Warning: Permanently added '[localhost]:29720' (ECDSA) to the list of known hosts. 2025/11/16 06:46:11 fuzzer started 2025/11/16 06:46:11 dialing manager at localhost:37161 syzkaller login: [ 50.508610] cgroup: Unknown subsys name 'net' [ 50.553455] cgroup: Unknown subsys name 'cpuset' [ 50.566958] cgroup: Unknown subsys name 'rlimit' 2025/11/16 06:46:21 syscalls: 2214 2025/11/16 06:46:21 code coverage: enabled 2025/11/16 06:46:21 comparison tracing: enabled 2025/11/16 06:46:21 extra coverage: enabled 2025/11/16 06:46:21 setuid sandbox: enabled 2025/11/16 06:46:21 namespace sandbox: enabled 2025/11/16 06:46:21 Android sandbox: enabled 2025/11/16 06:46:21 fault injection: enabled 2025/11/16 06:46:21 leak checking: enabled 2025/11/16 06:46:21 net packet injection: enabled 2025/11/16 06:46:21 net device setup: enabled 2025/11/16 06:46:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/16 06:46:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/16 06:46:21 USB emulation: enabled 2025/11/16 06:46:21 hci packet injection: enabled 2025/11/16 06:46:21 wifi device emulation: enabled 2025/11/16 06:46:21 802.15.4 emulation: enabled 2025/11/16 06:46:21 fetching corpus: 50, signal 22487/24320 (executing program) 2025/11/16 06:46:21 fetching corpus: 100, signal 30119/33679 (executing program) 2025/11/16 06:46:21 fetching corpus: 150, signal 42109/47186 (executing program) 2025/11/16 06:46:21 fetching corpus: 200, signal 50939/57475 (executing program) 2025/11/16 06:46:21 fetching corpus: 250, signal 56006/63995 (executing program) 2025/11/16 06:46:21 fetching corpus: 300, signal 60642/70056 (executing program) 2025/11/16 06:46:22 fetching corpus: 350, signal 66784/77451 (executing program) 2025/11/16 06:46:22 fetching corpus: 400, signal 70881/82852 (executing program) 2025/11/16 06:46:22 fetching corpus: 450, signal 74651/87876 (executing program) 2025/11/16 06:46:22 fetching corpus: 500, signal 77815/92269 (executing program) 2025/11/16 06:46:22 fetching corpus: 550, signal 83228/98729 (executing program) 2025/11/16 06:46:22 fetching corpus: 600, signal 86724/103348 (executing program) 2025/11/16 06:46:22 fetching corpus: 650, signal 89606/107332 (executing program) 2025/11/16 06:46:22 fetching corpus: 700, signal 93224/111931 (executing program) 2025/11/16 06:46:22 fetching corpus: 750, signal 96660/116337 (executing program) 2025/11/16 06:46:23 fetching corpus: 800, signal 98818/119565 (executing program) 2025/11/16 06:46:23 fetching corpus: 850, signal 100821/122621 (executing program) 2025/11/16 06:46:23 fetching corpus: 900, signal 102038/125005 (executing program) 2025/11/16 06:46:23 fetching corpus: 950, signal 103970/127964 (executing program) 2025/11/16 06:46:23 fetching corpus: 1000, signal 106054/130967 (executing program) 2025/11/16 06:46:23 fetching corpus: 1050, signal 107419/133338 (executing program) 2025/11/16 06:46:23 fetching corpus: 1100, signal 109591/136434 (executing program) 2025/11/16 06:46:23 fetching corpus: 1150, signal 111059/138899 (executing program) 2025/11/16 06:46:23 fetching corpus: 1200, signal 113297/141982 (executing program) 2025/11/16 06:46:23 fetching corpus: 1250, signal 115150/144708 (executing program) 2025/11/16 06:46:24 fetching corpus: 1300, signal 116446/146969 (executing program) 2025/11/16 06:46:24 fetching corpus: 1350, signal 119185/150345 (executing program) 2025/11/16 06:46:24 fetching corpus: 1400, signal 121119/153004 (executing program) 2025/11/16 06:46:24 fetching corpus: 1450, signal 123290/155846 (executing program) 2025/11/16 06:46:24 fetching corpus: 1500, signal 124948/158270 (executing program) 2025/11/16 06:46:24 fetching corpus: 1550, signal 126587/160691 (executing program) 2025/11/16 06:46:24 fetching corpus: 1600, signal 127830/162753 (executing program) 2025/11/16 06:46:24 fetching corpus: 1650, signal 129613/165199 (executing program) 2025/11/16 06:46:25 fetching corpus: 1700, signal 130659/167034 (executing program) 2025/11/16 06:46:25 fetching corpus: 1750, signal 131464/168714 (executing program) 2025/11/16 06:46:25 fetching corpus: 1800, signal 132460/170504 (executing program) 2025/11/16 06:46:25 fetching corpus: 1850, signal 133588/172384 (executing program) 2025/11/16 06:46:25 fetching corpus: 1900, signal 134747/174260 (executing program) 2025/11/16 06:46:25 fetching corpus: 1950, signal 135769/175990 (executing program) 2025/11/16 06:46:25 fetching corpus: 2000, signal 136549/177562 (executing program) 2025/11/16 06:46:25 fetching corpus: 2050, signal 137298/179125 (executing program) 2025/11/16 06:46:25 fetching corpus: 2100, signal 137947/180579 (executing program) 2025/11/16 06:46:25 fetching corpus: 2150, signal 138946/182334 (executing program) 2025/11/16 06:46:25 fetching corpus: 2200, signal 139999/184068 (executing program) 2025/11/16 06:46:26 fetching corpus: 2250, signal 140873/185669 (executing program) 2025/11/16 06:46:26 fetching corpus: 2300, signal 142146/187508 (executing program) 2025/11/16 06:46:26 fetching corpus: 2350, signal 143159/189174 (executing program) 2025/11/16 06:46:26 fetching corpus: 2400, signal 144349/190954 (executing program) 2025/11/16 06:46:26 fetching corpus: 2450, signal 145308/192517 (executing program) 2025/11/16 06:46:26 fetching corpus: 2500, signal 146145/194059 (executing program) 2025/11/16 06:46:26 fetching corpus: 2550, signal 147198/195704 (executing program) 2025/11/16 06:46:26 fetching corpus: 2600, signal 147904/197062 (executing program) 2025/11/16 06:46:26 fetching corpus: 2650, signal 148583/198439 (executing program) 2025/11/16 06:46:26 fetching corpus: 2700, signal 149685/200078 (executing program) 2025/11/16 06:46:27 fetching corpus: 2750, signal 150643/201570 (executing program) 2025/11/16 06:46:27 fetching corpus: 2800, signal 151683/203130 (executing program) 2025/11/16 06:46:27 fetching corpus: 2850, signal 152656/204622 (executing program) 2025/11/16 06:46:27 fetching corpus: 2900, signal 153365/205993 (executing program) 2025/11/16 06:46:27 fetching corpus: 2950, signal 154109/207362 (executing program) 2025/11/16 06:46:27 fetching corpus: 3000, signal 154756/208584 (executing program) 2025/11/16 06:46:27 fetching corpus: 3050, signal 155990/210222 (executing program) 2025/11/16 06:46:27 fetching corpus: 3100, signal 156588/211442 (executing program) 2025/11/16 06:46:27 fetching corpus: 3150, signal 157236/212712 (executing program) 2025/11/16 06:46:28 fetching corpus: 3200, signal 157897/214018 (executing program) 2025/11/16 06:46:28 fetching corpus: 3250, signal 159472/215770 (executing program) 2025/11/16 06:46:28 fetching corpus: 3300, signal 160192/217014 (executing program) 2025/11/16 06:46:28 fetching corpus: 3350, signal 160794/218195 (executing program) 2025/11/16 06:46:28 fetching corpus: 3400, signal 161300/219288 (executing program) 2025/11/16 06:46:28 fetching corpus: 3450, signal 161725/220384 (executing program) 2025/11/16 06:46:28 fetching corpus: 3500, signal 162363/221563 (executing program) 2025/11/16 06:46:28 fetching corpus: 3550, signal 162870/222629 (executing program) 2025/11/16 06:46:28 fetching corpus: 3600, signal 163773/223957 (executing program) 2025/11/16 06:46:28 fetching corpus: 3650, signal 164236/225017 (executing program) 2025/11/16 06:46:29 fetching corpus: 3700, signal 164730/226083 (executing program) 2025/11/16 06:46:29 fetching corpus: 3750, signal 165350/227208 (executing program) 2025/11/16 06:46:30 fetching corpus: 3800, signal 166202/228450 (executing program) 2025/11/16 06:46:30 fetching corpus: 3850, signal 166629/229447 (executing program) 2025/11/16 06:46:30 fetching corpus: 3900, signal 167104/230446 (executing program) 2025/11/16 06:46:30 fetching corpus: 3950, signal 167774/231539 (executing program) 2025/11/16 06:46:30 fetching corpus: 4000, signal 168682/232757 (executing program) 2025/11/16 06:46:30 fetching corpus: 4050, signal 169378/233831 (executing program) 2025/11/16 06:46:30 fetching corpus: 4100, signal 169816/234793 (executing program) 2025/11/16 06:46:31 fetching corpus: 4150, signal 170329/235771 (executing program) 2025/11/16 06:46:31 fetching corpus: 4200, signal 170872/236821 (executing program) 2025/11/16 06:46:31 fetching corpus: 4250, signal 171457/237846 (executing program) 2025/11/16 06:46:31 fetching corpus: 4300, signal 171820/238802 (executing program) 2025/11/16 06:46:31 fetching corpus: 4350, signal 172457/239837 (executing program) 2025/11/16 06:46:31 fetching corpus: 4400, signal 172830/240730 (executing program) 2025/11/16 06:46:31 fetching corpus: 4450, signal 173311/241681 (executing program) 2025/11/16 06:46:31 fetching corpus: 4500, signal 173788/242590 (executing program) 2025/11/16 06:46:31 fetching corpus: 4550, signal 174535/243646 (executing program) 2025/11/16 06:46:31 fetching corpus: 4600, signal 175250/244677 (executing program) 2025/11/16 06:46:31 fetching corpus: 4650, signal 175824/245608 (executing program) 2025/11/16 06:46:32 fetching corpus: 4700, signal 176514/246620 (executing program) 2025/11/16 06:46:32 fetching corpus: 4750, signal 177075/247559 (executing program) 2025/11/16 06:46:32 fetching corpus: 4800, signal 177808/248557 (executing program) 2025/11/16 06:46:32 fetching corpus: 4850, signal 178243/249432 (executing program) 2025/11/16 06:46:32 fetching corpus: 4900, signal 178614/250298 (executing program) 2025/11/16 06:46:32 fetching corpus: 4950, signal 179067/251191 (executing program) 2025/11/16 06:46:32 fetching corpus: 5000, signal 179503/252049 (executing program) 2025/11/16 06:46:32 fetching corpus: 5050, signal 179889/252872 (executing program) 2025/11/16 06:46:32 fetching corpus: 5100, signal 180338/253701 (executing program) 2025/11/16 06:46:32 fetching corpus: 5150, signal 180719/254510 (executing program) 2025/11/16 06:46:32 fetching corpus: 5200, signal 181470/255415 (executing program) 2025/11/16 06:46:33 fetching corpus: 5250, signal 181914/256254 (executing program) 2025/11/16 06:46:33 fetching corpus: 5300, signal 182443/257114 (executing program) 2025/11/16 06:46:33 fetching corpus: 5350, signal 182835/257953 (executing program) 2025/11/16 06:46:33 fetching corpus: 5400, signal 183249/258745 (executing program) 2025/11/16 06:46:33 fetching corpus: 5450, signal 183682/259583 (executing program) 2025/11/16 06:46:33 fetching corpus: 5500, signal 184139/260354 (executing program) 2025/11/16 06:46:33 fetching corpus: 5550, signal 184644/261175 (executing program) 2025/11/16 06:46:33 fetching corpus: 5600, signal 185111/261988 (executing program) 2025/11/16 06:46:33 fetching corpus: 5650, signal 185586/262764 (executing program) 2025/11/16 06:46:33 fetching corpus: 5700, signal 185906/263457 (executing program) 2025/11/16 06:46:34 fetching corpus: 5750, signal 186213/264209 (executing program) 2025/11/16 06:46:34 fetching corpus: 5800, signal 186782/264949 (executing program) 2025/11/16 06:46:34 fetching corpus: 5850, signal 187368/265727 (executing program) 2025/11/16 06:46:34 fetching corpus: 5900, signal 187917/266480 (executing program) 2025/11/16 06:46:34 fetching corpus: 5950, signal 188150/267190 (executing program) 2025/11/16 06:46:34 fetching corpus: 6000, signal 188916/267958 (executing program) 2025/11/16 06:46:34 fetching corpus: 6050, signal 189371/268642 (executing program) 2025/11/16 06:46:34 fetching corpus: 6100, signal 189668/269303 (executing program) 2025/11/16 06:46:34 fetching corpus: 6150, signal 189965/269980 (executing program) 2025/11/16 06:46:35 fetching corpus: 6200, signal 190205/270672 (executing program) 2025/11/16 06:46:35 fetching corpus: 6250, signal 190717/271387 (executing program) 2025/11/16 06:46:35 fetching corpus: 6300, signal 191084/272041 (executing program) 2025/11/16 06:46:35 fetching corpus: 6350, signal 191492/272689 (executing program) 2025/11/16 06:46:35 fetching corpus: 6400, signal 191911/273329 (executing program) 2025/11/16 06:46:35 fetching corpus: 6450, signal 192225/273991 (executing program) 2025/11/16 06:46:35 fetching corpus: 6500, signal 192546/274633 (executing program) 2025/11/16 06:46:35 fetching corpus: 6550, signal 193001/275281 (executing program) 2025/11/16 06:46:35 fetching corpus: 6600, signal 193330/275898 (executing program) 2025/11/16 06:46:35 fetching corpus: 6650, signal 193630/276528 (executing program) 2025/11/16 06:46:36 fetching corpus: 6700, signal 193978/277152 (executing program) 2025/11/16 06:46:36 fetching corpus: 6750, signal 194172/277750 (executing program) 2025/11/16 06:46:36 fetching corpus: 6800, signal 194636/278408 (executing program) 2025/11/16 06:46:36 fetching corpus: 6850, signal 194929/278997 (executing program) 2025/11/16 06:46:36 fetching corpus: 6900, signal 195417/279621 (executing program) 2025/11/16 06:46:36 fetching corpus: 6950, signal 195711/280225 (executing program) 2025/11/16 06:46:36 fetching corpus: 7000, signal 196158/280831 (executing program) 2025/11/16 06:46:36 fetching corpus: 7050, signal 196434/281148 (executing program) 2025/11/16 06:46:36 fetching corpus: 7100, signal 196931/281148 (executing program) 2025/11/16 06:46:36 fetching corpus: 7150, signal 197156/281148 (executing program) 2025/11/16 06:46:37 fetching corpus: 7200, signal 197415/281148 (executing program) 2025/11/16 06:46:37 fetching corpus: 7250, signal 197683/281148 (executing program) 2025/11/16 06:46:37 fetching corpus: 7300, signal 197986/281148 (executing program) 2025/11/16 06:46:37 fetching corpus: 7350, signal 198388/281149 (executing program) 2025/11/16 06:46:37 fetching corpus: 7400, signal 198764/281149 (executing program) 2025/11/16 06:46:37 fetching corpus: 7450, signal 198981/281149 (executing program) 2025/11/16 06:46:37 fetching corpus: 7500, signal 199345/281149 (executing program) 2025/11/16 06:46:37 fetching corpus: 7550, signal 199647/281149 (executing program) 2025/11/16 06:46:37 fetching corpus: 7600, signal 199996/281149 (executing program) 2025/11/16 06:46:37 fetching corpus: 7650, signal 200298/281150 (executing program) 2025/11/16 06:46:38 fetching corpus: 7700, signal 200921/281150 (executing program) 2025/11/16 06:46:38 fetching corpus: 7750, signal 201289/281150 (executing program) 2025/11/16 06:46:38 fetching corpus: 7800, signal 201595/281150 (executing program) 2025/11/16 06:46:38 fetching corpus: 7850, signal 201917/281150 (executing program) 2025/11/16 06:46:38 fetching corpus: 7900, signal 202191/281150 (executing program) 2025/11/16 06:46:38 fetching corpus: 7950, signal 202714/281150 (executing program) 2025/11/16 06:46:38 fetching corpus: 8000, signal 202965/281150 (executing program) 2025/11/16 06:46:38 fetching corpus: 8050, signal 203300/281150 (executing program) 2025/11/16 06:46:38 fetching corpus: 8100, signal 203519/281150 (executing program) 2025/11/16 06:46:38 fetching corpus: 8150, signal 203758/281150 (executing program) 2025/11/16 06:46:38 fetching corpus: 8200, signal 204116/281151 (executing program) 2025/11/16 06:46:38 fetching corpus: 8250, signal 204461/281151 (executing program) 2025/11/16 06:46:39 fetching corpus: 8300, signal 204710/281151 (executing program) 2025/11/16 06:46:39 fetching corpus: 8350, signal 205116/281151 (executing program) 2025/11/16 06:46:39 fetching corpus: 8400, signal 205522/281151 (executing program) 2025/11/16 06:46:39 fetching corpus: 8450, signal 205878/281151 (executing program) 2025/11/16 06:46:39 fetching corpus: 8500, signal 206260/281151 (executing program) 2025/11/16 06:46:39 fetching corpus: 8550, signal 206549/281151 (executing program) 2025/11/16 06:46:39 fetching corpus: 8600, signal 206845/281151 (executing program) 2025/11/16 06:46:39 fetching corpus: 8650, signal 207147/281151 (executing program) 2025/11/16 06:46:39 fetching corpus: 8700, signal 207413/281151 (executing program) 2025/11/16 06:46:40 fetching corpus: 8750, signal 207693/281151 (executing program) 2025/11/16 06:46:40 fetching corpus: 8800, signal 207988/281151 (executing program) 2025/11/16 06:46:40 fetching corpus: 8850, signal 208180/281151 (executing program) 2025/11/16 06:46:40 fetching corpus: 8900, signal 208439/281151 (executing program) 2025/11/16 06:46:40 fetching corpus: 8950, signal 208724/281151 (executing program) 2025/11/16 06:46:40 fetching corpus: 9000, signal 208932/281151 (executing program) 2025/11/16 06:46:40 fetching corpus: 9050, signal 209160/281151 (executing program) 2025/11/16 06:46:40 fetching corpus: 9100, signal 209463/281151 (executing program) 2025/11/16 06:46:40 fetching corpus: 9150, signal 209795/281151 (executing program) 2025/11/16 06:46:40 fetching corpus: 9200, signal 210166/281151 (executing program) 2025/11/16 06:46:40 fetching corpus: 9250, signal 210453/281151 (executing program) 2025/11/16 06:46:41 fetching corpus: 9300, signal 210666/281151 (executing program) 2025/11/16 06:46:41 fetching corpus: 9350, signal 210893/281151 (executing program) 2025/11/16 06:46:41 fetching corpus: 9400, signal 211150/281151 (executing program) 2025/11/16 06:46:41 fetching corpus: 9450, signal 211360/281151 (executing program) 2025/11/16 06:46:41 fetching corpus: 9500, signal 211590/281151 (executing program) 2025/11/16 06:46:41 fetching corpus: 9550, signal 211813/281151 (executing program) 2025/11/16 06:46:41 fetching corpus: 9600, signal 212117/281152 (executing program) 2025/11/16 06:46:41 fetching corpus: 9650, signal 212317/281152 (executing program) 2025/11/16 06:46:41 fetching corpus: 9700, signal 212580/281152 (executing program) 2025/11/16 06:46:41 fetching corpus: 9750, signal 212819/281152 (executing program) 2025/11/16 06:46:42 fetching corpus: 9800, signal 213116/281152 (executing program) 2025/11/16 06:46:42 fetching corpus: 9850, signal 213322/281152 (executing program) 2025/11/16 06:46:42 fetching corpus: 9900, signal 213632/281153 (executing program) 2025/11/16 06:46:42 fetching corpus: 9950, signal 214012/281155 (executing program) 2025/11/16 06:46:42 fetching corpus: 10000, signal 214284/281155 (executing program) 2025/11/16 06:46:42 fetching corpus: 10050, signal 214510/281155 (executing program) 2025/11/16 06:46:42 fetching corpus: 10100, signal 214771/281155 (executing program) 2025/11/16 06:46:42 fetching corpus: 10150, signal 214924/281155 (executing program) 2025/11/16 06:46:42 fetching corpus: 10200, signal 215201/281158 (executing program) 2025/11/16 06:46:42 fetching corpus: 10250, signal 215478/281158 (executing program) 2025/11/16 06:46:43 fetching corpus: 10300, signal 215690/281158 (executing program) 2025/11/16 06:46:43 fetching corpus: 10350, signal 216020/281158 (executing program) 2025/11/16 06:46:43 fetching corpus: 10400, signal 216379/281158 (executing program) 2025/11/16 06:46:43 fetching corpus: 10450, signal 216652/281158 (executing program) 2025/11/16 06:46:43 fetching corpus: 10500, signal 216964/281158 (executing program) 2025/11/16 06:46:43 fetching corpus: 10550, signal 217156/281158 (executing program) 2025/11/16 06:46:43 fetching corpus: 10600, signal 217360/281158 (executing program) 2025/11/16 06:46:43 fetching corpus: 10650, signal 217525/281158 (executing program) 2025/11/16 06:46:43 fetching corpus: 10700, signal 217752/281158 (executing program) 2025/11/16 06:46:43 fetching corpus: 10750, signal 217929/281158 (executing program) 2025/11/16 06:46:43 fetching corpus: 10800, signal 218083/281158 (executing program) 2025/11/16 06:46:44 fetching corpus: 10850, signal 218293/281158 (executing program) 2025/11/16 06:46:44 fetching corpus: 10900, signal 218721/281158 (executing program) 2025/11/16 06:46:44 fetching corpus: 10950, signal 218857/281158 (executing program) 2025/11/16 06:46:44 fetching corpus: 11000, signal 219040/281158 (executing program) 2025/11/16 06:46:44 fetching corpus: 11050, signal 219226/281158 (executing program) 2025/11/16 06:46:44 fetching corpus: 11100, signal 219428/281158 (executing program) 2025/11/16 06:46:44 fetching corpus: 11150, signal 219578/281158 (executing program) 2025/11/16 06:46:44 fetching corpus: 11200, signal 219780/281158 (executing program) 2025/11/16 06:46:44 fetching corpus: 11250, signal 220021/281158 (executing program) 2025/11/16 06:46:44 fetching corpus: 11300, signal 220189/281158 (executing program) 2025/11/16 06:46:44 fetching corpus: 11350, signal 220349/281158 (executing program) 2025/11/16 06:46:44 fetching corpus: 11400, signal 220612/281160 (executing program) 2025/11/16 06:46:45 fetching corpus: 11450, signal 220912/281160 (executing program) 2025/11/16 06:46:45 fetching corpus: 11500, signal 221231/281160 (executing program) 2025/11/16 06:46:45 fetching corpus: 11550, signal 221493/281160 (executing program) 2025/11/16 06:46:45 fetching corpus: 11600, signal 222126/281160 (executing program) 2025/11/16 06:46:45 fetching corpus: 11650, signal 222292/281160 (executing program) 2025/11/16 06:46:45 fetching corpus: 11700, signal 222456/281160 (executing program) 2025/11/16 06:46:45 fetching corpus: 11750, signal 222693/281160 (executing program) 2025/11/16 06:46:45 fetching corpus: 11800, signal 222846/281167 (executing program) 2025/11/16 06:46:45 fetching corpus: 11850, signal 223053/281167 (executing program) 2025/11/16 06:46:45 fetching corpus: 11900, signal 223343/281167 (executing program) 2025/11/16 06:46:45 fetching corpus: 11950, signal 223573/281167 (executing program) 2025/11/16 06:46:45 fetching corpus: 12000, signal 223780/281167 (executing program) 2025/11/16 06:46:45 fetching corpus: 12050, signal 223997/281167 (executing program) 2025/11/16 06:46:45 fetching corpus: 12100, signal 224198/281167 (executing program) 2025/11/16 06:46:46 fetching corpus: 12150, signal 224458/281170 (executing program) 2025/11/16 06:46:46 fetching corpus: 12200, signal 224634/281170 (executing program) 2025/11/16 06:46:46 fetching corpus: 12250, signal 224843/281170 (executing program) 2025/11/16 06:46:46 fetching corpus: 12300, signal 225061/281170 (executing program) 2025/11/16 06:46:46 fetching corpus: 12350, signal 225329/281170 (executing program) 2025/11/16 06:46:46 fetching corpus: 12400, signal 225499/281170 (executing program) 2025/11/16 06:46:46 fetching corpus: 12450, signal 225659/281170 (executing program) 2025/11/16 06:46:46 fetching corpus: 12500, signal 225854/281170 (executing program) 2025/11/16 06:46:46 fetching corpus: 12550, signal 226069/281170 (executing program) 2025/11/16 06:46:46 fetching corpus: 12600, signal 226276/281170 (executing program) 2025/11/16 06:46:46 fetching corpus: 12650, signal 226418/281170 (executing program) 2025/11/16 06:46:47 fetching corpus: 12700, signal 226622/281170 (executing program) 2025/11/16 06:46:47 fetching corpus: 12750, signal 226774/281170 (executing program) 2025/11/16 06:46:47 fetching corpus: 12800, signal 226912/281170 (executing program) 2025/11/16 06:46:47 fetching corpus: 12850, signal 227162/281170 (executing program) 2025/11/16 06:46:47 fetching corpus: 12900, signal 227450/281170 (executing program) 2025/11/16 06:46:47 fetching corpus: 12950, signal 227659/281170 (executing program) 2025/11/16 06:46:47 fetching corpus: 13000, signal 227806/281170 (executing program) 2025/11/16 06:46:47 fetching corpus: 13050, signal 227985/281170 (executing program) 2025/11/16 06:46:47 fetching corpus: 13100, signal 228127/281170 (executing program) 2025/11/16 06:46:47 fetching corpus: 13150, signal 228373/281170 (executing program) 2025/11/16 06:46:47 fetching corpus: 13200, signal 228596/281170 (executing program) 2025/11/16 06:46:47 fetching corpus: 13250, signal 228742/281170 (executing program) 2025/11/16 06:46:48 fetching corpus: 13300, signal 228909/281170 (executing program) 2025/11/16 06:46:48 fetching corpus: 13350, signal 229823/281170 (executing program) 2025/11/16 06:46:48 fetching corpus: 13400, signal 230094/281170 (executing program) 2025/11/16 06:46:48 fetching corpus: 13450, signal 230230/281170 (executing program) 2025/11/16 06:46:48 fetching corpus: 13500, signal 230365/281170 (executing program) 2025/11/16 06:46:48 fetching corpus: 13550, signal 230567/281170 (executing program) 2025/11/16 06:46:48 fetching corpus: 13600, signal 230827/281170 (executing program) 2025/11/16 06:46:48 fetching corpus: 13650, signal 230966/281170 (executing program) 2025/11/16 06:46:48 fetching corpus: 13700, signal 231147/281170 (executing program) 2025/11/16 06:46:48 fetching corpus: 13750, signal 231372/281170 (executing program) 2025/11/16 06:46:48 fetching corpus: 13800, signal 231547/281170 (executing program) 2025/11/16 06:46:48 fetching corpus: 13850, signal 231716/281170 (executing program) 2025/11/16 06:46:49 fetching corpus: 13900, signal 231893/281170 (executing program) 2025/11/16 06:46:49 fetching corpus: 13950, signal 232115/281171 (executing program) 2025/11/16 06:46:49 fetching corpus: 14000, signal 232314/281171 (executing program) 2025/11/16 06:46:49 fetching corpus: 14050, signal 232494/281171 (executing program) 2025/11/16 06:46:49 fetching corpus: 14100, signal 232711/281171 (executing program) 2025/11/16 06:46:49 fetching corpus: 14150, signal 232868/281171 (executing program) 2025/11/16 06:46:49 fetching corpus: 14200, signal 233068/281171 (executing program) 2025/11/16 06:46:49 fetching corpus: 14250, signal 233254/281171 (executing program) 2025/11/16 06:46:49 fetching corpus: 14300, signal 233486/281171 (executing program) 2025/11/16 06:46:49 fetching corpus: 14350, signal 233866/281171 (executing program) 2025/11/16 06:46:49 fetching corpus: 14400, signal 234144/281172 (executing program) 2025/11/16 06:46:49 fetching corpus: 14450, signal 234337/281172 (executing program) 2025/11/16 06:46:49 fetching corpus: 14500, signal 234490/281172 (executing program) 2025/11/16 06:46:50 fetching corpus: 14550, signal 234668/281172 (executing program) 2025/11/16 06:46:50 fetching corpus: 14600, signal 234897/281172 (executing program) 2025/11/16 06:46:50 fetching corpus: 14650, signal 235097/281172 (executing program) 2025/11/16 06:46:50 fetching corpus: 14700, signal 235287/281172 (executing program) 2025/11/16 06:46:50 fetching corpus: 14750, signal 235424/281172 (executing program) 2025/11/16 06:46:50 fetching corpus: 14800, signal 235568/281172 (executing program) 2025/11/16 06:46:50 fetching corpus: 14850, signal 235739/281172 (executing program) 2025/11/16 06:46:50 fetching corpus: 14900, signal 235913/281172 (executing program) 2025/11/16 06:46:50 fetching corpus: 14950, signal 236121/281191 (executing program) 2025/11/16 06:46:50 fetching corpus: 15000, signal 236285/281191 (executing program) 2025/11/16 06:46:50 fetching corpus: 15050, signal 236507/281191 (executing program) 2025/11/16 06:46:50 fetching corpus: 15100, signal 236694/281191 (executing program) 2025/11/16 06:46:50 fetching corpus: 15150, signal 236874/281191 (executing program) 2025/11/16 06:46:50 fetching corpus: 15200, signal 237136/281191 (executing program) 2025/11/16 06:46:50 fetching corpus: 15250, signal 237287/281191 (executing program) 2025/11/16 06:46:51 fetching corpus: 15300, signal 237454/281191 (executing program) 2025/11/16 06:46:51 fetching corpus: 15350, signal 237621/281191 (executing program) 2025/11/16 06:46:51 fetching corpus: 15400, signal 237795/281191 (executing program) 2025/11/16 06:46:51 fetching corpus: 15450, signal 237946/281191 (executing program) 2025/11/16 06:46:51 fetching corpus: 15500, signal 238095/281191 (executing program) 2025/11/16 06:46:51 fetching corpus: 15550, signal 238246/281191 (executing program) 2025/11/16 06:46:51 fetching corpus: 15600, signal 238442/281191 (executing program) 2025/11/16 06:46:51 fetching corpus: 15650, signal 238659/281191 (executing program) 2025/11/16 06:46:51 fetching corpus: 15700, signal 238830/281191 (executing program) 2025/11/16 06:46:51 fetching corpus: 15750, signal 239006/281191 (executing program) 2025/11/16 06:46:51 fetching corpus: 15800, signal 239170/281191 (executing program) 2025/11/16 06:46:51 fetching corpus: 15850, signal 239289/281191 (executing program) 2025/11/16 06:46:51 fetching corpus: 15900, signal 239511/281191 (executing program) 2025/11/16 06:46:51 fetching corpus: 15950, signal 239673/281191 (executing program) 2025/11/16 06:46:51 fetching corpus: 16000, signal 239865/281191 (executing program) 2025/11/16 06:46:52 fetching corpus: 16050, signal 239996/281191 (executing program) 2025/11/16 06:46:52 fetching corpus: 16100, signal 240131/281191 (executing program) 2025/11/16 06:46:52 fetching corpus: 16150, signal 240278/281191 (executing program) 2025/11/16 06:46:52 fetching corpus: 16200, signal 240997/281191 (executing program) 2025/11/16 06:46:52 fetching corpus: 16250, signal 241163/281191 (executing program) 2025/11/16 06:46:52 fetching corpus: 16300, signal 241389/281191 (executing program) 2025/11/16 06:46:52 fetching corpus: 16346, signal 241553/281191 (executing program) 2025/11/16 06:46:52 fetching corpus: 16346, signal 241553/281191 (executing program) 2025/11/16 06:46:54 starting 8 fuzzer processes 06:46:54 executing program 0: lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0x1c, 0x0, 0x1, "c4d96f37d8e92bdf43eb1e95694cb065", "2526edabaa241e"}, 0x1c, 0x3) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@v1={0x1000000, [{0x5, 0x800}]}, 0xc, 0x1) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x42) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/188) lremovexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@random={'btrfs.', 'security.capability\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendfile(r3, r0, &(0x7f0000000400)=0x80000000, 0x78) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000440)='\x90k\xe2\xee@\x00', &(0x7f0000000480)='./file0\x00', r0) setxattr$security_ima(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500), &(0x7f0000000540)=@v1={0x2, "c14e48e71ed72db356c328"}, 0xc, 0x1) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=""/110, 0x6e}, {&(0x7f0000000600)=""/181, 0xb5}, {&(0x7f00000006c0)=""/253, 0xfd}, {&(0x7f00000007c0)=""/100, 0x64}], 0x4, &(0x7f0000000880)=""/47, 0x2f}, 0x40000120) renameat(r0, &(0x7f0000000900)='./file0\x00', r0, &(0x7f0000000940)='./file0/file0\x00') mount$9p_xen(&(0x7f0000000980), &(0x7f00000009c0)='./file0/file0\x00', &(0x7f0000000a00), 0x10, &(0x7f0000000a40)={'trans=xen,', {[{@privport}, {@uname={'uname', 0x3d, ']'}}, {@mmap}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@nodevmap}, {@access_user}, {@noextend}, {@cache_mmap}], [{@uid_gt={'uid>', r1}}, {@permit_directio}]}}) pwritev(r3, &(0x7f0000001d00)=[{&(0x7f0000000b00)="9fa4ee0438c6bf4571a913d4216aefde07793a53ae17fa0ffc8f621efd7e2147a860b2721a945a878970faf800882a97cc00ac13cd45c73bd94eba0db8ab9580e3133e5edc11d4a8a5", 0x49}, {&(0x7f0000000b80)="bbbac855979943c92cf56a30ee851012ce2365a445a3b55c9fbd1e626fa65259c557c2ff14e37a3717820698e0c6d51a3ce3d1ebeb1e8597e4bb8d944eda99a1e1562d4ac4f4c3a1de077494713693f6afdf4ab5e9452e0fa50b051bdb79023d5b6512be3d3a696430fdf7db6a4a7540651d3e2a3be7e1404fad004b810d", 0x7e}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="139843a0755d17b9f746efdc08ac242d57aa13e5c937674cdfd9a6b7816d99af5c3ea75112d3aa33f6dbb4be39f890bd5e44ccb4bb99d2ad5be6a81076a3667841e042496037fab9656f83cbe47282e7afe8d9841f7238ea7e374bd7898b38ae588c91216b5ddb314bc5ef3a41a2cf3e071cbaefe57986ae398c4f689ce526eee5c2944df871d7a8692e6ba2f6a7dbc974c93f3437c92cc07138c7e248ac778ffc95114bb33e1a1baa0d51489578eba5f26787de82e785452065942b8fd9aeee1ad6a1963dca353bbc7733af1f7b5ce1bb56dc52e208270f7bb7f13b7d61962241fc30", 0xe3}], 0x4, 0x8, 0xffffffff) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000001d40)={0x0, 0x0, 0x6, 0xfffffff8, 0xc, "0f0aa471033b471dce057c3a58b1d3ea36e65c", 0x4, 0x2f98}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001d80)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'}) ioctl$TIOCCONS(r4, 0x541d) recvmmsg(r4, &(0x7f0000006440)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001dc0)=""/16, 0x10}, {&(0x7f0000001e00)=""/176, 0xb0}, {&(0x7f0000001ec0)=""/41, 0x29}], 0x3}, 0x7fffffff}, {{&(0x7f0000001f40)=@tipc=@id, 0x80, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/91, 0x5b}, {&(0x7f0000002040)=""/135, 0x87}], 0x2, &(0x7f0000002140)=""/129, 0x81}, 0x1}, {{&(0x7f0000002200)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002280)=""/93, 0x5d}, {&(0x7f0000002300)=""/125, 0x7d}], 0x2}, 0x7}, {{&(0x7f00000023c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000002440)=""/90, 0x5a}, {&(0x7f00000024c0)=""/181, 0xb5}, {&(0x7f0000002580)=""/242, 0xf2}, {&(0x7f0000002680)=""/203, 0xcb}, {&(0x7f0000002780)=""/111, 0x6f}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/217, 0xd9}, {&(0x7f0000003900)=""/148, 0x94}], 0x8, &(0x7f0000003a40)=""/7, 0x7}}, {{&(0x7f0000003a80)=@x25={0x9, @remote}, 0x80, &(0x7f00000060c0)=[{&(0x7f0000003b00)=""/86, 0x56}, {&(0x7f0000003b80)=""/210, 0xd2}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/19, 0x13}, {&(0x7f0000004cc0)=""/207, 0xcf}, {&(0x7f0000004dc0)=""/228, 0xe4}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000005ec0)=""/124, 0x7c}, {&(0x7f0000005f40)=""/137, 0x89}, {&(0x7f0000006000)=""/175, 0xaf}], 0xa, &(0x7f0000006180)=""/89, 0x59}, 0x1}, {{&(0x7f0000006200)=@caif=@rfm, 0x80, &(0x7f0000006380)=[{&(0x7f0000006280)=""/228, 0xe4}], 0x1, &(0x7f00000063c0)=""/127, 0x7f}, 0x80000000}], 0x6, 0x10000, &(0x7f00000065c0)={0x77359400}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000006600)={{{@in=@private=0xa010100, @in=@multicast1, 0x4e24, 0x9, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x33, 0x0, r1}, {0x56, 0x9, 0x0, 0x4, 0x40, 0x7, 0x1000, 0x4}, {0x7, 0x1ff, 0x7b6, 0x5}, 0x6, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x34}, 0x4d6, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x0, 0x2, 0x0, 0x8, 0xe5, 0x7ff}}, 0xe8) lsetxattr$security_ima(&(0x7f0000006700)='./file0\x00', &(0x7f0000006740), &(0x7f0000006780)=@sha1={0x1, "f49838233a591299e4c12dad63e44a779f122a74"}, 0x15, 0x2) 06:46:54 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, &(0x7f0000000000)="dfe791dbb1390e6ee6471cf3462eb3bb9abddce394d1582fe62d1b1f990a858c987eace7d1e77834c262d630fcba7a82e1829860b6b5bb01a77d6cf00c1ac30758dcb2fcb4bdb1923e090926038459aeac7b6c8b3d0271f4c13375b1912855ff6105b7ef39f90ff881a253e43eddb80184663aac749179cf1127b4563500078e80602af083d58d819eb41d449bc33a67c71d2fc421d759f8a69962728a4a52daf77139f558f26acf7a88209f9ef0b6b8f263455cbd2f760f7fecfe03544d8c651b6425d552691c68d133da089213ce41e0452c1034bfffbe9958", 0xda, 0x9, 0x0, 0x2, r0}]) r1 = dup2(r0, r0) r2 = io_uring_setup(0x78a4, &(0x7f0000000240)={0x0, 0x94d9, 0x4, 0x0, 0x21a, 0x0, r0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x80080, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@cache_mmap}, {@debug={'debug', 0x3d, 0xffffffff00000000}}], [{@smackfsroot={'smackfsroot', 0x3d, '\\}[\'(.{{-{:/'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\\*^\'@&('}}]}}) r3 = io_uring_setup(0x388a, &(0x7f0000000380)={0x0, 0x4ba9, 0xa, 0x0, 0x1ad, 0x0, r1}) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0xfffb, r3, &(0x7f0000000400)="fc2a5b3b534d58c73d1fea46ac310fa9eb0bf655cfaecf8532a054357802fa7af8046628d1dabc7c307c455d4cf779d7d4544baf817ff3e6a996c94fd9006bfe94f9f4c2ae76ce72c87fe6d7bd1421431a97e9703158ff6d04a7892d38db14b9", 0x60, 0x3b}]) syz_open_procfs(0x0, &(0x7f0000000500)='net/rfcomm\x00') vmsplice(r1, &(0x7f0000000a40)=[{&(0x7f0000000540)="d2628c04382f249d8aaa8dc43153fb78fe40b084b31f0d1a0d6381ed5432ed5fdc3737a5342ba4bf49e85d8924d8ac52ee1824bd0de770c47d97d5a8f54f11251e0c487e38a8d9a91067f57d2c61737509db6a8a119a9b698ed1936c20065c83246cf50b48f1575fe97cb4a7b08b5085d14e525e931a3844eb97e76933430a9af3a0aac1ffece75a80c2f89484f95e9de685a5284f387714433817018a310caa95468567c1e878fd1265ef127a66f708ba755e40d7e0555197c769604b", 0xbd}, {&(0x7f0000000600)="ddc350c0d32cd6a7fe0fd8bf04570918b661a055ee6b7b489845c0f7e3a6a067b50260050b899fd03d6e3c06c46b85ff798a45436e43817681cd20bf6cc846ae6576c1489ac489bb214e363e9620562c3639c8e4c02f3e93d4c7d148", 0x5c}, {&(0x7f0000000680)="526b91fad3e068776e2dd6d8e7427208de26ac52c1", 0x15}, {&(0x7f00000006c0)="38053cbce15ac7bf1e355451a9a1fd9f9436f9d0d8d7bfdb45ff67aabac6f19eb1dea4b31b5e85c6a9a001f60beb43d61673476363834fe6da4047bf9f18a7848a0171fa0fe6126d4ee686035d1c5be31268024e2e72335f9288c32cd72d1dbe4dde092d2692477112b171363b0cc98d4f99b7d77a0a29179ce89e090f83745e6338ea0553aea90245538b88184e2b4818ac7e5cf84da1638ccc37fc1f78698bc14699ec39bb2fb3446b04b968930e56c1f5ca556ae3ee9cf63663d1e637abddd5493f69b6ffc9d2add1", 0xca}, {&(0x7f00000007c0)="74eb88dec37947f893c013f630e469a8f1318ed99522b935d3901419dbac073aac40161550e8e81562c0908683c49067d888f2a5a609eb92288cae5103fc682aa0f0eace573a60b4e6abf600e9f496691517c909f2b7e3ef23217caea88b6be3e9eb8f295b6c69e56e59fdc5ea5186aa2af95de37af435b89670aec31277ecf4cbbd67ce735efa1fe893645b670b4411458d2060aa3daa437e84597d9ed041647f06c6ceb4d487598705bd7aed1bfb47d5a7331c212c23f88066ac3c08deaa5201da", 0xc2}, {&(0x7f00000008c0)="ed91b5deff2ed393a5ea1c32866f34af93e8903c573b562c76f8fb0b60c40b843e2d71321acc99ca112d09a00b229af90ccbdf9bf099323cbcca92cfafa8f03a3852e31df6d28c232f931ea3ca3d1fa52cd99203421cf0b980a53dd4c8d88ce86de1bd8cdca8cb7a7b02f5a62788af5b11e0cbbb02274688e4c99bf077592f13e210b0fead8c27db4940d66d21676c9c78f9cc7c2c595b77ab3c302e9fd3eb5728f6790f7a4eb3e7706f2b13287e63f02db4928c84ab6956e5256713a2688bba52dc782b9f4fd56f6439e8b995f56d0a2f4055e6a7b29ab0b8b5e60ee52156", 0xdf}, {&(0x7f00000009c0)="82025ac958e5488b07561eb8a57368efe5df4eaf5e", 0x15}, {&(0x7f0000000a00)="e78bacbea6648590a6476740ec83c87ec2fa8565d6b9dafc78c84c4e155a970207771599d736", 0x26}], 0x8, 0xe) getpeername$packet(r1, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b40)=0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40008000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)=@updpolicy={0xe0, 0x19, 0x100, 0x70bd28, 0x25dfdbff, {{@in=@rand_addr=0x64010100, @in6=@mcast2, 0x4e21, 0x800, 0x4e20, 0x8, 0x8, 0x40, 0x20, 0x1d, r4}, {0x8000, 0xfffffffffffffe01, 0x4, 0xdd58, 0xf5d, 0x1000, 0x2, 0x20}, {0x40, 0x7fff, 0x6, 0x52}, 0x7, 0x6e6bb9, 0x2, 0x1, 0x0, 0x2}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7f}, @coaddr={0x14, 0xe, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}, @mark={0xc, 0x15, {0x35075c, 0x100}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000d00)=0x80000001, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000d80)={0x5, &(0x7f0000000d40)=[{0x100, 0x4, 0x4, 0x4}, {0x8, 0x32, 0x4, 0xff}, {0xfff8, 0x9, 0x1, 0x80f1}, {0x0, 0x40, 0x4, 0x2}, {0x8, 0x7f, 0x7, 0x20}]}) r6 = inotify_init1(0x800) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000dc0)=[r2, r5, r6, r1], 0x4) r7 = syz_open_dev$hidraw(&(0x7f0000000e00), 0x3, 0x8000) r8 = signalfd4(r7, &(0x7f0000000e40)={[0xaa]}, 0x8, 0x80800) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fadvise64(r9, 0xffffffff00000001, 0x5, 0x3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xc4, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1b6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ab}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}]]}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x40801) 06:46:54 executing program 4: ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x46) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x800, 0x181000) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2b}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff, r3, r4, r5], 0x9) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BLKFRASET(r6, 0x1264, &(0x7f0000000200)=0x5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x1, 0x6, 0x9, 0x0, 0x1}}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000280)={0x9000000c}) faccessat2(r4, &(0x7f00000002c0)='./file0\x00', 0x198, 0x1100) creat(&(0x7f0000000300)='./file0\x00', 0x50) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)={{0x108, 0x7, 0x4, 0x36f, 0x3cd, 0x8001, 0x16, 0x48000}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1920) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r3, {0x4dab}}, './file0\x00'}) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000001cc0)) creat(&(0x7f0000001d00)='./file0\x00', 0x0) close(r0) [ 92.910013] audit: type=1400 audit(1763275614.177:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:46:54 executing program 5: timer_delete(0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{r0, r1+60000000}}, &(0x7f0000000080)) timer_delete(0x0) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x12, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_delete(r2) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x77359400}}, &(0x7f0000000180)) timer_create(0x6, &(0x7f0000000340)={0x0, 0xd, 0x2, @thr={&(0x7f00000001c0)="f1b5c41afe961d541dbd10549ea5dba87c902e6d7526aedab6cdcbcbbe9bdb92a7f262609e6dccba0c8ae85dc6159c76b79ed3a817b22da158778ed2d599c6d32e27b408ea21b883ff36df75cedb03a3ad0e58a5d42d08db20f991232ac5a86664e6044b34bd0599940ca4989278b3d6d5148c17fd101cae0cef33653f325a88c36734196474ff86cd2c47831aadf9fd1fdb1246097216d3ea90459ad51f69aff40de1deb65f5f56b9fe27ac2adce7aa76a9000c41f35834df08024954b7d940b3103fd05a23f0c4b6ecc2b3ae0715ed48aaf70d326a2e41", &(0x7f00000002c0)="d9d80c9d18594432c1f3e89fb3f14a02081ad940a8ff8e0985d684311fe934f294526c8d9e822fb197743007ddb7f0ac4baecfe5e9181b491096e6b9a8bff7e8579f48d21a676a334e85c37269b086ae8856ad44df7f845b26e95202778fe2480c042d04617138ed08d487eb819ceb2864479f52f0bcf72a"}}, &(0x7f0000000380)=0x0) timer_delete(r3) timer_delete(r3) timer_create(0x1, &(0x7f00000004c0)={0x0, 0x2d, 0x2, @thr={&(0x7f00000003c0)="dfc1cc8f0aecd623dd7588e10338d9cbd94305b71fee5678795f0973dade96d4d3f2088202c1e08c29fbeb89627b1dde5a98510b3a31a156ad9f7de878c14f133b22b146b25b1052c81756e85b49f4d79f33402200cf862a3c150f848688d38bf52cec094dff3678f575c3a40f40169bc54b6ae9cca750643318b0aec5ca85d99487fba7d8b98806a7b5507c33280132a47c3bda", &(0x7f0000000480)="23f41f82f96b203daa868fdffbb1e2a0fdb5ab83"}}, &(0x7f0000000500)=0x0) timer_delete(r4) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) nanosleep(&(0x7f0000000580)={r5, r6+60000000}, &(0x7f00000005c0)) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000640)={{r7, r8+60000000}, {0x0, 0x989680}}, 0x0) timer_delete(r4) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000043c0)=[{{&(0x7f0000000680), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000700)=""/3, 0x3}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/18, 0x12}, {&(0x7f0000000800)=""/68, 0x44}, {&(0x7f0000000880)=""/5, 0x5}, {&(0x7f00000008c0)=""/104, 0x68}], 0x6, &(0x7f00000009c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000a80)=""/214, 0xd6}, {&(0x7f0000000b80)=""/83, 0x53}], 0x2, &(0x7f0000000c40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000000d00), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/193, 0xc1}], 0x2, &(0x7f0000001ec0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001f00)=@abs, 0x6e, &(0x7f0000002180)=[{&(0x7f0000001f80)=""/193, 0xc1}, {&(0x7f0000002080)=""/45, 0x2d}, {&(0x7f00000020c0)=""/149, 0x95}], 0x3}}, {{&(0x7f00000021c0)=@abs, 0x6e, &(0x7f0000002680)=[{&(0x7f0000002240)=""/5, 0x5}, {&(0x7f0000002280)=""/155, 0x9b}, {&(0x7f0000002340)=""/192, 0xc0}, {&(0x7f0000002400)=""/86, 0x56}, {&(0x7f0000002480)=""/235, 0xeb}, {&(0x7f0000002580)=""/208, 0xd0}], 0x6, &(0x7f0000002700)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000002800)=@abs, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000002880)=""/102, 0x66}, {&(0x7f0000002900)=""/83, 0x53}, {&(0x7f0000002980)=""/247, 0xf7}, {&(0x7f0000002a80)=""/210, 0xd2}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/74, 0x4a}, {&(0x7f0000003c00)=""/47, 0x2f}], 0x7, &(0x7f0000003cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003d40)=@abs, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003dc0)=""/8, 0x8}, {&(0x7f0000003e00)=""/23, 0x17}], 0x2, &(0x7f0000003e80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000003f80), 0x6e, &(0x7f0000004040)=[{&(0x7f0000004000)=""/38, 0x26}], 0x1, &(0x7f0000004080)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000004100), 0x6e, &(0x7f0000004340)=[{&(0x7f0000004180)=""/144, 0x90}, {&(0x7f0000004240)=""/107, 0x6b}, {&(0x7f00000042c0)=""/51, 0x33}, {&(0x7f0000004300)}], 0x4, &(0x7f0000004380)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x9, 0x40000000, 0x0) r9 = fork() timer_create(0x2, &(0x7f0000004600)={0x0, 0x3c, 0xd4b275adae835b46, @tid=r9}, &(0x7f0000004640)) 06:46:54 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x37, 0x2, {0x2, 0x9, 0x32, r0, 0x6, '/)-{-%'}}, 0x24) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x38}}, 0x44800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000004c0)={0x0, "a2051fe159b3f1b0e3e2a4c68facf342"}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x4000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) close_range(r4, r3, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000001500)={0x7fff, 0x100000000, 0x8000, 0x2b, 0xff93, 0x3333}) close(r3) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001540)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}, @NL80211_ATTR_BANDS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 06:46:54 executing program 6: ioctl$CDROMSUBCHNL(0xffffffffffffffff, 0x530b, &(0x7f0000000000)={0x1, 0x94, 0x4, 0x2, 0x6, 0x6, @msf={0x7f, 0x5c, 0x7f}, @lba=0x4}) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000140)={"aeff4b0aa3ad2b46e7729b64", &(0x7f0000000040)="8d0fc040bf619d7e1d54c082ec84831a836516d8f9174c317579c8003f2e24a89787077c18d04bf556bdcc120cdf636e54d30201544d2b0bca20eceaa2100edc563490c1021be650f7fc47f4c294e4064cc760cbb1b3485ad23da8fac66a3dd471de18f5a3d4e8a0ab7faa6c6eb956bf3c149fa8", 0x74, 0x800, &(0x7f00000000c0)={0x68, 0x0, 0x2, 0x8, 0x0, 0x1, 0x0, "19729d61", 0x7, "d2d7040c", 0x20, 0x6, 0x0, "b218e7", "9cf38fa992fafd371fa30eda516a7163e37e45b90d32cda99bd86b38652da8fcd8b1282b9b00628e0844b1e390ce"}, 0x2, 0x1, 0x0, &(0x7f0000000100)}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x3f, 0x40, 0x62}) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000300)={"f1ad970b5821bd61b81e59a6", &(0x7f00000001c0)="501c097ae3ce2cba8573134228c3097aaea786bc2765c8fbbdf167646c72e4cffff9614d00390c2f6cb1ce29253f2aace4d8223d90863ac1347e5ef8d0b90126bd6f9527eef375cc18f83331315c2106f6367941a76eb87f13f34e35e712b11f942dd4aea060786e7645bdd6a8748b7bcba821ae1a203cc6d274382d7ea54c4374e95d101aba15fa0e8e19369fccdc8ddeae312a74d763361918d1cb9ba822a584fa80b0d737521f0dd465240d9fa05e87c1eb120aaea49f704f0c0ec6", 0xbd, 0x0, &(0x7f0000000280)={0x1, 0x1, 0x4, 0x5, 0x0, 0x1, 0x0, "5f883a98", 0x40, "99dfbac0", 0x3c, 0x6, 0x20, "61f0b2", "862cf4498de79fd05ebb3019563bc6cbb142ec607a2403fad0e8d5641406609e93aa54e4803458d5d6db10fa4def"}, 0x3, 0x80000001, 0x7, &(0x7f00000002c0)}) ioctl$CDROMRESET(r0, 0x5312) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$CDROM_LOCKDOOR(r1, 0x5329, 0x1) ioctl$CDROM_DISC_STATUS(r0, 0x5327) ioctl$CDROMRESUME(r0, 0x5302) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) linkat(r2, &(0x7f00000003c0)='./file0\x00', r3, &(0x7f0000000400)='./file0\x00', 0x1000) write$binfmt_elf64(r2, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x2d, 0xff, 0x61, 0x40, 0x59, 0x3, 0x3, 0x8001, 0x282, 0x40, 0x5, 0x97a, 0x81, 0x38, 0x1, 0x7, 0x804, 0xffd7}, [{0x5, 0x2, 0x3, 0x81, 0xb92, 0x9, 0x2, 0x7}, {0x70000000, 0x0, 0xa56, 0x16, 0xcb3b, 0x4, 0x5, 0x82b}], "66770cea308064f72c6ded9069d8db9892c14d5e772dab3bc48bcce4d7ff9524f23dea12045deb40ba514df9519f58609d1dae36a2b586d67e8d4c01e20ab79f051625f7c4ec04d213a71702256c7f75d9ac5f1f088aff81b3aa15d848f0c608256beff0d5955854706b8ce686e71f", ['\x00', '\x00', '\x00']}, 0x41f) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$CDROM_SEND_PACKET(r4, 0x5393, &(0x7f0000000980)={"f2c7bfe7029f4ff62effa29e", &(0x7f00000008c0)="e535c81dc4d72702ffd3b21c617bde1ddc26066b2ebfc43d30aef742938c4511951275a5e771fa4b77eac60e04193860476d42398f96", 0x36, 0x5, &(0x7f0000000900)={0x73, 0x0, 0x20, 0x5, 0x0, 0x0, 0x0, "211d06b0", 0x8, "e29525d1", 0x1, 0x92, 0x7b, "472fa9", "0b8edbd6697a96b1727d8e4acf6fdfb1640b576bfacd4de45ff32b3a8d02cb4ca6e908b49d5d134a4a5d015266ec"}, 0x0, 0x4, 0x1, &(0x7f0000000940)}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000009c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000a40)={{r6}, 0x7637, 0xfffffffffffffffc, 0x100}) openat$dir(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x400040, 0x8de8814ecb876023) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000b00), &(0x7f0000000b40)='system_u:object_r:ppp_device_t:s0\x00', 0x22, 0x1) 06:46:54 executing program 3: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000000)) fadvise64(0xffffffffffffffff, 0xffff, 0x0, 0x3) r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xef60, 0x5, &(0x7f0000000340)=[{&(0x7f00000000c0)="1670cda160263794c936030a82e3733d583b9549f32dd5e073e0793aa928b2242c72282e2d5cb6d3f6f5acbc4ec59b41147936517a5ec94d51bf49361eb489406aed3ff0dfc77a1776b84bf4748588d40675da75e084e5cd75b3eb3356efe8a52b80dee3a8f51a8a04720e51612ed060f367e0def085524a3a3c1dddc8651a42e4170e8bd7bbc78807c2ce2782afd739cd0a8595d6eea8159bb8d10f42b5251f7866ef862e6b79eb250083d56af952c08640e5b44cf4d0a6635430179b1a1a29fcf043938d57fc721d9b13e9ff33a934e823560693530010b23a377065", 0xdd, 0x2}, {&(0x7f00000001c0)="4301090860da1ea22e53ad8ba4cbd2520857630d1579c8cf46da48430f09e359af78452ad059dae8427c1f329a64c3e3c2d08ff592c3141604836bed2ba2c7be63a4811015ac9843d6f8cf0630cfafc56c2a3502ace46261b06397fd", 0x5c, 0x355}, {&(0x7f0000000240)="30a2400bad5907233f35b052c5e67d1fc8b34643da54071a702a75127aa9a56e25007062cfbe17a5da2afad809383f5ee135dcef66e19b792d647555275ea60c7e", 0x41, 0x8000}, {&(0x7f00000002c0)="e0aeed9ce2b00bd0", 0x8, 0x5}, {&(0x7f0000000300)="570200844189c07259f04ff73c829f0f36f86d13be158ea03536d1b417c61553e50ced8197d7ba112d9d226666068adbb3cbbc6e", 0x34, 0x3}], 0x800, &(0x7f00000003c0)={[{@fat=@nfs}, {@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7}}, {@dots}], [{@measure}]}) io_cancel(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f0000000400)="1d46925f9dbd2cce669f5819b8a3221fa858360e84797af1b0fafdb53fb3fc1e9629026692d3b657cd7b2c309423e709d3c67d4e49b34ff157de3c853248f8156fa4a5a7cfe0d4ac170df7e4e5c69300ea04e8d9fd04607aad9f06268c83eaf02451453bf7cfe9c3c9d4c49f5be8e78f1c80294a97ba8032909d6463584bf2ee891ea8ce292286fb313fd40786b1ac002deb1a2ffa77", 0x96, 0x3f, 0x0, 0x2}, &(0x7f0000000500)) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x10000, &(0x7f00000005c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}, {@aname={'aname', 0x3d, '*{'}}], [{@smackfsroot={'smackfsroot', 0x3d, 'nodots'}}, {@measure}, {@pcr={'pcr', 0x3d, 0xf}}]}}) r1 = creat(&(0x7f0000000680)='./file0\x00', 0x3) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000006c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) copy_file_range(r1, &(0x7f0000000700)=0xfffffffffffffbff, r2, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000740)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000880)={&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000007c0)=""/129, 0x81}) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000900)={&(0x7f00000008c0)=[0x0, 0x0], 0x2, 0x9}) syz_read_part_table(0x8000, 0x1, &(0x7f0000000980)=[{&(0x7f0000000940)="49d3a97ab3d32fb446486f8390f8b59fd1aebb4afe3a88b7160283278db88670ebdd7a5231972dce03a7acd5585cc708d95b089a22617ec6f929b7", 0x3b, 0x7}]) r4 = pidfd_getfd(r1, r3, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x2cf0f) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000bc0)={0x2, &(0x7f0000000b80)=[{0x81, 0xe3, &(0x7f00000009c0)="00bb27569173681a75642c17970cc8978b7d91364b37751259bcf0cae8ce21ad0b6a9992bddec851e0f5983188e262301df6615d2e2827306a9099cf0c9cec0c13bd50093f51220a5cc062da8456bb90a7a07622788db536d752ce0e0744c9623160928f1f224085070df38f06a901bda759467c9ef1fadca04a69e8083ec4f4bad6734975655b14385997e1bb5b1c34047b0c88d26e9f82eee492274ad218cf0318a45e687c01b0c158a82f38f86a804638699bef44e44c65cc5b6e6ecffe54bd4caa58f4b040d080e1e01df4fe8b11de8e0f00eecbad40c9315f9ba540c5c3c4eb07", 0x1, 0x1}, {0x4, 0x8e, &(0x7f0000000ac0)="43101fc5620089895292100adbf09d4da1ca255dc4ac6778a54363f56dae4758061a451b9110e89f87b312c94c9c9e112e3d36792290425334214543a0ec55cea93c0cdbce0aef80dd9839469f6ac1ee5127c18356cbafbf9f61007f723221efa51e0434c616d4a49957fc41b73e49d4b36e3aaab195383b5900b687ebbda69bbfc94bf317d85f9ac558da84be17", 0x0, 0x1}]}) r5 = openat$incfs(r3, &(0x7f0000000c00)='.pending_reads\x00', 0x10042, 0xa2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001200)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000001300)=0xe8) sendmsg$inet6(r5, &(0x7f00000014c0)={&(0x7f0000000c40)={0xa, 0x4e22, 0x5, @mcast1, 0x668e}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000c80)="ff08630de9f2801441e1def238bb77b3bd83b9194f5ec59165cb6059de59f415c4adcb141d2a25c30034db6e375231fc1e91186390b2a9b8c160f1cb6ac49c8841a05415389793760d397f45778f", 0x4e}, {&(0x7f0000000d00)="7b4df0384dc9764f326222e03df38faf98b16adea951ddd1cee3961b096f5bd5e6a932423ea2ab7bfd4b4dc62a618c98cd1e9e6544", 0x35}, {&(0x7f0000000d40)="84926a44a038b772ef03304b6372ee494637916c4e3b7b00bc3164c4d843bbdb0affa5b0bc0a52280642ced734f727402e7da81345f8cef8cc4d3a3cb4dc0dd1731ab519f3f6931b1565a7f1ed0e3e954a138dcd17c5ec8af525c1bacd7364b336ad12659fe70e4d55dc54a4bc4fce06a0c11025615d7f767bfef4a7d7945151cf1281af858f42b8e810a1d2dead56888b56444e4cf3d04b9f3f14358462419dee9dcef9", 0xa4}, {&(0x7f0000000e00)="a7ecf89d2dec2d3e685e9d5770e71489a54ec911cd11f9e1225d5035b0b62a68e4af0f24138c55df21662e3085480f3dba53704b7b492c588550202dcf200724ee4a3ef230a16e3de5978b82f4e873ba2ac8f3cbe3466030ee8b1d10afc7b3eadf2ade297a55e1dfc56fa9f02ff107b15db653f99dfaaacbf5648b53237c37db03b3cffab0617755ea184179c840ff5e864a4b856ec489c5d17d3a58771d3479ac900694d9a776ca5ff8359d0be5a3b5327c15e519230ffee3b44e4753e4ec6a86e2f16679f8164818227157c3fbd722684d0b633f6162eb", 0xd8}, {&(0x7f0000000f00)="b428fec0f745ce5583b2be47ab3ddec2d60db207d49bc3ecf19c5223ed2ac43663ad7a740e71b69e7ce1fac17676229e06deb5e08fadb7c752bb9a603edf564379ade269ff82f0f4e3fec61c4c55b112f924a705297047bcf81793a196c1005866ebfcfbcdc1746cbfaa41db9123e5aaff87c436ccd2b95f5b1c55646e71c006c2d525e5924b432c837d8cfe2191e05687d54c4ff58b344016c00dccef1845b421808bcb3d2daaa68b476770fafd57866b90160be674b41eada4023f4923cdaf5c82389bd4442f7c8ec3117005c31cca0183d8aacc46cb2f6bd86bcb1a4ef163793d449d16a536ad61488c", 0xeb}, {&(0x7f0000001000)="1b45ba968f5fec27b846b63fbcb3f15218c72214ce4d0028aa1ce3983689a3190a78fef921ccb9c3930992388ecc181e5793dbca044622ea006bdddfaa90b9383d52047b", 0x44}, {&(0x7f0000001080)="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", 0xfe}], 0x7, &(0x7f0000001340)=[@dstopts_2292={{0x50, 0x29, 0x4, {0x2b, 0x6, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x7, 0xfffb, [0x2, 0x6, 0x1, 0x7993, 0x5]}}, @enc_lim={0x4, 0x1, 0x20}]}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x0, 0x6, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xfff}, @calipso={0x7, 0x10, {0x1, 0x2, 0x40, 0xffff, [0x61f1]}}, @generic={0x40}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @remote}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x67, 0x1, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @dontfrag={{0x14, 0x29, 0x3e, 0x81}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r6}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x3c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x178}, 0x0) 06:46:54 executing program 7: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x10800, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='smaps_rollup\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x20, 0x20, 0xfff, 0x1, {{0x23, 0x4, 0x1, 0x18, 0x8c, 0x65, 0x0, 0x0, 0x4, 0x0, @loopback, @local, {[@timestamp={0x44, 0x24, 0xb, 0x0, 0x1, [0x100, 0x7, 0x81, 0x8, 0x4, 0x9, 0x200, 0x8]}, @timestamp_addr={0x44, 0x54, 0x5e, 0x1, 0x7, [{@multicast2, 0x4}, {@multicast2, 0x9}, {@multicast1, 0x2}, {@rand_addr=0x64010102, 0x2}, {@multicast2, 0x7ff}, {@rand_addr=0x64010101, 0x9}, {@loopback, 0x6}, {@private=0xa010102, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x9, 0x2, 0x1, @local, @local, 0x8, 0x8000, 0x5, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x26, 0x1f, 0x1, 0x22, @empty, @empty, 0x80, 0x700, 0x7, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000001000)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000fc0)={&(0x7f00000007c0)={0x7e4, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9e, 0x80, 0xe3}, {0x100, 0x4, 0xfa, 0x5}, {0x5fe0, 0x16, 0x0, 0x2}, {0x5, 0x15, 0x6, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6f4}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xdd4ec19d}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x127e25c4}}}]}}, {{0x8}, {0x68, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x8, 0x0, 0x7}, {0x2, 0x1, 0x1f, 0x1ec4}, {0x5, 0x6, 0x3f, 0x6}, {0x20, 0xff, 0x81, 0x80}, {0x5, 0x6, 0x7, 0x9}, {0x81, 0x4, 0x2, 0x3}]}}}]}}, {{0x8, 0x1, r6}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff32ab}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7e73, 0x40, 0xad, 0x5ae}, {0xfff9, 0x8, 0x6, 0x9}, {0x6, 0x0, 0x1f, 0x4d9f}, {0x7, 0x1, 0xa0, 0x8}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xfffa, 0x3, 0xfc, 0x81}, {0x8, 0x8, 0x80, 0xffff}, {0x3, 0x1d, 0x7, 0x10001}, {0x67, 0x3f, 0x7, 0x7}, {0x0, 0x9, 0xfc, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7172}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x7e4}, 0x1, 0x0, 0x0, 0x14000904}, 0x400c4) r9 = syz_open_dev$vcsn(&(0x7f0000001040), 0x400, 0x100) ioctl$RNDZAPENTCNT(r9, 0x5204, &(0x7f0000001080)=0x91) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000001100)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000001140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc0189379, &(0x7f0000001180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f00000011c0)) r12 = syz_open_dev$ptys(0xc, 0x3, 0x0) io_submit(0x0, 0x1, &(0x7f00000012c0)=[&(0x7f0000001280)={0x0, 0x0, 0x0, 0x7, 0x101, r12, &(0x7f0000001200)="23e238e98e004fea6231d6589d836a1fd74aa7938bc5276ab4741ca715fae3181bbe4a464ab6b938148ad3f42f2db299ba98ce6940ce2aaecd25ca8df76fd53f6065c1fd2c6eb779d64858727b4b0438c4f2b33bb8b74f3f0aa8d9718012c30b088fd4c0d5803221c3093af74a3fe140b2ca9c6d23aeaca067539dfd", 0x7c, 0x6, 0x0, 0x3, r11}]) [ 94.029207] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.030537] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.032840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.041660] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.049574] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.070147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.072929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.078448] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.083837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.096062] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.109650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.114500] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.116744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.128252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.140483] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.182515] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.188626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.192616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.202694] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.206266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.229007] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.230286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.234875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.236263] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.242716] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.243487] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.245820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.247729] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.251709] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.265925] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.266725] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.268867] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.269708] ================================================================== [ 94.270247] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 94.270769] Read of size 2 at addr ffff88800e44f178 by task kworker/u11:4/299 [ 94.271334] [ 94.271476] CPU: 1 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 94.271492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 94.271501] Workqueue: hci7 hci_cmd_work [ 94.271517] Call Trace: [ 94.271522] [ 94.271527] dump_stack_lvl+0xca/0x120 [ 94.271544] print_report+0xcb/0x610 [ 94.271561] ? __virt_addr_valid+0x100/0x5d0 [ 94.271576] ? hci_cmd_work+0x66d/0x6d0 [ 94.271590] ? hci_cmd_work+0x66d/0x6d0 [ 94.271604] kasan_report+0xca/0x100 [ 94.271619] ? hci_cmd_work+0x66d/0x6d0 [ 94.271635] hci_cmd_work+0x66d/0x6d0 [ 94.271650] process_one_work+0x8e1/0x19c0 [ 94.271680] ? __pfx_process_one_work+0x10/0x10 [ 94.271696] ? move_linked_works+0x172/0x270 [ 94.271710] ? assign_work+0x196/0x240 [ 94.271726] worker_thread+0x67e/0xe90 [ 94.271742] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 94.271758] ? __pfx_worker_thread+0x10/0x10 [ 94.271774] kthread+0x3c8/0x740 [ 94.271789] ? __pfx_kthread+0x10/0x10 [ 94.271803] ? ret_from_fork+0x79/0x7a0 [ 94.271816] ? lock_release+0xc8/0x290 [ 94.271835] ? __pfx_kthread+0x10/0x10 [ 94.271850] ret_from_fork+0x67a/0x7a0 [ 94.271861] ? __pfx_ret_from_fork+0x10/0x10 [ 94.271873] ? __switch_to+0x759/0x1060 [ 94.271889] ? __pfx_kthread+0x10/0x10 [ 94.271904] ret_from_fork_asm+0x1a/0x30 [ 94.271924] [ 94.271928] [ 94.287481] Allocated by task 311: [ 94.287754] kasan_save_stack+0x24/0x50 [ 94.288051] kasan_save_track+0x14/0x30 [ 94.288349] __kasan_slab_alloc+0x59/0x70 [ 94.288660] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 94.289047] __alloc_skb+0x2ab/0x370 [ 94.289338] hci_cmd_sync_alloc+0x34/0x300 [ 94.289660] __hci_cmd_sync_sk+0xf7/0x5c0 [ 94.289973] hci_read_local_features_sync+0x2c/0x170 [ 94.290351] hci_dev_open_sync+0x145c/0x1f60 [ 94.290683] hci_power_on+0xdb/0x5d0 [ 94.290965] process_one_work+0x8e1/0x19c0 [ 94.291285] worker_thread+0x67e/0xe90 [ 94.291579] kthread+0x3c8/0x740 [ 94.291844] ret_from_fork+0x67a/0x7a0 [ 94.292138] ret_from_fork_asm+0x1a/0x30 [ 94.292444] [ 94.292575] Freed by task 313: [ 94.292814] kasan_save_stack+0x24/0x50 [ 94.293111] kasan_save_track+0x14/0x30 [ 94.293412] kasan_save_free_info+0x3a/0x60 [ 94.293739] __kasan_slab_free+0x43/0x70 [ 94.294046] kmem_cache_free+0x26f/0x500 [ 94.294353] kfree_skbmem+0x18a/0x1f0 [ 94.294641] sk_skb_reason_drop+0x10e/0x1b0 [ 94.294959] vhci_read+0x3d5/0x5d0 [ 94.295238] vfs_read+0x1eb/0xc70 [ 94.295501] ksys_read+0x121/0x240 [ 94.295779] do_syscall_64+0xbf/0x430 [ 94.296068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.296447] [ 94.296579] The buggy address belongs to the object at ffff88800e44f140 [ 94.296579] which belongs to the cache skbuff_head_cache of size 232 [ 94.297503] The buggy address is located 56 bytes inside of [ 94.297503] freed 232-byte region [ffff88800e44f140, ffff88800e44f228) [ 94.298408] [ 94.298548] The buggy address belongs to the physical page: [ 94.298990] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xe44f [ 94.299602] memcg:ffff88800b84a001 [ 94.299886] anon flags: 0x100000000000000(node=0|zone=1) [ 94.300311] page_type: f5(slab) [ 94.300582] raw: 0100000000000000 ffff8880096c78c0 ffffea0000346fc0 dead000000000003 [ 94.301183] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff88800b84a001 [ 94.301782] page dumped because: kasan: bad access detected [ 94.302223] [ 94.302360] Memory state around the buggy address: [ 94.302740] ffff88800e44f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.303306] ffff88800e44f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 94.303875] >ffff88800e44f100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 94.304437] ^ [ 94.304998] ffff88800e44f180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.305568] ffff88800e44f200: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 94.306128] ================================================================== [ 94.306780] Disabling lock debugging due to kernel taint [ 94.307259] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.310393] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.310968] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.317062] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.318059] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.349222] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.351186] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.358272] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 96.127425] Bluetooth: hci1: command tx timeout [ 96.127467] Bluetooth: hci0: command tx timeout [ 96.191500] Bluetooth: hci2: command tx timeout [ 96.256119] Bluetooth: hci3: command tx timeout [ 96.319379] Bluetooth: hci4: command tx timeout [ 96.447421] Bluetooth: hci7: command tx timeout [ 96.447581] Bluetooth: hci5: command tx timeout [ 96.448208] Bluetooth: hci6: command tx timeout [ 98.175960] Bluetooth: hci1: command tx timeout [ 98.176734] Bluetooth: hci0: command tx timeout [ 98.239405] Bluetooth: hci2: command tx timeout [ 98.305374] Bluetooth: hci3: command tx timeout [ 98.367438] Bluetooth: hci4: command tx timeout [ 98.495428] Bluetooth: hci5: command tx timeout [ 98.496487] Bluetooth: hci7: command tx timeout [ 98.497154] Bluetooth: hci6: command tx timeout [ 100.223414] Bluetooth: hci1: command tx timeout [ 100.223953] Bluetooth: hci0: command tx timeout [ 100.287641] Bluetooth: hci2: command tx timeout [ 100.351431] Bluetooth: hci3: command tx timeout [ 100.416375] Bluetooth: hci4: command tx timeout [ 100.543375] Bluetooth: hci6: command tx timeout [ 100.543829] Bluetooth: hci7: command tx timeout [ 100.544207] Bluetooth: hci5: command tx timeout [ 102.271366] Bluetooth: hci1: command tx timeout [ 102.271820] Bluetooth: hci0: command tx timeout [ 102.336364] Bluetooth: hci2: command tx timeout [ 102.399452] Bluetooth: hci3: command tx timeout [ 102.463411] Bluetooth: hci4: command tx timeout [ 102.591455] Bluetooth: hci5: command tx timeout [ 102.591896] Bluetooth: hci7: command tx timeout [ 102.592267] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 06:46:55 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff86a18f34 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffff88800a867988 RSP=ffff88800a8678c0 R8 =ffffffff86a18f38 R9 =0000000000000000 R10=000000000003ca6e R11=000000000000afc6 R12=ffff88800a867990 R13=ffff88800a867978 R14=ffff88800a867971 R15=ffff88800a867930 RIP=ffffffff8135f876 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555580f36400 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0bff88c820 CR3=000000000bd0f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000003f847ae147ae147b XMM02=00000000000000000000000000000000 XMM03=00000000000000003f6fa6a2ac7ebbfe XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=000000000000000a000000c000014016 XMM09=000000000000002a000000c000016000 XMM10=0000000000000009000000c000014040 XMM11=0000000000000007000000c000014049 XMM12=000000000000001c000000c000018000 XMM13=0000000000000041000000c00001a000 XMM14=000000000000000c000000c000014050 XMM15=000000000000000d000000c000014060 info registers vcpu 1 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8293dd05 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff888018e37618 R8 =0000000000000000 R9 =ffffed1001583046 R10=0000000000000072 R11=725f746e69727020 R12=0000000000000072 R13=0000000000000010 R14=ffffffff88974780 R15=ffffffff8293dcf0 RIP=ffffffff8293dd5d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3392f17620 CR3=000000001dea6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fc5d7c607c000007fc5d7c607c8 XMM02=00007fc5d7c607e000007fc5d7c607c0 XMM03=00007fc5d7c607c800007fc5d7c607c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000