Warning: Permanently added '[localhost]:51948' (ECDSA) to the list of known hosts. 2025/11/16 11:08:44 fuzzer started 2025/11/16 11:08:44 dialing manager at localhost:37161 syzkaller login: [ 49.140430] cgroup: Unknown subsys name 'net' [ 49.205916] cgroup: Unknown subsys name 'cpuset' [ 49.218735] cgroup: Unknown subsys name 'rlimit' 2025/11/16 11:08:53 syscalls: 2214 2025/11/16 11:08:53 code coverage: enabled 2025/11/16 11:08:53 comparison tracing: enabled 2025/11/16 11:08:53 extra coverage: enabled 2025/11/16 11:08:53 setuid sandbox: enabled 2025/11/16 11:08:53 namespace sandbox: enabled 2025/11/16 11:08:53 Android sandbox: enabled 2025/11/16 11:08:53 fault injection: enabled 2025/11/16 11:08:53 leak checking: enabled 2025/11/16 11:08:53 net packet injection: enabled 2025/11/16 11:08:53 net device setup: enabled 2025/11/16 11:08:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/16 11:08:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/16 11:08:53 USB emulation: enabled 2025/11/16 11:08:53 hci packet injection: enabled 2025/11/16 11:08:53 wifi device emulation: enabled 2025/11/16 11:08:53 802.15.4 emulation: enabled 2025/11/16 11:08:53 fetching corpus: 50, signal 29138/30954 (executing program) 2025/11/16 11:08:53 fetching corpus: 100, signal 40299/43762 (executing program) 2025/11/16 11:08:53 fetching corpus: 150, signal 48076/53068 (executing program) 2025/11/16 11:08:54 fetching corpus: 200, signal 55828/62284 (executing program) 2025/11/16 11:08:54 fetching corpus: 250, signal 60739/68630 (executing program) 2025/11/16 11:08:54 fetching corpus: 300, signal 64642/73937 (executing program) 2025/11/16 11:08:54 fetching corpus: 350, signal 68720/79363 (executing program) 2025/11/16 11:08:54 fetching corpus: 400, signal 71896/83853 (executing program) 2025/11/16 11:08:54 fetching corpus: 450, signal 75220/88460 (executing program) 2025/11/16 11:08:54 fetching corpus: 500, signal 77551/92114 (executing program) 2025/11/16 11:08:54 fetching corpus: 550, signal 80518/96292 (executing program) 2025/11/16 11:08:54 fetching corpus: 600, signal 85879/102611 (executing program) 2025/11/16 11:08:54 fetching corpus: 650, signal 88551/106409 (executing program) 2025/11/16 11:08:54 fetching corpus: 700, signal 90231/109322 (executing program) 2025/11/16 11:08:54 fetching corpus: 750, signal 92867/113079 (executing program) 2025/11/16 11:08:55 fetching corpus: 800, signal 95053/116331 (executing program) 2025/11/16 11:08:55 fetching corpus: 850, signal 97112/119487 (executing program) 2025/11/16 11:08:55 fetching corpus: 900, signal 99273/122708 (executing program) 2025/11/16 11:08:55 fetching corpus: 950, signal 100861/125379 (executing program) 2025/11/16 11:08:55 fetching corpus: 1000, signal 102211/127825 (executing program) 2025/11/16 11:08:55 fetching corpus: 1050, signal 104341/130955 (executing program) 2025/11/16 11:08:55 fetching corpus: 1100, signal 106892/134387 (executing program) 2025/11/16 11:08:55 fetching corpus: 1150, signal 108104/136589 (executing program) 2025/11/16 11:08:55 fetching corpus: 1200, signal 109913/139333 (executing program) 2025/11/16 11:08:55 fetching corpus: 1250, signal 111198/141606 (executing program) 2025/11/16 11:08:56 fetching corpus: 1300, signal 112563/143921 (executing program) 2025/11/16 11:08:56 fetching corpus: 1350, signal 113451/145868 (executing program) 2025/11/16 11:08:56 fetching corpus: 1400, signal 116800/149727 (executing program) 2025/11/16 11:08:56 fetching corpus: 1450, signal 118563/152338 (executing program) 2025/11/16 11:08:56 fetching corpus: 1500, signal 120425/154957 (executing program) 2025/11/16 11:08:56 fetching corpus: 1550, signal 121946/157319 (executing program) 2025/11/16 11:08:56 fetching corpus: 1600, signal 123232/159469 (executing program) 2025/11/16 11:08:56 fetching corpus: 1650, signal 124520/161602 (executing program) 2025/11/16 11:08:56 fetching corpus: 1700, signal 125607/163558 (executing program) 2025/11/16 11:08:56 fetching corpus: 1750, signal 126846/165633 (executing program) 2025/11/16 11:08:57 fetching corpus: 1800, signal 127838/167431 (executing program) 2025/11/16 11:08:57 fetching corpus: 1850, signal 129964/170068 (executing program) 2025/11/16 11:08:57 fetching corpus: 1900, signal 130791/171736 (executing program) 2025/11/16 11:08:57 fetching corpus: 1950, signal 132261/173878 (executing program) 2025/11/16 11:08:57 fetching corpus: 2000, signal 133456/175820 (executing program) 2025/11/16 11:08:57 fetching corpus: 2050, signal 134470/177599 (executing program) 2025/11/16 11:08:57 fetching corpus: 2100, signal 135231/179187 (executing program) 2025/11/16 11:08:57 fetching corpus: 2150, signal 136482/181089 (executing program) 2025/11/16 11:08:57 fetching corpus: 2200, signal 137613/182923 (executing program) 2025/11/16 11:08:57 fetching corpus: 2250, signal 139215/185042 (executing program) 2025/11/16 11:08:57 fetching corpus: 2300, signal 140002/186616 (executing program) 2025/11/16 11:08:58 fetching corpus: 2350, signal 141093/188361 (executing program) 2025/11/16 11:08:58 fetching corpus: 2400, signal 142272/190080 (executing program) 2025/11/16 11:08:58 fetching corpus: 2450, signal 143005/191560 (executing program) 2025/11/16 11:08:58 fetching corpus: 2500, signal 143865/193106 (executing program) 2025/11/16 11:08:58 fetching corpus: 2550, signal 144808/194725 (executing program) 2025/11/16 11:08:58 fetching corpus: 2600, signal 145722/196299 (executing program) 2025/11/16 11:08:58 fetching corpus: 2650, signal 146304/197712 (executing program) 2025/11/16 11:08:58 fetching corpus: 2700, signal 146850/199001 (executing program) 2025/11/16 11:08:58 fetching corpus: 2750, signal 147497/200363 (executing program) 2025/11/16 11:08:59 fetching corpus: 2800, signal 148408/201832 (executing program) 2025/11/16 11:08:59 fetching corpus: 2850, signal 149319/203299 (executing program) 2025/11/16 11:08:59 fetching corpus: 2900, signal 150141/204723 (executing program) 2025/11/16 11:08:59 fetching corpus: 2950, signal 151082/206248 (executing program) 2025/11/16 11:08:59 fetching corpus: 3000, signal 151950/207684 (executing program) 2025/11/16 11:08:59 fetching corpus: 3050, signal 152595/208950 (executing program) 2025/11/16 11:08:59 fetching corpus: 3100, signal 153328/210239 (executing program) 2025/11/16 11:08:59 fetching corpus: 3150, signal 153980/211490 (executing program) 2025/11/16 11:08:59 fetching corpus: 3200, signal 154738/212827 (executing program) 2025/11/16 11:09:00 fetching corpus: 3250, signal 155414/214128 (executing program) 2025/11/16 11:09:00 fetching corpus: 3300, signal 156030/215349 (executing program) 2025/11/16 11:09:00 fetching corpus: 3350, signal 157064/216804 (executing program) 2025/11/16 11:09:00 fetching corpus: 3400, signal 157563/217951 (executing program) 2025/11/16 11:09:00 fetching corpus: 3450, signal 158354/219203 (executing program) 2025/11/16 11:09:00 fetching corpus: 3500, signal 158927/220379 (executing program) 2025/11/16 11:09:00 fetching corpus: 3550, signal 159615/221612 (executing program) 2025/11/16 11:09:00 fetching corpus: 3600, signal 160129/222736 (executing program) 2025/11/16 11:09:00 fetching corpus: 3650, signal 160646/223857 (executing program) 2025/11/16 11:09:00 fetching corpus: 3700, signal 161260/225003 (executing program) 2025/11/16 11:09:01 fetching corpus: 3750, signal 161757/226074 (executing program) 2025/11/16 11:09:01 fetching corpus: 3800, signal 162868/227454 (executing program) 2025/11/16 11:09:01 fetching corpus: 3850, signal 164086/228843 (executing program) 2025/11/16 11:09:01 fetching corpus: 3900, signal 164696/229938 (executing program) 2025/11/16 11:09:01 fetching corpus: 3950, signal 165162/231003 (executing program) 2025/11/16 11:09:01 fetching corpus: 4000, signal 165834/232135 (executing program) 2025/11/16 11:09:01 fetching corpus: 4050, signal 166489/233256 (executing program) 2025/11/16 11:09:01 fetching corpus: 4100, signal 166915/234252 (executing program) 2025/11/16 11:09:01 fetching corpus: 4150, signal 167365/235277 (executing program) 2025/11/16 11:09:01 fetching corpus: 4200, signal 168034/236378 (executing program) 2025/11/16 11:09:02 fetching corpus: 4250, signal 168414/237324 (executing program) 2025/11/16 11:09:02 fetching corpus: 4300, signal 169114/238425 (executing program) 2025/11/16 11:09:02 fetching corpus: 4350, signal 169626/239441 (executing program) 2025/11/16 11:09:02 fetching corpus: 4400, signal 170352/240512 (executing program) 2025/11/16 11:09:02 fetching corpus: 4450, signal 170774/241491 (executing program) 2025/11/16 11:09:02 fetching corpus: 4500, signal 171197/242427 (executing program) 2025/11/16 11:09:02 fetching corpus: 4550, signal 171758/243406 (executing program) 2025/11/16 11:09:02 fetching corpus: 4600, signal 172242/244362 (executing program) 2025/11/16 11:09:02 fetching corpus: 4650, signal 172674/245315 (executing program) 2025/11/16 11:09:02 fetching corpus: 4700, signal 173182/246265 (executing program) 2025/11/16 11:09:02 fetching corpus: 4750, signal 173781/247249 (executing program) 2025/11/16 11:09:03 fetching corpus: 4800, signal 174323/248180 (executing program) 2025/11/16 11:09:03 fetching corpus: 4850, signal 174737/249082 (executing program) 2025/11/16 11:09:03 fetching corpus: 4900, signal 175126/249948 (executing program) 2025/11/16 11:09:03 fetching corpus: 4950, signal 175584/250848 (executing program) 2025/11/16 11:09:03 fetching corpus: 5000, signal 176074/251719 (executing program) 2025/11/16 11:09:03 fetching corpus: 5050, signal 176602/252652 (executing program) 2025/11/16 11:09:03 fetching corpus: 5100, signal 176997/253521 (executing program) 2025/11/16 11:09:03 fetching corpus: 5150, signal 177386/254379 (executing program) 2025/11/16 11:09:03 fetching corpus: 5200, signal 178240/255378 (executing program) 2025/11/16 11:09:03 fetching corpus: 5250, signal 178713/256229 (executing program) 2025/11/16 11:09:03 fetching corpus: 5300, signal 179099/257074 (executing program) 2025/11/16 11:09:04 fetching corpus: 5350, signal 179526/257908 (executing program) 2025/11/16 11:09:04 fetching corpus: 5400, signal 179888/258695 (executing program) 2025/11/16 11:09:04 fetching corpus: 5450, signal 180388/259548 (executing program) 2025/11/16 11:09:04 fetching corpus: 5500, signal 181034/260430 (executing program) 2025/11/16 11:09:04 fetching corpus: 5550, signal 181628/261278 (executing program) 2025/11/16 11:09:04 fetching corpus: 5600, signal 182157/262075 (executing program) 2025/11/16 11:09:04 fetching corpus: 5650, signal 182606/262923 (executing program) 2025/11/16 11:09:04 fetching corpus: 5700, signal 182987/263752 (executing program) 2025/11/16 11:09:04 fetching corpus: 5750, signal 183325/264513 (executing program) 2025/11/16 11:09:04 fetching corpus: 5800, signal 183607/265345 (executing program) 2025/11/16 11:09:04 fetching corpus: 5850, signal 184133/266123 (executing program) 2025/11/16 11:09:05 fetching corpus: 5900, signal 184778/266905 (executing program) 2025/11/16 11:09:05 fetching corpus: 5950, signal 185251/267666 (executing program) 2025/11/16 11:09:05 fetching corpus: 6000, signal 185654/268437 (executing program) 2025/11/16 11:09:05 fetching corpus: 6050, signal 186104/269181 (executing program) 2025/11/16 11:09:05 fetching corpus: 6100, signal 186399/269916 (executing program) 2025/11/16 11:09:05 fetching corpus: 6150, signal 186800/270641 (executing program) 2025/11/16 11:09:05 fetching corpus: 6200, signal 187287/271348 (executing program) 2025/11/16 11:09:05 fetching corpus: 6250, signal 187620/272057 (executing program) 2025/11/16 11:09:05 fetching corpus: 6300, signal 188026/272758 (executing program) 2025/11/16 11:09:05 fetching corpus: 6350, signal 188472/273481 (executing program) 2025/11/16 11:09:06 fetching corpus: 6400, signal 188899/274219 (executing program) 2025/11/16 11:09:06 fetching corpus: 6450, signal 189198/274877 (executing program) 2025/11/16 11:09:06 fetching corpus: 6500, signal 189484/275519 (executing program) 2025/11/16 11:09:06 fetching corpus: 6550, signal 190185/276286 (executing program) 2025/11/16 11:09:06 fetching corpus: 6600, signal 190530/276953 (executing program) 2025/11/16 11:09:06 fetching corpus: 6650, signal 190824/277619 (executing program) 2025/11/16 11:09:06 fetching corpus: 6700, signal 191266/278305 (executing program) 2025/11/16 11:09:06 fetching corpus: 6750, signal 191851/278976 (executing program) 2025/11/16 11:09:06 fetching corpus: 6800, signal 192303/279634 (executing program) 2025/11/16 11:09:06 fetching corpus: 6850, signal 192593/280294 (executing program) 2025/11/16 11:09:06 fetching corpus: 6900, signal 192990/280968 (executing program) 2025/11/16 11:09:07 fetching corpus: 6950, signal 193278/281598 (executing program) 2025/11/16 11:09:07 fetching corpus: 7000, signal 193590/282223 (executing program) 2025/11/16 11:09:07 fetching corpus: 7050, signal 193954/282822 (executing program) 2025/11/16 11:09:07 fetching corpus: 7100, signal 194315/283181 (executing program) 2025/11/16 11:09:07 fetching corpus: 7150, signal 194602/283186 (executing program) 2025/11/16 11:09:07 fetching corpus: 7200, signal 194958/283186 (executing program) 2025/11/16 11:09:07 fetching corpus: 7250, signal 195304/283186 (executing program) 2025/11/16 11:09:07 fetching corpus: 7300, signal 195677/283186 (executing program) 2025/11/16 11:09:07 fetching corpus: 7350, signal 195990/283186 (executing program) 2025/11/16 11:09:07 fetching corpus: 7400, signal 196452/283186 (executing program) 2025/11/16 11:09:07 fetching corpus: 7450, signal 196693/283186 (executing program) 2025/11/16 11:09:08 fetching corpus: 7500, signal 197015/283186 (executing program) 2025/11/16 11:09:08 fetching corpus: 7550, signal 197360/283186 (executing program) 2025/11/16 11:09:08 fetching corpus: 7600, signal 197680/283186 (executing program) 2025/11/16 11:09:08 fetching corpus: 7650, signal 198738/283186 (executing program) 2025/11/16 11:09:08 fetching corpus: 7700, signal 199162/283186 (executing program) 2025/11/16 11:09:08 fetching corpus: 7750, signal 199693/283186 (executing program) 2025/11/16 11:09:08 fetching corpus: 7800, signal 200083/283186 (executing program) 2025/11/16 11:09:08 fetching corpus: 7850, signal 200467/283186 (executing program) 2025/11/16 11:09:08 fetching corpus: 7900, signal 200806/283186 (executing program) 2025/11/16 11:09:08 fetching corpus: 7950, signal 201169/283189 (executing program) 2025/11/16 11:09:08 fetching corpus: 8000, signal 201409/283189 (executing program) 2025/11/16 11:09:09 fetching corpus: 8050, signal 201657/283189 (executing program) 2025/11/16 11:09:09 fetching corpus: 8100, signal 202304/283189 (executing program) 2025/11/16 11:09:09 fetching corpus: 8150, signal 203126/283189 (executing program) 2025/11/16 11:09:09 fetching corpus: 8200, signal 203429/283189 (executing program) 2025/11/16 11:09:09 fetching corpus: 8250, signal 203670/283189 (executing program) 2025/11/16 11:09:09 fetching corpus: 8300, signal 203891/283189 (executing program) 2025/11/16 11:09:09 fetching corpus: 8350, signal 204122/283189 (executing program) 2025/11/16 11:09:09 fetching corpus: 8400, signal 204954/283189 (executing program) 2025/11/16 11:09:09 fetching corpus: 8450, signal 205341/283189 (executing program) 2025/11/16 11:09:09 fetching corpus: 8500, signal 205901/283189 (executing program) 2025/11/16 11:09:10 fetching corpus: 8550, signal 206273/283189 (executing program) 2025/11/16 11:09:10 fetching corpus: 8600, signal 206528/283189 (executing program) 2025/11/16 11:09:10 fetching corpus: 8650, signal 206781/283189 (executing program) 2025/11/16 11:09:10 fetching corpus: 8700, signal 207056/283189 (executing program) 2025/11/16 11:09:10 fetching corpus: 8750, signal 207349/283189 (executing program) 2025/11/16 11:09:10 fetching corpus: 8800, signal 207882/283189 (executing program) 2025/11/16 11:09:10 fetching corpus: 8850, signal 208114/283189 (executing program) 2025/11/16 11:09:10 fetching corpus: 8900, signal 208407/283189 (executing program) 2025/11/16 11:09:10 fetching corpus: 8950, signal 208687/283189 (executing program) 2025/11/16 11:09:10 fetching corpus: 9000, signal 208980/283189 (executing program) 2025/11/16 11:09:10 fetching corpus: 9050, signal 209313/283189 (executing program) 2025/11/16 11:09:11 fetching corpus: 9100, signal 209482/283190 (executing program) 2025/11/16 11:09:11 fetching corpus: 9150, signal 209849/283190 (executing program) 2025/11/16 11:09:11 fetching corpus: 9200, signal 210090/283190 (executing program) 2025/11/16 11:09:11 fetching corpus: 9250, signal 210260/283190 (executing program) 2025/11/16 11:09:11 fetching corpus: 9300, signal 210497/283190 (executing program) 2025/11/16 11:09:11 fetching corpus: 9350, signal 210782/283190 (executing program) 2025/11/16 11:09:11 fetching corpus: 9400, signal 211046/283190 (executing program) 2025/11/16 11:09:11 fetching corpus: 9450, signal 211327/283190 (executing program) 2025/11/16 11:09:11 fetching corpus: 9500, signal 211680/283190 (executing program) 2025/11/16 11:09:11 fetching corpus: 9550, signal 211991/283190 (executing program) 2025/11/16 11:09:11 fetching corpus: 9600, signal 212241/283190 (executing program) 2025/11/16 11:09:11 fetching corpus: 9650, signal 212449/283190 (executing program) 2025/11/16 11:09:12 fetching corpus: 9700, signal 212832/283190 (executing program) 2025/11/16 11:09:12 fetching corpus: 9750, signal 213056/283190 (executing program) 2025/11/16 11:09:12 fetching corpus: 9800, signal 213357/283190 (executing program) 2025/11/16 11:09:12 fetching corpus: 9850, signal 213620/283190 (executing program) 2025/11/16 11:09:12 fetching corpus: 9900, signal 213851/283190 (executing program) 2025/11/16 11:09:12 fetching corpus: 9950, signal 214073/283190 (executing program) 2025/11/16 11:09:12 fetching corpus: 10000, signal 214362/283190 (executing program) 2025/11/16 11:09:12 fetching corpus: 10050, signal 214781/283190 (executing program) 2025/11/16 11:09:12 fetching corpus: 10100, signal 215064/283190 (executing program) 2025/11/16 11:09:12 fetching corpus: 10150, signal 215258/283190 (executing program) 2025/11/16 11:09:12 fetching corpus: 10200, signal 215481/283190 (executing program) 2025/11/16 11:09:13 fetching corpus: 10250, signal 215804/283190 (executing program) 2025/11/16 11:09:13 fetching corpus: 10300, signal 216014/283190 (executing program) 2025/11/16 11:09:13 fetching corpus: 10350, signal 216285/283190 (executing program) 2025/11/16 11:09:13 fetching corpus: 10400, signal 216485/283190 (executing program) 2025/11/16 11:09:13 fetching corpus: 10450, signal 216653/283190 (executing program) 2025/11/16 11:09:13 fetching corpus: 10500, signal 216922/283190 (executing program) 2025/11/16 11:09:13 fetching corpus: 10550, signal 217239/283190 (executing program) 2025/11/16 11:09:13 fetching corpus: 10600, signal 217526/283190 (executing program) 2025/11/16 11:09:13 fetching corpus: 10650, signal 217769/283190 (executing program) 2025/11/16 11:09:13 fetching corpus: 10700, signal 218001/283190 (executing program) 2025/11/16 11:09:14 fetching corpus: 10750, signal 218438/283190 (executing program) 2025/11/16 11:09:14 fetching corpus: 10800, signal 218743/283190 (executing program) 2025/11/16 11:09:14 fetching corpus: 10850, signal 219011/283190 (executing program) 2025/11/16 11:09:14 fetching corpus: 10900, signal 219185/283191 (executing program) 2025/11/16 11:09:14 fetching corpus: 10950, signal 219347/283191 (executing program) 2025/11/16 11:09:14 fetching corpus: 11000, signal 219574/283191 (executing program) 2025/11/16 11:09:14 fetching corpus: 11050, signal 219837/283191 (executing program) 2025/11/16 11:09:14 fetching corpus: 11100, signal 220042/283191 (executing program) 2025/11/16 11:09:14 fetching corpus: 11150, signal 220316/283191 (executing program) 2025/11/16 11:09:14 fetching corpus: 11200, signal 220517/283192 (executing program) 2025/11/16 11:09:14 fetching corpus: 11250, signal 220728/283203 (executing program) 2025/11/16 11:09:15 fetching corpus: 11300, signal 220960/283203 (executing program) 2025/11/16 11:09:15 fetching corpus: 11350, signal 221195/283203 (executing program) 2025/11/16 11:09:15 fetching corpus: 11400, signal 221469/283203 (executing program) 2025/11/16 11:09:15 fetching corpus: 11450, signal 221707/283203 (executing program) 2025/11/16 11:09:15 fetching corpus: 11500, signal 221943/283203 (executing program) 2025/11/16 11:09:15 fetching corpus: 11550, signal 222129/283203 (executing program) 2025/11/16 11:09:15 fetching corpus: 11600, signal 222344/283203 (executing program) 2025/11/16 11:09:15 fetching corpus: 11650, signal 222626/283203 (executing program) 2025/11/16 11:09:15 fetching corpus: 11700, signal 222833/283203 (executing program) 2025/11/16 11:09:15 fetching corpus: 11750, signal 223066/283203 (executing program) 2025/11/16 11:09:15 fetching corpus: 11800, signal 223282/283203 (executing program) 2025/11/16 11:09:16 fetching corpus: 11850, signal 223494/283203 (executing program) 2025/11/16 11:09:16 fetching corpus: 11900, signal 223761/283203 (executing program) 2025/11/16 11:09:16 fetching corpus: 11950, signal 224118/283203 (executing program) 2025/11/16 11:09:16 fetching corpus: 12000, signal 224493/283203 (executing program) 2025/11/16 11:09:16 fetching corpus: 12050, signal 224761/283203 (executing program) 2025/11/16 11:09:16 fetching corpus: 12100, signal 224969/283203 (executing program) 2025/11/16 11:09:16 fetching corpus: 12150, signal 225149/283203 (executing program) 2025/11/16 11:09:16 fetching corpus: 12200, signal 225377/283203 (executing program) 2025/11/16 11:09:16 fetching corpus: 12250, signal 225599/283203 (executing program) 2025/11/16 11:09:16 fetching corpus: 12300, signal 225789/283205 (executing program) 2025/11/16 11:09:17 fetching corpus: 12350, signal 226018/283205 (executing program) 2025/11/16 11:09:17 fetching corpus: 12400, signal 226202/283205 (executing program) 2025/11/16 11:09:17 fetching corpus: 12450, signal 226403/283205 (executing program) 2025/11/16 11:09:17 fetching corpus: 12500, signal 226633/283205 (executing program) 2025/11/16 11:09:17 fetching corpus: 12550, signal 226925/283205 (executing program) 2025/11/16 11:09:17 fetching corpus: 12600, signal 227214/283205 (executing program) 2025/11/16 11:09:17 fetching corpus: 12650, signal 227401/283205 (executing program) 2025/11/16 11:09:17 fetching corpus: 12700, signal 227611/283205 (executing program) 2025/11/16 11:09:17 fetching corpus: 12750, signal 227813/283205 (executing program) 2025/11/16 11:09:17 fetching corpus: 12800, signal 228048/283205 (executing program) 2025/11/16 11:09:18 fetching corpus: 12850, signal 228246/283205 (executing program) 2025/11/16 11:09:18 fetching corpus: 12900, signal 228508/283214 (executing program) 2025/11/16 11:09:18 fetching corpus: 12950, signal 228750/283214 (executing program) 2025/11/16 11:09:18 fetching corpus: 13000, signal 228897/283214 (executing program) 2025/11/16 11:09:18 fetching corpus: 13050, signal 229127/283214 (executing program) 2025/11/16 11:09:18 fetching corpus: 13100, signal 229304/283214 (executing program) 2025/11/16 11:09:18 fetching corpus: 13150, signal 229434/283214 (executing program) 2025/11/16 11:09:18 fetching corpus: 13200, signal 229618/283214 (executing program) 2025/11/16 11:09:18 fetching corpus: 13250, signal 229769/283214 (executing program) 2025/11/16 11:09:18 fetching corpus: 13300, signal 230016/283214 (executing program) 2025/11/16 11:09:18 fetching corpus: 13350, signal 230214/283214 (executing program) 2025/11/16 11:09:18 fetching corpus: 13400, signal 230482/283214 (executing program) 2025/11/16 11:09:19 fetching corpus: 13450, signal 230723/283214 (executing program) 2025/11/16 11:09:19 fetching corpus: 13500, signal 230981/283214 (executing program) 2025/11/16 11:09:19 fetching corpus: 13550, signal 231157/283214 (executing program) 2025/11/16 11:09:19 fetching corpus: 13600, signal 231350/283214 (executing program) 2025/11/16 11:09:19 fetching corpus: 13650, signal 231492/283214 (executing program) 2025/11/16 11:09:19 fetching corpus: 13700, signal 231741/283214 (executing program) 2025/11/16 11:09:19 fetching corpus: 13750, signal 231959/283214 (executing program) 2025/11/16 11:09:19 fetching corpus: 13800, signal 232148/283214 (executing program) 2025/11/16 11:09:19 fetching corpus: 13850, signal 232342/283214 (executing program) 2025/11/16 11:09:19 fetching corpus: 13900, signal 232547/283214 (executing program) 2025/11/16 11:09:19 fetching corpus: 13950, signal 232756/283214 (executing program) 2025/11/16 11:09:19 fetching corpus: 14000, signal 232908/283214 (executing program) 2025/11/16 11:09:20 fetching corpus: 14050, signal 233065/283214 (executing program) 2025/11/16 11:09:20 fetching corpus: 14100, signal 233280/283214 (executing program) 2025/11/16 11:09:20 fetching corpus: 14150, signal 233438/283214 (executing program) 2025/11/16 11:09:20 fetching corpus: 14200, signal 233626/283214 (executing program) 2025/11/16 11:09:20 fetching corpus: 14250, signal 233820/283214 (executing program) 2025/11/16 11:09:20 fetching corpus: 14300, signal 234047/283215 (executing program) 2025/11/16 11:09:20 fetching corpus: 14350, signal 234195/283215 (executing program) 2025/11/16 11:09:20 fetching corpus: 14400, signal 234343/283215 (executing program) 2025/11/16 11:09:20 fetching corpus: 14450, signal 234481/283215 (executing program) 2025/11/16 11:09:20 fetching corpus: 14500, signal 234735/283215 (executing program) 2025/11/16 11:09:20 fetching corpus: 14550, signal 234886/283215 (executing program) 2025/11/16 11:09:21 fetching corpus: 14600, signal 235082/283215 (executing program) 2025/11/16 11:09:21 fetching corpus: 14650, signal 235271/283215 (executing program) 2025/11/16 11:09:21 fetching corpus: 14700, signal 235422/283215 (executing program) 2025/11/16 11:09:21 fetching corpus: 14750, signal 235577/283215 (executing program) 2025/11/16 11:09:21 fetching corpus: 14800, signal 235768/283216 (executing program) 2025/11/16 11:09:21 fetching corpus: 14850, signal 235929/283216 (executing program) 2025/11/16 11:09:21 fetching corpus: 14900, signal 236151/283216 (executing program) 2025/11/16 11:09:21 fetching corpus: 14950, signal 236369/283216 (executing program) 2025/11/16 11:09:21 fetching corpus: 15000, signal 236546/283216 (executing program) 2025/11/16 11:09:22 fetching corpus: 15050, signal 236753/283216 (executing program) 2025/11/16 11:09:22 fetching corpus: 15100, signal 236916/283216 (executing program) 2025/11/16 11:09:22 fetching corpus: 15150, signal 237113/283216 (executing program) 2025/11/16 11:09:22 fetching corpus: 15200, signal 237269/283216 (executing program) 2025/11/16 11:09:22 fetching corpus: 15250, signal 237418/283216 (executing program) 2025/11/16 11:09:22 fetching corpus: 15300, signal 237571/283216 (executing program) 2025/11/16 11:09:22 fetching corpus: 15350, signal 237759/283216 (executing program) 2025/11/16 11:09:22 fetching corpus: 15400, signal 237946/283216 (executing program) 2025/11/16 11:09:22 fetching corpus: 15450, signal 238176/283216 (executing program) 2025/11/16 11:09:22 fetching corpus: 15500, signal 238516/283216 (executing program) 2025/11/16 11:09:22 fetching corpus: 15550, signal 238683/283216 (executing program) 2025/11/16 11:09:23 fetching corpus: 15600, signal 238842/283216 (executing program) 2025/11/16 11:09:23 fetching corpus: 15650, signal 238978/283216 (executing program) 2025/11/16 11:09:23 fetching corpus: 15700, signal 239133/283216 (executing program) 2025/11/16 11:09:23 fetching corpus: 15750, signal 239289/283216 (executing program) 2025/11/16 11:09:23 fetching corpus: 15800, signal 239492/283216 (executing program) 2025/11/16 11:09:23 fetching corpus: 15850, signal 239649/283216 (executing program) 2025/11/16 11:09:23 fetching corpus: 15900, signal 239912/283216 (executing program) 2025/11/16 11:09:24 fetching corpus: 15950, signal 240103/283216 (executing program) 2025/11/16 11:09:24 fetching corpus: 16000, signal 240270/283216 (executing program) 2025/11/16 11:09:24 fetching corpus: 16050, signal 240451/283216 (executing program) 2025/11/16 11:09:24 fetching corpus: 16100, signal 240607/283216 (executing program) 2025/11/16 11:09:24 fetching corpus: 16150, signal 240742/283216 (executing program) 2025/11/16 11:09:24 fetching corpus: 16200, signal 240877/283216 (executing program) 2025/11/16 11:09:24 fetching corpus: 16250, signal 241039/283216 (executing program) 2025/11/16 11:09:24 fetching corpus: 16300, signal 241229/283216 (executing program) 2025/11/16 11:09:24 fetching corpus: 16350, signal 241388/283216 (executing program) 2025/11/16 11:09:24 fetching corpus: 16400, signal 241602/283216 (executing program) 2025/11/16 11:09:24 fetching corpus: 16450, signal 241780/283216 (executing program) 2025/11/16 11:09:25 fetching corpus: 16486, signal 241906/283216 (executing program) 2025/11/16 11:09:25 fetching corpus: 16486, signal 241906/283216 (executing program) 2025/11/16 11:09:26 starting 8 fuzzer processes 11:09:26 executing program 0: r0 = socket(0x18, 0x800, 0xfffffbff) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000000)={0x0, "e500ae2fafe0434897adcdd74892253a"}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000001000)={{r0}, {@val={r1}, @max}}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001040), 0x20, 0x0) r3 = creat(&(0x7f0000001180)='./file0\x00', 0x101) sendto(r2, &(0x7f0000001080)="a9443fc0a124ffab3272e9ff945608d085189b97ccc01e4c017baa3c715558200c545cda1f516c5896dd668b42c5c78d7c4699751c83101f3b1e3c1259a72e44898f3cd3b4eb5c97e8c2fb5d8ff4772ae4a39b5191ea1806c9446f9480bc3539363977c6870bf56d1f435267a2af775053febf6adb6f88076d17f2b1a4f4335497a02271d0728d76ed22d011e1fb5f29f02225861781603ece90363ff030f333fc77b755d040b4eaf10f53bc46797cb999d5bc5781427999d5780bae8f4170dfa8f9f13b85bc8dc058d0552f65bcb764930c84c5c65de01304ffdf128e3d05685f15129c10f77e9a28f3e841639c0b17215ec857c13d", 0xf6, 0x20000004, &(0x7f00000011c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x3, 0x3, 0x3, 0x1}}, 0x80) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001240)={0x3, 0x1000}, 0x4) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000001280)={0x7d6b}, 0x4) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f00000012c0), r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000001340)={{0x1, 0x1, 0x18, r2, {0x10001}}, './file0\x00'}) getpeername$inet(r6, &(0x7f0000001380)={0x2, 0x0, @empty}, &(0x7f00000013c0)=0x10) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000001400)={'filter\x00', 0x0, 0x0, 0x0, [0x400000000000000, 0x8000, 0x3, 0x0, 0x80000000, 0x5]}, &(0x7f0000001480)=0x78) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001640)={'syztnl0\x00', &(0x7f00000015c0)={'syztnl1\x00', 0x0, 0x40, 0xdf0f3ea9e32b5658, 0x401, 0x1000, {{0x15, 0x4, 0x2, 0x1a, 0x54, 0x67, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@lsrr={0x83, 0x23, 0x6c, [@multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @local, @local, @local, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x43}, @multicast2]}, @timestamp={0x44, 0x1c, 0x51, 0x0, 0x3, [0x0, 0x2, 0x9, 0x1000, 0x0, 0x3]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000016c0)={'ip_vti0\x00', &(0x7f0000001680)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x2, 0x3, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x65, 0x0, 0x9, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3f}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001780)={'ip6tnl0\x00', &(0x7f0000001700)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x9, 0x5, 0x11, @mcast1, @dev={0xfe, 0x80, '\x00', 0x25}, 0x40, 0x80, 0x0, 0x9b6}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001880)={'erspan0\x00', &(0x7f00000017c0)={'tunl0\x00', 0x0, 0x10, 0x40, 0x3, 0x4, {{0x28, 0x4, 0x1, 0x3d, 0xa0, 0x66, 0x0, 0x0, 0x2f, 0x0, @broadcast, @private=0xa010102, {[@timestamp_prespec={0x44, 0x34, 0x93, 0x3, 0x2, [{@broadcast, 0x1}, {@broadcast, 0x9e65}, {@empty, 0x200}, {@remote, 0xff}, {@empty, 0x2218}, {@broadcast, 0x200}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x54, 0x33, 0x3, 0xd, [{@multicast2, 0x4}, {@remote, 0x4}, {@broadcast, 0x6}, {@broadcast, 0x101}, {@rand_addr=0x64010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x3f}, {@private=0xa010100, 0x6}, {@loopback, 0x4}, {@broadcast, 0x80000001}, {@local, 0xff}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000018c0)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000002100)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000020c0)={&(0x7f0000001900)={0x794, 0x0, 0x220, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe070}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe9}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xc56e, 0x0, 0x9, 0x433}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x3, 0x6, 0x1}, {0x6, 0x7f, 0x8, 0x1}]}}}]}}, {{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x81, 0x1b, 0x9}, {0x8, 0xeb, 0x7, 0xffffffff}, {0x6, 0x80, 0x4, 0x40}, {0xfff9, 0x1f, 0x40, 0x9}, {0x101, 0x39, 0x4, 0x8}, {0x619a, 0x5, 0x40, 0x8}, {0x5, 0x8, 0xff, 0x9d}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x71, 0x3, 0x52}, {0x9, 0x7f, 0x4, 0x7f}, {0x7fff, 0x3, 0x3f, 0x8}, {0x6, 0x1, 0x6, 0x7fff}, {0x0, 0x20, 0x5c, 0x8}, {0x81, 0x5a, 0x7, 0x2}, {0x8, 0x1, 0x20}]}}}]}}, {{0x8, 0x1, r9}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9f}}, {0x8}}}]}}, {{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6c, 0x8, 0x7f, 0x8}, {0x8, 0x7f, 0xff, 0x2}, {0x1f, 0x5, 0x0, 0xe08}, {0x5, 0x7, 0x0, 0x1ff}, {0x4, 0x16, 0x7, 0x9}, {0x5, 0x1, 0xff, 0xf7}, {0x9, 0xe1, 0x5, 0x4}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x794}, 0x1, 0x0, 0x0, 0x2000}, 0x801) 11:09:26 executing program 1: r0 = memfd_secret(0x80000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'veth1_to_batadv\x00', {0x1000}, 0xfffd}) splice(r0, &(0x7f0000000040)=0x3, r0, &(0x7f0000000080)=0x2, 0x0, 0xe) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x20, 0x70bd2c, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000001c0)={0x2, 0x5, 0x0, 0x1000, 0x1, [0xeaa6, 0x5, 0x1, 0x9]}) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000200)="df22773791ee6a015395e72685d048cf7805160eac50f50c5280ff37b5c886b178b3f2cda11370c068f196d4b8140b8f7412fe2db068c94a48889d572ddbfa5b99d3e2af31db3b7c508be3c87e7440ad79b85a3c08fa6764dc1ae7de9edb8f7d39af6b4e2b62269431e3443a3f1eb330d1685f939d1912d88bce4867b830b2cc62bb7e1e8827051565fcb624345aa52c0f5f6c66dc981db083c58464ad522b4d8ff653343a64a57c6ad45720a0b5cba56041296d4ea85ad62e41", 0xba, 0x6, 0x0, 0x4, r0}, &(0x7f0000000300)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000340)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000940)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x4d8, r1, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x71}}}}, [@NL80211_ATTR_PROBE_RESP={0x2ad, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x89, 0x7f, [@preq={0x82, 0x83, @ext={{0x0, 0x1, 0x1}, 0x89, 0x0, 0x8001, @broadcast, 0x911, @broadcast, 0x2, 0x6, 0x9, [{{0x1, 0x0, 0x1}, @device_b, 0xd8}, {{0x1, 0x0, 0x1}, @broadcast, 0x7f}, {{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{0x1, 0x0, 0x1}, @device_a, 0x4}, {{0x0, 0x0, 0x1}, @device_a, 0xffff8001}, {{0x0, 0x0, 0x1}, @broadcast, 0x8}, {{0x1}, @device_a, 0x6126}, {{}, @device_b}, {{0x1, 0x0, 0x1}, @device_b}]}}]}, @NL80211_ATTR_PROBE_RESP={0x17a, 0x91, "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"}]}, 0x4d8}}, 0x800) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd0, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffff56a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xbb40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x11c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xed9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x79}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x18000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20048010) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r0, {0x8, 0x1}}, './file0\x00'}) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000d80)=""/87, &(0x7f0000000e00)=0x57) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x58, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x62}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "58959119c5bd9f91fa1bd68ce267759a778f8f46a7130373"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x480d1}, 0x10) pipe(&(0x7f0000000f80)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r2) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x48}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xffffff81}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfd}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008001}, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000001100)='net/sco\x00') sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x28b}]}, 0x34}}, 0x8000) 11:09:26 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x6, &(0x7f0000000000)) r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x2, &(0x7f0000000280)=[{&(0x7f00000000c0)="284e6a615e6eaf522955103b4fdd6ef616299e9d0a2d3594892b457ff1fd8a398c3674528644f47bb69a0359bc092becff0ff8791ddbf3b2dc05aab360cecc18ea84b6bf728cb4561db9866a1cc50f5e8d1bd7887cab9a2dbef4dad486cb000671ef6d236648ef48a1f48f76e8ac07ec5462ed9ddb35b2066f24acdd87d9eb6fa1f3106c7becd8a48e1797065c5ceec7e7cc778fd6ab0e72b07aac53ef7f5876d1", 0xa1, 0x1}, {&(0x7f0000000180)="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", 0xfd, 0x8}], 0x10000, &(0x7f00000002c0)={[{@utf8no}, {@utf8}, {@nonumtail}], [{@subj_role={'subj_role', 0x3d, '/+:'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x37, 0x66, 0x39, 0x61, 0xf451bb13353a8a02, 0x36, 0x38], 0x2d, [0x63, 0x66, 0x65, 0x33], 0x2d, [0x61, 0x35, 0x61, 0x63], 0x2d, [0x38, 0x31, 0x66, 0x64], 0x2d, [0x35, 0x35, 0x32, 0x64, 0x65, 0x0, 0x30, 0x65]}}}, {@appraise}, {@context={'context', 0x3d, 'unconfined_u'}}]}) getdents64(r0, &(0x7f0000000340)=""/189, 0xbd) syz_mount_image$msdos(&(0x7f0000000400), &(0x7f0000000440)='./file1\x00', 0xffffffff, 0x3, &(0x7f0000000740)=[{&(0x7f0000000480)="49bd5dd28abff4a0df543622e59adde759dac1ae09903e967d2efd772cbe579288342af31355d5706c7c21cf40d3aa8a270f6b9f152849b42dfff8e856c10542e01d224f93e862100898e1f312f75a3128ddd33c8d5e01c80c572a25481473130832f419eb0ede0daef5beff94dac4eaee8e2110bea2f5055d43c3c50e48e21aa20b645bfeddabd1", 0x88, 0xd139}, {&(0x7f0000000540)="08082789bdffe1151bc9d6290e329422476a556e4a773fffa3fb6e5c6e5eca26d1b28e276179cfc5010b753fd8d98fba4aa2c4bbcd7cb2294dbc48c7db17359b4435642301f314b78c7677fdd738b31f31f5003b122cfefa722de99757846a8bf81aae1d4956584d81fc351407a203990eaadf145be420b2af588ce545aab9ee266cf6b4e77ae3980701bc2f95d0980d21f7bee899cb87506b3f4634f720b2c25b04b83ffafef700fad28a2e79a1c7702fbbf855418ceb5c364190a0614143f88f1adeb77bf74e0f85bacfb2", 0xcc, 0x6}, {&(0x7f0000000640)="97b0d486f8aef1a42955b8b851cf38c1770172730aa6aa0e095a38b2af977e6d25419c77ce6ce1cd723fca64eaf6a1555fd9960b3e0ea3852ce4a288b8fd4bdc590b605929231ded71389d0490e9848474ed20cacbed12846e4db43ad6c25693408e9d65f29f413307dec048b4f2665b0af0e7f6333cf53cc9fed1752f501d77b8b0278f8516e4b5171bbf668678c689077b1f49b9bc3ff2eed3d534e473d06a6abf9622af6639f85875bb4146696eb86b6108f850a9147652c38b97c1bce04efb606e3f552dcbe403f3f40d98e4dfa6517a82576581e41be55486c5324e44854783c164f2beea85998a79e6268c7eb6dc5c6b740a3315c2", 0xf8, 0x397}], 0x400, &(0x7f00000007c0)={[{@dots}, {@fat=@errors_remount}, {@fat=@errors_continue}, {@fat=@nocase}, {@nodots}, {@dots}, {@fat=@errors_continue}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000001, 0x1, &(0x7f0000000840)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xe83, &(0x7f0000000880)) pipe2(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r2, &(0x7f0000000900)=""/123, 0x7b) linkat(r0, &(0x7f0000000980)='./file0\x00', r2, &(0x7f00000009c0)='./file0\x00', 0x400) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x5251, &(0x7f0000000a00)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a80)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000b80)=0xe8) fchownat(r2, &(0x7f0000000a40)='./file0\x00', r3, 0x0, 0x1000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ff, 0x4, &(0x7f0000000bc0)=0x1) readv(r2, &(0x7f0000001cc0)=[{&(0x7f0000000c00)=""/20, 0x14}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/125, 0x7d}], 0x3) mount$cgroup(0x0, &(0x7f0000001d00)='./file1\x00', &(0x7f0000001d40), 0x0, &(0x7f0000001d80)={[{@none}, {}], [{@audit}, {@uid_lt={'uid<', r3}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@appraise}, {@fsname={'fsname', 0x3d, 'context'}}, {@uid_gt={'uid>', r3}}, {@dont_hash}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@permit_directio}]}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000001ec0), 0x480, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000001e40)='\x00', &(0x7f0000001e80)='./file0\x00', r4) unlinkat(r1, &(0x7f0000001f00)='./file1\x00', 0x0) openat$incfs(r2, &(0x7f0000001f40)='.log\x00', 0x200000, 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000001f80), 0x10000, 0x0) 11:09:26 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000040), 0x9, 0x10400) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x404}, {r0, 0x380}, {r1, 0x4040}, {r2, 0x481}, {0xffffffffffffffff, 0x8081}, {0xffffffffffffffff, 0x500}, {0xffffffffffffffff, 0x1002}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x204}, {0xffffffffffffffff, 0x400}], 0xa, 0x9) write$hidraw(r1, &(0x7f0000000100)="549b753dd1c582ddf8bcf81c3a9af15e2c226c0af40e190d3ec70ed1eeab9a6d77fb2a9358a19009700f40bc2351876c31626cef9e1d1de0aaf02e65517efb90115734ecf3b4bbb1b693ba4a950167097bd19a3191e1587b02be941724", 0x5d) r3 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r5 = getpid() clone3(&(0x7f0000000380)={0x48040000, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x40}, &(0x7f0000000240)=""/115, 0x73, 0xffffffffffffffff, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff], 0xa, {r0}}, 0x58) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000400), 0x6000, 0x0) write$binfmt_script(r8, &(0x7f0000000440)={'#! ', './file0', [{0x20, '/dev/hidraw#\x00'}], 0xa, "1a9973dccbed6c4242dc6abf4c2d49ee1af63042415c4969aa4e4ab81868e7744e61efbcfaf7185d0e1d6443fd98a0885d4b059852fadfa8031c3ba3cbbc0b2da313f10706b01962709d630e592083ea950a46c7e2164afc65efc9c3835299ef500e575e5f7d71cccaf052df34ff23c9dfe6e4bc56c63fb487394f0706844fe8a9a8d4a43201ebbe0868a91ef0f9c9"}, 0xa8) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x5a1000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) ppoll(&(0x7f0000000680)=[{r9, 0x4}, {0xffffffffffffffff, 0x4008}, {r0, 0x2040}, {r10, 0x41}, {r6, 0x4}, {r8, 0x4002}, {r11, 0x6}, {r8, 0x18}, {0xffffffffffffffff, 0x281}], 0x9, &(0x7f0000000740)={r12, r13+60000000}, &(0x7f0000000780)={[0x2]}, 0x8) r14 = openat$bsg(0xffffffffffffff9c, &(0x7f00000007c0), 0x20000, 0x0) openat$cgroup_type(r14, &(0x7f0000000800), 0x2, 0x0) clone3(&(0x7f0000000ac0)={0x0, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0), {0x3}, &(0x7f0000000900)=""/41, 0x29, &(0x7f0000000940)=""/189, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, r7], 0x7, {r9}}, 0x58) 11:09:26 executing program 3: renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='security.selinux\x00') chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000140)='./file0\x00', 0x122) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, 0x1, 0x7, 0x101, 0x0, 0x0, {0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5ee}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2d4000000000}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x68bf}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40844}, 0x4004011) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x1, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040800}, 0x400c001) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x464, 0x200, 0x70bd25, 0x25dfdbfb, "7cac459f5b0bb72d597998abfa2996dfdf75", ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4048001}, 0x40000010) r1 = creat(&(0x7f00000004c0)='./file0\x00', 0x131) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000540)={'team0\x00'}) r3 = openat(r0, &(0x7f0000000580)='./file0\x00', 0x0, 0x20) copy_file_range(r0, &(0x7f00000005c0)=0x2492, r3, &(0x7f0000000600)=0x2669, 0x5, 0x0) r4 = open(&(0x7f0000000640)='./file0\x00', 0x1c1000, 0x100) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) bind(r0, &(0x7f00000006c0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x80) syz_mount_image$tmpfs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0xeb22, 0x1, &(0x7f0000000800)=[{&(0x7f00000007c0), 0x0, 0x79}], 0x20, &(0x7f0000000840)={[{@huge_advise}, {@nr_blocks}, {@huge_advise}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'syz1\x00'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@smackfsroot}, {@euid_lt}, {@appraise_type}]}) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x98, 0x7, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x4e, 0x7, 0x1, 0x0, "7c0f73712c0114f1a06f39aac752a83fe04fb15242b6ef793f76f05d7fa9cf742bd19ec8d0d6407274515d025d2128be22dc272a7b0d276b7d9ba9f7099e7a73ed2e712944a80e98a313"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x48d0}, 0x80) lsetxattr$security_evm(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0), &(0x7f0000000b00)=@v2={0x3, 0x0, 0xb, 0x6, 0xf3, "c4dbc29e989c7ae43fc19adff395d9b6d1e2cc715a62712a8dcfb81af2b8b65110ce681fea4b1ed6ee47554f84eb2586ea1adf1a39c0760f64d8296f22522a86ea4749719cc5cc5f547d44c792f4e7ee9639cb09fe1732849e2c838dd257c52d8e348a448b1a8058f656b6b33e236e5d4a4ddf2fc5f94a02d6d204935bf18ecabb77a1a653b96493525e92cbc02d8a7b2d2f25a19b7f13f0efca032a6ad3b05edc74e96445fc6cd3a7c6231e5083c3f30b011153c0dddd01e35647b831ca18f81068a2907dc67436fdccd0f93b4cf8e6a132068bab58f7b03ba408f78f202ffc64ee42a10dc31daab3507115c01800825246ea"}, 0xfc, 0x2) 11:09:26 executing program 4: ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000000)) r0 = syz_open_pts(0xffffffffffffffff, 0x203000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x20) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x124b) fcntl$addseals(r0, 0x409, 0x6) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1333965f, 0x20400) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x3, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x4000800) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x7, 0x66b}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x10800480, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0, {0x3}, &(0x7f00000004c0)=""/191, 0xbf, &(0x7f0000000580)=""/98, &(0x7f0000000600)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) r6 = getpid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r8 = gettid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000740)=0x0) r10 = fork() clone3(&(0x7f00000007c0)={0x100000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0xffff}, &(0x7f0000000380)=""/48, 0x30, &(0x7f00000003c0)=""/11, &(0x7f0000000780)=[r5, r6, r7, r8, 0x0, r9, r10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0xa, {r2}}, 0x58) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000840)={{r4}, 0x80000001, 0x7, 0x6}) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000880)={0x10001, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e20, @empty}}}, 0x108) capset(&(0x7f00000009c0)={0x399f1316}, &(0x7f0000000a00)={0x4, 0xed, 0x200, 0x2, 0x7b, 0x200}) [ 90.799515] audit: type=1400 audit(1763291366.624:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:09:26 executing program 5: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000040)=0x300000, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80000) sendto$packet(r2, &(0x7f0000000140)="a453453513fc5a8cad2ac7d5a16ae499ac49db0f3ea49d8c5ba71f939181bc0f069999763dfaaa1b5fad0770672aa24bb3e7389ddee9ddc29df520bf51dda090842704537bf4ee31869b2aa0dba47580f1148748a707096451c3ba83b996affbbf60933db71393a254c951d0a9c6f1fb439ea710eab010576ce0f91ca2f69d99b5e6b0254ed0a506a31b6a0d", 0x8c, 0x4008040, &(0x7f0000000200)={0x11, 0xde, r3, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9e, 0x0, 0x81, 0x1f, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000240), 0xb}, 0x61e, 0x3, 0xff, 0x1, 0x5, 0x8001, 0x3fe, 0x0, 0x3, 0x0, 0x3ff}, 0x0, 0x8, 0xffffffffffffffff, 0x1) write(r4, &(0x7f0000000300)="8c3768d4f83cee58692e645e90ee22ca2f906635c794bd5f18e4b463c94f3fd40dddf416ce31ddf4ac108da524a242f84da0d5253c901d5d725fcc32911a97c47850f0dc3b1741900814", 0x4a) recvfrom$packet(r1, &(0x7f0000000380)=""/153, 0x99, 0x40, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x1, 0x6, @multicast}, 0x14) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet6(0xa, 0x80000, 0x5) clone3(&(0x7f0000002080)={0x204800, &(0x7f0000001e00), &(0x7f0000001e40)=0x0, &(0x7f0000001e80), {0x1}, &(0x7f0000001ec0)=""/161, 0xa1, &(0x7f0000001f80)=""/166, &(0x7f0000002040)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000002100)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000002200)=0xe8) r12 = getpgid(0xffffffffffffffff) r13 = gettid() statx(0xffffffffffffff9c, &(0x7f0000002800)='./file0\x00', 0x0, 0x20, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getpid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$netlink(r0, &(0x7f0000002e80)={&(0x7f00000004c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc, &(0x7f0000002780)=[{&(0x7f0000000580)={0x594, 0x36, 0x4, 0x70bd28, 0x25dfdbff, "", [@generic="50f17b4156245ec424d1b08fa8be49e2d5d28f09bd1e20cb0574a6e333dfd53929fb7da7a6dc01ca373cfaf5f449a2ab2f24505f38a015cb6ccc0a8fe7d5ded0dc922139e10cd07216d80a6c32594c492e5a410a163ca0bf6d8608b2f2c8a2841c53b16a42e6576081a97a01efa45add594ff8be20a58a37ee856f960d8e788f2d43080b8f2d920440affdf344c002eb693549fa6d9057a0e741a4b36c5efbab5f9694a0c4e1", @generic="981c545705c8f86287250575f446970a06e7641a27e6f01630762744521948e55a628a54db63c228e018873a0e666a6173f1e8181e7755e448ecc04b8a803aeb70f95f607baf8c23416c157295d4a9ebe79ef77cfd9983d9b877629d287945fc5c69e94d3058c13fa76b076f87403ba86679076b2648cf7b43ac27d96a48c69d3af94e4775905a28ca34637fa03dab8a49b971d4456a521326b6100684f0252fd4ea46918d362fdfb5d2e4f83c", @typed={0x4, 0x6c}, @typed={0xa, 0x8e, 0x0, 0x0, @str='&*:\\%\x00'}, @nested={0xc1, 0x1c, 0x0, 0x1, [@generic="bef8221e48e5044b600f741128d12aa26774afa41db529351e8b30ead432f3e74deefece283fc0c5cf634be5be3a8f8d20e73de929580fe749dbf4410e3eb422f3242238d2f73deb2853b02b2a019f52453d8ae70640f885f938693808fab36d25d8f4d41f77c3e46b8325da6f3a0b26e95542c8ce5c600f213876e4dda1bae69cb9ff67827078e742823fa411bc97776eaee152fd4c99cf9f3bc2b312f4a2fedaa1820247bf82561f80d5618cb05d810f0806ff3e4cc3a21b013d8ad0"]}, @typed={0x8, 0x73, 0x0, 0x0, @uid=r8}, @generic="f4c4437266ae3c585a894cde86c67e928a89cb62c83e9ce85891a28d1899a2cc4b2cca9fd5d32f20ed256ab743483f04512404bf680d1bdef7d92eeebafbdc55cd42ce5d72ff84e3718beb45dd23b03ed07df98d594f4699b830e42588c1693fd153f03f9c93de85de08e27361479557dfe883ba9d6cf82bffb450cad637ece81c97712d156bd59c40ab1b3fa7273a29aca4c833b4594902c59cd504f6245c00bfdb2aa2689d924beeca370f666667f685529dcbceb7ea5cc3fd5180cb56d34acdd71b08d4e47890f5e9efb968ae0cc08854e12b67d8eaeb9bec0d8281aaf24f7fe0511119d49eee247b9bd4e737ab", @typed={0x8, 0x66, 0x0, 0x0, @str='%&\\\x00'}, @nested={0x252, 0x86, 0x0, 0x1, [@generic="60ea8b42e1f1e97f33f494a4230178e0d2ff5bbdf108d04cd832e038a3e35c3d207235f2e8fae631f3a95bdd731c2a4be3b23bee47c2eec3f015f272f95ff8daf5c5a6c83a5150112f46ac4ec9ca062a5d0d0d2ec400325f437e468b5917a1c0ce7d944a6c20cb508080bee65b09d386c080b4435a2af04d1dfc35ce2298fc5d2dc04257b7d2494be5c9d168dd46c65a9779fa279ba7380094c415c4bcf4c04ca59a6431f6bd7a88d8f4901f4eb043eac761db7ff1ab0f7ffbcf49beb67f26faf8011ca8262ab61bddef30b2eda7452ac15cdbdfd5fec3df6f0c84466516767559508c1c40bdf331ed4af835f659e3b7f75cdbdd3a760b", @generic="b8c57c810ec53f8036d28ee2dd6db463fce36148", @generic="72df2e40bc926b817bb317fb42824d425fb0b93e0111d74b167fa4dbbee499c8f073ceb64bee050443ec8bfa243e732d39e7c10fa1ba17cc4715dac7e954bd1d682c540492abda5e0dcc72cd5c5490f5c0d64ccaac58c402d197e02e2662ce8a6e52687a8d0df0bb38c40625605af88b7fe8c15f3921c97c0cb631ab78653e2b8b3242dc9b43d4362aa6f4181b16445424d2496e355f69e5ba4dd62efcc5143ce536f8107c9c826a4c56d7", @generic="2b6e81fe47771cabc3d0c6a681aa9f9bbe6b2516877dc26a61361c9757ec1753e9f2f5113528d7c45fb57403a9a366d652a0fbb92aaf8cacbe68fdb05f9decde3654c22a92c89739098caee00e98c64fe5e047541b4a1fd8c65d6dcbaaef21d0de72d7d9b8182b577f7904fc5e0a4bc2629f537885572d268d7220fdb74f1cd162d4ec434e21f111804d50d92b1780bf", @typed={0x8, 0x62, 0x0, 0x0, @u32=0x7d93}]}, @typed={0x8, 0x55, 0x0, 0x0, @u32=0x7fffffff}]}, 0x594}, {&(0x7f0000000b40)={0x1154, 0x3f, 0x100, 0x70bd29, 0x25dfdbfb, "", [@generic="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", @nested={0x48, 0x7a, 0x0, 0x1, [@typed={0x14, 0x60, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @typed={0xc, 0x23, 0x0, 0x0, @u64=0x26}, @typed={0xc, 0x47, 0x0, 0x0, @u64=0x5}, @typed={0x4, 0x53}, @typed={0x14, 0x4e, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @generic="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"]}, 0x1154}, {&(0x7f0000001cc0)={0x114, 0x21, 0x8, 0x70bd2c, 0x25dfdbfe, "", [@generic="071869b41a1bf80238705c797e8b92394e5eea4c5a26c6c04c16fde7227e89c3fa0a54e586a4267f68b6d2eb068c92047f565428c77834a1fc6fb4efb1b8e4a6879b6e52bf4332e2f42cb99e8690c6b88af9dd60fd52b321a9ba704c6500", @typed={0x8, 0x16, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x52, 0x0, 0x0, @u32=0xffffffff}, @generic="060cfe6c177de88d7f095b57b2cbd9077a9b22b43e3fe978de4fedcab4b02de73d9635442f91018e58976b9f1cbfa1bae861595c4a405b4fc48e6e93c55c44c7e150666ef1c0cced4879f54da908e648197fd06049c71072fb52ce879825f6fbda6805462ef690e15d533b7484da324834464a9fbec6958b372533be32f6684e08102156fe7f17ae2164b0eed214", @typed={0x8, 0x4e, 0x0, 0x0, @fd=r9}]}, 0x114}, {&(0x7f0000002240)={0x1ec, 0x21, 0x4, 0x70bd29, 0x25dfdbfc, "", [@typed={0x8, 0x6b, 0x0, 0x0, @pid=r10}, @typed={0xeb, 0x4f, 0x0, 0x0, @binary="2e2b79efd591a6dfcab83268c2ddedfc5e0cf2548d2abebebd5c7566ec20676723246198047952be2d997bfed981a5c3aafe6c9178fd3a5b19b0758ae933fa7f6490c2f752ff36f676d888e5a0957fab78df03c4b3fd5766b08c281749066e6d2e87c9ef78276990ed5bef7e7dd1508b2e842c51ed6239680eb77edaa2117c8c54d5f43cd7c0bc24301fc445749c11f46d2fff2429703e7a44c9fd09f8409e851d8d4138a421f1154e093e6dfd50d93b1dd1b510d78274a9cb4e081e182c7c10411cde167d771bb6022ed2f2c5deee2b30fd8d3e2ed37c39342e5895de64256f7b098afb8d2c6c"}, @typed={0x4, 0x12}, @nested={0x8a, 0x2, 0x0, 0x1, [@generic="f11e0bcc44f14a2ebc913109d8e5ea3c3b913e0aee672ce120b8f31b6c9c37ea38f28b289667d7b742d64ac047d276cdc096c4cea4f4b722674d642c380578", @generic="b843a6307ee541e6c6586b0a5d1a063d75dfeeb6", @typed={0x8, 0x92, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="48d572aaeb3d1f7ded1096add0f5667db85b53f935fc00f8d0f0bb84729dee740d370a8334a31a1613fb35"]}, @nested={0x10, 0x26, 0x0, 0x1, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x800}]}, @nested={0x24, 0xc, 0x0, 0x1, [@typed={0x4, 0x3d}, @typed={0x8, 0x8, 0x0, 0x0, @pid}, @typed={0xa, 0x2b, 0x0, 0x0, @str='\xbb\xbb\xbb\xbb\xbb\xbb'}, @typed={0x8, 0x38, 0x0, 0x0, @uid=r11}]}, @typed={0x8, 0x3d, 0x0, 0x0, @fd=r7}, @typed={0x8, 0x8, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x4f, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @pid}]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=0xee00}]}, 0x1ec}, {&(0x7f0000002440)={0x2dc, 0x22, 0x400, 0x70bd29, 0x25dfdbfe, "", [@nested={0x1d8, 0x1, 0x0, 0x1, [@generic="1f1535944173432d815bbd88baac93a7ad16ee2dbc6581d74ec2333d7058b3daf300815539aeecd4ce139b59be35f147b054d0bdc7276b968fac3f54127e4b925366f12383048dbbb226b6093942f9c63ffec153ea1dd9f3aa67cbbc26b10a1443e0d4e4dd69023b3e8d1ad708b6f2", @typed={0xc, 0x3b, 0x0, 0x0, @u64=0x101}, @typed={0xca, 0x6f, 0x0, 0x0, @binary="835302bf5e40368a4e696426e0f4e5e1c5aad399986251409ced83c94908661f9c5bb6d48ce8eb923063cbf7a1fcb4e2ae4eff58717dee751a6125e0c413a2fba3ac4f9531edd7bd961c80fff1f6943f389a6db38215d9039ee2b543de81aeb45d14b734118d24e64e353a5e6245381e5e614df70079b1b516c38fabfa13db286c2b1390c88a2093ae48b1b80d6f12955b25f6c37f0d328827b4926a3f8da7f3c0597ae1e9db71ac9d0f2196bf0b331846cfcc9e17a5ba4e75227b65cb8cac38240239d005f0"}, @generic="f05540cd1c35772fb2a807287d5abb0ffe", @generic="02937583cba9a15b68204abae619cd7e78c438c1173ee4281f5f9fca", @typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}, @typed={0xc, 0x7f, 0x0, 0x0, @u64=0x1}, @generic="9b9952c2de07a5b412cc38d511f082684187f37df19a6e9a578a04741929fba19442867f1b235f98d1170f37d9923e7c0d6da583c8468c3ddedaed62b7c67bc7249b1a2f", @typed={0x8, 0x17, 0x0, 0x0, @pid}]}, @generic="825db88af45420bbebbc5e5baa88cbe6cf5328829be501826f2fb8e620c78c4a1b8c9e004bc2dc4bdf6a7cb11c3379d4aaaac032595de65138a2c1da26472d18d8a20c4a542c99c868d9e81075129664ef7259e53a8596d974e8916daedefa79b0dc2546a0d5c48efe310ad2310dfe74b66e69844dfedb0a54f518ce81728cb3690be915e8fbac4f8bf52f76f6289f6b320c5495c51774caa4e6ff59c3892b3aa71d65cf41e0ec01ffbb7a69bf504807576913070029780354fd1d94bf8b1b822b49e4fbe55572a5ca744cb7efb1ca8da34b276f7ce7270d", @typed={0x8, 0x66, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x14, 0x21, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x2dc}, {&(0x7f0000002740)={0x30, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x94, 0x0, 0x0, @u32=0x3}, @typed={0x4, 0x12}, @nested={0xc, 0x3f, 0x0, 0x1, [@typed={0x8, 0x53, 0x0, 0x0, @u32=0x401}]}]}, 0x30}], 0x6, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {r12, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xffffffffffffffff, r16}}}, @rights={{0x20, 0x1, 0x1, [r4, r6, r7, 0xffffffffffffffff]}}], 0xb8, 0x40000c0}, 0xc0) 11:09:26 executing program 6: fcntl$setsig(0xffffffffffffffff, 0xa, 0x1e) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xf8f3, [0x124, 0x6, 0x194, 0x8001, 0x2c26, 0x4]}) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x48000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@msize={'msize', 0x3d, 0xdacc}}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@cache_none}, {@cachetag={'cachetag', 0x3d, '&'}}], [{@fowner_gt={'fowner>', r3}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000400)={'ipvs\x00'}, &(0x7f0000000440)=0x1e) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000480)=""/105, &(0x7f0000000500)=0x69) r4 = signalfd4(r0, &(0x7f0000000540)={[0x4]}, 0x8, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) accept4$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000007c0)=0x14, 0x80000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001e00)={0x0, @dev, @empty}, &(0x7f0000001e40)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001f00)={'sit0\x00', &(0x7f0000001e80)={'ip6gre0\x00', r2, 0x4, 0x0, 0x1, 0x100, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x700, 0x8000, 0x40, 0x40}}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000002500)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000024c0)={&(0x7f0000001f40)={0x578, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x540}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9abf}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r8}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc44}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x40, 0x6}, {0x0, 0x3, 0x0, 0x4}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r2}, {0x134, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x578}, 0x1, 0x0, 0x0, 0x20008000}, 0x814) setsockopt$inet_buf(r4, 0x0, 0x2b, &(0x7f0000002540)="2535bcb0c4d36b1f", 0x8) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002580), 0x200001, 0x0) sendto$packet(r9, &(0x7f00000025c0)="0133a0d074547c067d13a1677c144fddc9c13dc48048b884d6cfc1cfb8f78963435f434101afb438b3f168929ab0106411481ec428d93bc29788de22ee5751de11408839029a51f2d6b464841bfeb94f2371fd0915f19b7a3fa9a1e2e4eb61cff9a5dce5127703de42528e9fa3395c3bb9464b651156575fc9675b82a2f9a4c5565e995325a44e151df981cb2618bdb8afb40449afa3b33e29c806960850bf64824efa4b7582a125b230b49e93dc3740d785dae51261571b5f54ad99f86e82361a9e8aa8ed5ee12ddb446b9f1d948cd28ee55c00cb9ce83321", 0xd9, 0x6029debf06a7b8cf, &(0x7f00000026c0)={0x11, 0xe7, 0x0, 0x1, 0x20, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002740), r9) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x24, r10, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x54b305e3cd456ff5}, 0x4040) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000002880)={'nat\x00', 0x0, 0x0, 0x0, [0x7f, 0x9f3, 0x3, 0x3ee637c9, 0x7, 0x200], 0x2, &(0x7f0000002840)=[{}, {}], 0x0, [{}, {}]}, 0x98) [ 92.000451] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.002486] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.003945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.006862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.009094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.015729] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.018045] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.020077] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.021573] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.031415] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.033581] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.034640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.037011] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.043855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.051441] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.062511] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.066314] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.075531] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.085433] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.088484] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.119467] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.122002] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.123022] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.126580] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.128685] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.131525] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.131616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.134034] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.140746] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.143565] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.145247] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.150775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.152590] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.154633] ================================================================== [ 92.155881] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 92.157062] Read of size 2 at addr ffff88801fae12b8 by task kworker/u11:2/294 [ 92.160157] [ 92.162071] CPU: 1 UID: 0 PID: 294 Comm: kworker/u11:2 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 92.162105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 92.162121] Workqueue: hci5 hci_cmd_work [ 92.162154] Call Trace: [ 92.162163] [ 92.162172] dump_stack_lvl+0xca/0x120 [ 92.162204] print_report+0xcb/0x610 [ 92.162236] ? __virt_addr_valid+0x100/0x5d0 [ 92.162264] ? hci_cmd_work+0x66d/0x6d0 [ 92.162295] ? hci_cmd_work+0x66d/0x6d0 [ 92.162326] kasan_report+0xca/0x100 [ 92.162357] ? hci_cmd_work+0x66d/0x6d0 [ 92.162391] hci_cmd_work+0x66d/0x6d0 [ 92.162424] process_one_work+0x8e1/0x19c0 [ 92.162466] ? __pfx_process_one_work+0x10/0x10 [ 92.162500] ? move_linked_works+0x172/0x270 [ 92.162527] ? assign_work+0x196/0x240 [ 92.162561] worker_thread+0x67e/0xe90 [ 92.162595] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 92.162625] ? __pfx_worker_thread+0x10/0x10 [ 92.162660] kthread+0x3c8/0x740 [ 92.162691] ? __pfx_kthread+0x10/0x10 [ 92.162721] ? ret_from_fork+0x79/0x7a0 [ 92.162746] ? lock_release+0xc8/0x290 [ 92.162783] ? __pfx_kthread+0x10/0x10 [ 92.162815] ret_from_fork+0x67a/0x7a0 [ 92.162838] ? __pfx_ret_from_fork+0x10/0x10 [ 92.162864] ? __switch_to+0x759/0x1060 [ 92.162897] ? __pfx_kthread+0x10/0x10 [ 92.162928] ret_from_fork_asm+0x1a/0x30 [ 92.162968] [ 92.162976] [ 92.184634] Allocated by task 290: [ 92.185240] kasan_save_stack+0x24/0x50 [ 92.185914] kasan_save_track+0x14/0x30 [ 92.186586] __kasan_slab_alloc+0x59/0x70 [ 92.187293] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 92.188168] __alloc_skb+0x2ab/0x370 [ 92.188813] hci_cmd_sync_alloc+0x34/0x300 [ 92.189530] __hci_cmd_sync_sk+0xf7/0x5c0 [ 92.190223] hci_read_buffer_size_sync+0x2c/0x170 [ 92.191023] hci_dev_open_sync+0x1874/0x1f60 [ 92.191758] hci_power_on+0xdb/0x5d0 [ 92.192390] process_one_work+0x8e1/0x19c0 [ 92.193103] worker_thread+0x67e/0xe90 [ 92.193764] kthread+0x3c8/0x740 [ 92.194350] ret_from_fork+0x67a/0x7a0 [ 92.195010] ret_from_fork_asm+0x1a/0x30 [ 92.195689] [ 92.195976] Freed by task 304: [ 92.196520] kasan_save_stack+0x24/0x50 [ 92.197178] kasan_save_track+0x14/0x30 [ 92.197854] kasan_save_free_info+0x3a/0x60 [ 92.198572] __kasan_slab_free+0x43/0x70 [ 92.199237] kmem_cache_free+0x26f/0x500 [ 92.199923] kfree_skbmem+0x18a/0x1f0 [ 92.200573] sk_skb_reason_drop+0x10e/0x1b0 [ 92.201288] vhci_read+0x3d5/0x5d0 [ 92.201878] vfs_read+0x1eb/0xc70 [ 92.202457] ksys_read+0x121/0x240 [ 92.203054] do_syscall_64+0xbf/0x430 [ 92.203689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.204551] [ 92.204834] The buggy address belongs to the object at ffff88801fae1280 [ 92.204834] which belongs to the cache skbuff_head_cache of size 232 [ 92.206897] The buggy address is located 56 bytes inside of [ 92.206897] freed 232-byte region [ffff88801fae1280, ffff88801fae1368) [ 92.208839] [ 92.209129] The buggy address belongs to the physical page: [ 92.210034] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1fae1 [ 92.211316] flags: 0x100000000000000(node=0|zone=1) [ 92.212113] page_type: f5(slab) [ 92.212664] raw: 0100000000000000 ffff8880096c78c0 dead000000000100 dead000000000122 [ 92.213926] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 92.215163] page dumped because: kasan: bad access detected [ 92.216054] [ 92.216331] Memory state around the buggy address: [ 92.217125] ffff88801fae1180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 92.218272] ffff88801fae1200: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 92.219411] >ffff88801fae1280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.220570] ^ [ 92.221385] ffff88801fae1300: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 92.222535] ffff88801fae1380: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 92.223673] ================================================================== [ 92.225009] Disabling lock debugging due to kernel taint [ 92.227024] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.228686] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.251364] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.253857] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.255368] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.256912] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.278590] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.077247] Bluetooth: hci0: command tx timeout [ 94.080271] Bluetooth: hci1: command tx timeout [ 94.141239] Bluetooth: hci3: command tx timeout [ 94.141865] Bluetooth: hci2: command tx timeout [ 94.269212] Bluetooth: hci5: command tx timeout [ 94.333247] Bluetooth: hci7: command tx timeout [ 94.397361] Bluetooth: hci4: command tx timeout [ 94.398106] Bluetooth: hci6: command tx timeout [ 96.125312] Bluetooth: hci1: command tx timeout [ 96.126113] Bluetooth: hci0: command tx timeout [ 96.189369] Bluetooth: hci2: command tx timeout [ 96.190010] Bluetooth: hci3: command tx timeout [ 96.317235] Bluetooth: hci5: command tx timeout [ 96.381294] Bluetooth: hci7: command tx timeout [ 96.445479] Bluetooth: hci6: command tx timeout [ 96.446598] Bluetooth: hci4: command tx timeout [ 98.173377] Bluetooth: hci1: command tx timeout [ 98.174039] Bluetooth: hci0: command tx timeout [ 98.237349] Bluetooth: hci2: command tx timeout [ 98.237993] Bluetooth: hci3: command tx timeout [ 98.365322] Bluetooth: hci5: command tx timeout [ 98.429278] Bluetooth: hci7: command tx timeout [ 98.493261] Bluetooth: hci4: command tx timeout [ 98.493802] Bluetooth: hci6: command tx timeout [ 100.221339] Bluetooth: hci0: command tx timeout [ 100.221766] Bluetooth: hci1: command tx timeout [ 100.285257] Bluetooth: hci3: command tx timeout [ 100.285655] Bluetooth: hci2: command tx timeout [ 100.413292] Bluetooth: hci5: command tx timeout [ 100.477206] Bluetooth: hci7: command tx timeout [ 100.541222] Bluetooth: hci6: command tx timeout [ 100.541620] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 11:09:28 Registers: info registers vcpu 0 RAX=ffff8880160f5340 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8135f49d RDI=fffffbfff0bc3fa8 RBP=ffffffff85e1fd40 RSP=ffff88801c36f558 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003ca6e R11=0000000000008710 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000246 RIP=ffffffff81529f72 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2459cc56f4 CR3=000000001698c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f2459cd447000007f2459cd3f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8293dd05 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff8880189d7618 R8 =0000000000000000 R9 =ffffed10016c4046 R10=0000000000000039 R11=fffffffffffc9f68 R12=0000000000000039 R13=0000000000000010 R14=ffffffff88974780 R15=ffffffff8293dcf0 RIP=ffffffff8293dd5d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f24599644a1 CR3=000000001df55000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f41c04757c000007f41c04757c8 XMM02=00007f41c04757e000007f41c04757c0 XMM03=00007f41c04757c800007f41c04757c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000