executing program) 2025/11/15 18:31:52 fetching corpus: 2300, signal 141003/186101 (executing program) 2025/11/15 18:31:52 fetching corpus: 2350, signal 142314/187945 (executing program) 2025/11/15 18:31:52 fetching corpus: 2400, signal 143056/189385 (executing program) 2025/11/15 18:31:52 fetching corpus: 2450, signal 144296/191135 (executing program) 2025/11/15 18:31:52 fetching corpus: 2500, signal 145022/192560 (executing program) 2025/11/15 18:31:52 fetching corpus: 2550, signal 145847/194033 (executing program) 2025/11/15 18:31:52 fetching corpus: 2600, signal 146616/195413 (executing program) 2025/11/15 18:31:52 fetching corpus: 2650, signal 148253/197367 (executing program) 2025/11/15 18:31:52 fetching corpus: 2700, signal 149067/198800 (executing program) 2025/11/15 18:31:53 fetching corpus: 2750, signal 149954/200247 (executing program) 2025/11/15 18:31:53 fetching corpus: 2800, signal 150879/201706 (executing program) 2025/11/15 18:31:53 fetching corpus: 2850, signal 151488/202947 (executing program) 2025/11/15 18:31:53 fetching corpus: 2900, signal 152348/204367 (executing program) 2025/11/15 18:31:53 fetching corpus: 2950, signal 153051/205658 (executing program) 2025/11/15 18:31:53 fetching corpus: 3000, signal 153992/207065 (executing program) 2025/11/15 18:31:53 fetching corpus: 3050, signal 154657/208332 (executing program) 2025/11/15 18:31:53 fetching corpus: 3100, signal 155197/209525 (executing program) 2025/11/15 18:31:53 fetching corpus: 3150, signal 155705/210635 (executing program) 2025/11/15 18:31:54 fetching corpus: 3200, signal 156523/211961 (executing program) 2025/11/15 18:31:54 fetching corpus: 3250, signal 156998/213062 (executing program) 2025/11/15 18:31:54 fetching corpus: 3300, signal 157839/214337 (executing program) 2025/11/15 18:31:54 fetching corpus: 3350, signal 158450/215513 (executing program) 2025/11/15 18:31:54 fetching corpus: 3400, signal 159670/216981 (executing program) 2025/11/15 18:31:54 fetching corpus: 3450, signal 160071/218029 (executing program) 2025/11/15 18:31:54 fetching corpus: 3500, signal 160801/219229 (executing program) 2025/11/15 18:31:54 fetching corpus: 3550, signal 161955/220636 (executing program) 2025/11/15 18:31:54 fetching corpus: 3600, signal 162673/221786 (executing program) 2025/11/15 18:31:54 fetching corpus: 3650, signal 163833/223122 (executing program) 2025/11/15 18:31:55 fetching corpus: 3700, signal 164387/224154 (executing program) 2025/11/15 18:31:55 fetching corpus: 3750, signal 165146/225314 (executing program) 2025/11/15 18:31:55 fetching corpus: 3800, signal 165778/226395 (executing program) 2025/11/15 18:31:55 fetching corpus: 3850, signal 166255/227422 (executing program) 2025/11/15 18:31:55 fetching corpus: 3900, signal 166840/228467 (executing program) 2025/11/15 18:31:55 fetching corpus: 3950, signal 167315/229441 (executing program) 2025/11/15 18:31:55 fetching corpus: 4000, signal 167994/230520 (executing program) 2025/11/15 18:31:55 fetching corpus: 4050, signal 168771/231648 (executing program) 2025/11/15 18:31:55 fetching corpus: 4100, signal 169353/232642 (executing program) 2025/11/15 18:31:56 fetching corpus: 4150, signal 169994/233668 (executing program) 2025/11/15 18:31:56 fetching corpus: 4200, signal 170315/234566 (executing program) 2025/11/15 18:31:56 fetching corpus: 4250, signal 171249/235647 (executing program) 2025/11/15 18:31:56 fetching corpus: 4300, signal 171852/236569 (executing program) 2025/11/15 18:31:56 fetching corpus: 4350, signal 172352/237517 (executing program) 2025/11/15 18:31:56 fetching corpus: 4400, signal 172984/238494 (executing program) 2025/11/15 18:31:56 fetching corpus: 4450, signal 173574/239511 (executing program) 2025/11/15 18:31:56 fetching corpus: 4500, signal 174036/240428 (executing program) 2025/11/15 18:31:56 fetching corpus: 4550, signal 174532/241310 (executing program) 2025/11/15 18:31:57 fetching corpus: 4600, signal 175044/242209 (executing program) 2025/11/15 18:31:57 fetching corpus: 4650, signal 175513/243085 (executing program) 2025/11/15 18:31:57 fetching corpus: 4700, signal 175912/243938 (executing program) 2025/11/15 18:31:57 fetching corpus: 4750, signal 176293/244806 (executing program) 2025/11/15 18:31:57 fetching corpus: 4800, signal 176751/245673 (executing program) 2025/11/15 18:31:57 fetching corpus: 4850, signal 177263/246521 (executing program) 2025/11/15 18:31:57 fetching corpus: 4900, signal 177879/247402 (executing program) 2025/11/15 18:31:57 fetching corpus: 4950, signal 178584/248300 (executing program) 2025/11/15 18:31:57 fetching corpus: 5000, signal 178924/249100 (executing program) 2025/11/15 18:31:57 fetching corpus: 5050, signal 179589/249975 (executing program) 2025/11/15 18:31:58 fetching corpus: 5100, signal 179968/250773 (executing program) 2025/11/15 18:31:58 fetching corpus: 5150, signal 180537/251576 (executing program) 2025/11/15 18:31:58 fetching corpus: 5200, signal 181069/252364 (executing program) 2025/11/15 18:31:58 fetching corpus: 5250, signal 181673/253146 (executing program) 2025/11/15 18:31:58 fetching corpus: 5300, signal 182050/253932 (executing program) 2025/11/15 18:31:58 fetching corpus: 5350, signal 183000/254818 (executing program) 2025/11/15 18:31:58 fetching corpus: 5400, signal 183728/255625 (executing program) 2025/11/15 18:31:58 fetching corpus: 5450, signal 184149/256377 (executing program) 2025/11/15 18:31:58 fetching corpus: 5500, signal 184650/257155 (executing program) 2025/11/15 18:31:58 fetching corpus: 5550, signal 184929/257888 (executing program) 2025/11/15 18:31:58 fetching corpus: 5600, signal 185264/258617 (executing program) 2025/11/15 18:31:58 fetching corpus: 5650, signal 185649/259326 (executing program) 2025/11/15 18:31:59 fetching corpus: 5700, signal 186441/260109 (executing program) 2025/11/15 18:31:59 fetching corpus: 5750, signal 186744/260799 (executing program) 2025/11/15 18:31:59 fetching corpus: 5800, signal 187190/261514 (executing program) 2025/11/15 18:31:59 fetching corpus: 5850, signal 187640/262227 (executing program) 2025/11/15 18:31:59 fetching corpus: 5900, signal 187963/262877 (executing program) 2025/11/15 18:31:59 fetching corpus: 5950, signal 188354/263551 (executing program) 2025/11/15 18:31:59 fetching corpus: 6000, signal 188728/264244 (executing program) 2025/11/15 18:31:59 fetching corpus: 6050, signal 189270/264918 (executing program) 2025/11/15 18:31:59 fetching corpus: 6100, signal 189611/265565 (executing program) 2025/11/15 18:31:59 fetching corpus: 6150, signal 189997/266197 (executing program) 2025/11/15 18:32:00 fetching corpus: 6200, signal 190562/266872 (executing program) 2025/11/15 18:32:00 fetching corpus: 6250, signal 190942/267525 (executing program) 2025/11/15 18:32:00 fetching corpus: 6300, signal 191271/268188 (executing program) 2025/11/15 18:32:00 fetching corpus: 6350, signal 191609/268825 (executing program) 2025/11/15 18:32:00 fetching corpus: 6400, signal 191817/269448 (executing program) 2025/11/15 18:32:00 fetching corpus: 6450, signal 192198/270082 (executing program) 2025/11/15 18:32:00 fetching corpus: 6500, signal 192523/270727 (executing program) 2025/11/15 18:32:00 fetching corpus: 6550, signal 192834/271354 (executing program) 2025/11/15 18:32:00 fetching corpus: 6600, signal 193084/271966 (executing program) 2025/11/15 18:32:00 fetching corpus: 6650, signal 193351/272578 (executing program) 2025/11/15 18:32:00 fetching corpus: 6700, signal 193780/273195 (executing program) 2025/11/15 18:32:01 fetching corpus: 6750, signal 194083/273807 (executing program) 2025/11/15 18:32:01 fetching corpus: 6800, signal 194300/274413 (executing program) 2025/11/15 18:32:01 fetching corpus: 6850, signal 194540/274995 (executing program) 2025/11/15 18:32:01 fetching corpus: 6900, signal 194931/275369 (executing program) 2025/11/15 18:32:01 fetching corpus: 6950, signal 195181/275369 (executing program) 2025/11/15 18:32:01 fetching corpus: 7000, signal 195585/275369 (executing program) 2025/11/15 18:32:01 fetching corpus: 7050, signal 195921/275369 (executing program) 2025/11/15 18:32:01 fetching corpus: 7100, signal 196241/275369 (executing program) 2025/11/15 18:32:01 fetching corpus: 7150, signal 196628/275369 (executing program) 2025/11/15 18:32:01 fetching corpus: 7200, signal 197047/275369 (executing program) 2025/11/15 18:32:01 fetching corpus: 7250, signal 197413/275369 (executing program) 2025/11/15 18:32:01 fetching corpus: 7300, signal 197651/275369 (executing program) 2025/11/15 18:32:01 fetching corpus: 7350, signal 197926/275371 (executing program) 2025/11/15 18:32:02 fetching corpus: 7400, signal 198310/275371 (executing program) 2025/11/15 18:32:02 fetching corpus: 7450, signal 198808/275371 (executing program) 2025/11/15 18:32:02 fetching corpus: 7500, signal 199267/275371 (executing program) 2025/11/15 18:32:02 fetching corpus: 7550, signal 199578/275371 (executing program) 2025/11/15 18:32:02 fetching corpus: 7600, signal 199897/275371 (executing program) 2025/11/15 18:32:02 fetching corpus: 7650, signal 200240/275371 (executing program) 2025/11/15 18:32:02 fetching corpus: 7700, signal 200530/275371 (executing program) 2025/11/15 18:32:02 fetching corpus: 7750, signal 200790/275371 (executing program) 2025/11/15 18:32:02 fetching corpus: 7800, signal 201167/275371 (executing program) 2025/11/15 18:32:02 fetching corpus: 7850, signal 201404/275371 (executing program) 2025/11/15 18:32:02 fetching corpus: 7900, signal 201756/275371 (executing program) 2025/11/15 18:32:02 fetching corpus: 7950, signal 202124/275371 (executing program) 2025/11/15 18:32:03 fetching corpus: 8000, signal 202594/275371 (executing program) 2025/11/15 18:32:03 fetching corpus: 8050, signal 202859/275371 (executing program) 2025/11/15 18:32:03 fetching corpus: 8100, signal 203115/275371 (executing program) 2025/11/15 18:32:03 fetching corpus: 8150, signal 203399/275371 (executing program) 2025/11/15 18:32:03 fetching corpus: 8200, signal 203785/275371 (executing program) 2025/11/15 18:32:03 fetching corpus: 8250, signal 203983/275371 (executing program) 2025/11/15 18:32:03 fetching corpus: 8300, signal 204254/275374 (executing program) 2025/11/15 18:32:03 fetching corpus: 8350, signal 204493/275374 (executing program) 2025/11/15 18:32:03 fetching corpus: 8400, signal 204824/275374 (executing program) 2025/11/15 18:32:03 fetching corpus: 8450, signal 205220/275374 (executing program) 2025/11/15 18:32:03 fetching corpus: 8500, signal 205575/275374 (executing program) 2025/11/15 18:32:04 fetching corpus: 8550, signal 205905/275374 (executing program) 2025/11/15 18:32:04 fetching corpus: 8600, signal 206126/275374 (executing program) 2025/11/15 18:32:04 fetching corpus: 8650, signal 206411/275374 (executing program) 2025/11/15 18:32:04 fetching corpus: 8700, signal 206686/275374 (executing program) 2025/11/15 18:32:04 fetching corpus: 8750, signal 207185/275374 (executing program) 2025/11/15 18:32:04 fetching corpus: 8800, signal 207430/275374 (executing program) 2025/11/15 18:32:04 fetching corpus: 8850, signal 207767/275374 (executing program) 2025/11/15 18:32:04 fetching corpus: 8900, signal 207970/275374 (executing program) 2025/11/15 18:32:04 fetching corpus: 8950, signal 208333/275376 (executing program) 2025/11/15 18:32:04 fetching corpus: 9000, signal 208600/275376 (executing program) 2025/11/15 18:32:05 fetching corpus: 9050, signal 208772/275376 (executing program) 2025/11/15 18:32:05 fetching corpus: 9100, signal 209033/275376 (executing program) 2025/11/15 18:32:05 fetching corpus: 9150, signal 209255/275376 (executing program) 2025/11/15 18:32:05 fetching corpus: 9200, signal 209583/275376 (executing program) 2025/11/15 18:32:05 fetching corpus: 9250, signal 209767/275376 (executing program) 2025/11/15 18:32:05 fetching corpus: 9300, signal 209979/275376 (executing program) 2025/11/15 18:32:05 fetching corpus: 9350, signal 210408/275376 (executing program) 2025/11/15 18:32:05 fetching corpus: 9400, signal 210661/275376 (executing program) 2025/11/15 18:32:05 fetching corpus: 9450, signal 210972/275376 (executing program) 2025/11/15 18:32:05 fetching corpus: 9500, signal 211281/275376 (executing program) 2025/11/15 18:32:05 fetching corpus: 9550, signal 211630/275376 (executing program) 2025/11/15 18:32:06 fetching corpus: 9600, signal 211932/275376 (executing program) 2025/11/15 18:32:06 fetching corpus: 9650, signal 212271/275376 (executing program) 2025/11/15 18:32:06 fetching corpus: 9700, signal 212510/275376 (executing program) 2025/11/15 18:32:06 fetching corpus: 9750, signal 212656/275376 (executing program) 2025/11/15 18:32:06 fetching corpus: 9800, signal 212884/275376 (executing program) 2025/11/15 18:32:06 fetching corpus: 9850, signal 213213/275376 (executing program) 2025/11/15 18:32:06 fetching corpus: 9900, signal 213447/275376 (executing program) 2025/11/15 18:32:06 fetching corpus: 9950, signal 213727/275376 (executing program) 2025/11/15 18:32:06 fetching corpus: 10000, signal 213940/275376 (executing program) 2025/11/15 18:32:07 fetching corpus: 10050, signal 214189/275376 (executing program) 2025/11/15 18:32:07 fetching corpus: 10100, signal 214525/275376 (executing program) 2025/11/15 18:32:07 fetching corpus: 10150, signal 214716/275376 (executing program) 2025/11/15 18:32:07 fetching corpus: 10200, signal 214900/275376 (executing program) 2025/11/15 18:32:07 fetching corpus: 10250, signal 215140/275376 (executing program) 2025/11/15 18:32:07 fetching corpus: 10300, signal 215343/275376 (executing program) 2025/11/15 18:32:07 fetching corpus: 10350, signal 215556/275376 (executing program) 2025/11/15 18:32:07 fetching corpus: 10400, signal 215800/275376 (executing program) 2025/11/15 18:32:07 fetching corpus: 10450, signal 216148/275376 (executing program) 2025/11/15 18:32:07 fetching corpus: 10500, signal 216361/275376 (executing program) 2025/11/15 18:32:08 fetching corpus: 10550, signal 216598/275376 (executing program) 2025/11/15 18:32:08 fetching corpus: 10600, signal 216915/275376 (executing program) 2025/11/15 18:32:08 fetching corpus: 10650, signal 217251/275376 (executing program) 2025/11/15 18:32:08 fetching corpus: 10700, signal 217471/275376 (executing program) 2025/11/15 18:32:08 fetching corpus: 10750, signal 217702/275376 (executing program) 2025/11/15 18:32:08 fetching corpus: 10800, signal 217922/275376 (executing program) 2025/11/15 18:32:08 fetching corpus: 10850, signal 218260/275376 (executing program) 2025/11/15 18:32:08 fetching corpus: 10900, signal 218550/275376 (executing program) 2025/11/15 18:32:08 fetching corpus: 10950, signal 218722/275376 (executing program) 2025/11/15 18:32:08 fetching corpus: 11000, signal 218956/275376 (executing program) 2025/11/15 18:32:08 fetching corpus: 11050, signal 219158/275376 (executing program) 2025/11/15 18:32:09 fetching corpus: 11100, signal 219333/275376 (executing program) 2025/11/15 18:32:09 fetching corpus: 11150, signal 219517/275376 (executing program) 2025/11/15 18:32:09 fetching corpus: 11200, signal 219743/275376 (executing program) 2025/11/15 18:32:09 fetching corpus: 11250, signal 220113/275376 (executing program) 2025/11/15 18:32:09 fetching corpus: 11300, signal 220359/275376 (executing program) 2025/11/15 18:32:09 fetching corpus: 11350, signal 220541/275376 (executing program) 2025/11/15 18:32:09 fetching corpus: 11400, signal 220850/275376 (executing program) 2025/11/15 18:32:09 fetching corpus: 11450, signal 221053/275376 (executing program) 2025/11/15 18:32:09 fetching corpus: 11500, signal 221248/275376 (executing program) 2025/11/15 18:32:09 fetching corpus: 11550, signal 221436/275376 (executing program) 2025/11/15 18:32:10 fetching corpus: 11600, signal 221694/275376 (executing program) 2025/11/15 18:32:10 fetching corpus: 11650, signal 221944/275376 (executing program) 2025/11/15 18:32:10 fetching corpus: 11700, signal 222249/275376 (executing program) 2025/11/15 18:32:10 fetching corpus: 11750, signal 222486/275376 (executing program) 2025/11/15 18:32:10 fetching corpus: 11800, signal 222638/275376 (executing program) 2025/11/15 18:32:10 fetching corpus: 11850, signal 222938/275376 (executing program) 2025/11/15 18:32:10 fetching corpus: 11900, signal 223171/275376 (executing program) 2025/11/15 18:32:10 fetching corpus: 11950, signal 223326/275376 (executing program) 2025/11/15 18:32:10 fetching corpus: 12000, signal 223608/275376 (executing program) 2025/11/15 18:32:10 fetching corpus: 12050, signal 223842/275376 (executing program) 2025/11/15 18:32:10 fetching corpus: 12100, signal 224073/275376 (executing program) 2025/11/15 18:32:11 fetching corpus: 12150, signal 224315/275376 (executing program) 2025/11/15 18:32:11 fetching corpus: 12200, signal 224539/275376 (executing program) 2025/11/15 18:32:11 fetching corpus: 12250, signal 224846/275376 (executing program) 2025/11/15 18:32:11 fetching corpus: 12300, signal 225052/275376 (executing program) 2025/11/15 18:32:11 fetching corpus: 12350, signal 225235/275376 (executing program) 2025/11/15 18:32:11 fetching corpus: 12400, signal 225442/275376 (executing program) 2025/11/15 18:32:11 fetching corpus: 12450, signal 225627/275376 (executing program) 2025/11/15 18:32:11 fetching corpus: 12500, signal 225867/275376 (executing program) 2025/11/15 18:32:11 fetching corpus: 12550, signal 226083/275376 (executing program) 2025/11/15 18:32:11 fetching corpus: 12600, signal 226265/275376 (executing program) 2025/11/15 18:32:12 fetching corpus: 12650, signal 226442/275376 (executing program) 2025/11/15 18:32:12 fetching corpus: 12700, signal 226613/275376 (executing program) 2025/11/15 18:32:12 fetching corpus: 12750, signal 226835/275376 (executing program) 2025/11/15 18:32:12 fetching corpus: 12800, signal 227036/275376 (executing program) 2025/11/15 18:32:12 fetching corpus: 12850, signal 227299/275376 (executing program) 2025/11/15 18:32:12 fetching corpus: 12900, signal 227505/275376 (executing program) 2025/11/15 18:32:12 fetching corpus: 12950, signal 227736/275376 (executing program) 2025/11/15 18:32:12 fetching corpus: 13000, signal 227958/275376 (executing program) 2025/11/15 18:32:12 fetching corpus: 13050, signal 228154/275376 (executing program) 2025/11/15 18:32:12 fetching corpus: 13100, signal 228341/275376 (executing program) 2025/11/15 18:32:12 fetching corpus: 13150, signal 228579/275376 (executing program) 2025/11/15 18:32:13 fetching corpus: 13200, signal 228822/275376 (executing program) 2025/11/15 18:32:13 fetching corpus: 13250, signal 229034/275376 (executing program) 2025/11/15 18:32:13 fetching corpus: 13300, signal 229217/275376 (executing program) 2025/11/15 18:32:13 fetching corpus: 13350, signal 229349/275377 (executing program) 2025/11/15 18:32:13 fetching corpus: 13400, signal 229462/275377 (executing program) 2025/11/15 18:32:13 fetching corpus: 13450, signal 229639/275377 (executing program) 2025/11/15 18:32:13 fetching corpus: 13500, signal 229881/275377 (executing program) 2025/11/15 18:32:13 fetching corpus: 13550, signal 230096/275389 (executing program) 2025/11/15 18:32:13 fetching corpus: 13600, signal 230311/275389 (executing program) 2025/11/15 18:32:13 fetching corpus: 13650, signal 230464/275389 (executing program) 2025/11/15 18:32:13 fetching corpus: 13700, signal 230630/275389 (executing program) 2025/11/15 18:32:14 fetching corpus: 13750, signal 230883/275389 (executing program) 2025/11/15 18:32:14 fetching corpus: 13800, signal 231083/275389 (executing program) 2025/11/15 18:32:14 fetching corpus: 13850, signal 231284/275389 (executing program) 2025/11/15 18:32:14 fetching corpus: 13900, signal 231526/275389 (executing program) 2025/11/15 18:32:14 fetching corpus: 13950, signal 231714/275389 (executing program) 2025/11/15 18:32:14 fetching corpus: 14000, signal 231903/275389 (executing program) 2025/11/15 18:32:14 fetching corpus: 14050, signal 232104/275389 (executing program) 2025/11/15 18:32:14 fetching corpus: 14100, signal 232387/275389 (executing program) 2025/11/15 18:32:14 fetching corpus: 14150, signal 232530/275396 (executing program) 2025/11/15 18:32:14 fetching corpus: 14200, signal 232692/275396 (executing program) 2025/11/15 18:32:15 fetching corpus: 14250, signal 232849/275396 (executing program) 2025/11/15 18:32:15 fetching corpus: 14300, signal 233020/275396 (executing program) 2025/11/15 18:32:15 fetching corpus: 14350, signal 233260/275396 (executing program) 2025/11/15 18:32:15 fetching corpus: 14400, signal 233494/275396 (executing program) 2025/11/15 18:32:15 fetching corpus: 14450, signal 233689/275396 (executing program) 2025/11/15 18:32:15 fetching corpus: 14500, signal 233891/275396 (executing program) 2025/11/15 18:32:15 fetching corpus: 14550, signal 234179/275397 (executing program) 2025/11/15 18:32:15 fetching corpus: 14600, signal 234341/275397 (executing program) 2025/11/15 18:32:15 fetching corpus: 14650, signal 234549/275397 (executing program) 2025/11/15 18:32:15 fetching corpus: 14700, signal 234672/275397 (executing program) 2025/11/15 18:32:15 fetching corpus: 14750, signal 234938/275397 (executing program) 2025/11/15 18:32:16 fetching corpus: 14800, signal 235173/275397 (executing program) 2025/11/15 18:32:16 fetching corpus: 14850, signal 235342/275397 (executing program) 2025/11/15 18:32:16 fetching corpus: 14900, signal 235478/275397 (executing program) 2025/11/15 18:32:16 fetching corpus: 14950, signal 235652/275399 (executing program) 2025/11/15 18:32:16 fetching corpus: 15000, signal 235882/275399 (executing program) 2025/11/15 18:32:16 fetching corpus: 15050, signal 236108/275399 (executing program) 2025/11/15 18:32:16 fetching corpus: 15100, signal 236267/275399 (executing program) 2025/11/15 18:32:16 fetching corpus: 15150, signal 236456/275399 (executing program) 2025/11/15 18:32:16 fetching corpus: 15200, signal 236672/275399 (executing program) 2025/11/15 18:32:16 fetching corpus: 15250, signal 236804/275401 (executing program) 2025/11/15 18:32:17 fetching corpus: 15300, signal 237034/275401 (executing program) 2025/11/15 18:32:17 fetching corpus: 15350, signal 237180/275401 (executing program) 2025/11/15 18:32:17 fetching corpus: 15400, signal 237300/275401 (executing program) 2025/11/15 18:32:17 fetching corpus: 15450, signal 237477/275401 (executing program) 2025/11/15 18:32:17 fetching corpus: 15500, signal 237660/275401 (executing program) 2025/11/15 18:32:17 fetching corpus: 15550, signal 237803/275401 (executing program) 2025/11/15 18:32:17 fetching corpus: 15600, signal 238007/275401 (executing program) 2025/11/15 18:32:17 fetching corpus: 15650, signal 238134/275401 (executing program) 2025/11/15 18:32:17 fetching corpus: 15700, signal 238273/275401 (executing program) 2025/11/15 18:32:17 fetching corpus: 15750, signal 238430/275401 (executing program) 2025/11/15 18:32:18 fetching corpus: 15800, signal 238567/275401 (executing program) 2025/11/15 18:32:18 fetching corpus: 15850, signal 238699/275401 (executing program) 2025/11/15 18:32:18 fetching corpus: 15900, signal 238900/275401 (executing program) 2025/11/15 18:32:18 fetching corpus: 15950, signal 239621/275401 (executing program) 2025/11/15 18:32:18 fetching corpus: 16000, signal 239782/275401 (executing program) 2025/11/15 18:32:18 fetching corpus: 16050, signal 239900/275401 (executing program) 2025/11/15 18:32:18 fetching corpus: 16100, signal 240085/275401 (executing program) 2025/11/15 18:32:18 fetching corpus: 16150, signal 240372/275401 (executing program) 2025/11/15 18:32:18 fetching corpus: 16190, signal 240513/275401 (executing program) 2025/11/15 18:32:18 fetching corpus: 16190, signal 240513/275401 (executing program) 2025/11/15 18:32:20 starting 8 fuzzer processes 18:32:20 executing program 0: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r0 = fsmount(0xffffffffffffffff, 0x1, 0x84) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) close_range(r0, r0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, ':&'}, {}, {0x20, '\''}, {0x20, ':%'}], 0xa, "9bf12a13bca31ca7b3e6585a686d5be81ecb9f37f86267405ceef1de8e19de74a106f6cedb531d520f20e226124d29206bade65f2d3aba6ec57cc6642a237c9d77fedf8080be60a316e2dfc32b7e395b8c002501a2aaf3a2a2ca19485806d7ac4f83f6b307a28930326529ce9a75d2a55b873fb00366b2e081361fa82c86435b0cc590dedb8712d4576efeb086c53f8cd8db3fb82863f5"}, 0xab) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) close_range(r1, r2, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000140)={r2, 0x7fffffff, 0x101, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) mkdirat(r1, &(0x7f00000001c0)='./file0\x00', 0x4) r4 = syz_open_dev$mouse(&(0x7f0000000200), 0x0, 0x10b000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8a880, 0x0) renameat(r4, &(0x7f0000000240)='./file0\x00', r5, &(0x7f00000002c0)='./file0\x00') 18:32:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$search(0xa, r2, &(0x7f0000000180)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x3}, r0) r3 = add_key(&(0x7f0000000200)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="f2ed07c6a2236654daa02aad4f5df13b447bcf4e07ba04471ca770ab79ed77a6ab715b24ea7c987bb36b17ce0ddaf705098e901e75712f4beba6f543d2458130ae363607fd429f3211b685fdf21b384cb352e3d3b983bf362cf1b58b9378a64087f443e367e990beada889653ae6f0bb7e1fad8fa0ecc89043fea6354a50fd3175e975aa3a2079a45c36814c37fad70c5bd2305dcc59df97e7d82f34e51cc096747b4f416c401c67b0381ad3ca235d98219e993dd3bda6703648d4fce1a6841004d889af3b85a11e007568b0550d2a603048fc9640ff1342f841ad1696b5b547b160e483636fe3780229f8", 0xeb, 0xfffffffffffffffd) keyctl$reject(0x13, r0, 0x4, 0x9, r1) r4 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)={0x0, 0x0, @auto=[0x16, 0x32]}, 0xa, 0xffffffffffffffff) keyctl$negate(0xd, r4, 0x6, r1) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r1) r6 = add_key(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)="5273918851ea82d4b499c7f5e4fab28349b6c96f9753635d600e70c4483b9c9ef6b28d2f6f424e7bd58f6fee89f88bcc7e7ca6d71644ce39e3a1db5f2fa70fe84cfc64eb527010506a78626289b2abc6de23f3412db3f91d510dafadf0e93b28a33375a4912dd3bc970ce8224d53b8f076d1dffd434f84c958054fbcbce8fcf90684d7a8756ce703b33e64b043d811bf1298983b8bc6439d48cbb6b95ebaa438b2d049fb4229b9ab6e2aa2c19d8d7b618ed2cc2803d62801f8d3c9ec8513ee33a0aeb48bd4", 0xc5, r5) r7 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, r6) add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, r3) r8 = add_key$fscrypt_v1(&(0x7f00000007c0), &(0x7f0000000800)={'fscrypt:', @desc3}, &(0x7f0000000840)={0x0, "b618b50a9bdf42f0d91eacd9c7e1882d4746d8162d89aefa017a908c2783fb7ced730ae2c25e847658b025f71aeea2960fa701e13af10eeb66a26a1864568d6c", 0x2a}, 0x48, r7) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, r8) r9 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x3}, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, r9) keyctl$link(0x8, r4, r5) add_key$user(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x2}, &(0x7f0000000a40)="a6931087b2a11143db9ea574cea14973fc99d5113aa527cb95cbd7b9f3d6668d5d1cf0df25b5219692bb621d464903b64d92ea1621232ce3c1e6c42448baeaa5f40dbb240ff728639e918dee8a557366be77916a26ec8b9153fab8614685ec6aedc79d13fbbe9f4400355910d0d924be", 0x70, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$search(0xa, r9, &(0x7f0000000b40)='keyring\x00', &(0x7f0000000b80)={'syz', 0x2}, 0x0) 18:32:20 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0xfffffffffffffffd) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x20, 0x7, 0x3, 0x2, 0x88}, 0x14) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000100)={0xa0, "0dc9589770b7c1b3799648ad6d125493eba8f94b272cf92f49e59bfa45603e9496ad4c44cd28c7de153de41af89321c3a53dbac137033772b7fc6320eb87a367"}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180)=0x0) write$cgroup_pid(r0, &(0x7f00000001c0)=r5, 0x12) fstatfs(r3, &(0x7f0000000200)=""/4096) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001500)={'veth0_to_bond\x00', &(0x7f0000001200)=@ethtool_per_queue_op={0x4b, 0xe, [0xe2, 0x95b, 0x8, 0x8, 0x80, 0x8, 0xa0000000, 0x76, 0x80, 0x6, 0x8, 0x8, 0x40, 0x9, 0xa0, 0x40, 0x6, 0x1, 0x71a8, 0x2, 0xffffff81, 0x7fff80, 0x4, 0x9, 0x2, 0xffff504f, 0x7f9, 0x6, 0xd56, 0x7ff, 0x8f42ba0, 0x0, 0x7, 0x3, 0x10000, 0x2, 0x1f, 0x9, 0x7, 0x80000000, 0x16d0e947, 0x7ff, 0x1000, 0x200, 0xca0, 0x3, 0x2, 0x6, 0x5, 0x80000000, 0x7f, 0x5, 0x7, 0x101, 0xff, 0x20, 0xa7d6, 0x4a1, 0x7, 0x4, 0x8, 0x7fffffff, 0x2, 0x6, 0x0, 0x8, 0x34, 0x8000, 0x966, 0x8000, 0x7, 0x3, 0x2, 0x0, 0x7, 0x895, 0x5, 0x8, 0x400, 0x8, 0x1b19, 0xaa, 0xffff7596, 0x2, 0x10001, 0x3ff, 0x9, 0x20000, 0x9, 0x42f, 0x0, 0x9, 0x2, 0x9, 0x6, 0x7, 0x8a9, 0x1a, 0x48, 0x5, 0x8001, 0x3, 0x755, 0x9, 0x9c, 0x1, 0x8, 0x40, 0x3f, 0x62000000, 0x20, 0xff, 0x20, 0x2, 0xa8e2, 0x200, 0x3, 0x4, 0x9, 0x2, 0x1, 0xa02, 0x6, 0x6, 0xa6, 0xd34e, 0x6, 0xfff], "8c02a2ff992a5669e0aef393d091e7b09c3b478c57043b418cb0ec04e07a2449a298c6ef76721584a3988f22bc05ca6a76c40b020a6661a4a9583dd1de4d5afe8eb90e57ea1d23898db1385415d47989cc4ce2b7f0aaf66eb154afe778647f0e721babde9427d3c93e537e004d593e2b689e8a42ea017a10881332966cf546f8cc9d168963dff4e0d14e8c5b02a581f1584dfce452ee3977430c3966a295e1d805e456bcf87eb00ae843fc37c126b4ecdc1725fb6f0e3250cc421e093e4af6177a7610da0f4a196475a178456ee70a9dfdb95f0c7387c79c924692015f1dd26f31c7a45e2a4d2cc612d1f03035979336fb64198404"}}) r6 = openat2(r0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x40400, 0x5}, 0x18) open_tree(r6, &(0x7f00000015c0)='./file0\x00', 0x8000) r7 = accept$inet(r6, &(0x7f0000001600)={0x2, 0x0, @multicast1}, &(0x7f0000001640)=0x10) ioctl$BTRFS_IOC_INO_PATHS(r7, 0xc0389423, &(0x7f00000016c0)={0x9, 0x8, [0x3, 0x8000, 0x401, 0xa2], &(0x7f0000001680)=[0x0]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r3) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f00000018c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xd4, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0xb}}}}, [@NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xff, 0x6}, {0x4, 0x6}, {0xff}, {0x0, 0x2}, {0xff, 0x5}, {0x1, 0x7}, {0x7d, 0x6}, {0xe1, 0x2}, {0x1, 0x3}, {0xfd, 0x5}, {0x93, 0x6}, {0x81, 0x1}, {0xc8, 0x7}, {0x7, 0x1}, {0x1, 0x2}], "685e534e49b6a8c8"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x2, 0x4}, {0xff, 0x4}, {0x8, 0x4}, {0x5, 0x3}, {0x9, 0x3}, {0x2, 0x6}, {0x3f, 0x4}, {0x22, 0x4}, {0x7, 0x3}, {0x0, 0x4}, {0x9, 0xfd}, {0x8, 0x3}, {0x2, 0x3}], "18513f0429dc6be5"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x6, 0x2}, {0xff, 0x5}, {0x3, 0x2}, {0x1f, 0x2}, {0xff, 0x1}, {0x81}, {0x5, 0x5}, {0x7, 0x4}, {0x1b, 0x3}, {0x1}, {0x1, 0x5}, {0x28, 0x1}, {0x1f, 0x5}, {0xfe, 0x3}, {0x5, 0x3}, {0x3, 0x4}, {0x81, 0x7}, {0xbc, 0x1}, {0x40, 0x5}, {0x3, 0x4}, {0x3, 0x6}], "517e23fab0a601eb"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x0, 0x1}, {0x8, 0x5}, {0x4, 0x4}, {0x3, 0x6}, {0xfc, 0x6}, {0x4, 0x6}, {0x2, 0x6}, {0x6, 0x1}, {0x1, 0x7}, {0x4, 0x2}, {0x9, 0x7}, {0x40, 0x4}, {0x7, 0x5}], "e37a77cd6164f162"}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x20000801) write$P9_RSTATu(r4, &(0x7f0000001900)={0x66, 0x7d, 0x1, {{0x0, 0x4e, 0x2, 0x3, {0x20, 0x2, 0x7}, 0x4000000, 0x3, 0xa7d, 0x400, 0x8, 'nl80211\x00', 0x8, 'nl80211\x00', 0x8, 'nl80211\x00', 0x3, '%.{'}, 0x3, '(]%', 0xffffffffffffffff}}, 0x66) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000001980)={0x8, 0x7f, 0x8f}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x54, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x54}}, 0x40000) 18:32:20 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r1 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="676e26e0eb0f07fe485421374ece5db1de5b82488b18c00f2655d8e4fa2cd396201e49d6bea1e5cec4e6dc424989abe647ecc3e0997cc0197f3545513b916cb942d3e9390a215aafb3a592bc5616cfc3c7e6cae6c26194ad0f2549fa", 0x5c, 0x78a}, {&(0x7f0000000140)="e8f9f73b198ef1f0ef67360fa6447304cc5005cc64ccff303f23ee9918559609e8eec3a8057e54f0b622db7ceef9c4367b2440b79f51696bdae695f51b588592f819c3260c517e6fb3351c627b9cef55cb9b0264491e4cd20ac95e19c33c5e48ff259eedd5df4d86ffae2b8058b43bfc3f81ef250ed381964018dd16621b1ca02929", 0x82, 0x1000}], 0x4002, &(0x7f0000000240)={[{',(@!\\}'}, {'%-[)^'}, {'+#{/'}], [{@dont_measure}, {@audit}]}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x80) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000002c0)=@v1={0x0, @aes128, 0x1, @auto="7231624c04001748"}) syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x1000, 0x4, &(0x7f0000000500)=[{&(0x7f0000000380)="588484b6a243e8ce2bc7b70679e26fb8b8b0929c54fe249cfe25587976f4ae0f20c3563da376322176c30aada75b145f266bd218fb4636f3e53d4e3d1353dc4c94d42076714ea68e89a8c2eefe7cbaca04a57dbee03b85cdb0371b4ebc3b51d62486e5e5ff7fc7740113a21b0c87884180c4774082896e0531de", 0x7a, 0x1}, {&(0x7f0000000400)="4d043e685295ba29a75cb3a5e790eb1bd87e", 0x12, 0x95}, {&(0x7f0000000440)="9b49", 0x2, 0x8001}, {&(0x7f0000000480)="8de4d7b41e9cddc94d81eb386ae67141966bae5df09a5d8dadee6340c40e4c4077be60f86523e9a42b4f10623969aee1f5cc91fcc34aaff2ddf214c3cdeb9988be4f128787a079747bea1120867fb632cba493c15c7eb7d3ecb472b7fc09d301cfb6afb027f9f7ed7a05704593dcf81cccc8589b4e27982c", 0x78, 0x4}], 0x1a2484, &(0x7f0000000580)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@noquota}, {@dioread_lock}, {@test_dummy_encryption}], [{@appraise}, {@dont_appraise}]}) write(r1, &(0x7f0000000600)="a035180f9ba8787e0e74868e77b61b5514bfa1278384cce1964a295235eacce493743252c50aa6a0ddd88aad65032b8fed5922950f0f4bf9a0c049c9297e20f2e723958142489b02e870aed09830366e9984d0469f1ffec428e18c30b7c472f996dab7e27e7db6a106abcaeb5d09d44620e3f1ae0b1b1ab642e9eba2c2b3335a13f954a11042394cc047ef3a8c3be8be9462f83886213c3d", 0x98) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f00000006c0)) faccessat(r1, &(0x7f0000000700)='./file0\x00', 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) setxattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000800)='}\x00', 0x2, 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000840)=@in={0x2, 0x4e23, @empty}, 0x80, &(0x7f0000000dc0)=[{&(0x7f00000008c0)="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", 0xfb}, {&(0x7f00000009c0)="a17e97eff7321287d414badf9b4ab99e3045e7f81ab66412196233c069f7e7119f6ab179e78d2789032e3b2e1c033a4621ab5da6915568831d51429dda0b56dc002fc3859fdd1124cf67a24a638642cf74656c700e0e2d6e4a852e677137ba64a381afa784dcae46d210c5e4949f812df93d11da8d1c6523cd28c9c3c0f724a3d0bc061f1200fc5cfd1b1f5b2dfc41dc94a6e2d0ac79880e997664349b94e034c90f63d7125916a72c0731111a3d9850e2fabb9416695d8d805c1c73ef6e6b19d294", 0xc2}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)="f4d17258e935213660b4f052127b45f551d17c0d765e184bc89dee5f1110d0199a01836c948263f8a2b42fab3cac33fd60bc6ef0a851f8c03d47a12076d18b9a7e1a5aeb255bb1351c682246718d4b2c1aed16691faed3d768674fb49a7211930d9be28d0fae77b1499ccbf501f5dc1f22e7b5af0ad35da3d689f4fd103388bec0598c3829fc335ff80515d511a7fbf4130a6f2aa783ffb4cbb80d6bd716548ed253", 0xa2}, {&(0x7f0000000bc0)="89df379b17f8f73a31e7c0b438d52dd0b32800442a74d0e2b0fedcfe857b04dadb949bd6acbf60", 0x27}, {&(0x7f0000000c00)="a879eb7676d90df662fb9a6d2b7b4f223549b7eb8fdcfa3d4320619dd7b7d2958eccdb83c1f79ebe575348014982841a3142847bec130e72468aa77d82d7720cbc2edbcb1cd5bb24273b58d6bc741ce92c6d2c4a7bde9cdc2e0ee0667e4d3a1ce56388863fc29cca5bcbc61cc87099f621804edb96bca325c86d6cbb4ded54536375fc4cae8fde06c41fc2b0b32e5d0ad6874472c7754e5cba84de8ebdc200d9b80380dbc3e0c417df20ade93d9cc36edaf9af97ce21a9d567fe45e4526148c1559dbce5dbb43ebfd4dd8ff40d08242ed008cdea0b74602230f9b3b027213c286ef00614a86d0e9b7ea24c91e08462bbebefef66f1310b", 0xf7}, {&(0x7f0000000d00)="a2d106254a331c2d4122560f30b795cb99325e3ed19dc6101b35d9fc1cdd6ac8680a7b3aa8be6cbb771f5dc6975fe1c5d00922b46618689e91bf176079cbb79464238f65e8a7e8590c473be438b2420390c68f83d3ce0ad74d36f9181698b8ce1e288335fd2b82a2d160e510bed1a63e71b778d863e249ed9499a07d5bedac56875b3332ce26767e9dc2cb0428bcf85c417cbc2972f64734e75536e4b11466781014c22e73525ca70452e9", 0xab}], 0x7, &(0x7f0000000e40)=[{0x100, 0x103, 0x7fffffff, "6f4643bcb9944f5825ead0c1ce9667a0401f196a13aea0655a23ede23f70f8a80a376673db3d00d6669a545049bd1f360aba48388a9848684a9a32cf3609d3932457e4bfe51b6d4293d66081ddd2a59f70c58fafd0d39fa0e23aae08f476ba794c534290b09ae16f440639c6b1d18046dd5dfcd0a923d6d3e2918f3691c0faed46e7a6cffaf8bec743549c27cca073bf8fca887910e20934053f64c4a66dd510221679d488eec2f186087a7c48f54dc310070f7994533b49a3d3583374398e613de04e01f107dc486f4a6df1ae247156903f3bb240f558d0deb74dff69fbf989d5d9776f479fd9c4542e362e"}, {0xe0, 0x113, 0x1ff, "89df179fbf88f280308503bba805bef18bdaea787dfc41c7af0c109f887fb118c9bee1f2421d71fd5de344e1d77f6aed53af7751573cbda638e93d2a939eedb304c3a52bd88e30e7ab581703bc6826052b4a73ebd3b6e59773e96ec4e09304abde56443b7a8d6a73c01a9af7ad15b7f1022afb03a6b15b952e8a12176e3f8eee78683509ce7ebc8cbb3d7f2dca5cd3fdf41ebafd2797d5a35a5483257147899f4ba50f8717bc0665f09bc4d224b3b30f59507381f2e88f2c2053ce0e9f2221212f58a6418d642b27c02de47a"}, {0x100, 0x10e, 0x6, "58ec28d53f2fc6c110fefdd662d5903fe389b60a0bf347a419e736c65e35597642356e0e8bb972d866684828fd40067359fa1c418bc1a76ee7d202870a9a4291e9d791ee56a9fa19bd36c9eebc33651196e1440bf9bdf50fdbe44a97e45870dfdf3c0286a03c3d19fc2617c5a6be863f92f48aeafda3a2a3b3b0e2781501d3dde0190d39f33d5b2fa7c6d3bd64e7a55ba355deb7a6285930eb2996af1813d1e22daa92d985ada54e7a1215ef0c3b749e5966cd94feee546e15f489cdb97fc7eeb5c746047609c512c51e9827eef107fb2af9fb3f146840df891c75ac27ed5abc5b772a804a94a5c453954a"}], 0x2e0}, 0x404c081) r4 = openat(r0, &(0x7f0000001180)='./file0\x00', 0x1, 0x12) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000011c0), 0x40000, 0x0) ioctl$CDROMGETSPINDOWN(r5, 0x531d, &(0x7f0000001200)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$dir(0xffffffffffffff9c, &(0x7f0000001240)='./file0\x00', 0x2200, 0x20) rmdir(&(0x7f0000001280)='./file0\x00') ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f00000012c0)=""/104) 18:32:20 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, r0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xd1, 0x45, "9a62c4dad900254b28ee3fd02f69f429fae582664f60171ed43455710dec3ef03cbccf2749c371a161f91477e904fb6205f762c7c434a94d3a829d7d0fbe907d260c9790232f90d8daae1c119d59c0114097cd44cb432dc70dad2864b7c529b9dec78dcb73f96e31f4dbb85f61ce327e9554708d7adc247788a4a1efde7c477196a455bd2acce4b96a044931e3bff3daaa47dae71fe206f6196ffc7a8407a7836c6abd14be7731930c21c94e578a3daf72e5dfa8ababf82e8e27699f3d3f82d120ed8f885f7fb9fceed8ab70de"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) r1 = accept(0xffffffffffffffff, &(0x7f0000000200)=@alg, &(0x7f0000000280)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x47}}}}, ["", "", "", ""]}, 0x20}}, 0x44800) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x2a}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}}, 0x20000082) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x10000, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x600000d0) r4 = pidfd_getfd(r3, r3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffff74c, 0x22}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000780)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x70e8}}, './file0\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000800)={0x0, 0x0, "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", "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"}) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4051}, 0x4000000) pipe(&(0x7f0000001900)={0xffffffffffffffff}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2cc41cca08832453}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x72}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r7, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x24400010}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x48, 0x0, 0x200, 0x70bd26, 0xb663, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000001bc0)) 18:32:20 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x438b00, 0x0) recvmmsg$unix(r0, &(0x7f0000000500)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000140)=""/155, 0x9b}, {&(0x7f0000000200)=""/68, 0x44}, {&(0x7f0000000280)=""/250, 0xfa}, {&(0x7f0000000380)=""/186, 0xba}, {&(0x7f0000000440)=""/52, 0x34}], 0x7}}], 0x1, 0x80000160, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000540), 0x2, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0}, '\x00'}) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000005c0)) close_range(0xffffffffffffffff, r2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000600)) r3 = eventfd(0x2d7) r4 = creat(&(0x7f00000008c0)='./file0\x00', 0x34) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000940)={[0x6]}, 0x8) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) io_submit(0x0, 0x6, &(0x7f0000000c80)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x800, r2, &(0x7f0000000640)="fdd05a3247bdeeb7fe6a95cd84436095e0e866df5e9081ec2e07ad700b81510bdc666fef056b0901bf3f3792d9e64f31b39f5503805da09f9ac9f331c11e8d2877958610b41f2cf3303425414c3c4be584414d12f558cfb66a7bf89cc0ce5911a090566500c848", 0x67, 0x1, 0x0, 0x3, r2}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x99eb, r2, &(0x7f0000000700)="f287d2bce6f904180c82599ce5a448c2ade4676276cbe556ae3b4578a5c8e5a75ccd41b43cd525eceff70abff97f15b2b093e2b31758eee1ab0f55a54c1859ad269ea27fc9162d61a5e5b5d9acd0611c34788b8888a0b314dd31d1a771342a1a1701d379eb2a821819daa83d4e3ad6a9", 0x70, 0x4, 0x0, 0x2, r3}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x7, r2, &(0x7f00000007c0)="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", 0xfe, 0x0, 0x0, 0x1, r4}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x1ff, r5, &(0x7f0000000980)="ed3cf2a7c9f91c62e8f4937a4d99aaca76e31b95b6774de05ed83c696fe0c207b2b4a469360216f94f91d69b860207d38939aef627152a73449085ca5a16531e99232e6fa91465eb104e23b572c51b088a8f5193cd5a7a7ef654b2d4886e12d693", 0x61, 0x5, 0x0, 0x3}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x3, 0x3ff, r6, &(0x7f0000000a40)="572f56e091af2ead10483f49fd9563b28552f42dedf4a0e318dd07766b4436c1c028fd934c878676a8da9bc985d48af5993711a9eb5c2f28c61161d1d53558fd9e4ebc1d5a81b108007c5e2a2c31912fc759f65d387f213807ae466e687efa4a51e558447e9afcad502a9324edf963101b017aac9faf0e6a9f0857687f84363f5cde13fc9b513c0ff229db606d029423d4003d7c2ea6663f0e5ddf955352cdd64cfbd07d1d4990501faec30657e57cb36bef57a1b13867311a037f545b045ff3f5119922014eb4f2105e4f225fff14757648cb6c6f", 0xd5, 0x1000, 0x0, 0x1, r7}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x3, 0xd99, r0, &(0x7f0000000bc0)="2478c61344702fd405252381e6e887654ede77bf166cf308b7570314bc4d2962f456", 0x22, 0x8, 0x0, 0x2, r8}]) clock_gettime(0x0, &(0x7f0000006d40)={0x0, 0x0}) recvmmsg$unix(r8, &(0x7f0000006b80)=[{{&(0x7f0000000cc0), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/80, 0x50}, {&(0x7f0000001dc0)=""/47, 0x2f}], 0x3, &(0x7f0000001e40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001e80)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000001f00)=""/101, 0x65}, {&(0x7f0000001f80)=""/157, 0x9d}, {&(0x7f0000002040)=""/242, 0xf2}, {&(0x7f0000002140)=""/2, 0x2}, {&(0x7f0000002180)=""/198, 0xc6}, {&(0x7f0000002280)=""/150, 0x96}, {&(0x7f0000002340)=""/54, 0x36}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/4096, 0x1000}], 0x9, &(0x7f0000003500)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000003580)=""/138, 0x8a}, {&(0x7f0000003640)=""/196, 0xc4}, {&(0x7f0000003740)=""/210, 0xd2}, {&(0x7f0000003840)=""/120, 0x78}, {&(0x7f00000038c0)=""/10, 0xa}, {&(0x7f0000003900)=""/205, 0xcd}], 0x6}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003b00)=""/36, 0x24}, {&(0x7f0000003b40)=""/222, 0xde}], 0x2, &(0x7f0000003c80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000003cc0)=@abs, 0x6e, &(0x7f0000005fc0)=[{&(0x7f0000003d40)=""/107, 0x6b}, {&(0x7f0000003dc0)=""/185, 0xb9}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/28, 0x1c}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000005ec0)=""/139, 0x8b}, {&(0x7f0000005f80)=""/43, 0x2b}], 0x7}}, {{0x0, 0x0, &(0x7f0000006600)=[{&(0x7f0000006040)=""/83, 0x53}, {&(0x7f00000060c0)=""/66, 0x42}, {&(0x7f0000006140)=""/248, 0xf8}, {&(0x7f0000006240)=""/95, 0x5f}, {&(0x7f00000062c0)=""/231, 0xe7}, {&(0x7f00000063c0)}, {&(0x7f0000006400)=""/159, 0x9f}, {&(0x7f00000064c0)=""/177, 0xb1}, {&(0x7f0000006580)=""/78, 0x4e}], 0x9}}, {{&(0x7f00000066c0)=@abs, 0x6e, &(0x7f0000006b00)=[{&(0x7f0000006740)=""/219, 0xdb}, {&(0x7f0000006840)=""/151, 0x97}, {&(0x7f0000006900)=""/105, 0x69}, {&(0x7f0000006980)=""/127, 0x7f}, {&(0x7f0000006a00)=""/234, 0xea}], 0x5}}], 0x7, 0x40000000, &(0x7f0000006d80)={r9, r10+60000000}) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000006e80)={&(0x7f0000006dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000006e40)={&(0x7f0000006e00)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x80}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x8005) fcntl$setstatus(r0, 0x4, 0x400) 18:32:20 executing program 6: fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)=',}\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x3}, [{0x2, 0x6, r0}, {0x2, 0x2, 0xee01}, {0x2, 0x2, r2}], {}, [{0x8, 0x4, 0xee00}, {0x8, 0x2}], {0x10, 0xf0a6d39471f066ac}}, 0x4c, 0x3) r3 = syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x6, 0x5, &(0x7f00000007c0)=[{&(0x7f0000000440)="b6c5306ba3d4cd3b7dc703339ee0302b01a6a718cdb59095539b50f9b4aecbe063cc65fc5734c48ed7f03b26bcf8b01913d780d92c387cf52e39a2614bd08f485ccb148a2f5989467cb6b0546013da67639438924cfaefd639ceb9494c7f46117cb09c277f7b1f912b01ff846a59bb08124c0d17cde7f90f73ead51227811a5c5df2eff1bb7d32faeca1d273732c53", 0x8f, 0x1}, {&(0x7f0000000500)="feb431a4d25dd1e34ac9af20550cb328ca9dc380da8f6167b9206c365b0f10c82466c3d326ba183a4132edb7f301c62cc889f5f2558844de34c8fdc6e866fd0234b3ce990e2eebe5cb4406085eab0f6e7fb24180e6b25369ac7f05022021f2c3044e571b7dcd96e535a23ec2738f83ee4e1c85478ccf85c1d9505543", 0x7c, 0x1}, {&(0x7f0000000580)="75262887fff84a3c8565ce1a36b1d32999419bf37aaa36dc32dcac4d806edea71bc893cfdcb54663d329bc0060395fdc4b4712677158e9e25a5ac7caa680a3a91543dd7a3e68ac2db5c7ea124ff9f402f6b0f33b22a75c900e43c3c19e17db01329c7604b7e73cfbcb80696ab16a3f0d111460f27f8821e7616245232bebe06bea99387a28ac4324552514c8d27d0795f04c1fc874a49e855fec8452d430d2d066e52138ae172228cc3cca027e792d63d6d74554905a4780dc1129", 0xbb, 0x10000}, {&(0x7f0000000640)="ba3017f520a4b7cbaba2b1f41ff66817e5da0356461879a1b0b703ef51aff625541b9ab4eee87773ccef4ef5a308794dfe62e2149f4c6d3721fc0ad36dcd7bbd8e63bc757886b9d182edb2ed92fe8791730ca0784084494ebac82ef8bea03da0896f5b03b7cd83960c3c7140a5b9548c7ff788f71cc2d47cf4df147cef8165a11d368854862f2803486e83d647f574097ce410c5fa6a577f66eb4aedb6a57bd39fee0c59", 0xa4, 0x8001}, {&(0x7f0000000700)="2b4c8f188e67152704fd5e98ea0ca158e2a3a84f4b9dac17bbec8ca0e19c35cbfd73a0debde5d5714f14ea02a13751e2709230452440c605da0b167ed530563abfa12a4bfb253af6b436da75694f3f8a57f1a1b2824a383c5a432494999575df75eb8be9c4a4fcc03a8533c95fd456c67cc84b61ae8924ac52cba16b4d7b83c9e1105ede7487d010fdf93f9732b3221c5d21b48e304f9907a01399ffabf2fc28f6115af15661835ddf84bc0636bb4cfbc1e96c5cb712a8d6eb94b7ce6c", 0xbd, 0x6}], 0x1c0004, &(0x7f0000000840)={[{@map_normal}, {@map_acorn}], [{@uid_eq={'uid', 0x3d, r1}}, {@audit}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000980)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) getsockname$inet(r5, &(0x7f00000009c0)={0x2, 0x0, @broadcast}, &(0x7f0000000a00)=0x10) execveat(r5, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000cc0)=[&(0x7f0000000a80)='@\x00', &(0x7f0000000ac0)='map=acorn', &(0x7f0000000b00)=',}\x00', &(0x7f0000000b40)='.[}&./}]\xa2&^!\'!\x00', &(0x7f0000000b80)='\x00', &(0x7f0000000bc0)='map=normal', &(0x7f0000000c00)='map=normal', &(0x7f0000000c40)='unconfined_u', &(0x7f0000000c80)='()^\x00'], &(0x7f0000000dc0)=[&(0x7f0000000d40)='!/\x00', &(0x7f0000000d80)='#-]\\(:\x00'], 0x1000) chmod(&(0x7f0000000e00)='./file0\x00', 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, &(0x7f0000000e40)={0x8, 'nr0\x00', {'veth1_virt_wifi\x00'}, 0x4}) faccessat(r5, &(0x7f0000000e80)='./file0\x00', 0x1a2) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000000ec0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000f00)=0x2c) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f40), 0x0, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r8, {0x4, 0x4}}, './file0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fchown(0xffffffffffffffff, 0x0, r4) 18:32:20 executing program 4: get_robust_list(0x0, &(0x7f0000000080)=&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)}, &(0x7f00000000c0)=0x18) tkill(0x0, 0x1d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, &(0x7f0000000100)) r0 = getpgrp(0x0) setpgid(r0, r0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f0000000180)) r2 = syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/pid\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) waitid(0x2, r3, &(0x7f0000000240), 0x8, &(0x7f00000002c0)) r4 = eventfd(0x200) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r7 = syz_open_procfs$namespace(r1, &(0x7f00000003c0)='ns/user\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {r4}}, './file0\x00'}) ppoll(&(0x7f0000000440)=[{r5, 0xe0}, {r6, 0x8004}, {r4, 0x4}, {r7, 0x9}, {r8, 0x1107}], 0x5, &(0x7f0000000480)={0x0, 0x3938700}, &(0x7f00000004c0)={[0x7f]}, 0x8) syz_open_procfs$namespace(r3, &(0x7f0000000500)='ns/net\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) [ 94.109630] audit: type=1400 audit(1763231540.991:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 95.405404] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.407269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.409383] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.412391] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.414306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.421325] ================================================================== [ 95.422673] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 95.423894] Read of size 2 at addr ffff888013aa37b8 by task kworker/u11:0/290 [ 95.430753] [ 95.431088] CPU: 0 UID: 0 PID: 290 Comm: kworker/u11:0 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 95.431123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 95.431140] Workqueue: hci0 hci_cmd_work [ 95.431174] Call Trace: [ 95.431183] [ 95.431193] dump_stack_lvl+0xca/0x120 [ 95.431225] print_report+0xcb/0x610 [ 95.431257] ? __virt_addr_valid+0x100/0x5d0 [ 95.431286] ? hci_cmd_work+0x66d/0x6d0 [ 95.431317] ? hci_cmd_work+0x66d/0x6d0 [ 95.431349] kasan_report+0xca/0x100 [ 95.431380] ? hci_cmd_work+0x66d/0x6d0 [ 95.431415] hci_cmd_work+0x66d/0x6d0 [ 95.431448] process_one_work+0x8e1/0x19c0 [ 95.431490] ? __pfx_process_one_work+0x10/0x10 [ 95.431525] ? move_linked_works+0x172/0x270 [ 95.431553] ? assign_work+0x196/0x240 [ 95.431588] worker_thread+0x67e/0xe90 [ 95.431622] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 95.431653] ? __pfx_worker_thread+0x10/0x10 [ 95.431688] kthread+0x3c8/0x740 [ 95.431720] ? __pfx_kthread+0x10/0x10 [ 95.431750] ? ret_from_fork+0x79/0x7a0 [ 95.431775] ? lock_release+0xc8/0x290 [ 95.431813] ? __pfx_kthread+0x10/0x10 [ 95.431845] ret_from_fork+0x67a/0x7a0 [ 95.431869] ? __pfx_ret_from_fork+0x10/0x10 [ 95.431896] ? __switch_to+0x759/0x1060 [ 95.431929] ? __pfx_kthread+0x10/0x10 [ 95.431961] ret_from_fork_asm+0x1a/0x30 [ 95.432001] [ 95.432010] [ 95.454775] Allocated by task 280: [ 95.455408] kasan_save_stack+0x24/0x50 [ 95.456119] kasan_save_track+0x14/0x30 [ 95.456827] __kasan_slab_alloc+0x59/0x70 [ 95.457565] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 95.458478] __alloc_skb+0x2ab/0x370 [ 95.459171] hci_cmd_sync_alloc+0x34/0x300 [ 95.459932] __hci_cmd_sync_sk+0xf7/0x5c0 [ 95.460579] __hci_cmd_sync_status_sk+0x4d/0x1a0 [ 95.461292] hci_cmd_sync_status+0x4c/0x70 [ 95.461927] hci_dev_cmd+0x4d5/0x980 [ 95.462488] hci_sock_ioctl+0x493/0x810 [ 95.463094] sock_do_ioctl+0xd1/0x240 [ 95.463667] sock_ioctl+0x40d/0x630 [ 95.464217] __x64_sys_ioctl+0x18f/0x210 [ 95.464827] do_syscall_64+0xbf/0x430 [ 95.465398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.466164] [ 95.466420] Freed by task 293: [ 95.466896] kasan_save_stack+0x24/0x50 [ 95.467496] kasan_save_track+0x14/0x30 [ 95.468081] kasan_save_free_info+0x3a/0x60 [ 95.468721] __kasan_slab_free+0x43/0x70 [ 95.469310] kmem_cache_free+0x26f/0x500 [ 95.469907] kfree_skbmem+0x18a/0x1f0 [ 95.470464] sk_skb_reason_drop+0x10e/0x1b0 [ 95.471101] vhci_read+0x3d5/0x5d0 [ 95.471620] vfs_read+0x1eb/0xc70 [ 95.472124] ksys_read+0x121/0x240 [ 95.472649] do_syscall_64+0xbf/0x430 [ 95.473208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.473946] [ 95.474193] The buggy address belongs to the object at ffff888013aa3780 [ 95.474193] which belongs to the cache skbuff_head_cache of size 232 [ 95.476026] The buggy address is located 56 bytes inside of [ 95.476026] freed 232-byte region [ffff888013aa3780, ffff888013aa3868) [ 95.477691] [ 95.477933] The buggy address belongs to the physical page: [ 95.478709] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13aa3 [ 95.479799] memcg:ffff88800d6a4701 [ 95.480282] flags: 0x100000000000000(node=0|zone=1) [ 95.480966] page_type: f5(slab) [ 95.481431] raw: 0100000000000000 ffff8880096c78c0 ffffea00004e84c0 dead000000000002 [ 95.482483] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff88800d6a4701 [ 95.483538] page dumped because: kasan: bad access detected [ 95.484302] [ 95.484546] Memory state around the buggy address: [ 95.485217] ffff888013aa3680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.486198] ffff888013aa3700: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 95.487200] >ffff888013aa3780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.488180] ^ [ 95.488880] ffff888013aa3800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 95.489858] ffff888013aa3880: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 95.490836] ================================================================== [ 95.492048] Disabling lock debugging due to kernel taint [ 95.496571] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.499819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.501145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.509888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.510938] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.511958] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.513145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.514245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.515426] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.516561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.518446] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 95.519788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.520864] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.522384] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.523654] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.524930] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.525031] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.526001] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.527229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.527269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.531144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.531636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.533071] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.533857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.537188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.540280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.541714] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.542816] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.549577] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.551185] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.575282] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.577981] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.580093] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.627426] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.640967] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 97.545785] Bluetooth: hci2: command tx timeout [ 97.546547] Bluetooth: hci1: command tx timeout [ 97.547276] Bluetooth: hci0: command tx timeout [ 97.610519] Bluetooth: hci5: command tx timeout [ 97.611001] Bluetooth: hci3: command tx timeout [ 97.611329] Bluetooth: hci6: command tx timeout [ 97.611742] Bluetooth: hci4: command tx timeout [ 97.737816] Bluetooth: hci7: command tx timeout [ 99.593810] Bluetooth: hci0: command tx timeout [ 99.594624] Bluetooth: hci2: command tx timeout [ 99.597740] Bluetooth: hci1: command tx timeout [ 99.657817] Bluetooth: hci4: command tx timeout [ 99.658573] Bluetooth: hci3: command tx timeout [ 99.658624] Bluetooth: hci6: command tx timeout [ 99.659851] Bluetooth: hci5: command tx timeout [ 99.786867] Bluetooth: hci7: command tx timeout [ 101.641758] Bluetooth: hci1: command tx timeout [ 101.642500] Bluetooth: hci2: command tx timeout [ 101.642529] Bluetooth: hci0: command tx timeout [ 101.705996] Bluetooth: hci6: command tx timeout [ 101.706035] Bluetooth: hci3: command tx timeout [ 101.707031] Bluetooth: hci4: command tx timeout [ 101.707057] Bluetooth: hci5: command tx timeout [ 101.834610] Bluetooth: hci7: command tx timeout [ 103.691738] Bluetooth: hci0: command tx timeout [ 103.692593] Bluetooth: hci2: command tx timeout [ 103.693570] Bluetooth: hci1: command tx timeout [ 103.753866] Bluetooth: hci5: command tx timeout [ 103.754811] Bluetooth: hci3: command tx timeout [ 103.755610] Bluetooth: hci6: command tx timeout [ 103.756438] Bluetooth: hci4: command tx timeout [ 103.882952] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 18:32:22 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8293dd05 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff88801be47618 R8 =0000000000000000 R9 =ffffed10016db046 R10=0000000000000020 R11=3331303838386652 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88974780 R15=ffffffff8293dcf0 RIP=ffffffff8293dd5d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f81796ec070 CR3=000000000c96f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f81797af7c000007f81797af7c8 XMM02=00007f81797af7e000007f81797af7c0 XMM03=00007f81797af7c800007f81797af7c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888012bb7208 RBX=ffff888012540a68 RCX=ffffffff8144334a RDX=ffff888012b8b1d0 RSI=0000000000000001 RDI=ffff888012b8b898 RBP=ffff888012b8b898 RSP=ffff88800f29fd20 R8 =0000000000000000 R9 =ffffed1001cefb00 R10=ffff88800e77d807 R11=0000000000000001 R12=ffff888012bb8758 R13=ffff888012540a68 R14=ffff88800f290000 R15=0000000000000086 RIP=ffffffff81b63124 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe4000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055dcba0ce140 CR3=000000000d6e8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000c0000000b000055dcba0bf960 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=4e4f534145525f4b434f4c425f57485f XMM05=4c494b46520068746f6f7465756c623d XMM06=3d454d414e5f4c4c494b4652006c6c69 XMM07=6c696b66722f306963682f68746f6f74 XMM08=3a56000a73253a51000a73253a47000a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000