Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:43868' (ECDSA) to the list of known hosts. 2025/11/16 17:14:13 fuzzer started 2025/11/16 17:14:13 dialing manager at localhost:37161 syzkaller login: [ 50.712376] cgroup: Unknown subsys name 'net' [ 50.756083] cgroup: Unknown subsys name 'cpuset' [ 50.764881] cgroup: Unknown subsys name 'rlimit' 2025/11/16 17:14:23 syscalls: 2214 2025/11/16 17:14:23 code coverage: enabled 2025/11/16 17:14:23 comparison tracing: enabled 2025/11/16 17:14:23 extra coverage: enabled 2025/11/16 17:14:23 setuid sandbox: enabled 2025/11/16 17:14:23 namespace sandbox: enabled 2025/11/16 17:14:23 Android sandbox: enabled 2025/11/16 17:14:23 fault injection: enabled 2025/11/16 17:14:23 leak checking: enabled 2025/11/16 17:14:23 net packet injection: enabled 2025/11/16 17:14:23 net device setup: enabled 2025/11/16 17:14:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/16 17:14:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/16 17:14:23 USB emulation: enabled 2025/11/16 17:14:23 hci packet injection: enabled 2025/11/16 17:14:23 wifi device emulation: enabled 2025/11/16 17:14:23 802.15.4 emulation: enabled 2025/11/16 17:14:23 fetching corpus: 50, signal 21288/23137 (executing program) 2025/11/16 17:14:24 fetching corpus: 100, signal 36210/39706 (executing program) 2025/11/16 17:14:24 fetching corpus: 150, signal 48989/53994 (executing program) 2025/11/16 17:14:24 fetching corpus: 200, signal 55017/61516 (executing program) 2025/11/16 17:14:24 fetching corpus: 250, signal 58772/66728 (executing program) 2025/11/16 17:14:24 fetching corpus: 300, signal 64960/74258 (executing program) 2025/11/16 17:14:24 fetching corpus: 350, signal 68557/79194 (executing program) 2025/11/16 17:14:24 fetching corpus: 400, signal 72454/84388 (executing program) 2025/11/16 17:14:24 fetching corpus: 450, signal 76242/89454 (executing program) 2025/11/16 17:14:24 fetching corpus: 500, signal 78557/93081 (executing program) 2025/11/16 17:14:24 fetching corpus: 550, signal 82248/97961 (executing program) 2025/11/16 17:14:25 fetching corpus: 600, signal 86464/103274 (executing program) 2025/11/16 17:14:25 fetching corpus: 650, signal 88661/106642 (executing program) 2025/11/16 17:14:25 fetching corpus: 700, signal 93575/112484 (executing program) 2025/11/16 17:14:25 fetching corpus: 750, signal 96359/116319 (executing program) 2025/11/16 17:14:25 fetching corpus: 800, signal 98062/119146 (executing program) 2025/11/16 17:14:25 fetching corpus: 850, signal 99673/121847 (executing program) 2025/11/16 17:14:25 fetching corpus: 900, signal 102538/125659 (executing program) 2025/11/16 17:14:25 fetching corpus: 950, signal 104260/128455 (executing program) 2025/11/16 17:14:25 fetching corpus: 1000, signal 106582/131731 (executing program) 2025/11/16 17:14:25 fetching corpus: 1050, signal 108765/134880 (executing program) 2025/11/16 17:14:26 fetching corpus: 1100, signal 110830/137888 (executing program) 2025/11/16 17:14:26 fetching corpus: 1150, signal 113086/140986 (executing program) 2025/11/16 17:14:26 fetching corpus: 1200, signal 114919/143706 (executing program) 2025/11/16 17:14:26 fetching corpus: 1250, signal 116423/146133 (executing program) 2025/11/16 17:14:26 fetching corpus: 1300, signal 117818/148472 (executing program) 2025/11/16 17:14:26 fetching corpus: 1350, signal 118888/150502 (executing program) 2025/11/16 17:14:26 fetching corpus: 1400, signal 120493/152993 (executing program) 2025/11/16 17:14:26 fetching corpus: 1450, signal 121534/154989 (executing program) 2025/11/16 17:14:26 fetching corpus: 1500, signal 123166/157457 (executing program) 2025/11/16 17:14:26 fetching corpus: 1550, signal 123987/159229 (executing program) 2025/11/16 17:14:27 fetching corpus: 1600, signal 125367/161358 (executing program) 2025/11/16 17:14:27 fetching corpus: 1650, signal 126535/163386 (executing program) 2025/11/16 17:14:27 fetching corpus: 1700, signal 127323/165126 (executing program) 2025/11/16 17:14:27 fetching corpus: 1750, signal 128363/167026 (executing program) 2025/11/16 17:14:27 fetching corpus: 1800, signal 129176/168778 (executing program) 2025/11/16 17:14:27 fetching corpus: 1850, signal 130515/170830 (executing program) 2025/11/16 17:14:27 fetching corpus: 1900, signal 131597/172745 (executing program) 2025/11/16 17:14:27 fetching corpus: 1950, signal 132828/174726 (executing program) 2025/11/16 17:14:27 fetching corpus: 2000, signal 134444/176943 (executing program) 2025/11/16 17:14:27 fetching corpus: 2050, signal 136077/179122 (executing program) 2025/11/16 17:14:28 fetching corpus: 2100, signal 136815/180667 (executing program) 2025/11/16 17:14:28 fetching corpus: 2150, signal 137833/182445 (executing program) 2025/11/16 17:14:28 fetching corpus: 2200, signal 139053/184304 (executing program) 2025/11/16 17:14:28 fetching corpus: 2250, signal 140415/186259 (executing program) 2025/11/16 17:14:28 fetching corpus: 2300, signal 141611/188123 (executing program) 2025/11/16 17:14:28 fetching corpus: 2350, signal 142441/189714 (executing program) 2025/11/16 17:14:28 fetching corpus: 2400, signal 143220/191232 (executing program) 2025/11/16 17:14:28 fetching corpus: 2450, signal 144307/192899 (executing program) 2025/11/16 17:14:28 fetching corpus: 2500, signal 145088/194388 (executing program) 2025/11/16 17:14:28 fetching corpus: 2550, signal 146053/196011 (executing program) 2025/11/16 17:14:28 fetching corpus: 2600, signal 146803/197518 (executing program) 2025/11/16 17:14:29 fetching corpus: 2650, signal 147731/199077 (executing program) 2025/11/16 17:14:29 fetching corpus: 2700, signal 148594/200658 (executing program) 2025/11/16 17:14:29 fetching corpus: 2750, signal 149294/202031 (executing program) 2025/11/16 17:14:29 fetching corpus: 2800, signal 150145/203524 (executing program) 2025/11/16 17:14:29 fetching corpus: 2850, signal 151024/205026 (executing program) 2025/11/16 17:14:29 fetching corpus: 2900, signal 151984/206565 (executing program) 2025/11/16 17:14:29 fetching corpus: 2950, signal 152603/207881 (executing program) 2025/11/16 17:14:29 fetching corpus: 3000, signal 153091/209108 (executing program) 2025/11/16 17:14:29 fetching corpus: 3050, signal 154107/210670 (executing program) 2025/11/16 17:14:30 fetching corpus: 3100, signal 154832/211992 (executing program) 2025/11/16 17:14:30 fetching corpus: 3150, signal 155586/213337 (executing program) 2025/11/16 17:14:30 fetching corpus: 3200, signal 157138/215087 (executing program) 2025/11/16 17:14:30 fetching corpus: 3250, signal 157960/216430 (executing program) 2025/11/16 17:14:30 fetching corpus: 3300, signal 158658/217683 (executing program) 2025/11/16 17:14:30 fetching corpus: 3350, signal 159418/218996 (executing program) 2025/11/16 17:14:30 fetching corpus: 3400, signal 160343/220328 (executing program) 2025/11/16 17:14:30 fetching corpus: 3450, signal 160908/221494 (executing program) 2025/11/16 17:14:30 fetching corpus: 3500, signal 161581/222708 (executing program) 2025/11/16 17:14:30 fetching corpus: 3550, signal 162205/223897 (executing program) 2025/11/16 17:14:31 fetching corpus: 3600, signal 162719/225017 (executing program) 2025/11/16 17:14:31 fetching corpus: 3650, signal 163263/226154 (executing program) 2025/11/16 17:14:31 fetching corpus: 3700, signal 163633/227170 (executing program) 2025/11/16 17:14:31 fetching corpus: 3750, signal 164236/228266 (executing program) 2025/11/16 17:14:31 fetching corpus: 3800, signal 165075/229475 (executing program) 2025/11/16 17:14:31 fetching corpus: 3850, signal 165661/230566 (executing program) 2025/11/16 17:14:31 fetching corpus: 3900, signal 166217/231661 (executing program) 2025/11/16 17:14:31 fetching corpus: 3950, signal 167022/232923 (executing program) 2025/11/16 17:14:31 fetching corpus: 4000, signal 167471/233933 (executing program) 2025/11/16 17:14:31 fetching corpus: 4050, signal 167974/235023 (executing program) 2025/11/16 17:14:32 fetching corpus: 4100, signal 168570/236122 (executing program) 2025/11/16 17:14:32 fetching corpus: 4150, signal 169114/237188 (executing program) 2025/11/16 17:14:32 fetching corpus: 4200, signal 169685/238256 (executing program) 2025/11/16 17:14:32 fetching corpus: 4250, signal 170289/239306 (executing program) 2025/11/16 17:14:32 fetching corpus: 4300, signal 170715/240302 (executing program) 2025/11/16 17:14:32 fetching corpus: 4350, signal 171581/241414 (executing program) 2025/11/16 17:14:32 fetching corpus: 4400, signal 172055/242387 (executing program) 2025/11/16 17:14:32 fetching corpus: 4450, signal 172692/243390 (executing program) 2025/11/16 17:14:32 fetching corpus: 4500, signal 173037/244341 (executing program) 2025/11/16 17:14:32 fetching corpus: 4550, signal 173558/245313 (executing program) 2025/11/16 17:14:32 fetching corpus: 4600, signal 174094/246304 (executing program) 2025/11/16 17:14:33 fetching corpus: 4650, signal 174411/247186 (executing program) 2025/11/16 17:14:33 fetching corpus: 4700, signal 174987/248167 (executing program) 2025/11/16 17:14:33 fetching corpus: 4750, signal 175449/249143 (executing program) 2025/11/16 17:14:33 fetching corpus: 4800, signal 175917/250075 (executing program) 2025/11/16 17:14:33 fetching corpus: 4850, signal 176436/250993 (executing program) 2025/11/16 17:14:33 fetching corpus: 4900, signal 176885/251889 (executing program) 2025/11/16 17:14:33 fetching corpus: 4950, signal 177364/252844 (executing program) 2025/11/16 17:14:33 fetching corpus: 5000, signal 177826/253750 (executing program) 2025/11/16 17:14:33 fetching corpus: 5050, signal 178154/254589 (executing program) 2025/11/16 17:14:34 fetching corpus: 5100, signal 178524/255457 (executing program) 2025/11/16 17:14:34 fetching corpus: 5150, signal 179380/256407 (executing program) 2025/11/16 17:14:34 fetching corpus: 5200, signal 179787/257239 (executing program) 2025/11/16 17:14:34 fetching corpus: 5250, signal 180165/258056 (executing program) 2025/11/16 17:14:34 fetching corpus: 5300, signal 180524/258914 (executing program) 2025/11/16 17:14:34 fetching corpus: 5350, signal 180894/259777 (executing program) 2025/11/16 17:14:34 fetching corpus: 5400, signal 181695/260687 (executing program) 2025/11/16 17:14:34 fetching corpus: 5450, signal 182111/261494 (executing program) 2025/11/16 17:14:34 fetching corpus: 5500, signal 182543/262307 (executing program) 2025/11/16 17:14:35 fetching corpus: 5550, signal 183083/263163 (executing program) 2025/11/16 17:14:35 fetching corpus: 5600, signal 183507/264033 (executing program) 2025/11/16 17:14:35 fetching corpus: 5650, signal 183848/264830 (executing program) 2025/11/16 17:14:35 fetching corpus: 5700, signal 184285/265662 (executing program) 2025/11/16 17:14:35 fetching corpus: 5750, signal 184858/266496 (executing program) 2025/11/16 17:14:35 fetching corpus: 5800, signal 185158/267245 (executing program) 2025/11/16 17:14:35 fetching corpus: 5850, signal 185458/268029 (executing program) 2025/11/16 17:14:35 fetching corpus: 5900, signal 185989/268854 (executing program) 2025/11/16 17:14:35 fetching corpus: 5950, signal 186315/269603 (executing program) 2025/11/16 17:14:35 fetching corpus: 6000, signal 186843/270373 (executing program) 2025/11/16 17:14:35 fetching corpus: 6050, signal 187342/271196 (executing program) 2025/11/16 17:14:36 fetching corpus: 6100, signal 187826/271936 (executing program) 2025/11/16 17:14:36 fetching corpus: 6150, signal 188274/272661 (executing program) 2025/11/16 17:14:36 fetching corpus: 6200, signal 188877/273456 (executing program) 2025/11/16 17:14:36 fetching corpus: 6250, signal 189200/274192 (executing program) 2025/11/16 17:14:36 fetching corpus: 6300, signal 189616/274915 (executing program) 2025/11/16 17:14:36 fetching corpus: 6350, signal 190095/275668 (executing program) 2025/11/16 17:14:36 fetching corpus: 6400, signal 190467/276384 (executing program) 2025/11/16 17:14:36 fetching corpus: 6450, signal 190924/277123 (executing program) 2025/11/16 17:14:36 fetching corpus: 6500, signal 191210/277773 (executing program) 2025/11/16 17:14:36 fetching corpus: 6550, signal 191602/278487 (executing program) 2025/11/16 17:14:37 fetching corpus: 6600, signal 191985/279197 (executing program) 2025/11/16 17:14:37 fetching corpus: 6650, signal 192364/279878 (executing program) 2025/11/16 17:14:37 fetching corpus: 6700, signal 192634/280551 (executing program) 2025/11/16 17:14:37 fetching corpus: 6750, signal 192935/281242 (executing program) 2025/11/16 17:14:37 fetching corpus: 6800, signal 193386/281912 (executing program) 2025/11/16 17:14:37 fetching corpus: 6850, signal 193760/282575 (executing program) 2025/11/16 17:14:37 fetching corpus: 6900, signal 194133/283224 (executing program) 2025/11/16 17:14:37 fetching corpus: 6950, signal 194430/283864 (executing program) 2025/11/16 17:14:37 fetching corpus: 7000, signal 194762/284494 (executing program) 2025/11/16 17:14:37 fetching corpus: 7050, signal 195192/285146 (executing program) 2025/11/16 17:14:38 fetching corpus: 7100, signal 195555/285807 (executing program) 2025/11/16 17:14:38 fetching corpus: 7150, signal 195792/286436 (executing program) 2025/11/16 17:14:38 fetching corpus: 7200, signal 196042/286619 (executing program) 2025/11/16 17:14:38 fetching corpus: 7250, signal 196250/286619 (executing program) 2025/11/16 17:14:38 fetching corpus: 7300, signal 196535/286619 (executing program) 2025/11/16 17:14:38 fetching corpus: 7350, signal 196888/286636 (executing program) 2025/11/16 17:14:38 fetching corpus: 7400, signal 197196/286636 (executing program) 2025/11/16 17:14:38 fetching corpus: 7450, signal 197477/286636 (executing program) 2025/11/16 17:14:38 fetching corpus: 7500, signal 197747/286636 (executing program) 2025/11/16 17:14:38 fetching corpus: 7550, signal 198060/286636 (executing program) 2025/11/16 17:14:38 fetching corpus: 7600, signal 198300/286636 (executing program) 2025/11/16 17:14:38 fetching corpus: 7650, signal 198772/286636 (executing program) 2025/11/16 17:14:38 fetching corpus: 7700, signal 199009/286636 (executing program) 2025/11/16 17:14:39 fetching corpus: 7750, signal 199465/286636 (executing program) 2025/11/16 17:14:39 fetching corpus: 7800, signal 199683/286638 (executing program) 2025/11/16 17:14:39 fetching corpus: 7850, signal 200088/286638 (executing program) 2025/11/16 17:14:39 fetching corpus: 7900, signal 200430/286641 (executing program) 2025/11/16 17:14:39 fetching corpus: 7950, signal 200732/286641 (executing program) 2025/11/16 17:14:39 fetching corpus: 8000, signal 201009/286642 (executing program) 2025/11/16 17:14:39 fetching corpus: 8050, signal 201315/286642 (executing program) 2025/11/16 17:14:39 fetching corpus: 8100, signal 201619/286642 (executing program) 2025/11/16 17:14:39 fetching corpus: 8150, signal 201845/286642 (executing program) 2025/11/16 17:14:39 fetching corpus: 8200, signal 202290/286642 (executing program) 2025/11/16 17:14:39 fetching corpus: 8250, signal 202613/286642 (executing program) 2025/11/16 17:14:39 fetching corpus: 8300, signal 202972/286642 (executing program) 2025/11/16 17:14:39 fetching corpus: 8350, signal 203285/286642 (executing program) 2025/11/16 17:14:40 fetching corpus: 8400, signal 203604/286642 (executing program) 2025/11/16 17:14:40 fetching corpus: 8450, signal 204029/286642 (executing program) 2025/11/16 17:14:40 fetching corpus: 8500, signal 204271/286644 (executing program) 2025/11/16 17:14:40 fetching corpus: 8550, signal 204649/286644 (executing program) 2025/11/16 17:14:40 fetching corpus: 8600, signal 204949/286644 (executing program) 2025/11/16 17:14:40 fetching corpus: 8650, signal 205333/286644 (executing program) 2025/11/16 17:14:40 fetching corpus: 8700, signal 205664/286644 (executing program) 2025/11/16 17:14:40 fetching corpus: 8750, signal 206029/286644 (executing program) 2025/11/16 17:14:40 fetching corpus: 8800, signal 206277/286644 (executing program) 2025/11/16 17:14:40 fetching corpus: 8850, signal 206644/286644 (executing program) 2025/11/16 17:14:40 fetching corpus: 8900, signal 206891/286644 (executing program) 2025/11/16 17:14:41 fetching corpus: 8950, signal 207103/286644 (executing program) 2025/11/16 17:14:41 fetching corpus: 9000, signal 207440/286644 (executing program) 2025/11/16 17:14:41 fetching corpus: 9050, signal 207830/286644 (executing program) 2025/11/16 17:14:41 fetching corpus: 9100, signal 208246/286645 (executing program) 2025/11/16 17:14:41 fetching corpus: 9150, signal 208515/286645 (executing program) 2025/11/16 17:14:41 fetching corpus: 9200, signal 208764/286645 (executing program) 2025/11/16 17:14:41 fetching corpus: 9250, signal 209131/286645 (executing program) 2025/11/16 17:14:41 fetching corpus: 9300, signal 209324/286647 (executing program) 2025/11/16 17:14:41 fetching corpus: 9350, signal 209574/286647 (executing program) 2025/11/16 17:14:41 fetching corpus: 9400, signal 209843/286649 (executing program) 2025/11/16 17:14:41 fetching corpus: 9450, signal 210142/286649 (executing program) 2025/11/16 17:14:42 fetching corpus: 9500, signal 210473/286649 (executing program) 2025/11/16 17:14:42 fetching corpus: 9550, signal 210700/286649 (executing program) 2025/11/16 17:14:42 fetching corpus: 9600, signal 210999/286649 (executing program) 2025/11/16 17:14:42 fetching corpus: 9650, signal 211257/286649 (executing program) 2025/11/16 17:14:42 fetching corpus: 9700, signal 211515/286649 (executing program) 2025/11/16 17:14:42 fetching corpus: 9750, signal 211905/286649 (executing program) 2025/11/16 17:14:42 fetching corpus: 9800, signal 212121/286649 (executing program) 2025/11/16 17:14:42 fetching corpus: 9850, signal 212308/286649 (executing program) 2025/11/16 17:14:42 fetching corpus: 9900, signal 212690/286649 (executing program) 2025/11/16 17:14:42 fetching corpus: 9950, signal 213046/286649 (executing program) 2025/11/16 17:14:42 fetching corpus: 10000, signal 213310/286649 (executing program) 2025/11/16 17:14:43 fetching corpus: 10050, signal 213627/286649 (executing program) 2025/11/16 17:14:43 fetching corpus: 10100, signal 213908/286649 (executing program) 2025/11/16 17:14:43 fetching corpus: 10150, signal 214248/286654 (executing program) 2025/11/16 17:14:43 fetching corpus: 10200, signal 214528/286654 (executing program) 2025/11/16 17:14:43 fetching corpus: 10250, signal 214718/286654 (executing program) 2025/11/16 17:14:43 fetching corpus: 10300, signal 215110/286654 (executing program) 2025/11/16 17:14:43 fetching corpus: 10350, signal 215339/286654 (executing program) 2025/11/16 17:14:43 fetching corpus: 10400, signal 215541/286654 (executing program) 2025/11/16 17:14:43 fetching corpus: 10450, signal 215836/286654 (executing program) 2025/11/16 17:14:43 fetching corpus: 10500, signal 216028/286654 (executing program) 2025/11/16 17:14:44 fetching corpus: 10550, signal 216253/286654 (executing program) 2025/11/16 17:14:44 fetching corpus: 10600, signal 216489/286654 (executing program) 2025/11/16 17:14:44 fetching corpus: 10650, signal 216697/286654 (executing program) 2025/11/16 17:14:44 fetching corpus: 10700, signal 216880/286654 (executing program) 2025/11/16 17:14:44 fetching corpus: 10750, signal 217171/286654 (executing program) 2025/11/16 17:14:44 fetching corpus: 10800, signal 217401/286654 (executing program) 2025/11/16 17:14:44 fetching corpus: 10850, signal 217594/286654 (executing program) 2025/11/16 17:14:44 fetching corpus: 10900, signal 217748/286654 (executing program) 2025/11/16 17:14:44 fetching corpus: 10950, signal 217989/286654 (executing program) 2025/11/16 17:14:44 fetching corpus: 11000, signal 218206/286654 (executing program) 2025/11/16 17:14:44 fetching corpus: 11050, signal 218523/286654 (executing program) 2025/11/16 17:14:44 fetching corpus: 11100, signal 218750/286654 (executing program) 2025/11/16 17:14:45 fetching corpus: 11150, signal 219070/286655 (executing program) 2025/11/16 17:14:45 fetching corpus: 11200, signal 219333/286655 (executing program) 2025/11/16 17:14:45 fetching corpus: 11250, signal 219521/286655 (executing program) 2025/11/16 17:14:45 fetching corpus: 11300, signal 219775/286655 (executing program) 2025/11/16 17:14:45 fetching corpus: 11350, signal 219948/286655 (executing program) 2025/11/16 17:14:45 fetching corpus: 11400, signal 220241/286655 (executing program) 2025/11/16 17:14:45 fetching corpus: 11450, signal 220452/286655 (executing program) 2025/11/16 17:14:45 fetching corpus: 11500, signal 220687/286655 (executing program) 2025/11/16 17:14:45 fetching corpus: 11550, signal 220847/286655 (executing program) 2025/11/16 17:14:45 fetching corpus: 11600, signal 221022/286655 (executing program) 2025/11/16 17:14:45 fetching corpus: 11650, signal 221379/286655 (executing program) 2025/11/16 17:14:46 fetching corpus: 11700, signal 221543/286655 (executing program) 2025/11/16 17:14:46 fetching corpus: 11750, signal 221794/286655 (executing program) 2025/11/16 17:14:46 fetching corpus: 11800, signal 222097/286655 (executing program) 2025/11/16 17:14:46 fetching corpus: 11850, signal 222335/286655 (executing program) 2025/11/16 17:14:46 fetching corpus: 11900, signal 222611/286655 (executing program) 2025/11/16 17:14:46 fetching corpus: 11950, signal 222887/286655 (executing program) 2025/11/16 17:14:46 fetching corpus: 12000, signal 223127/286655 (executing program) 2025/11/16 17:14:46 fetching corpus: 12050, signal 223456/286655 (executing program) 2025/11/16 17:14:46 fetching corpus: 12100, signal 223674/286655 (executing program) 2025/11/16 17:14:47 fetching corpus: 12150, signal 223867/286655 (executing program) 2025/11/16 17:14:47 fetching corpus: 12200, signal 224106/286655 (executing program) 2025/11/16 17:14:47 fetching corpus: 12250, signal 224400/286655 (executing program) 2025/11/16 17:14:47 fetching corpus: 12300, signal 224671/286655 (executing program) 2025/11/16 17:14:47 fetching corpus: 12350, signal 224847/286655 (executing program) 2025/11/16 17:14:47 fetching corpus: 12400, signal 225008/286655 (executing program) 2025/11/16 17:14:47 fetching corpus: 12450, signal 225281/286655 (executing program) 2025/11/16 17:14:47 fetching corpus: 12500, signal 225514/286655 (executing program) 2025/11/16 17:14:47 fetching corpus: 12550, signal 225719/286655 (executing program) 2025/11/16 17:14:47 fetching corpus: 12600, signal 226029/286655 (executing program) 2025/11/16 17:14:47 fetching corpus: 12650, signal 226300/286655 (executing program) 2025/11/16 17:14:47 fetching corpus: 12700, signal 226506/286655 (executing program) 2025/11/16 17:14:48 fetching corpus: 12750, signal 226737/286655 (executing program) 2025/11/16 17:14:48 fetching corpus: 12800, signal 226972/286655 (executing program) 2025/11/16 17:14:48 fetching corpus: 12850, signal 227172/286655 (executing program) 2025/11/16 17:14:48 fetching corpus: 12900, signal 227386/286655 (executing program) 2025/11/16 17:14:48 fetching corpus: 12950, signal 227634/286664 (executing program) 2025/11/16 17:14:48 fetching corpus: 13000, signal 227918/286664 (executing program) 2025/11/16 17:14:48 fetching corpus: 13050, signal 228103/286664 (executing program) 2025/11/16 17:14:48 fetching corpus: 13100, signal 228286/286664 (executing program) 2025/11/16 17:14:48 fetching corpus: 13150, signal 228456/286664 (executing program) 2025/11/16 17:14:48 fetching corpus: 13200, signal 228603/286664 (executing program) 2025/11/16 17:14:49 fetching corpus: 13250, signal 228827/286664 (executing program) 2025/11/16 17:14:49 fetching corpus: 13300, signal 229034/286666 (executing program) 2025/11/16 17:14:49 fetching corpus: 13350, signal 229170/286666 (executing program) 2025/11/16 17:14:49 fetching corpus: 13400, signal 229399/286666 (executing program) 2025/11/16 17:14:49 fetching corpus: 13450, signal 229605/286666 (executing program) 2025/11/16 17:14:49 fetching corpus: 13500, signal 229792/286666 (executing program) 2025/11/16 17:14:49 fetching corpus: 13550, signal 229984/286666 (executing program) 2025/11/16 17:14:49 fetching corpus: 13600, signal 230123/286666 (executing program) 2025/11/16 17:14:49 fetching corpus: 13650, signal 230333/286666 (executing program) 2025/11/16 17:14:49 fetching corpus: 13700, signal 230488/286667 (executing program) 2025/11/16 17:14:50 fetching corpus: 13750, signal 230698/286667 (executing program) 2025/11/16 17:14:50 fetching corpus: 13800, signal 230841/286667 (executing program) 2025/11/16 17:14:50 fetching corpus: 13850, signal 230984/286667 (executing program) 2025/11/16 17:14:50 fetching corpus: 13900, signal 231180/286667 (executing program) 2025/11/16 17:14:50 fetching corpus: 13950, signal 231434/286667 (executing program) 2025/11/16 17:14:50 fetching corpus: 14000, signal 231658/286667 (executing program) 2025/11/16 17:14:50 fetching corpus: 14050, signal 231880/286667 (executing program) 2025/11/16 17:14:50 fetching corpus: 14100, signal 232063/286667 (executing program) 2025/11/16 17:14:50 fetching corpus: 14150, signal 232222/286667 (executing program) 2025/11/16 17:14:50 fetching corpus: 14200, signal 232383/286667 (executing program) 2025/11/16 17:14:51 fetching corpus: 14250, signal 232543/286667 (executing program) 2025/11/16 17:14:51 fetching corpus: 14300, signal 232776/286667 (executing program) 2025/11/16 17:14:51 fetching corpus: 14350, signal 232977/286667 (executing program) 2025/11/16 17:14:51 fetching corpus: 14400, signal 233224/286667 (executing program) 2025/11/16 17:14:51 fetching corpus: 14450, signal 233389/286667 (executing program) 2025/11/16 17:14:51 fetching corpus: 14500, signal 233544/286667 (executing program) 2025/11/16 17:14:51 fetching corpus: 14550, signal 233764/286667 (executing program) 2025/11/16 17:14:51 fetching corpus: 14600, signal 233980/286667 (executing program) 2025/11/16 17:14:51 fetching corpus: 14650, signal 234188/286667 (executing program) 2025/11/16 17:14:51 fetching corpus: 14700, signal 234406/286667 (executing program) 2025/11/16 17:14:51 fetching corpus: 14750, signal 234563/286667 (executing program) 2025/11/16 17:14:51 fetching corpus: 14800, signal 234699/286667 (executing program) 2025/11/16 17:14:52 fetching corpus: 14850, signal 234895/286667 (executing program) 2025/11/16 17:14:52 fetching corpus: 14900, signal 235031/286667 (executing program) 2025/11/16 17:14:52 fetching corpus: 14950, signal 235233/286667 (executing program) 2025/11/16 17:14:52 fetching corpus: 15000, signal 235404/286667 (executing program) 2025/11/16 17:14:52 fetching corpus: 15050, signal 235563/286667 (executing program) 2025/11/16 17:14:52 fetching corpus: 15100, signal 235759/286668 (executing program) 2025/11/16 17:14:52 fetching corpus: 15150, signal 235893/286668 (executing program) 2025/11/16 17:14:52 fetching corpus: 15200, signal 236094/286668 (executing program) 2025/11/16 17:14:52 fetching corpus: 15250, signal 236241/286668 (executing program) 2025/11/16 17:14:52 fetching corpus: 15300, signal 236440/286668 (executing program) 2025/11/16 17:14:52 fetching corpus: 15350, signal 236637/286671 (executing program) 2025/11/16 17:14:53 fetching corpus: 15400, signal 236796/286671 (executing program) 2025/11/16 17:14:53 fetching corpus: 15450, signal 237003/286671 (executing program) 2025/11/16 17:14:53 fetching corpus: 15500, signal 237249/286671 (executing program) 2025/11/16 17:14:53 fetching corpus: 15550, signal 237390/286671 (executing program) 2025/11/16 17:14:53 fetching corpus: 15600, signal 237603/286671 (executing program) 2025/11/16 17:14:53 fetching corpus: 15650, signal 237784/286672 (executing program) 2025/11/16 17:14:53 fetching corpus: 15700, signal 237969/286672 (executing program) 2025/11/16 17:14:53 fetching corpus: 15750, signal 238156/286672 (executing program) 2025/11/16 17:14:53 fetching corpus: 15800, signal 238523/286672 (executing program) 2025/11/16 17:14:53 fetching corpus: 15850, signal 238683/286679 (executing program) 2025/11/16 17:14:53 fetching corpus: 15900, signal 238821/286679 (executing program) 2025/11/16 17:14:54 fetching corpus: 15950, signal 239067/286679 (executing program) 2025/11/16 17:14:54 fetching corpus: 16000, signal 239219/286679 (executing program) 2025/11/16 17:14:54 fetching corpus: 16050, signal 239825/286679 (executing program) 2025/11/16 17:14:54 fetching corpus: 16100, signal 240036/286679 (executing program) 2025/11/16 17:14:54 fetching corpus: 16150, signal 240275/286679 (executing program) 2025/11/16 17:14:54 fetching corpus: 16200, signal 240503/286679 (executing program) 2025/11/16 17:14:54 fetching corpus: 16250, signal 240684/286682 (executing program) 2025/11/16 17:14:54 fetching corpus: 16300, signal 240840/286682 (executing program) 2025/11/16 17:14:54 fetching corpus: 16350, signal 240977/286682 (executing program) 2025/11/16 17:14:55 fetching corpus: 16400, signal 241127/286682 (executing program) 2025/11/16 17:14:55 fetching corpus: 16450, signal 241255/286682 (executing program) 2025/11/16 17:14:55 fetching corpus: 16500, signal 241419/286682 (executing program) 2025/11/16 17:14:55 fetching corpus: 16550, signal 241582/286686 (executing program) 2025/11/16 17:14:55 fetching corpus: 16600, signal 241695/286686 (executing program) 2025/11/16 17:14:55 fetching corpus: 16650, signal 241826/286686 (executing program) 2025/11/16 17:14:55 fetching corpus: 16700, signal 241967/286686 (executing program) 2025/11/16 17:14:55 fetching corpus: 16750, signal 242106/286686 (executing program) 2025/11/16 17:14:55 fetching corpus: 16800, signal 242274/286686 (executing program) 2025/11/16 17:14:55 fetching corpus: 16825, signal 242333/286686 (executing program) 2025/11/16 17:14:55 fetching corpus: 16825, signal 242333/286686 (executing program) 2025/11/16 17:14:57 starting 8 fuzzer processes 17:14:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syncfs(r0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040)) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$BLKROSET(r5, 0x125d, &(0x7f00000001c0)=0x8) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000240)={{r4}, 0x3, &(0x7f0000000200)=[0x200, 0x6, 0x5], 0xffffffffffff320f, 0x1, [0x3, 0x996, 0x4]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001540), 0x81, 0x0) r8 = fcntl$getown(0xffffffffffffffff, 0x9) r9 = getuid() r10 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001700)={0x0}, &(0x7f0000001740)=0xc) lstat(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000002d00)=[{{&(0x7f0000001840), 0x6e, &(0x7f0000001a00)=[{&(0x7f00000018c0)=""/55, 0x37}, {&(0x7f0000001900)=""/163, 0xa3}, {&(0x7f00000019c0)=""/10, 0xa}], 0x3, &(0x7f0000001a40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001ac0), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001b40)=""/21, 0x15}, {&(0x7f0000001b80)=""/58, 0x3a}, {&(0x7f0000001bc0)=""/112, 0x70}, {&(0x7f0000001c40)=""/53, 0x35}], 0x4}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001d40)=""/5, 0x5}, {&(0x7f0000001d80)=""/96, 0x60}, {&(0x7f0000001e00)=""/213, 0xd5}, {&(0x7f0000001f00)=""/151, 0x97}, {&(0x7f0000001fc0)}, {&(0x7f0000002000)=""/47, 0x2f}, {&(0x7f0000002040)=""/185, 0xb9}, {&(0x7f0000002100)=""/185, 0xb9}], 0x8, &(0x7f0000002240)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{&(0x7f00000023c0)=@abs, 0x6e, &(0x7f0000002640)=[{&(0x7f0000002440)=""/113, 0x71}, {&(0x7f00000024c0)=""/102, 0x66}, {&(0x7f0000002540)=""/203, 0xcb}], 0x3, &(0x7f0000002680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000026c0)=@abs, 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002740)=""/7, 0x7}, {&(0x7f0000002780)=""/207, 0xcf}, {&(0x7f0000002880)=""/222, 0xde}, {&(0x7f0000002980)=""/99, 0x63}, {&(0x7f0000002a00)=""/6, 0x6}, {&(0x7f0000002a40)=""/115, 0x73}, {&(0x7f0000002ac0)=""/155, 0x9b}, {&(0x7f0000002b80)=""/94, 0x5e}], 0x8, &(0x7f0000002c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}}], 0x5, 0x100, &(0x7f0000002e40)={0x77359400}) fstat(r2, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r6, &(0x7f00000096c0)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000000380)="09d1f8bf68ade1a9e2d0899d55e22e07722daf1c9731800d7280b91f23a4a337371382328680514c1d212466300a3f4d1ef626c972f6aac01625ac5aa944", 0x3e}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="c09c8b34f60aa229043c5c08ab291a0c8d8b2ca4fb226d667c2482a943f8b536ac11194f3ed6739cd48c98571614901280ac6696ccfccfd662ef340c50866d83cea66312f0319d32b5ca31f2cecee5ad4e5a54727d9a6364122a5b1533fef8dfb8d11618aa2d3f3ca561b9f32deb7128f0ed146269b788812f67d8dbdb53c349013898e541ba40d9c4ee0957b90807a97a23639000d6cca75a4d96bf434d059a94a0cdae49df181c7cb53fee8f7ede14630fdab99515e19e293f30fa4c", 0xbd}, {&(0x7f0000001480)="7c63e04331d470f04e18c9032417f18b79bc80907d50fc5bb96a4e831c6a1d6e39af234247f05b3ecc1ccb5ca9a5a9c07e392854f40d0cfa5b586accaf2dcad5a02c860e03e8df90039ed9c40fc228f07d976afbd60a3bc50a1990541708e15fdcb6ff5342e5", 0x66}], 0x4, &(0x7f0000001580)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x70, 0x8001}}, {{&(0x7f0000001600)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001680)="59838ce0277dbb805379beea7d8940e54244881d0bfc22edcef360", 0x1b}], 0x1, &(0x7f0000002f00)=[@cred={{0x1c, 0x1, 0x2, {r11, 0xee01, r12}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xb8, 0x20000004}}, {{&(0x7f0000002fc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003240)=[{&(0x7f0000003040)="eb4cb84b27004b8bfc24128c0fa5e31f3546b10c73b39415135b39bf8349615a37d045f8e5f90b5bc057a8a263c68b82e39154186a17ec2beab0ec5b78332ca71ea36b1b6d0307", 0x47}, {&(0x7f00000030c0)="e00aa9ed8da17c98ed1b0add44c92383a2bfb0aff18f836ec2bc8dde581b309c97e5b2b8bcf93868dabdfb593f14fba83f2c9d0084496c9b859c9a8c3b704ea2bf094eb8f23b772c92c372ce3ead", 0x4e}, {&(0x7f0000003140)="4bdc21c14c358588f1cb8f5819facc7dd7571db49ed32bf29a84b6435dc203bee6960c12ee7435288a299a6209faf0b914c97916935038769c375ed30e38ed8f1bbdd81771d81accbb222212d28c1bf752e1570d9ee180111d9f0a6e7a98fa47171020b56e35e4d80875c54de8c7451efd0b05762001e51ce4074359ce17dd4c8f4890f85cdd20c43a4c59f5d99d306735e2701755bb6a3c847224aa616902ea825c841030e1d5257cc948ff23ebc7e528c34df68772566702af707efbd7ee82aa9a05d8d31aef275ff5de18db13daaf3218033d46b119c3bbf11bf754763c3f19242e01b8ad8324a9ca0f28724c1832e3", 0xf1}], 0x3, &(0x7f0000007f40)=[@rights={{0x24, 0x1, 0x1, [r5, r5, r1, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88, 0x40}}, {{&(0x7f0000008000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008100)=[{&(0x7f0000008080)="374eee26ed574b04ca0ec0a43f794e4bf996ff2beb54f0121ad062d335ed08419a2bd8291eec746e97c55600d276f8c872b57710766808cb127f56dcabfc914c3b148a96e547e14ee58dc7d2f764db5d179adfdb7691cd2c84244817576b8f33c6897314641a0e09fb4b2cc847a726262668f4c7597c9ef3dc", 0x79}], 0x1, &(0x7f0000008380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r1, r4, 0xffffffffffffffff, r5, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, r4, r3, r1, r4, r1, r1]}}], 0x98}}, {{&(0x7f0000008440)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000008540)=[{&(0x7f00000084c0)="18ae04efe4fcb1fc51967fba781c1c9d512b991de49b8d2e6d2179b27f8eb1f07c63d7ff3c6a6dd1f7222fa7119e416782465c63367d6192120f085c960bc6c9249e7a86293354d95ca14e1c6152a49f42ed112aa1fb7665", 0x58}], 0x1, &(0x7f0000008e40)=[@rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, r4]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r0, r2, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [r5, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xa0, 0x8000}}, {{&(0x7f0000008f00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000009080)=[{&(0x7f0000008f80)="9e25312724541de1ce1261b9e8c26b4ea3c5cdec7fd505276d8249287aa14dbf4bb929a014681b6d578aab3b68616f5e91cc47880399e6b335adf6e3b9ad15f4dba93b1a1794c5b6de21b21dbadba1b407465528b73bf31c6d07c523be94934977708c05559a88e08fb2cec9a2f03636eab86c4286e54df357b4aae4f05cf938cd2c13622ba0c01cb21933711d33fb233061f58c23bdf76ad802095bdb8442c9f547bdc84818cc1a46fc52bbc763ce179ec3bffce82097f1ef7f6a17332dd4c842b6dd01beb9b20d8c05adfe21cfda44e249b0a436516e00148de0092392", 0xde}], 0x1, &(0x7f0000009580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x130, 0x24000400}}], 0x6, 0x20008000) 17:14:57 executing program 1: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x3, "d58c6e31b13a2fce83397f20d2298754da86"}, 0x14, 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8001}}, './file0\x00'}) fsetxattr$security_evm(r0, &(0x7f0000000100), &(0x7f0000000140)=@md5={0x1, "047599fe68bf68d5adc738017af8243d"}, 0x11, 0x2) write$binfmt_elf32(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x90, 0x0, 0x1, 0x7f, 0x3, 0x0, 0x1, 0x12f, 0x38, 0xfb, 0x29, 0x2, 0x20, 0x2, 0x1, 0x2, 0x2}, [{0x70000000, 0x9, 0xfbb, 0x3f, 0xfffffe04, 0x9, 0x8, 0xe71b}], "53ad1c9a819b1a94448204f58e61506ad6eb94e26c611514c98b33489ce1d15841de48d40917d2", ['\x00']}, 0x17f) sendfile(r0, r0, &(0x7f0000000300)=0x2, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0}, &(0x7f00000008c0)=0xc) r3 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x100000000, 0x6, &(0x7f00000007c0)=[{&(0x7f00000003c0)="4c3fc8d838909ec0ae2613cf79970b3929a0682dc5f3c5e0b8827595f1d9af08d5dbfdb37dc9ef13b4222affb6c06c39568854d28e8faf12f47048c1445ad70fcf8cb11805bd0b81f8930dd1c4864d8ca0ba487a3d7ab6aeb39edad3d90eb5b727bdd3352d267a6820c0f5be17eb397eaf725b2630958792", 0x78, 0x4}, {&(0x7f0000000440)="007bc5a35eae08cea8399aa34f44c7290d4c51c454bd406148e05776cd7ade59cbab816c3b92dc0ff2cdd653da449bad880eeec3e998565c905a424d0a4a1af674213de958fb023d6e39c5234adb12852f81257da7fd57ca53541fc2dc0007909a83f8f8c13d47eca6df3824dcef20", 0x6f, 0x5}, {&(0x7f00000004c0)="c82d894904df8ff5e317d515e93e3d3afebf6e1af4e3b23416a0352a30d4abef096510fa8a8cfaa058da77581db71a3599867709a687ef6d846653900fc23854b3efc4a02254db3ae58ff072d5a826fb15e38998ec233298bf276586f09cfd84316c1898fc5846ba35e610e913d0b33444d35dc428d7cdd006a1d4e5c4c149cf2b8f3ad0f56dbdf6186632a2ec9b41babcd58222df86084e999195650390dbe5110aadbc6e9498e4b8e82e80b2617d7da54f191e46a9d368ed65a0897a36746858eedf3efe89b56815175f81740acd917f574406fb57aee58561d866b908b26c742e658239731cd63f54da56c98252e1e4c6e8b8fc5c", 0xf6, 0x8000}, {&(0x7f00000005c0)="66fcbefde52c0a6d00a19008313f9fc68807d2943a9da90f3ec40a6b833283c0d8559303f01eea711385817621bf13400d051d2e9c2dd229db72b11c55a0f1c03208e95206ae0f9fa120939a80cac817b173e354e318b6432ea83c5f3562fdf0b1dded4d2701d71c7fd23773a54ec8d58e22f21b3eabcbd2dec56e0fb0524095a7fa248cdf39bdc9a67f0f77b0e2783e12bf3f435dfbf4247e6251bcbaf7bf2ad169cecaf26ba0cb6226a86121161c9598f0920341c940591e324588e8", 0xbd, 0x80000000}, {&(0x7f0000000680)="1982e11ea58d5d5db0639ae2c00e9f34bca0a0a293c7d2dc9b3b62181108bd8c7e86db5585dc9d0918b6ba3b1c68002689b8e4004da02b1a1e3f93432da73f2ecad6db6a887b512cf15a9a75ee8bd339074e09ad299ef6f529381de5982dd688a8f42935382ba96c8a7ec216c3cdc91469c68399b5029b9e671097d758724e5e09d2316c0c34144e622e081eaec98b2a8afebfaeeb987c9045bee0dffc2c59c2a8ac27457e524874a038ef714b07420ab30c331f0762a379fab7def333eca6caa66c2ab83cc72d686c762e2d722d3367292b4d0dd3a086731bcdf20284df66b1d62f090d52c491631dbb40b5f267b7169e388a8a8b2f51be", 0xf8, 0x7fffffff}, {&(0x7f0000000780)="fa8e05422f9bb87d61e2cc91182a90c5", 0x10, 0x2}], 0x400000, &(0x7f0000000900)={[{@dots}, {@dots}, {@dots}, {@dots}, {@dots}], [{@smackfsdef={'smackfsdef', 0x3d, 'security.ima\x00'}}, {@euid_lt={'euid<', r2}}, {@seclabel}, {@subj_type={'subj_type', 0x3d, '%:%'}}]}) r4 = openat$cgroup_pressure(r0, &(0x7f0000000980)='io.pressure\x00', 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000a40)={0x3, 0x7, 0x64, &(0x7f00000009c0)=""/100}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a80)={0x0}, &(0x7f0000000ac0)=0xc) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000b00)={r3, 0x7, 0x3c11, 0xac25}) kcmp(r1, r5, 0x6, r6, r4) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000b40)=""/52, &(0x7f0000000b80)=0x34) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xa8, 0x0, 0x600, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x8000}, @ETHTOOL_A_COALESCE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x80}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xffff}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x100}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xfff}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0xa000000}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) close_range(r7, r4, 0x2) dup(r4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r6, {0x70ad}}, './file1\x00'}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f0000000dc0)='/dev/ptp0\x00', &(0x7f0000000e00)='./file0\x00', r0) 17:14:57 executing program 7: clock_gettime(0x0, &(0x7f0000008640)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000083c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)=""/185, 0xb9}], 0x1, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000200), 0x6e, &(0x7f0000001280)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000012c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000001340)=@abs, 0x6e, &(0x7f00000014c0)=[{&(0x7f00000013c0)=""/228, 0xe4}], 0x1, &(0x7f0000001500)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000016c0)=""/129, 0x81}, {&(0x7f0000001780)=""/119, 0x77}, {&(0x7f0000001800)=""/186, 0xba}, {&(0x7f00000018c0)=""/189, 0xbd}, {&(0x7f0000001980)=""/79, 0x4f}, {&(0x7f0000001a00)=""/58, 0x3a}], 0x6, &(0x7f0000001ac0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001bc0)}, {&(0x7f0000001c00)=""/136, 0x88}, {&(0x7f0000001cc0)=""/198, 0xc6}, {&(0x7f0000001dc0)=""/231, 0xe7}], 0x4, &(0x7f0000001f00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000001fc0)=@abs, 0x6e, &(0x7f0000003340)=[{&(0x7f0000002040)=""/182, 0xb6}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/79, 0x4f}, {&(0x7f0000003180)=""/128, 0x80}, {&(0x7f0000003200)=""/67, 0x43}, {&(0x7f0000003280)=""/116, 0x74}, {&(0x7f0000003300)=""/49, 0x31}], 0x7, &(0x7f00000033c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003400)=@abs, 0x6e, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/188, 0xbc}, {&(0x7f0000003540)=""/60, 0x3c}, {&(0x7f0000003580)=""/10, 0xa}], 0x3, &(0x7f0000003600)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000003700), 0x6e, &(0x7f00000039c0)=[{&(0x7f0000003780)=""/140, 0x8c}, {&(0x7f0000003840)=""/133, 0x85}, {&(0x7f0000003900)=""/188, 0xbc}], 0x3, &(0x7f0000003a00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000005e40)=[{&(0x7f0000003ac0)=""/15, 0xf}, {&(0x7f0000003b00)=""/204, 0xcc}, {&(0x7f0000003c00)=""/14, 0xe}, {&(0x7f0000003c40)=""/108, 0x6c}, {&(0x7f0000003cc0)=""/170, 0xaa}, {&(0x7f0000003d80)=""/12, 0xc}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/4096, 0x1000}, {&(0x7f0000005dc0)=""/119, 0x77}], 0x9, &(0x7f0000005f00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000006000)=@abs, 0x6e, &(0x7f0000008300)=[{&(0x7f0000006080)=""/231, 0xe7}, {&(0x7f0000006180)=""/58, 0x3a}, {&(0x7f00000061c0)=""/11, 0xb}, {&(0x7f0000006200)=""/4096, 0x1000}, {&(0x7f0000007200)=""/29, 0x1d}, {&(0x7f0000007240)=""/14, 0xe}, {&(0x7f0000007280)=""/4096, 0x1000}, {&(0x7f0000008280)=""/74, 0x4a}], 0x8, &(0x7f0000008380)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0xa, 0x122, &(0x7f0000008680)={r0, r1+10000000}) r13 = accept4$unix(r8, &(0x7f00000086c0), &(0x7f0000008740)=0x6e, 0x800) getsockname$unix(r13, &(0x7f0000008780), &(0x7f0000008800)=0x6e) ppoll(&(0x7f0000008840)=[{r7, 0x22}], 0x1, &(0x7f0000008880)={0x77359400}, &(0x7f00000088c0)={[0x10001]}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000008980)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000008a80)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000008ac0)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000008bc0)=0xe8) mount$cgroup2(0x0, &(0x7f0000008900)='./file0\x00', &(0x7f0000008940), 0x24020, &(0x7f0000008c00)={[{@memory_localevents}, {}, {@subsystem='cpuset'}, {@memory_recursiveprot}, {@memory_localevents}, {}, {@memory_recursiveprot}, {@memory_localevents}, {@memory_localevents}, {}], [{@obj_role={'obj_role', 0x3d, '\'+#'}}, {@euid_gt={'euid>', r14}}, {@uid_lt={'uid<', r15}}, {@measure}]}) ioctl$FS_IOC_FSGETXATTR(r12, 0x801c581f, &(0x7f0000008d00)={0x341e, 0x7, 0xffff, 0x7f, 0x453}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000008d40)) r16 = dup2(0xffffffffffffffff, r6) recvmmsg$unix(r16, &(0x7f000000c700)=[{{&(0x7f0000008d80)=@abs, 0x6e, &(0x7f000000a000)=[{&(0x7f0000008e00)=""/213, 0xd5}, {&(0x7f0000008f00)=""/249, 0xf9}, {&(0x7f0000009000)=""/4096, 0x1000}], 0x3, &(0x7f000000a040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f000000a0c0)=@abs, 0x6e, &(0x7f000000a6c0)=[{&(0x7f000000a140)=""/11, 0xb}, {&(0x7f000000a180)=""/196, 0xc4}, {&(0x7f000000a280)=""/167, 0xa7}, {&(0x7f000000a340)=""/140, 0x8c}, {&(0x7f000000a400)=""/20, 0x14}, {&(0x7f000000a440)=""/90, 0x5a}, {&(0x7f000000a4c0)=""/199, 0xc7}, {&(0x7f000000a5c0)=""/84, 0x54}, {&(0x7f000000a640)}, {&(0x7f000000a680)=""/24, 0x18}], 0xa, &(0x7f000000a780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f000000a840)=@abs, 0x6e, &(0x7f000000ac40)=[{&(0x7f000000a8c0)=""/162, 0xa2}, {&(0x7f000000a980)=""/35, 0x23}, {&(0x7f000000a9c0)=""/67, 0x43}, {&(0x7f000000aa40)=""/3, 0x3}, {&(0x7f000000aa80)=""/226, 0xe2}, {&(0x7f000000ab80)=""/179, 0xb3}], 0x6, &(0x7f000000acc0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f000000ad40)=@abs, 0x6e, &(0x7f000000c100)=[{&(0x7f000000adc0)=""/176, 0xb0}, {&(0x7f000000ae80)=""/225, 0xe1}, {&(0x7f000000af80)=""/4096, 0x1000}, {&(0x7f000000bf80)=""/93, 0x5d}, {&(0x7f000000c000)=""/232, 0xe8}], 0x5, &(0x7f000000c180)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f000000c1c0)=@abs, 0x6e, &(0x7f000000c400)=[{&(0x7f000000c240)=""/140, 0x8c}, {&(0x7f000000c300)=""/11, 0xb}, {&(0x7f000000c340)=""/182, 0xb6}], 0x3, &(0x7f000000c440)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{0x0, 0x0, &(0x7f000000c680)=[{&(0x7f000000c480)=""/54, 0x36}, {&(0x7f000000c4c0)=""/28, 0x1c}, {&(0x7f000000c500)=""/78, 0x4e}, {&(0x7f000000c580)=""/13, 0xd}, {&(0x7f000000c5c0)=""/137, 0x89}], 0x5}}], 0x6, 0x10100, &(0x7f000000c880)={0x0, 0x989680}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f000000c940)={'gretap0\x00', &(0x7f000000c8c0)={'syztnl1\x00', 0x0, 0x10, 0x8, 0x7, 0x7, {{0xc, 0x4, 0x0, 0x9, 0x30, 0x66, 0x0, 0x20, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@end, @timestamp_prespec={0x44, 0x14, 0xc0, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@private=0xa010102, 0x8}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f000000ca00)={'ip6tnl0\x00', &(0x7f000000c980)={'ip6tnl0\x00', r17, 0x4, 0x0, 0x4, 0xe85, 0x40, @loopback, @mcast2, 0x80, 0x7, 0x2}}) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f000000ca40)={0x7, 0x7, 0x0, 0x7f, 0x2, [{0x7fffffff, 0x100, 0xb98, '\x00', 0x80}, {0x7fffffff, 0x1, 0x5, '\x00', 0x1409}]}) r18 = openat$sr(0xffffffffffffff9c, &(0x7f000000cb00), 0x0, 0x0) getpeername$unix(r18, &(0x7f000000cb40), &(0x7f000000cbc0)=0x6e) fcntl$setflags(r4, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000cc00)={0xffffffffffffffff}) shutdown(r19, 0x0) 17:14:57 executing program 2: execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000040)='$)}})-/:+]+,\xfb-\x9c\x00', &(0x7f0000000080)='%&A}[#\x00', &(0x7f00000000c0)='@(-*\x00', &(0x7f0000000100)='}(\xac\':\x00', &(0x7f0000000140)='){%-@+-!#\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='+%\x00', &(0x7f0000000240)='/\x99,\\-\x00', &(0x7f0000000280)='.\x00'], &(0x7f0000000500)=[&(0x7f0000000340)=':\\$#@^', &(0x7f0000000380)='].\x00', &(0x7f00000003c0)=')\xa1\x00', &(0x7f0000000400)=',$\\/\x00', &(0x7f0000000440)='*-@\x14*$^,\'[\x00', &(0x7f0000000480)='.(#,[$(!,$[.\x00', &(0x7f00000004c0)='^#{}\x00'], 0x100) r0 = syz_open_dev$vcsa(&(0x7f0000000540), 0x10001, 0x400000) execveat(r0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000700)=[&(0x7f00000005c0)='^\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='^#{}\x00', &(0x7f0000000680)='*-@\x14*$^,\'[\x00', &(0x7f00000006c0)='.\x00'], &(0x7f00000007c0)=[&(0x7f0000000740)='$--%[-\x00', &(0x7f0000000780)='-\x00'], 0x1000) r1 = syz_mount_image$msdos(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x3f, 0x3, &(0x7f00000009c0)=[{&(0x7f0000000880)="5a290e758c634b5ef45cf8b417bea8bdd63e59226e34788fe4add8271294611bd3f1cfb0fd8ddd12a51a47915467ccd2b489137e0fc507e478d8ca95d4efca0263c868967cd1cbdf34fdfe8a4b55ceaa", 0x50, 0x4d}, {&(0x7f0000000900)="f0aa7ba1a4abc89c68eee476299ea5ed53965aebac51d85c0c8d9761eae67da545", 0x21, 0x200}, {&(0x7f0000000940)="5a81453a4db86fcfa47d578128baf5db5be36e6c679376576f24565a5e0ead6483fa461dded7c98e694f49a9c5d821c3a52bf6dd457be8b2e0791aaa1d2d7b6013dadcbe82c261bb94b7bc3f00d8a681ce944c", 0x53, 0x47e9}], 0x880000, &(0x7f0000000a40)={[{@dots}, {@nodots}, {@dots}, {@fat=@check_normal}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, '}*'}}, {@smackfshat={'smackfshat', 0x3d, '\'\'*'}}, {@permit_directio}, {@seclabel}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) execveat(r1, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000cc0)=[&(0x7f0000000b40)=':\x00', &(0x7f0000000b80)=',\x00', &(0x7f0000000bc0)='].\x00', &(0x7f0000000c00)='+%\x00', &(0x7f0000000c40)='].\x00', &(0x7f0000000c80)='\x00'], &(0x7f0000000e80)=[&(0x7f0000000d00)='$--%[-\x00', &(0x7f0000000d40)='^\x00', &(0x7f0000000d80)='.\x00', &(0x7f0000000dc0)='}(\xac\':\x00', &(0x7f0000000e00)='*-@\x14*$^,\'[\x00', &(0x7f0000000e40)='$--%[-\x00'], 0x100) execveat(r1, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f80)=[&(0x7f0000000f00)='dots', &(0x7f0000000f40)='%\\)-\x00'], &(0x7f0000001180)=[&(0x7f0000000fc0)='%&A}[#\x00', &(0x7f0000001000)='\x00', &(0x7f0000001040)='\'.(\x00', &(0x7f0000001080)='.+\x00', &(0x7f00000010c0)='+\x1b$#\x00', &(0x7f0000001100)='*-@\x14*$^,\'[\x00', &(0x7f0000001140)='^\x00'], 0x400) r2 = fcntl$dupfd(r0, 0x406, r0) inotify_add_watch(r2, &(0x7f00000011c0)='./file0\x00', 0x20) r3 = pidfd_getfd(r2, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, 0x3f7, 0x100, 0x70bd2d, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) setxattr$security_selinux(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340), &(0x7f0000001380)='system_u:object_r:klogd_exec_t:s0\x00', 0x22, 0x1) r4 = openat(r1, &(0x7f00000013c0)='./file0\x00', 0x300, 0x2c) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001400), 0x40000, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r3) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000001640)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001600)={&(0x7f00000014c0)={0x108, r6, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xcb0f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x400f}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xd948}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x6, 0x9, 0xb4af992, 0x9, 0x3, 0x3f]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x570}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffa}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x99}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffff0000}]}, @NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8, 0x40]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x100}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fffffff}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20040010}, 0x8000) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001680), 0x40, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000016c0), 0x426001, 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000001700)=[0xffffffffffffffff, r4, 0xffffffffffffffff, r8, r1], 0x5) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r7) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x64, r9, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f101f795084f3970e9309bda33b94e3f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9f317aca7f729407"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5fd01545e6d4b170603255c1402317ed"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}]}]}, 0x64}}, 0x0) 17:14:57 executing program 4: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r0, r1+10000000}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) clock_getres(0x2, &(0x7f00000001c0)) clock_gettime(0x3, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000240)={0x9, 0xd89f, 0x7ae9771a, 0x400, 0x7fffffff, 0x800, 0x600d9761, 0x1}, &(0x7f0000000280)={0x400, 0x1, 0x7, 0x4, 0x3f, 0x0, 0x0, 0x1}, &(0x7f00000002c0)={0x9b, 0x0, 0x400, 0x8, 0x5, 0x0, 0xa7}, &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={[0x5]}, 0x8}) nanosleep(&(0x7f00000003c0)={0x0, 0x989680}, &(0x7f0000000400)) sched_rr_get_interval(0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x100000e, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x0) io_getevents(0x0, 0x10001, 0x4, &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f0000000540)={0x77359400}) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f00000074c0)=[{{&(0x7f0000000580)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000000600)=""/153, 0x99}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/79, 0x4f}, {&(0x7f0000001740)=""/238, 0xee}, {&(0x7f0000001840)=""/210, 0xd2}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/158, 0x9e}], 0x7}, 0x292}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002a80)=""/193, 0xc1}, {&(0x7f0000002b80)=""/226, 0xe2}, {&(0x7f0000002c80)=""/189, 0xbd}, {&(0x7f0000002d40)=""/126, 0x7e}, {&(0x7f0000002dc0)}, {&(0x7f0000002e00)=""/112, 0x70}, {&(0x7f0000002e80)=""/45, 0x2d}], 0x7}, 0x7}, {{&(0x7f0000002f40)=@nfc, 0x80, &(0x7f0000003340)=[{&(0x7f0000002fc0)=""/130, 0x82}, {&(0x7f0000003080)=""/168, 0xa8}, {&(0x7f0000003140)=""/237, 0xed}, {&(0x7f0000003240)=""/100, 0x64}, {&(0x7f00000032c0)=""/121, 0x79}], 0x5, &(0x7f00000033c0)=""/219, 0xdb}, 0x1}, {{&(0x7f00000034c0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000057c0)=[{&(0x7f0000003540)=""/137, 0x89}, {&(0x7f0000003600)=""/12, 0xc}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/10, 0xa}, {&(0x7f0000004680)=""/149, 0x95}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000005740)=""/42, 0x2a}, {&(0x7f0000005780)}], 0x8, &(0x7f0000005840)=""/55, 0x37}, 0x5}, {{&(0x7f0000005880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005900)=""/253, 0xfd}, {&(0x7f0000005a00)=""/23, 0x17}, {&(0x7f0000005a40)=""/241, 0xf1}], 0x3, &(0x7f0000005b80)=""/225, 0xe1}, 0x80c5}, {{&(0x7f0000005c80)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000005d00)=""/15, 0xf}], 0x1}}, {{&(0x7f0000005d80)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000005e40)=[{&(0x7f0000005e00)=""/46, 0x2e}], 0x1, &(0x7f0000005e80)=""/4096, 0x1000}, 0x868}, {{0x0, 0x0, &(0x7f00000073c0)=[{&(0x7f0000006e80)=""/135, 0x87}, {&(0x7f0000006f40)=""/22, 0x16}, {&(0x7f0000006f80)=""/76, 0x4c}, {&(0x7f0000007000)=""/64, 0x40}, {&(0x7f0000007040)=""/241, 0xf1}, {&(0x7f0000007140)=""/217, 0xd9}, {&(0x7f0000007240)=""/100, 0x64}, {&(0x7f00000072c0)=""/209, 0xd1}], 0x8, &(0x7f0000007440)=""/114, 0x72}, 0x1f}], 0x8, 0x42, &(0x7f00000076c0)={0x77359400}) pwritev2(r6, &(0x7f0000007a40)=[{&(0x7f0000007700)="abe74fb0b7d64915ba0cc58b34b1655ad2", 0x11}, {&(0x7f0000007740)="bdca0989ebc8c6395e07b4b1a74e98f95889d6cefc729bb015958ab49a44d48c6569129bc6ffa1a8f5eff6499ca2e70fc768946838a8be452dba5a17b14d255e81ef1290657038224005b6ef297384247fab4f84eadbe57a8ffccf47aa436e2d1766e1537c52c9fc9205d3f6864a8a17cb7e1d4078cdb2d27116679d232a7cd7bd520fc4b4d921ec696596b55130592de39bdb1f16dcb2c782ae26c73fb464dfc3f2179a2ae02cd3998f97dd0c9e102c16b674c4a6fdb6e7709d8191e6b51e10ff3a66829814b7afbb8422c05a04ea2a03871406741bd1b7596cfe8b9a4b7f363ebf1de076c3", 0xe6}, {&(0x7f0000007840)="95187210b88513635987316e115077e95d7214b6a579e5359bb32d3f2ea9164b6fcc00f9b943b57daf7f8081356223b9cc62bdde32afbc90e0289972c465c031c2e92d065fa78bbf106507f1c2a72db4a53c4303b580c573745c8b85c7010b8d48a889188cee3a1f1b470d6881db87814af4ef9bfc937cda1758edd594b960cc824d4aeefac7f957d9ac9c36d3318680c6844d1b3b9be88816f44a98b28994dd56b9fd7dac07dd5a30c2b88142c6b2adcee9892f2f33b8087c74d6cad37b4e5034e614c8c9c084eb47b9bc7310eacb2c2f65eb1530273b1fad62bf4c5b35", 0xde}, {&(0x7f0000007940)="732adfbccaf1706b79648c482c9d72adcc48283ca900fbfab97c4a59c2469a25a607fa80498f7ccb178952c48bcab7f56f1322f7e77db9e280346adba5228b3e33434f886e014d6bb1036d8b2526567f11bdd234927529e1319752d2a50c9652c69b284a0f892aec02acea464a0979cf9d0d80327c658953f9fb098e973a26f1b7e82a5366379cbc8917984a5235bcf3a37a299973ac0429a532d62ebb3a8f36fb9c3d33f6eb05b0e554607044cff55636e88fc3862d636a75729cd77b2676761020ef024b62501d7f2df3", 0xcb}], 0x4, 0x3, 0xfa, 0x6) nanosleep(&(0x7f0000007a80)={0x0, 0x3938700}, &(0x7f0000007ac0)) io_setup(0xf758, &(0x7f0000007b00)) clock_gettime(0x7, &(0x7f0000007b40)) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000007d00)={&(0x7f0000007b80)={0x10, 0x0, 0x0, 0x40081}, 0xc, &(0x7f0000007cc0)={&(0x7f0000007c00)={0xa4, 0x0, 0x40c, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "18c5307691df843d47364e463dc8726735440530cbb3ba13"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) [ 94.350297] audit: type=1400 audit(1763313297.637:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:14:57 executing program 5: sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="d453ef988332af4b4e657788431b3868d3bbdcff6a2cee9d35f66afdaf52c9b8308265ae28e1b2cec40f512bd5846fd4cc749cb6209484ea9dda7bfc4571835512684355ef4e7097e1c6c395e426329e8da997427e442ecd2c704f02fab5a2ca3ef587dbee62a5f97bcacc102a0c30b4e25c1554273ab6b1b6bc6f4deaaa237d4c152d24430bdec7767b9ddb1897eca3aff9eb45b5105cd0ab507f969077273fa1a3ff137f35c473d1a3848aae8d84aaa7aced18b831d1c96a8b9a9ddb7ff9e7b3e0383f7303b6a94743bc5fcf75de5c24cecc1fdccbca81858ea797d094803431ff3ff87cd479f01c2399551c50b82c66c8b621", 0xf4, 0x4000, &(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) getpeername(0xffffffffffffffff, &(0x7f0000000140)=@nfc_llcp, &(0x7f00000001c0)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000004680)=[{&(0x7f0000000280)=""/53, 0x35}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/151, 0x97}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/224, 0xe0}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/197, 0xc5}, {&(0x7f0000004580)=""/129, 0x81}, {&(0x7f0000004640)=""/26, 0x1a}], 0xa, &(0x7f0000004740)=""/56, 0x38}, 0x7}, {{&(0x7f0000004780)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004800)=""/213, 0xd5}, {&(0x7f0000004900)=""/173, 0xad}], 0x2, &(0x7f0000004a00)=""/100, 0x64}, 0xff}, {{&(0x7f0000004a80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004b00)=""/220, 0xdc}], 0x1, &(0x7f0000004c40)=""/243, 0xf3}, 0x9}, {{&(0x7f0000004d40)=@alg, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004dc0)=""/115, 0x73}], 0x1, &(0x7f0000004e80)=""/132, 0x84}, 0xe415}, {{&(0x7f0000004f40)=@sco, 0x80, &(0x7f0000005100)=[{&(0x7f0000004fc0)=""/64, 0x40}, {&(0x7f0000005000)=""/168, 0xa8}, {&(0x7f00000050c0)=""/56, 0x38}], 0x3, &(0x7f0000005140)=""/97, 0x61}, 0x5ec6}], 0x5, 0x2000, &(0x7f0000005300)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000005340), 0x100, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000005380)={@loopback, @local, 0x0}, &(0x7f00000053c0)=0xc) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r4, &(0x7f0000005400)=""/181, 0xb5, 0x0, &(0x7f00000054c0)=@sco={0x1f, @none}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000005540)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000005640)={'syztnl2\x00', &(0x7f00000055c0)={'syztnl1\x00', r1, 0x4, 0x1, 0x3, 0x7, 0x51, @mcast2, @private1, 0x8000, 0x7800, 0x2, 0x7}}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000005680)={@private1, 0x0}, &(0x7f00000056c0)=0x14) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000005740)={0x0, @tipc=@id={0x1e, 0x3, 0x3, {0x4e20, 0x4}}, @rc={0x1f, @none, 0x1}, @xdp={0x2c, 0xa, r3, 0x27}, 0x800, 0x0, 0x0, 0x0, 0x16d, &(0x7f0000005700)='batadv_slave_1\x00', 0x7fff, 0x40, 0x7}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000005900)={&(0x7f0000005580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000058c0)={&(0x7f00000057c0)={0x100, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4008001}, 0x840) recvmsg(r5, &(0x7f0000005b40)={&(0x7f0000005940)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000005a80)=[{&(0x7f00000059c0)=""/166, 0xa6}], 0x1, &(0x7f0000005ac0)=""/95, 0x5f}, 0x40000102) syz_io_uring_setup(0x18bd, &(0x7f0000005b80)={0x0, 0xda46, 0x2, 0x1, 0x1cf, 0x0, r2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000005c00), &(0x7f0000005c40)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000005c80)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x4007, @fd_index=0x7, 0x0, 0x0, 0x0, 0x13, 0x0, {0x1}}, 0x7fc9) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, r2, 0x0) syz_io_uring_setup(0x5d96, &(0x7f0000005cc0)={0x0, 0x2faf, 0x8, 0x3, 0x14a, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000005d40), &(0x7f0000005d80)=0x0) r12 = socket$inet(0x2, 0x5, 0xed2c) syz_io_uring_submit(r10, r11, &(0x7f0000005dc0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r12, 0x59b, 0x0, 0x10000}, 0x40) sendto(0xffffffffffffffff, &(0x7f0000005e00)="65feaf77e73926b13789d001fb5f6da93e679bc1aabac0340ad306684d9c5a43b0417c5a06618c209488683f445b4cbfcfc3f89e15587e86a29ef64bb5c78dca40c5c09b0eb5b3081bc5de2fb27eee95c85921b49f340862ad1fc436f86f17ad", 0x60, 0x1, 0x0, 0x0) 17:14:57 executing program 3: sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "83c2b44b9d6e8e56e3fb5b71dca8cc5b622e43423a2df9ad"}]]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004004}, 0x850) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x144, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x72d6}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0xc65}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0xff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x124}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffff8001}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x5}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000580)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) r4 = syz_mount_image$tmpfs(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0xe8, 0x7, &(0x7f0000000bc0)=[{&(0x7f0000000680)="813bd2611ad8807d067a0628522409378ee2d9bb8c90a7546356ea3f79da6ba10afcf3c8ce19902bab3535a6184e9d1f9f5fc70f84159010cd6c52088e911dfe157c22a90c6f3b1f3aa8d1a7521051a08666bdee21fd6673941998aa353c0f2c8b258bbf5e1ce1391d44bfcb221f183545ec445aa644762009a634d94cb0bd79e5e4b30a4cb6929c6b84b61aa5a2a5675782dc783bf7ee8cbdc81c56da5297c843cb9f17b02c0aa220de64fefd5ae148a64b17aaed6c627d8379286d6db43d9c5b7a86b628ffc94664d66626f5cf7b6b072fd1d6dcb52a233a1a3aa2955fea1f9a", 0xe1, 0x11c00000000}, {&(0x7f0000000780)="e1d6f0acb19bf770b83e101944b650da6ea4c04ad6ca5bc6ac85107584a054c756b8067cbd3d61ad23eab8fb7745cb5ba1b9e6435e2cb9f45e17f5fb7b67d5189bc412d9fea9c1bc820e9b249710addf2562577ac473ecb3310c67ff8a83973d89e461c6009c5eba281dea", 0x6b, 0x4}, {&(0x7f0000000800)="53cf49fa0216ac53b298ccf8bb55291a056a65aed4a2ea7cb100ccc57e3d2984ce4282368cd7165badc628b2dd654704166dddcb12fae52b663abe6e4f421fc7289aa184f08e4140fdb0416ba3e7895e1162f1d3e678bebc50a0feb3d8948b29d0e133fe6fdd03382814bd91c00cbc45ac6e1a043d27368eac4265ec4def20da2ce5f24f9bc9123686f05a107e3086", 0x8f, 0xffffffff}, {&(0x7f00000008c0)="b7889738b802188c0ed871dccf11a2eae8ebf9ebaa365b8896bf3eef4cece2969635a5c4c8ef75b13caaeb85dfb1156ecadcc9c5fd0bb3d35d95b5fd91b2f1dc8038a815f5f560bab8cddf8e076fdd064030177c0ee9dc27d55240af4ad446f16abb0827771dd8f4c5e301d3fe7893a99bf116b26413b80ec6e1b123b58ea753a716eeb737353094bb0f675976a2bc7aa85d35026c968bc6a36ea24a4511eda76b7b337aba6bf765022bea00751e69204ba0", 0xb2, 0x1ff}, {&(0x7f0000000980)='^', 0x1, 0x4}, {&(0x7f00000009c0)="da15d923988b9d887c924495a0f66ee4be7ffbb4a35f16cd77581522795832baf26a0cbc79bf9153ce0e8adec92b17c71b07f292c5428468cec8d7c100c244b9766658831eab2260a8be8027c855d867fb37b65cf9d4b4238886bc7d04676b64215818eb9924f239c4a674ebacddfa0b0bebbebff01d43d9bd5bbb67409105f60467936a9ef3f8901fd7a8d49e2d21534080d7cb51676968d6fec0adee1f84e667577d8d9d71ac1c9b75f6595767ee5b5deeced6df718320638021624ba41237e10e06cd9f52250e6b17", 0xca, 0x100000001}, {&(0x7f0000000ac0)="f9426db9b92815f9b1579f406de2e292f9e34067e18efd771d54a6f6fecbb84450582b02c849ba9e3b54bdf8dca4241b31a53fb1a903751f653e40808986303ff32902f04b5c1f7dc146a0c33462fca87f82e6e14c5a4f6f71d04081e49758b211d3e79c5d65c8f4b54404e986165e26baba60e308585d0918beb103af5c5eefb794809cf647217d3d7868538b4090c2e02dda07b392668af5a61825fd252e155d97083ff677ecdd0398ef42e758fb0b98ebd50f9375866ef2ed30ec157535ee764a33fd9f601a955a8c27c45a0b429963da29", 0xd3, 0x80000000}], 0x200000, &(0x7f0000000c80)={[{@mode}, {@nr_inodes={'nr_inodes', 0x3d, [0x32]}}, {@huge_advise}], [{@fsmagic={'fsmagic', 0x3d, 0x3ff}}, {@fowner_lt={'fowner<', 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0xb096}}]}) readlinkat(r4, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)=""/178, 0xb2) pipe2(&(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe(&(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) openat(r9, &(0x7f0000000f00)='./file1\x00', 0x200, 0xc8) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x4040040) sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000011c0)={&(0x7f00000010c0)={0xf4, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x274f}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x7d2}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xab, 0xbe, "2498ece97eb5b947857c7d1d955dec7339b9c230d3f30794b5a34169f29260bcb03297ab11b9a832f26bae8ad21729098890bdd34a3fb4e253a84216c71b5770bf87d2f9c18c9db7e956d6d31165b89acf28f34cda020e042aab8b347d6537064dfcbef71bb00eb2bac74c219003ce7c195844d0bd6b711a43be75b987c0d6f9b70fab1836ccbc14054831be78963b6565071fb8e147c16b854d8dbe63dbc6dc1eb9c603f0cf51"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0xffff}}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1ff}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8}]}, 0xf4}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000001280)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000001240), r10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f00000014c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001480)={&(0x7f0000001300)={0x174, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb16d, 0x50}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xc01}, @NL80211_ATTR_IE={0x12d, 0x2a, [@tim={0x5, 0xa6, {0x2, 0x4, 0x7f, "bd6ed8d9e4f57e406513feb8a095bdbba99620dcb8d44d236e0a93f7a4b8cc5c6fc13256bd47555944080fb9f49391d3846dab27b09301f400251731579b96a67d43f4c97f96d6ed687dfa52a01416fa0a96b9e11016be4e87505b38e592506696536c254bb078130f2cc50ebcaa0abe3da17a5669678b4425e941629bf171c461613a600f2870210783ec51e45da334f519e6e6eef72f2fa4738d3fdcf970adaa4614"}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast}}, @preq={0x82, 0x36, @ext={{}, 0x7f, 0x5, 0x0, @broadcast, 0xff, @device_b, 0xffffffff, 0x610b, 0x2, [{{0x0, 0x0, 0x1}, @device_b, 0x5a9d}, {{0x0, 0x0, 0x1}, @device_a, 0x7}]}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7f, 0x30, 0xfa}}, @cf={0x4, 0x6, {0x5, 0x7, 0x401, 0xfff}}, @ht={0x2d, 0x1a, {0x8000, 0x0, 0x4, 0x0, {0x848, 0x20, 0x0, 0x8, 0x0, 0x1, 0x1, 0x3}, 0x8, 0x9, 0x81}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x174}, 0x1, 0x0, 0x0, 0x5}, 0x24004000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0x2}}, './file0\x00'}) 17:14:57 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0xfa86, 0x81) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/192, 0xc0}, {&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000000200)=""/54, 0x36}], 0x3, &(0x7f0000000280)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x2001) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000300)={0x3ff, 0x7fff, 0x2, 0x5, 0x2, [0x6, 0x3ff, 0x723f, 0xffffffff]}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0xa9, 0x9, @scatter={0x7, 0x0, &(0x7f0000001840)=[{&(0x7f0000000340)=""/137, 0x89}, {&(0x7f0000000400)=""/249, 0xf9}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000580)=""/243, 0xf3}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/194, 0xc2}, {&(0x7f0000001780)=""/172, 0xac}]}, &(0x7f00000018c0)="18b67410e74e02289ea5c1b702ad0372322d42278f924d2329093db95558d683f25cc71c33f38a5e46368261f75c1032056417a9f2704378309ee6470acb8551e3b1ca1291e80da3dc178544f3877bfc92dccd64f765dafa45cf822bc73f7fb4d3ec053463f3247743f5c44f4d56b43b8adf8aa2db0a96b20c2a8df1b64a378fa2941da6d2b1b99b22d665537b62325205bd2563e7e2adae5089d76deb5731b3c49f87c8e24d0852fd", &(0x7f0000001980)=""/58, 0xb25, 0x2, 0x0, &(0x7f00000019c0)}) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000001a80)=0x5) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x70, 0x4, 0x8, 0x201, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf1d}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x14000005) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000001c00)={"607d2f8c6b910b88a944abda6455307f", 0x0, 0x0, {0x5, 0x6}, {0xe2, 0x4}, 0x6652, [0x7f, 0x5, 0x1, 0x5, 0x6, 0x81, 0x2, 0x8, 0x81, 0xfffffffffffffffc, 0x4, 0x10000, 0x7f, 0x2, 0xffffffffffffff00]}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001d00), 0x80c2, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d80), r2) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x34, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x200480d0) syz_genetlink_get_family_id$mptcp(&(0x7f0000001e80), r3) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001f00), r2) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x1c, r7, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4810) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000020c0)={'erspan0\x00', &(0x7f0000002040)={'erspan0\x00', 0x0, 0x8, 0x8001, 0x7, 0x9, {{0x14, 0x4, 0x0, 0x2f, 0x50, 0x66, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@generic={0x83, 0x8, "7b7033e4661f"}, @timestamp_prespec={0x44, 0x34, 0x2c, 0x3, 0x5, [{@loopback, 0x7}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x1ff}, {@local, 0x802}, {@remote, 0x80}, {@rand_addr=0x64010100, 0x2}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000002100)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000022c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x10008}, 0xc, &(0x7f0000002280)={&(0x7f0000002140)={0x110, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x48, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8bf3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000002640)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002600)={&(0x7f0000002480)={0x144, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_TUPLE_MASTER={0xd8, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004}, 0x10) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000002680)) [ 95.466896] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.467911] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.468920] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.470415] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.471421] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.532103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.542838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.544266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.545700] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.546839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.549808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.550803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.554162] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.563526] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.572525] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.604032] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.609768] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.616312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.625360] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.630193] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 95.632908] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.634294] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.639726] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.644034] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.644262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.647907] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.652816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.653998] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.659926] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.662856] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.664338] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.666140] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.670698] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.672293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.675818] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.677193] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.693887] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.696088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.702319] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.737843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.741216] ================================================================== [ 95.742299] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 95.743308] Read of size 2 at addr ffff88801f76f538 by task kworker/u11:0/289 [ 95.744335] [ 95.744832] CPU: 0 UID: 0 PID: 289 Comm: kworker/u11:0 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 95.744861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 95.744875] Workqueue: hci4 hci_cmd_work [ 95.744904] Call Trace: [ 95.744912] [ 95.744920] dump_stack_lvl+0xca/0x120 [ 95.744948] print_report+0xcb/0x610 [ 95.744976] ? __virt_addr_valid+0x100/0x5d0 [ 95.745001] ? hci_cmd_work+0x66d/0x6d0 [ 95.745028] ? hci_cmd_work+0x66d/0x6d0 [ 95.745054] kasan_report+0xca/0x100 [ 95.745081] ? hci_cmd_work+0x66d/0x6d0 [ 95.745110] hci_cmd_work+0x66d/0x6d0 [ 95.745138] process_one_work+0x8e1/0x19c0 [ 95.745174] ? __pfx_process_one_work+0x10/0x10 [ 95.745204] ? move_linked_works+0x172/0x270 [ 95.745228] ? assign_work+0x196/0x240 [ 95.745258] worker_thread+0x67e/0xe90 [ 95.745287] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 95.745314] ? __pfx_worker_thread+0x10/0x10 [ 95.745344] kthread+0x3c8/0x740 [ 95.745371] ? __pfx_kthread+0x10/0x10 [ 95.745397] ? ret_from_fork+0x79/0x7a0 [ 95.745418] ? lock_release+0xc8/0x290 [ 95.745451] ? __pfx_kthread+0x10/0x10 [ 95.745478] ret_from_fork+0x67a/0x7a0 [ 95.745498] ? __pfx_ret_from_fork+0x10/0x10 [ 95.745520] ? __switch_to+0x759/0x1060 [ 95.745549] ? __pfx_kthread+0x10/0x10 [ 95.745576] ret_from_fork_asm+0x1a/0x30 [ 95.745611] [ 95.745619] [ 95.769092] Allocated by task 286: [ 95.769606] kasan_save_stack+0x24/0x50 [ 95.770196] kasan_save_track+0x14/0x30 [ 95.770787] __kasan_slab_alloc+0x59/0x70 [ 95.771395] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 95.772156] __alloc_skb+0x2ab/0x370 [ 95.772719] hci_cmd_sync_alloc+0x34/0x300 [ 95.773339] __hci_cmd_sync_sk+0xf7/0x5c0 [ 95.773952] __hci_cmd_sync_status_sk+0x4d/0x1a0 [ 95.774666] hci_cmd_sync_status+0x4c/0x70 [ 95.775297] hci_dev_cmd+0x4d5/0x980 [ 95.775861] hci_sock_ioctl+0x493/0x810 [ 95.776452] sock_do_ioctl+0xd1/0x240 [ 95.777007] sock_ioctl+0x40d/0x630 [ 95.777546] __x64_sys_ioctl+0x18f/0x210 [ 95.778146] do_syscall_64+0xbf/0x430 [ 95.778714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.779455] [ 95.779704] Freed by task 305: [ 95.780181] kasan_save_stack+0x24/0x50 [ 95.780769] kasan_save_track+0x14/0x30 [ 95.781355] kasan_save_free_info+0x3a/0x60 [ 95.781990] __kasan_slab_free+0x43/0x70 [ 95.782602] kmem_cache_free+0x26f/0x500 [ 95.783208] kfree_skbmem+0x18a/0x1f0 [ 95.783773] sk_skb_reason_drop+0x10e/0x1b0 [ 95.784396] vhci_read+0x3d5/0x5d0 [ 95.784924] vfs_read+0x1eb/0xc70 [ 95.785440] ksys_read+0x121/0x240 [ 95.785962] do_syscall_64+0xbf/0x430 [ 95.786540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.787291] [ 95.787543] The buggy address belongs to the object at ffff88801f76f500 [ 95.787543] which belongs to the cache skbuff_head_cache of size 232 [ 95.789351] The buggy address is located 56 bytes inside of [ 95.789351] freed 232-byte region [ffff88801f76f500, ffff88801f76f5e8) [ 95.791053] [ 95.791303] The buggy address belongs to the physical page: [ 95.792112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f76f [ 95.793235] anon flags: 0x100000000000000(node=0|zone=1) [ 95.794002] page_type: f5(slab) [ 95.794503] raw: 0100000000000000 ffff8880096c78c0 ffffea00007b1680 dead000000000005 [ 95.795588] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 95.796670] page dumped because: kasan: bad access detected [ 95.797481] [ 95.797730] Memory state around the buggy address: [ 95.798421] ffff88801f76f400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.799469] ffff88801f76f480: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 95.800485] >ffff88801f76f500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.801514] ^ [ 95.802258] ffff88801f76f580: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 95.803299] ffff88801f76f600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 95.804317] ================================================================== [ 95.805483] Disabling lock debugging due to kernel taint [ 97.504599] Bluetooth: hci0: command tx timeout [ 97.568556] Bluetooth: hci1: command tx timeout [ 97.632599] Bluetooth: hci2: command tx timeout [ 97.697570] Bluetooth: hci7: command tx timeout [ 97.760582] Bluetooth: hci3: command tx timeout [ 97.824572] Bluetooth: hci6: command tx timeout [ 97.824755] Bluetooth: hci5: command tx timeout [ 97.825039] Bluetooth: hci4: command tx timeout [ 99.553521] Bluetooth: hci0: command tx timeout [ 99.617484] Bluetooth: hci1: command tx timeout [ 99.680510] Bluetooth: hci2: command tx timeout [ 99.745534] Bluetooth: hci7: command tx timeout [ 99.809573] Bluetooth: hci3: command tx timeout [ 99.872530] Bluetooth: hci5: command tx timeout [ 99.872571] Bluetooth: hci6: command tx timeout [ 99.873544] Bluetooth: hci4: command tx timeout [ 101.603496] Bluetooth: hci0: command tx timeout [ 101.664508] Bluetooth: hci1: command tx timeout [ 101.728603] Bluetooth: hci2: command tx timeout [ 101.792505] Bluetooth: hci7: command tx timeout [ 101.857497] Bluetooth: hci3: command tx timeout [ 101.920494] Bluetooth: hci6: command tx timeout [ 101.921500] Bluetooth: hci4: command tx timeout [ 101.921908] Bluetooth: hci5: command tx timeout [ 103.648559] Bluetooth: hci0: command tx timeout [ 103.712574] Bluetooth: hci1: command tx timeout [ 103.776536] Bluetooth: hci2: command tx timeout [ 103.840623] Bluetooth: hci7: command tx timeout [ 103.904849] Bluetooth: hci3: command tx timeout [ 103.968537] Bluetooth: hci5: command tx timeout [ 103.968569] Bluetooth: hci4: command tx timeout [ 103.968953] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 17:14:59 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8293dd05 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff88801a8c7618 R8 =0000000000000000 R9 =ffffed1001638046 R10=0000000000000020 R11=000000003a555043 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88974780 R15=ffffffff8293dcf0 RIP=ffffffff8293dd5d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556b06b90e08 CR3=000000001f54b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2ddad24fcbdc236502a74ad6c44742ba XMM01=c68224defcfeb3b5edcd9567657992d7 XMM02=ee1a28d97930af4ff34d8cafea4b374a XMM03=486b5527ff227c807244db8d5883652a XMM04=00000000000000000000000000184eb9 XMM05=0000000000000000000000000000003f XMM06=00000000000000000000000000000000 XMM07=000000000000003f00184eb90000003f XMM08=92000000b20000002e00000070000000 XMM09=00000000000000000000000000000000 XMM10=771d21c75b474c373cc4df6eb8abd73e XMM11=1c945659b03756f0b1a361f14c00288b XMM12=0d0c0f0e09080b0a0504070601000302 XMM13=0c0f0e0d080b0a090407060500030201 XMM14=00000000000000000000000000000980 XMM15=00000000000000000000000000000040 info registers vcpu 1 RAX=fffffbfff0be2094 RBX=fffffbfff0be2095 RCX=ffffffff8152e354 RDX=fffffbfff0be2095 RSI=0000000000000004 RDI=ffffffff85f104a0 RBP=fffffbfff0be2094 RSP=ffff88801740f850 R8 =0000000000000001 R9 =fffffbfff0be2094 R10=ffffffff85f104a3 R11=0000000000000001 R12=ffffffff85f104a8 R13=ffffffff85f104b0 R14=0000000000000001 R15=ffff888008c41780 RIP=ffffffff81b2e95e RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f87915636f4 CR3=000000001e658000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f879157247000007f8791571f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000