Warning: Permanently added '[localhost]:25469' (ECDSA) to the list of known hosts.
2025/11/14 17:48:25 fuzzer started
2025/11/14 17:48:25 dialing manager at localhost:37161
syzkaller login: [   44.768234] cgroup: Unknown subsys name 'net'
[   44.835316] cgroup: Unknown subsys name 'cpuset'
[   44.853426] cgroup: Unknown subsys name 'rlimit'
2025/11/14 17:48:37 syscalls: 2214
2025/11/14 17:48:37 code coverage: enabled
2025/11/14 17:48:37 comparison tracing: enabled
2025/11/14 17:48:37 extra coverage: enabled
2025/11/14 17:48:37 setuid sandbox: enabled
2025/11/14 17:48:37 namespace sandbox: enabled
2025/11/14 17:48:37 Android sandbox: enabled
2025/11/14 17:48:37 fault injection: enabled
2025/11/14 17:48:37 leak checking: enabled
2025/11/14 17:48:37 net packet injection: enabled
2025/11/14 17:48:37 net device setup: enabled
2025/11/14 17:48:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/11/14 17:48:37 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/11/14 17:48:37 USB emulation: enabled
2025/11/14 17:48:37 hci packet injection: enabled
2025/11/14 17:48:37 wifi device emulation: enabled
2025/11/14 17:48:37 802.15.4 emulation: enabled
2025/11/14 17:48:38 fetching corpus: 50, signal 32104/33825 (executing program)
2025/11/14 17:48:38 fetching corpus: 100, signal 41327/44671 (executing program)
2025/11/14 17:48:38 fetching corpus: 150, signal 49585/54394 (executing program)
2025/11/14 17:48:38 fetching corpus: 200, signal 55265/61550 (executing program)
2025/11/14 17:48:38 fetching corpus: 250, signal 59554/67228 (executing program)
2025/11/14 17:48:38 fetching corpus: 300, signal 63632/72645 (executing program)
2025/11/14 17:48:38 fetching corpus: 350, signal 68703/78985 (executing program)
2025/11/14 17:48:38 fetching corpus: 400, signal 72293/83759 (executing program)
2025/11/14 17:48:38 fetching corpus: 450, signal 76199/88769 (executing program)
2025/11/14 17:48:39 fetching corpus: 500, signal 80095/93754 (executing program)
2025/11/14 17:48:39 fetching corpus: 550, signal 82512/97359 (executing program)
2025/11/14 17:48:39 fetching corpus: 600, signal 85564/101474 (executing program)
2025/11/14 17:48:39 fetching corpus: 650, signal 88188/105169 (executing program)
2025/11/14 17:48:39 fetching corpus: 700, signal 90402/108382 (executing program)
2025/11/14 17:48:39 fetching corpus: 750, signal 93187/112078 (executing program)
2025/11/14 17:48:39 fetching corpus: 800, signal 95626/115480 (executing program)
2025/11/14 17:48:39 fetching corpus: 850, signal 97704/118493 (executing program)
2025/11/14 17:48:39 fetching corpus: 900, signal 100260/121879 (executing program)
2025/11/14 17:48:40 fetching corpus: 950, signal 101599/124249 (executing program)
2025/11/14 17:48:40 fetching corpus: 1000, signal 103182/126797 (executing program)
2025/11/14 17:48:40 fetching corpus: 1050, signal 105371/129833 (executing program)
2025/11/14 17:48:40 fetching corpus: 1100, signal 107007/132432 (executing program)
2025/11/14 17:48:40 fetching corpus: 1150, signal 109102/135272 (executing program)
2025/11/14 17:48:40 fetching corpus: 1200, signal 110715/137745 (executing program)
2025/11/14 17:48:40 fetching corpus: 1250, signal 112576/140335 (executing program)
2025/11/14 17:48:40 fetching corpus: 1300, signal 114548/143024 (executing program)
2025/11/14 17:48:40 fetching corpus: 1350, signal 115683/145062 (executing program)
2025/11/14 17:48:41 fetching corpus: 1400, signal 117503/147511 (executing program)
2025/11/14 17:48:41 fetching corpus: 1450, signal 119371/150031 (executing program)
2025/11/14 17:48:41 fetching corpus: 1500, signal 120499/151945 (executing program)
2025/11/14 17:48:41 fetching corpus: 1550, signal 122916/154850 (executing program)
2025/11/14 17:48:41 fetching corpus: 1600, signal 124754/157219 (executing program)
2025/11/14 17:48:41 fetching corpus: 1650, signal 126301/159344 (executing program)
2025/11/14 17:48:41 fetching corpus: 1700, signal 127549/161245 (executing program)
2025/11/14 17:48:41 fetching corpus: 1750, signal 128607/162979 (executing program)
2025/11/14 17:48:41 fetching corpus: 1800, signal 129502/164590 (executing program)
2025/11/14 17:48:41 fetching corpus: 1850, signal 131079/166701 (executing program)
2025/11/14 17:48:42 fetching corpus: 1900, signal 132900/168948 (executing program)
2025/11/14 17:48:42 fetching corpus: 1950, signal 134569/171078 (executing program)
2025/11/14 17:48:42 fetching corpus: 2000, signal 135924/172964 (executing program)
2025/11/14 17:48:42 fetching corpus: 2050, signal 137993/175276 (executing program)
2025/11/14 17:48:42 fetching corpus: 2100, signal 139475/177199 (executing program)
2025/11/14 17:48:42 fetching corpus: 2150, signal 140249/178621 (executing program)
2025/11/14 17:48:42 fetching corpus: 2200, signal 141184/180120 (executing program)
2025/11/14 17:48:42 fetching corpus: 2250, signal 142108/181545 (executing program)
2025/11/14 17:48:42 fetching corpus: 2300, signal 142646/182767 (executing program)
2025/11/14 17:48:43 fetching corpus: 2350, signal 143479/184133 (executing program)
2025/11/14 17:48:43 fetching corpus: 2400, signal 144402/185582 (executing program)
2025/11/14 17:48:43 fetching corpus: 2450, signal 145135/186872 (executing program)
2025/11/14 17:48:43 fetching corpus: 2500, signal 146104/188332 (executing program)
2025/11/14 17:48:43 fetching corpus: 2550, signal 146806/189569 (executing program)
2025/11/14 17:48:43 fetching corpus: 2600, signal 147435/190756 (executing program)
2025/11/14 17:48:43 fetching corpus: 2650, signal 148244/192034 (executing program)
2025/11/14 17:48:43 fetching corpus: 2700, signal 149858/193775 (executing program)
2025/11/14 17:48:43 fetching corpus: 2750, signal 150476/194957 (executing program)
2025/11/14 17:48:43 fetching corpus: 2800, signal 151565/196354 (executing program)
2025/11/14 17:48:44 fetching corpus: 2850, signal 152189/197506 (executing program)
2025/11/14 17:48:44 fetching corpus: 2900, signal 152904/198733 (executing program)
2025/11/14 17:48:44 fetching corpus: 2950, signal 153531/199921 (executing program)
2025/11/14 17:48:44 fetching corpus: 3000, signal 154618/201282 (executing program)
2025/11/14 17:48:44 fetching corpus: 3050, signal 155301/202444 (executing program)
2025/11/14 17:48:44 fetching corpus: 3100, signal 156124/203664 (executing program)
2025/11/14 17:48:44 fetching corpus: 3150, signal 156896/204797 (executing program)
2025/11/14 17:48:44 fetching corpus: 3200, signal 157539/205826 (executing program)
2025/11/14 17:48:44 fetching corpus: 3250, signal 158412/206963 (executing program)
2025/11/14 17:48:45 fetching corpus: 3300, signal 158856/207926 (executing program)
2025/11/14 17:48:45 fetching corpus: 3350, signal 159837/209125 (executing program)
2025/11/14 17:48:45 fetching corpus: 3400, signal 160536/210168 (executing program)
2025/11/14 17:48:45 fetching corpus: 3450, signal 161137/211176 (executing program)
2025/11/14 17:48:45 fetching corpus: 3500, signal 161658/212160 (executing program)
2025/11/14 17:48:45 fetching corpus: 3550, signal 162928/213473 (executing program)
2025/11/14 17:48:45 fetching corpus: 3600, signal 163871/214594 (executing program)
2025/11/14 17:48:45 fetching corpus: 3650, signal 164455/215556 (executing program)
2025/11/14 17:48:45 fetching corpus: 3700, signal 165080/216473 (executing program)
2025/11/14 17:48:45 fetching corpus: 3750, signal 165575/217349 (executing program)
2025/11/14 17:48:46 fetching corpus: 3800, signal 166322/218369 (executing program)
2025/11/14 17:48:46 fetching corpus: 3850, signal 167305/219470 (executing program)
2025/11/14 17:48:46 fetching corpus: 3900, signal 167774/220314 (executing program)
2025/11/14 17:48:46 fetching corpus: 3950, signal 168229/221119 (executing program)
2025/11/14 17:48:46 fetching corpus: 4000, signal 168856/222018 (executing program)
2025/11/14 17:48:46 fetching corpus: 4050, signal 169428/222885 (executing program)
2025/11/14 17:48:46 fetching corpus: 4100, signal 170264/223865 (executing program)
2025/11/14 17:48:46 fetching corpus: 4150, signal 170776/224638 (executing program)
2025/11/14 17:48:46 fetching corpus: 4200, signal 171306/225446 (executing program)
2025/11/14 17:48:47 fetching corpus: 4250, signal 171842/226214 (executing program)
2025/11/14 17:48:47 fetching corpus: 4300, signal 172264/226977 (executing program)
2025/11/14 17:48:47 fetching corpus: 4350, signal 172787/227790 (executing program)
2025/11/14 17:48:47 fetching corpus: 4400, signal 173168/228556 (executing program)
2025/11/14 17:48:47 fetching corpus: 4450, signal 173825/229406 (executing program)
2025/11/14 17:48:47 fetching corpus: 4500, signal 174241/230149 (executing program)
2025/11/14 17:48:47 fetching corpus: 4550, signal 174853/230969 (executing program)
2025/11/14 17:48:47 fetching corpus: 4600, signal 175344/231721 (executing program)
2025/11/14 17:48:47 fetching corpus: 4650, signal 175793/232444 (executing program)
2025/11/14 17:48:47 fetching corpus: 4700, signal 176168/233111 (executing program)
2025/11/14 17:48:48 fetching corpus: 4750, signal 176768/233831 (executing program)
2025/11/14 17:48:48 fetching corpus: 4800, signal 177286/234536 (executing program)
2025/11/14 17:48:48 fetching corpus: 4850, signal 177705/235220 (executing program)
2025/11/14 17:48:48 fetching corpus: 4900, signal 178087/235904 (executing program)
2025/11/14 17:48:48 fetching corpus: 4950, signal 178577/236642 (executing program)
2025/11/14 17:48:48 fetching corpus: 5000, signal 179144/237384 (executing program)
2025/11/14 17:48:48 fetching corpus: 5050, signal 179530/238043 (executing program)
2025/11/14 17:48:48 fetching corpus: 5100, signal 179827/238651 (executing program)
2025/11/14 17:48:48 fetching corpus: 5150, signal 180180/239301 (executing program)
2025/11/14 17:48:48 fetching corpus: 5200, signal 180585/240018 (executing program)
2025/11/14 17:48:49 fetching corpus: 5250, signal 181300/240754 (executing program)
2025/11/14 17:48:49 fetching corpus: 5300, signal 181711/241354 (executing program)
2025/11/14 17:48:49 fetching corpus: 5350, signal 182047/242005 (executing program)
2025/11/14 17:48:49 fetching corpus: 5400, signal 182564/242627 (executing program)
2025/11/14 17:48:49 fetching corpus: 5450, signal 183037/243219 (executing program)
2025/11/14 17:48:49 fetching corpus: 5500, signal 183532/243799 (executing program)
2025/11/14 17:48:49 fetching corpus: 5550, signal 183898/244389 (executing program)
2025/11/14 17:48:49 fetching corpus: 5600, signal 184356/245012 (executing program)
2025/11/14 17:48:49 fetching corpus: 5650, signal 184811/245598 (executing program)
2025/11/14 17:48:49 fetching corpus: 5700, signal 185224/246202 (executing program)
2025/11/14 17:48:49 fetching corpus: 5750, signal 185618/246787 (executing program)
2025/11/14 17:48:50 fetching corpus: 5800, signal 186094/247351 (executing program)
2025/11/14 17:48:50 fetching corpus: 5850, signal 186656/247936 (executing program)
2025/11/14 17:48:50 fetching corpus: 5900, signal 187202/248513 (executing program)
2025/11/14 17:48:50 fetching corpus: 5950, signal 187806/249069 (executing program)
2025/11/14 17:48:50 fetching corpus: 6000, signal 188456/249620 (executing program)
2025/11/14 17:48:50 fetching corpus: 6050, signal 188809/250150 (executing program)
2025/11/14 17:48:50 fetching corpus: 6100, signal 189130/250671 (executing program)
2025/11/14 17:48:50 fetching corpus: 6150, signal 189697/251196 (executing program)
2025/11/14 17:48:50 fetching corpus: 6200, signal 190072/251714 (executing program)
2025/11/14 17:48:50 fetching corpus: 6250, signal 190410/252216 (executing program)
2025/11/14 17:48:51 fetching corpus: 6300, signal 190768/252712 (executing program)
2025/11/14 17:48:51 fetching corpus: 6350, signal 191018/252890 (executing program)
2025/11/14 17:48:51 fetching corpus: 6400, signal 191655/252890 (executing program)
2025/11/14 17:48:51 fetching corpus: 6450, signal 191861/252895 (executing program)
2025/11/14 17:48:51 fetching corpus: 6500, signal 192166/252895 (executing program)
2025/11/14 17:48:51 fetching corpus: 6550, signal 192643/252895 (executing program)
2025/11/14 17:48:51 fetching corpus: 6600, signal 192968/252895 (executing program)
2025/11/14 17:48:51 fetching corpus: 6650, signal 193329/252895 (executing program)
2025/11/14 17:48:51 fetching corpus: 6700, signal 193922/252895 (executing program)
2025/11/14 17:48:51 fetching corpus: 6750, signal 194334/252895 (executing program)
2025/11/14 17:48:51 fetching corpus: 6800, signal 194640/252897 (executing program)
2025/11/14 17:48:52 fetching corpus: 6850, signal 194921/252897 (executing program)
2025/11/14 17:48:52 fetching corpus: 6900, signal 195254/252897 (executing program)
2025/11/14 17:48:52 fetching corpus: 6950, signal 195615/252897 (executing program)
2025/11/14 17:48:52 fetching corpus: 7000, signal 196248/252897 (executing program)
2025/11/14 17:48:52 fetching corpus: 7050, signal 196644/252897 (executing program)
2025/11/14 17:48:52 fetching corpus: 7100, signal 196871/252897 (executing program)
2025/11/14 17:48:52 fetching corpus: 7150, signal 197160/252897 (executing program)
2025/11/14 17:48:52 fetching corpus: 7200, signal 197371/252897 (executing program)
2025/11/14 17:48:52 fetching corpus: 7250, signal 197635/252897 (executing program)
2025/11/14 17:48:52 fetching corpus: 7300, signal 197956/252897 (executing program)
2025/11/14 17:48:52 fetching corpus: 7350, signal 198297/252897 (executing program)
2025/11/14 17:48:53 fetching corpus: 7400, signal 198538/252897 (executing program)
2025/11/14 17:48:53 fetching corpus: 7450, signal 198830/252898 (executing program)
2025/11/14 17:48:53 fetching corpus: 7500, signal 199152/252898 (executing program)
2025/11/14 17:48:53 fetching corpus: 7550, signal 199407/252898 (executing program)
2025/11/14 17:48:53 fetching corpus: 7600, signal 199663/252898 (executing program)
2025/11/14 17:48:53 fetching corpus: 7650, signal 199972/252898 (executing program)
2025/11/14 17:48:53 fetching corpus: 7700, signal 200336/252898 (executing program)
2025/11/14 17:48:53 fetching corpus: 7750, signal 200679/252898 (executing program)
2025/11/14 17:48:53 fetching corpus: 7800, signal 201041/252898 (executing program)
2025/11/14 17:48:53 fetching corpus: 7850, signal 201328/252898 (executing program)
2025/11/14 17:48:54 fetching corpus: 7900, signal 201985/252898 (executing program)
2025/11/14 17:48:54 fetching corpus: 7950, signal 202310/252898 (executing program)
2025/11/14 17:48:54 fetching corpus: 8000, signal 202552/252898 (executing program)
2025/11/14 17:48:54 fetching corpus: 8050, signal 202824/252900 (executing program)
2025/11/14 17:48:54 fetching corpus: 8100, signal 203248/252900 (executing program)
2025/11/14 17:48:54 fetching corpus: 8150, signal 203534/252900 (executing program)
2025/11/14 17:48:54 fetching corpus: 8200, signal 203880/252900 (executing program)
2025/11/14 17:48:54 fetching corpus: 8250, signal 204174/252900 (executing program)
2025/11/14 17:48:54 fetching corpus: 8300, signal 204475/252900 (executing program)
2025/11/14 17:48:54 fetching corpus: 8350, signal 204819/252900 (executing program)
2025/11/14 17:48:54 fetching corpus: 8400, signal 205198/252900 (executing program)
2025/11/14 17:48:55 fetching corpus: 8450, signal 205480/252900 (executing program)
2025/11/14 17:48:55 fetching corpus: 8500, signal 205750/252900 (executing program)
2025/11/14 17:48:55 fetching corpus: 8550, signal 206143/252900 (executing program)
2025/11/14 17:48:55 fetching corpus: 8600, signal 206516/252907 (executing program)
2025/11/14 17:48:55 fetching corpus: 8650, signal 206883/252907 (executing program)
2025/11/14 17:48:55 fetching corpus: 8700, signal 207172/252907 (executing program)
2025/11/14 17:48:55 fetching corpus: 8750, signal 207517/252907 (executing program)
2025/11/14 17:48:55 fetching corpus: 8800, signal 208276/252907 (executing program)
2025/11/14 17:48:55 fetching corpus: 8850, signal 208568/252907 (executing program)
2025/11/14 17:48:55 fetching corpus: 8900, signal 208878/252907 (executing program)
2025/11/14 17:48:55 fetching corpus: 8950, signal 209132/252907 (executing program)
2025/11/14 17:48:55 fetching corpus: 9000, signal 209447/252907 (executing program)
2025/11/14 17:48:55 fetching corpus: 9050, signal 209838/252907 (executing program)
2025/11/14 17:48:56 fetching corpus: 9100, signal 210089/252907 (executing program)
2025/11/14 17:48:56 fetching corpus: 9150, signal 210318/252907 (executing program)
2025/11/14 17:48:56 fetching corpus: 9200, signal 210704/252907 (executing program)
2025/11/14 17:48:56 fetching corpus: 9250, signal 211011/252907 (executing program)
2025/11/14 17:48:56 fetching corpus: 9300, signal 211410/252907 (executing program)
2025/11/14 17:48:56 fetching corpus: 9350, signal 211746/252907 (executing program)
2025/11/14 17:48:56 fetching corpus: 9400, signal 211980/252908 (executing program)
2025/11/14 17:48:56 fetching corpus: 9450, signal 212210/252908 (executing program)
2025/11/14 17:48:56 fetching corpus: 9500, signal 212546/252910 (executing program)
2025/11/14 17:48:56 fetching corpus: 9550, signal 212765/252910 (executing program)
2025/11/14 17:48:56 fetching corpus: 9600, signal 213235/252910 (executing program)
2025/11/14 17:48:56 fetching corpus: 9650, signal 213460/252910 (executing program)
2025/11/14 17:48:56 fetching corpus: 9700, signal 213682/252910 (executing program)
2025/11/14 17:48:57 fetching corpus: 9750, signal 213845/252910 (executing program)
2025/11/14 17:48:57 fetching corpus: 9800, signal 214133/252910 (executing program)
2025/11/14 17:48:57 fetching corpus: 9850, signal 214446/252910 (executing program)
2025/11/14 17:48:57 fetching corpus: 9900, signal 214671/252910 (executing program)
2025/11/14 17:48:57 fetching corpus: 9950, signal 214962/252910 (executing program)
2025/11/14 17:48:57 fetching corpus: 10000, signal 215237/252912 (executing program)
2025/11/14 17:48:57 fetching corpus: 10050, signal 215522/252912 (executing program)
2025/11/14 17:48:57 fetching corpus: 10100, signal 215774/252912 (executing program)
2025/11/14 17:48:57 fetching corpus: 10150, signal 215954/252912 (executing program)
2025/11/14 17:48:57 fetching corpus: 10200, signal 216357/252912 (executing program)
2025/11/14 17:48:57 fetching corpus: 10250, signal 216634/252912 (executing program)
2025/11/14 17:48:58 fetching corpus: 10300, signal 216930/252912 (executing program)
2025/11/14 17:48:58 fetching corpus: 10350, signal 217181/252912 (executing program)
2025/11/14 17:48:58 fetching corpus: 10400, signal 217415/252912 (executing program)
2025/11/14 17:48:58 fetching corpus: 10450, signal 217665/252912 (executing program)
2025/11/14 17:48:58 fetching corpus: 10500, signal 217835/252912 (executing program)
2025/11/14 17:48:58 fetching corpus: 10550, signal 218082/252912 (executing program)
2025/11/14 17:48:58 fetching corpus: 10600, signal 218275/252912 (executing program)
2025/11/14 17:48:58 fetching corpus: 10650, signal 218480/252912 (executing program)
2025/11/14 17:48:58 fetching corpus: 10700, signal 218727/252912 (executing program)
2025/11/14 17:48:58 fetching corpus: 10750, signal 218917/252912 (executing program)
2025/11/14 17:48:59 fetching corpus: 10800, signal 219130/252912 (executing program)
2025/11/14 17:48:59 fetching corpus: 10850, signal 219361/252912 (executing program)
2025/11/14 17:48:59 fetching corpus: 10900, signal 219618/252912 (executing program)
2025/11/14 17:48:59 fetching corpus: 10950, signal 219865/252912 (executing program)
2025/11/14 17:48:59 fetching corpus: 11000, signal 220098/252912 (executing program)
2025/11/14 17:48:59 fetching corpus: 11050, signal 220292/252912 (executing program)
2025/11/14 17:48:59 fetching corpus: 11100, signal 220527/252912 (executing program)
2025/11/14 17:48:59 fetching corpus: 11150, signal 220767/252912 (executing program)
2025/11/14 17:48:59 fetching corpus: 11200, signal 221026/252912 (executing program)
2025/11/14 17:48:59 fetching corpus: 11250, signal 221249/252912 (executing program)
2025/11/14 17:48:59 fetching corpus: 11300, signal 221516/252912 (executing program)
2025/11/14 17:48:59 fetching corpus: 11350, signal 221764/252912 (executing program)
2025/11/14 17:49:00 fetching corpus: 11400, signal 221902/252912 (executing program)
2025/11/14 17:49:00 fetching corpus: 11450, signal 222139/252912 (executing program)
2025/11/14 17:49:00 fetching corpus: 11500, signal 222328/252912 (executing program)
2025/11/14 17:49:00 fetching corpus: 11550, signal 222486/252912 (executing program)
2025/11/14 17:49:00 fetching corpus: 11600, signal 222970/252912 (executing program)
2025/11/14 17:49:00 fetching corpus: 11650, signal 223151/252912 (executing program)
2025/11/14 17:49:00 fetching corpus: 11700, signal 223361/252912 (executing program)
2025/11/14 17:49:00 fetching corpus: 11750, signal 223702/252912 (executing program)
2025/11/14 17:49:00 fetching corpus: 11800, signal 223957/252912 (executing program)
2025/11/14 17:49:00 fetching corpus: 11850, signal 224146/252912 (executing program)
2025/11/14 17:49:01 fetching corpus: 11900, signal 224313/252913 (executing program)
2025/11/14 17:49:01 fetching corpus: 11950, signal 224545/252913 (executing program)
2025/11/14 17:49:01 fetching corpus: 12000, signal 224763/252913 (executing program)
2025/11/14 17:49:01 fetching corpus: 12050, signal 225041/252914 (executing program)
2025/11/14 17:49:01 fetching corpus: 12100, signal 225205/252914 (executing program)
2025/11/14 17:49:01 fetching corpus: 12150, signal 225506/252914 (executing program)
2025/11/14 17:49:01 fetching corpus: 12200, signal 225650/252914 (executing program)
2025/11/14 17:49:01 fetching corpus: 12250, signal 225933/252914 (executing program)
2025/11/14 17:49:01 fetching corpus: 12300, signal 226149/252914 (executing program)
2025/11/14 17:49:01 fetching corpus: 12350, signal 226339/252914 (executing program)
2025/11/14 17:49:01 fetching corpus: 12400, signal 226556/252914 (executing program)
2025/11/14 17:49:02 fetching corpus: 12450, signal 226770/252914 (executing program)
2025/11/14 17:49:02 fetching corpus: 12500, signal 226913/252914 (executing program)
2025/11/14 17:49:02 fetching corpus: 12550, signal 227149/252914 (executing program)
2025/11/14 17:49:02 fetching corpus: 12600, signal 227381/252915 (executing program)
2025/11/14 17:49:02 fetching corpus: 12650, signal 227566/252915 (executing program)
2025/11/14 17:49:02 fetching corpus: 12700, signal 227788/252915 (executing program)
2025/11/14 17:49:02 fetching corpus: 12750, signal 228031/252915 (executing program)
2025/11/14 17:49:02 fetching corpus: 12800, signal 228204/252915 (executing program)
2025/11/14 17:49:02 fetching corpus: 12850, signal 228383/252915 (executing program)
2025/11/14 17:49:02 fetching corpus: 12900, signal 228752/252915 (executing program)
2025/11/14 17:49:02 fetching corpus: 12950, signal 228920/252915 (executing program)
2025/11/14 17:49:03 fetching corpus: 13000, signal 229093/252915 (executing program)
2025/11/14 17:49:03 fetching corpus: 13050, signal 229275/252915 (executing program)
2025/11/14 17:49:03 fetching corpus: 13100, signal 229459/252916 (executing program)
2025/11/14 17:49:03 fetching corpus: 13150, signal 229628/252916 (executing program)
2025/11/14 17:49:03 fetching corpus: 13200, signal 229846/252916 (executing program)
2025/11/14 17:49:03 fetching corpus: 13250, signal 230000/252916 (executing program)
2025/11/14 17:49:03 fetching corpus: 13300, signal 230169/252916 (executing program)
2025/11/14 17:49:03 fetching corpus: 13350, signal 230348/252916 (executing program)
2025/11/14 17:49:03 fetching corpus: 13400, signal 230511/252916 (executing program)
2025/11/14 17:49:03 fetching corpus: 13450, signal 230742/252916 (executing program)
2025/11/14 17:49:04 fetching corpus: 13500, signal 230988/252916 (executing program)
2025/11/14 17:49:04 fetching corpus: 13550, signal 231149/252927 (executing program)
2025/11/14 17:49:04 fetching corpus: 13600, signal 231307/252927 (executing program)
2025/11/14 17:49:04 fetching corpus: 13650, signal 231478/252927 (executing program)
2025/11/14 17:49:04 fetching corpus: 13700, signal 231771/252927 (executing program)
2025/11/14 17:49:04 fetching corpus: 13750, signal 231959/252927 (executing program)
2025/11/14 17:49:04 fetching corpus: 13800, signal 232172/252932 (executing program)
2025/11/14 17:49:04 fetching corpus: 13850, signal 232323/252932 (executing program)
2025/11/14 17:49:04 fetching corpus: 13900, signal 232524/252952 (executing program)
2025/11/14 17:49:04 fetching corpus: 13950, signal 232679/252952 (executing program)
2025/11/14 17:49:05 fetching corpus: 14000, signal 232902/252952 (executing program)
2025/11/14 17:49:05 fetching corpus: 14050, signal 233135/252952 (executing program)
2025/11/14 17:49:05 fetching corpus: 14100, signal 233309/252952 (executing program)
2025/11/14 17:49:05 fetching corpus: 14150, signal 233447/252952 (executing program)
2025/11/14 17:49:05 fetching corpus: 14200, signal 233645/252952 (executing program)
2025/11/14 17:49:05 fetching corpus: 14250, signal 233817/252952 (executing program)
2025/11/14 17:49:05 fetching corpus: 14300, signal 234007/252952 (executing program)
2025/11/14 17:49:05 fetching corpus: 14350, signal 234183/252952 (executing program)
2025/11/14 17:49:05 fetching corpus: 14400, signal 234314/252952 (executing program)
2025/11/14 17:49:05 fetching corpus: 14450, signal 234552/252952 (executing program)
2025/11/14 17:49:06 fetching corpus: 14500, signal 234730/252952 (executing program)
2025/11/14 17:49:06 fetching corpus: 14550, signal 234952/252952 (executing program)
2025/11/14 17:49:06 fetching corpus: 14600, signal 235108/252952 (executing program)
2025/11/14 17:49:06 fetching corpus: 14650, signal 235232/252952 (executing program)
2025/11/14 17:49:06 fetching corpus: 14700, signal 235388/252952 (executing program)
2025/11/14 17:49:06 fetching corpus: 14750, signal 235604/252952 (executing program)
2025/11/14 17:49:06 fetching corpus: 14800, signal 235768/252952 (executing program)
2025/11/14 17:49:06 fetching corpus: 14850, signal 235906/252952 (executing program)
2025/11/14 17:49:06 fetching corpus: 14900, signal 236089/252952 (executing program)
2025/11/14 17:49:06 fetching corpus: 14950, signal 236282/252952 (executing program)
2025/11/14 17:49:07 fetching corpus: 15000, signal 236446/252952 (executing program)
2025/11/14 17:49:07 fetching corpus: 15050, signal 236620/252952 (executing program)
2025/11/14 17:49:07 fetching corpus: 15100, signal 236854/252952 (executing program)
2025/11/14 17:49:07 fetching corpus: 15106, signal 236886/252952 (executing program)
2025/11/14 17:49:07 fetching corpus: 15106, signal 236886/252952 (executing program)
2025/11/14 17:49:08 starting 8 fuzzer processes
17:49:08 executing program 1:
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4081)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', <r0=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r1=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40104020}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40811)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80c2013}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xed}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x22019001}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040014}, 0x20040004)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r3)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:selinux_config_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), r4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000740)={'wpan1\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x74a5ce8bb9fb324b, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x11)
r7 = creat(&(0x7f0000000840)='./file0\x00', 0xe0)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000d00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f00000008c0)={0x3cc, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x393, 0x33, @mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_a, @broadcast, @random="030f7b88d6fe", {0x1, 0x2}}, @ver_80211n={0x0, 0x8, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x1000, 0x7ff, {0x0, 0x18, @random="1d3ba212862b97429585a6b92b85ff3c0e6d923d0d4c12fe"}, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x3, 0x0, {0xcd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xf, 0x3, 0xbc}}, [{0xdd, 0x71, "c736fc6729c4b74267fc1f75963bac32a5404ce07f2d0b6b7393e32e42ffe6b3d131096f39e371fe8a117056bab2ed996bea44f48473ed1c5efc387ef411bec6f066563cfc37ff768dd2b0ae9df0856aee8af0740a82af817b148ebfc59e209d64f4dc1287be43c879342a4da4cf6958d3"}, {0xdd, 0x60, "727504ba7a2b9de671d65ce515b363ab4b9ea33f65a97a83a481375099a23f55b01157eb1a7694ca2d4bef5992eda137307e8f5fd9e54eba9a56e1415ee8e816f2da67b1e8e798175ef0977b250990f06baf36d6293ccd74cf353242589dcca7"}, {0xdd, 0x9e, "c2d2d30e75055a4c63d72ceb86728bd8d4179280cadba3ef695dcedca2ec826cd257dfad1523d67b519e5a89a80ab6c254345dbbb88984dc815c3d7a500f1198a641d740cf0e9b201552886c227fd96cc39d2f96189d0e3bf7fd37a6d65277012f191de1d6cd9d75f8524d7fff00198e26e6c717f750e47b11d1483c936761834143828a4b3e2ebfaeafde282c6e292ef3c9901cfd7942c883ccbbbce602"}, {0xdd, 0xed, "a27e3bbe341cbc2d91d8fa3fc8fbe945ab9dbf97f007225245b63b0d3216391d5e9c9c852d77b778ec6d46055b30c55afa95ff6bc993eaf1b4e6e340277d792ece1dcb4c3985547e890815be4a92fb0cf50577f1f543fc5b7e9c2e3b64b3589633bd7904000f7fb3751d2f5d561c9fe7d559fea5b89adff31d03b2eac380f86b1224df92c8a38533b4b32dc0d085c3d964dfab049dcbabb599c3254f37994c9031e75bbe0051f5cc9b28068ba3ab5f9b38da09b76c549de8dafd7da103f59f6f3f143514b6e36c308ae3425a75990b50bbb33d35700f15325c0d6adf28a44bba40ecf85b7c64f64347cdaf6657"}, {0xdd, 0xd3, "3d63f72087ea6165effcbfa75a7a95a187adbf5ffd60f69ab5d52af5ca7396de9912d4f67122b52717d5cd7eb3b6184742e41cb4a8aecd13b99bf33845328cc7ef0e4b3976b3e2a502dce150880bb2416f8955c409ea314fe590f86bff6a46f362f86a6f1ba2de278a2f0488344e4c753792ece9c85228110ee14779da08f2bd3fad401d8537601956b572df6fad07ba5d6a232bf0a8f372e1be3ae36952e0d15060de79e9a9e4e31c9dc9209b3836acc0fdf609f43546d0bf29b391ff6e7076cdfe5b2af332944d6a68d005efe86e316f4650"}]}}]}, 0x3cc}, 0x1, 0x0, 0x0, 0xc000}, 0x4010004)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x78, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001}, 0xc001)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000e80)={'wpan3\x00'})
syz_genetlink_get_family_id$net_dm(&(0x7f0000000ec0), r2)

17:49:08 executing program 2:
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4004)
socketpair(0x21, 0x6, 0x92, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', <r2=>0x0, 0x29, 0x7b, 0x7, 0x5, 0x26, @remote, @local, 0x8000, 0x0, 0x76, 0xfffffffe}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip_vti0\x00', <r3=>0x0, 0x10, 0x80, 0x3, 0x0, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x66, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x11}, {[@lsrr={0x83, 0xf, 0xf7, [@dev={0xac, 0x14, 0x14, 0x3f}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x104, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4048094)
r4 = accept$packet(r0, 0x0, &(0x7f00000004c0))
connect(r4, &(0x7f0000000500)=@phonet={0x23, 0x1, 0x8, 0xff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r5=>r0, @out_args}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x7f, 0x4, 0x30, @remote, @empty, 0x10, 0x80, 0x8, 0xfc000000}})
umount2(&(0x7f0000000680)='./file0\x00', 0x8)
write(r4, &(0x7f00000006c0)="149973c25369e641706fd51bad8300b24200d3a5577adacefb8e91c2914005750fec21bc59b42a22d4e59ec2c4d584798dde2bf4ff08a4e08d9a14693136235d3e519ca39eb2312333b02eb225404a864c7e65a67d9210fb4cf334f1047fc499237fc91237d84bb65f5a627a91cebcf07a1ad82e8aef25d8e4b3d5a666fc58efdf305d5472e3a04ae2ca12918a0fa008425c11934df49745e692bcbd5f679e1d4dfdf0b305eab0fdfadfc7a16fca8fdeddd0466eddf5575c24fed98699d68bd09f1312d9a02b77a08b6db3e40fded03551cc1026b4263acf90a0a45afac8a8cb7f97", 0xe2)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r5)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40090)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x400, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r5)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r8, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000000}, 0x4000040)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x88000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r9, 0x400, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000004}, 0x40)
r10 = getpgrp(0xffffffffffffffff)
perf_event_open(&(0x7f0000000c00)={0x2, 0x80, 0x4, 0x40, 0x6, 0x7, 0x0, 0x0, 0xc232, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000bc0), 0x1}, 0x9, 0x7f, 0x6, 0x8, 0x10000, 0x2ea0, 0x0, 0x0, 0x8, 0x0, 0x20}, r10, 0xb, 0xffffffffffffffff, 0x1)

17:49:08 executing program 3:
r0 = memfd_secret(0x0)
write$9p(r0, &(0x7f0000000000)="1ca052f148a8f9f8a957ecedcfe2625a101106ffc661cff43fcab8552307fc19a8e744e22d236b560ed6b2", 0x2b)
fcntl$notify(r0, 0x402, 0x8000000b)
r1 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000300)=[{&(0x7f00000000c0)="9a80ff83b3de07b40e", 0x9, 0x7}, {&(0x7f0000000100)="c92e57a2811dd836ef0aa6717c450e5a9560e7416a8a18cc17c687288744b5ffa3a6fd2d5ea46731b7fa673b01c5b6d3f34557ac92168250cc08da5bfba99c4ec52a7bf55dc2a80ee072f0a074409e4a2e95e131ea827c8a8b6f85d7cc326b14f3f99f1916439979afb5e94abb9473322ae7f2a1d363f9006527992e9c0bbaeed0cd636a0f58", 0x86}, {&(0x7f00000001c0)="da30789fcf355e5b16f695f59b66ece8e8ab82a39bef7e6fde7dee42382287aa6e5784fab1843bc808aab0a5a3773d61fe11a070171112acb33130489d6df00bbf7c31930016280180170d40fe981f80c402266e048142de1754404aedbbc6f75ee49296302cf8dcb7c4168ee28621d948db211779f52c4725d07824092bb7ae1274e5d6842f6e94", 0x88, 0x3}, {&(0x7f0000000280)="e2fc9399f796654422fd1ef8f9cddab1f26bd8395243bcd6e6f6bec278bbe98c32fcef6de504cde0b6896e5bfa67347e120a606aa71f1c38a0b3d0a4d719d08cbb1d18bebfe55a8c5a16475ce2a12e830ac673de7a07af2941d0cdc46750c9b932a62a84c8675dfe48be29ef172a3275d503940a9d285ea2", 0x78}], 0xa00000, &(0x7f0000000380)={[{@overriderock}, {@hide}, {@sbsector={'sbsector', 0x3d, 0xe1}}, {@overriderock}, {@overriderock}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@map_off}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x35, 0x3b, 0x34, 0x38, 0x65, 0x63, 0x61], 0x2d, [0x64, 0x62, 0x38, 0x61], 0x2d, [0x63, 0x34, 0x36, 0x32], 0x2d, [0x64, 0x63, 0x34, 0x38], 0x2d, [0x33, 0x36, 0x38, 0x33, 0x114443be3e6247c7, 0x31, 0x35, 0x61]}}}, {@pcr={'pcr', 0x3d, 0x40}}, {@smackfsfloor}, {@smackfsfloor={'smackfsfloor', 0x3d, '-$(\'.#'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, '*/'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@subj_type={'subj_type', 0x3d, '^-,:-:)'}}]})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000004c0))
umount2(&(0x7f0000000540)='./file0\x00', 0x3)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x1f0, 0x1f0, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000580), {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x7}}}}, {{@arp={@multicast1, @loopback, 0xff, 0xff, 0xb, 0x5, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x7fa, 0x2, 0x7fff, 0x243, 0x1, 0xe091, 'netpci0\x00', 'nr0\x00', {0xff}, {}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7f, 0xb5e, 0x1}}}, {{@arp={@private=0xa010100, @broadcast, 0xffffff00, 0xffffffff, 0xd, 0x4, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xa415527ed22c8401, 0x0, 0x80, 0x0, 0x1c65f2c7da0c307]}}, 0x4, 0x8f9, 0xffff, 0x3f, 0xfff, 0xf, 'vlan1\x00', 'gretap0\x00', {}, {0xff}, 0x0, 0x34}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="204b7961f2b7", @mac=@link_local, @loopback, @dev={0xac, 0x14, 0x14, 0x2d}, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
r2 = syz_open_dev$sg(&(0x7f0000000a00), 0x7, 0x189c01)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r2, {0x401}}, './file0\x00'})
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000a80)={0xce, 0x80, 0x6, "d4e14c7f4053c3e80fd363ecfc692670e6be2a86b6f7b62e3787f0aef31af1351533112098570ff7cdf94545a917bf89b6006d22e50495bdc9a875f93aefa83759f4b6b5293894482d512a7d73614e9daabc0844634c28352ae3b0041772199b01adfb1ff277b2d8cae4f42ea386336be7095d6d388a8690e6480d94dc58b72f6e69e980eba47cd6e81d7faf8479b4daec01815c8578a442bf19dc0b978e7661b340f9e0e2e231c691a09b130eef816d19cabba8a24e91bf23e6df3fd62d524b00a34bd63df020b0fabf4eeff58d"})
r3 = accept4$unix(r0, 0x0, &(0x7f0000000b80), 0x800)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c)
r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r6 = fcntl$dupfd(r4, 0x406, r5)
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x50002, 0x0)
fcntl$dupfd(r5, 0x406, r7)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c00)={'veth1_macvtap\x00'})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000c40)={0x0, @aes256, 0x0, @desc1})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c80)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3ff)

17:49:08 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4}}, './file0\x00'})
tee(r0, 0xffffffffffffffff, 0x9, 0x2)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000080)={0xd8}, 0x4)
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000000c0))
r3 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
finit_module(r3, &(0x7f0000000100)='cgroup.controllers\x00', 0x2)
r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x4a02)
ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000180)={0x6, 0x100000001, 0x80000000, 0xffffffffffff7fff, 0x8, 0x9})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6_vti0\x00', <r5=>0x0, 0x0, 0xd8, 0x1, 0x80, 0x30, @private2, @loopback, 0x1, 0x20, 0x3, 0x1}})
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000340)=r5)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x12, 0x8, 0x3, 0x70bd2b, 0x25dfdbff, {0x3, 0x0, 0xa}, [@generic="4282b5211d011afe80ab7d10e46dec4f298bfaaa5bf8aad9e3b0ebf83dd34dd4f5656003a9ab4d6a14f7b8f245142cf00bf4c26cdde8893361f2e10ebb9f306c", @typed={0x8, 0xa, 0x0, 0x0, @uid}, @generic="d0ef5f0f9330f042ddd616cf10cf132cc91031032a4fe2fcfb60f572dff591b6262baf539c04408aab446e78d3b69c9c329a713e5816478879e516eba6317df3c6a2"]}, 0xa0}, 0x1, 0x0, 0x0, 0x40020}, 0x400c001)
r6 = perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0xa0, 0x5, 0x2a, 0x7, 0x0, 0x3, 0x10000, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x80000000}, 0x4, 0x40, 0x0, 0x0, 0x5, 0x9, 0x0, 0x0, 0x8}, r0, 0xc, r0, 0xbd95faa9e144a015)
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000580)={0x0, 0x4, 0x3, 0x3ff})
ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000005c0)={{0x1, 0x9}, 0x100, './file0\x00'})
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000700)=0x20)
r7 = syz_open_dev$mouse(&(0x7f0000000740), 0x7f, 0x240c00)
copy_file_range(r0, 0x0, r7, &(0x7f0000000780)=0x5, 0xffffffff, 0x0)
recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000007c0)=""/199, 0xc7}, {&(0x7f00000008c0)=""/198, 0xc6}, {&(0x7f00000009c0)=""/125, 0x7d}, {&(0x7f0000000a40)=""/178, 0xb2}, {&(0x7f0000000b00)=""/220, 0xdc}, {&(0x7f0000000c00)=""/178, 0xb2}, {&(0x7f0000000cc0)=""/220, 0xdc}, {&(0x7f0000000dc0)=""/35, 0x23}], 0x8}}, {{&(0x7f0000000e80), 0x6e, &(0x7f0000001000)=[{&(0x7f0000000f00)}, {&(0x7f0000000f40)=""/170, 0xaa}], 0x2, &(0x7f0000001040)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001080), 0x6e, &(0x7f0000001400)=[{&(0x7f0000001100)=""/21, 0x15}, {&(0x7f0000001140)=""/195, 0xc3}, {&(0x7f0000001240)=""/167, 0xa7}, {&(0x7f0000001300)=""/210, 0xd2}], 0x4}}, {{&(0x7f0000001440)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f00000014c0)=""/15, 0xf}, {&(0x7f0000001500)=""/27, 0x1b}], 0x2, &(0x7f0000001580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000001600)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001680)=""/61, 0x3d}], 0x1, &(0x7f0000001700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000017c0), 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001840)=""/194, 0xc2}, {&(0x7f0000001940)=""/45, 0x2d}, {&(0x7f0000001980)=""/108, 0x6c}, {&(0x7f0000001a00)=""/45, 0x2d}, {&(0x7f0000001a40)=""/153, 0x99}], 0x5, &(0x7f0000001b80)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001c40)=""/116, 0x74}], 0x1}}, {{&(0x7f0000001d00), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000001d80)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000002e00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000002ec0), 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002f40)=""/183, 0xb7}, {&(0x7f0000003000)=""/176, 0xb0}], 0x2}}], 0x9, 0x20, &(0x7f0000003340))

17:49:08 executing program 7:
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)={'U+', 0xb93a}, 0x16, 0x3)
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f00000000c0)=0x200)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x8000, 0x50)
mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffffb)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x200240, 0x80)
r3 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x7, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000240)="7d25d26904eba9d744ed7a9e43f43fd39747b41b8c0509e2c306e2c815b8d84a91726d551ee6581b3c4783f4c3c449c9cd3ce01652645eff0dbca04da0439bfc374f1098f71cc387", 0x48, 0xffff}, {&(0x7f00000002c0)="10b249812931dad6fdd27acdd8b1e49f5e9a948a1b87569fa155996cc8d03ab53d804d744154f4c7e4e7aa38a7e5efba74169cf1f4ea5b71b27127c18c05661a3f8fc70e012796c1959356c8de2fa1e6c0411240972f4689a91db64147e1e8be3f759f3ee1937a1c2d5614155f1e48efdb22afc26202b4a24f2c1c2cd6ec7b55e994e3dced771085c3ee7c63b5c5fee1549b37e532c496dc7cea9813d40ace5b5abe52d463e94e5b9696363be7386df2f9d472a2865a56af3d7bedf6c415", 0xbe, 0x6}, {&(0x7f0000000380)="5b3ee106584b70400608", 0xa}], 0x80, &(0x7f0000000440)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}}], [{@subj_role={'subj_role', 0x3d, '@:&'}}, {@dont_appraise}, {@fowner_gt}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]})
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000004c0)={0x789, 0x5, 0x1000, 0x5})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x3824c919d16e9a14, 0x2)
r5 = openat(r3, &(0x7f0000000540)='./file0/file0\x00', 0x200200, 0x0)
faccessat(r5, &(0x7f0000000580)='./file0\x00', 0x101)
openat(r4, &(0x7f00000005c0)='./file0/file0/file0\x00', 0x20000, 0x1)
r6 = memfd_create(&(0x7f0000000600)='}8*\']/\x00', 0x1)
fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x1)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000006c0), &(0x7f0000000700), 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000001880)={{0x1, 0x1, 0x18, <r7=>r6, {0x3f, 0x2828aa97}}, './file0/file0/file0\x00'})
io_submit(0x0, 0x3, &(0x7f0000001a00)=[&(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x9, r4, &(0x7f0000000740)="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", 0x1000, 0x4, 0x0, 0x1, r4}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0xfff, r3, &(0x7f0000001780)="883768f42d6f8c37bf6b47b0c6580cf3b6054896acd18c4403047a49a4cb5cca0cc7de048879cccb85733165986938b852b4187b473879b57635425761b2ae0c670d93081d159a15fc9fe71ea6157925221fc2d346f2663c859d6ac1f3d09f8e018999297067bfca1f38638715cdaedb1a8afc4a17e5445d43cfebfd84ac444ef82124d60211de5f4df4f6f6207dc0687f3281999e633fb472692f5cdded2ee789105f8f20ee990de7f6d979ffabc86ffe2b0c4371d0881599e8f930fe78772c02bed7965610b309661b6007980a47b8582b315293bdeae57aecddd1e87a18f3da1fa9e4df222aea7ee1b00fdcb2", 0xee, 0x6, 0x0, 0x2, r7}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x7, 0x1000, 0xffffffffffffffff, &(0x7f0000001900)="76f44e90c0c39286d2461a1a44cb709c0eb45965c9dc76121ec3d995c6f16f1ce87fcaf74226eb5d7500cd0d28b416af813b153455756b15d6d726e5d7d1423fc4803f14dfeaedad615e5d31f2c68ce414d03bd467fe0a28212a139afc141d251914b78b5b2da786ba8bb4a15ae5b636d330664afde6e957cee69c52ae53741e02b3703c", 0x84, 0x8, 0x0, 0x2, r5}])
recvmmsg$unix(r7, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001a40)=""/30, 0x1e}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/108, 0x6c}], 0x3, &(0x7f0000002b40)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}}], 0x1, 0x40000020, 0x0)
r9 = dup(r2)
io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000002bc0)=[r8, r2, r2, r9], 0x4)

[   86.221591] audit: type=1400 audit(1763142548.878:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
17:49:08 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/4096)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000001040)={0x1, 0x0, 0xfff, 0x800, 0x6})
chmod(&(0x7f0000001080)='./file0\x00', 0x28)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000010c0)=""/49)
mknodat$loop(r0, &(0x7f0000001100)='./file0\x00', 0x2, 0x0)
lstat(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180))
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001500)={{'\x00', 0x3}, {0x17}, 0xe298b984cf617215, 0x0, 0x0, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240)='./file0\x00', &(0x7f0000001280)="b7cace483511c0935c8cf81a407e7f70a2f5ab3a03f5813917c2339295a9a82248", 0x21, 0x0, &(0x7f00000012c0)={0x2, 0x161, {0x1, 0xc, 0xd4, "8a739404c7d76dedd02e18de84591ce82b2a7cd4085083d765a2e3cc1f76d8452d4b55e687e7290b26fdbeff35d7e80656feaeb5613c2d664f92efcb8b9c17de853d62323db0fdaee3d4fc03a6a38ce83e84137679e5c7b016026f2ce025dedd09ce093f15bcbf86e6791b8619beb762deb85677e721a766584ea14c32c8b8db6d2d843d07060cfcdac90837d6651d8913abee3daab4f0ae67a32584a6966763b13422e198e1a7a742f1d3c8d4f9757df0c87e228a35009a3c75748c7d0f9442456c3b3a9b6ed1ff372292df1f9c7ce129b6ccbe", 0x80, "2986919c2f259f8015aec162211465d3ecf34dcbae27934e7a1074eea504aee9690a84ba0b7d7c2601c12d4162d03d951231cd6cec824109817e85aad5491ab7e392ca6b15995de45e1e408e74d4b0479c4429dfd87c453bbc50adc5dcbc475eb936fbf700cda3670802e388a2a1928c48a2aa667f28bfccb1fe3eef8644d885"}, 0x99, "79a44a1ec4f29dca664d4c203587d23ae682893afc50e9b61e975263d4f2f0126f2e4a7f4c8aff7b8d62a31d390ccbb2d10a999fd3b189a3deefa930f004e376520f540fd70f02a809b8608c1de960988c0381a55cd6d7b983583311d7bf3547134dd8bc4489791ace1d8d5287c5216496042eb39e8ae3c361cdc32616be28ad7dc90f74d05291c3fe6f3723e9054c4cf83e343080c6b41d0c"}, 0x206})
r1 = syz_open_dev$vcsa(&(0x7f0000001580), 0x1, 0x8000)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r0, {0x70af}}, './file0\x00'})
ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000001600)=""/172)
newfstatat(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700), 0x2000)
umount2(&(0x7f0000001780)='./file0\x00', 0x2)
stat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
quotactl(0x607, &(0x7f00000017c0)='./file0\x00', r2, &(0x7f00000018c0)="1a384a3aae918f85c8d7560da13c72d2f44d1c45726f")
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xf07)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000001900), 0x44040, 0x0)
ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000001940)=0x7)
chdir(&(0x7f0000001980)='./file0\x00')
ioctl$int_in(r0, 0x5452, &(0x7f00000019c0)=0x8)

17:49:08 executing program 5:
timer_create(0x0, &(0x7f0000000180)={0x0, 0x5, 0x0, @thr={&(0x7f0000000000)="07d57d1ae6b703aa679e6ec152b70a37566f7d13462d7ca389a624e9c854e884db3e6366aee7308e6c2603ada0dc5def47e00eab095148753e8fdff077d0ebe996ff", &(0x7f0000000080)="4b784aa1209763224412976a34f2c66d9b783c2902a5fd809eef4816830e85ebc8246b03fc1edee6ca28072bc5fcae6db2f17cd96be658b843ca426cc7fa1dfda04890c099f2c4a8049b22a39edc82d13847301679a311b99d140f9155b8560eea2bee653a16eff031e24c91d9e97c028ce363c7820b58b42d8147d5c88eac26022f127d2afd3f8af2f1e655d7ea0481ffbbe7c205587c6b5f0e4db692fb36ad1ffb2cc15d0e4fe142d940de071da1ac8fc44651bad3b6729d3821371056d2c7e3588f5a3ad85ae6b47cba63"}}, &(0x7f00000001c0)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000200)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {r1, r2+10000000}}, &(0x7f0000000280))
timer_create(0x4, &(0x7f00000002c0)={0x0, 0x39}, &(0x7f0000000300))
timer_create(0x1, &(0x7f0000000480)={0x0, 0x2e, 0x0, @thr={&(0x7f0000000340)="d6ac7a965e1c9223a554043f613075453fe4f71a0506ed35e7c60486fc78bb2129428fe73f02089bb90f545bd6be76ad3893fc75abcb31914aead09861d407238f2e20ad7c9ee360a3f8a7ccee81ed0dec3ab508ebdba03e07358bbdb8fb52b34db02fc1ec0c6578859eb1a8140bdab1aaa863318a589ed1ce7e155eed007bb46dfab0b3ed076d75488f99ce703e3d0fb187c5343d0d04db12ac79c05d38b4ca8c7a52344b48b7dddac843b5b0888c8a6b52c2d1cc255986027a271104f5b9", &(0x7f0000000400)="b6dc3e006b88e5bc7afdba2496e814c494e7227c1f3384f1e06e1b36dfa1b394ca74ec135d0cfda1bf005be514a7e8051d90d0b028a9e351f57596f5ad345ff00aef54238f5928736349959fdd1176da56e235ccdee4dbb0"}}, &(0x7f00000004c0))
timer_settime(r0, 0x1, &(0x7f0000000500)={{0x77359400}, {0x77359400}}, 0x0)
timer_create(0x4, &(0x7f0000000600)={0x0, 0x25, 0x4, @thr={&(0x7f0000000540)="8bbca962", &(0x7f0000000580)="98d56bd46f0878c2cd130206a5b68f1100e0475aa96577df0b90d921dcf67da241c7803d7c711b32be0beb4c43aea6dd6d11ba48649c243d9c71b0561499c08126e81d7955b58b714de0cc1579e3b13c6d4cc00f48f9b8dbaee11ebe7827bc0b16168ec2b4b7"}}, &(0x7f0000000640)=<r3=>0x0)
r4 = getpid()
timer_create(0x3, &(0x7f0000000680)={0x0, 0xf, 0x1, @tid=r4}, &(0x7f00000006c0))
timer_gettime(r3, &(0x7f0000000700))
timer_create(0x4, &(0x7f0000000880)={0x0, 0x17, 0x4, @thr={&(0x7f0000000740)="c08bd1fa623e4fd6e19d077986c137ac4c6e4ba3669b461b722c86edc77517b780652a2d7d750ea42dc757a0da39c146b379a9078d48f73ba0799f35714a9d883ca5c7de61bc5efe31a68c7d32ef61472826b51533d8d32db37f40de9af28195fe2c7ef9dab5c9a4f5f62ac2954180e99fd6de6037a85aa9f6f0427526873fa1807ce6f9c6c1e7e07d7a1afce9aa800c595b35c6a7a55b97097c9be3bef2db6011d008ce03fb41e53222562d0bad", &(0x7f0000000800)="070f30416f0d21afa0bd5a5aad49fd02a3b64f1f26f404e4740668c9db72e47955c4d5d9bd46bf642ae0694aaf387a8040e1f2a94b8cc9e2affd564710da7d47583c73b1888414a5120e12b4da9fad04e964f1560b370c539dcfb5e1f90813e30bd489"}}, &(0x7f00000008c0))
pidfd_open(r4, 0x0)
pidfd_open(0x0, 0x0)
timer_create(0x4, &(0x7f0000000980)={0x0, 0x3f, 0x0, @thr={&(0x7f0000000900)="d6f5c83b1139d8aabbaf7fd625de67fc29b925eb5e5d1efe8d8ba1241af57fd8f8d7debe1629c9a34a75ee12fa", &(0x7f0000000940)}}, &(0x7f00000009c0)=<r5=>0x0)
clock_gettime(0x0, &(0x7f0000000a00)={<r6=>0x0, <r7=>0x0})
timer_settime(r5, 0x0, &(0x7f0000000a40)={{r6, r7+10000000}}, &(0x7f0000000a80))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
pselect6(0x40, &(0x7f0000000ac0)={0x1ffc00000000000, 0x5, 0x9, 0x7, 0x3, 0x1, 0x6949, 0x4}, &(0x7f0000000b00)={0x4, 0x200, 0x91b, 0x0, 0x8, 0x800, 0x401, 0x4}, &(0x7f0000000b40)={0x0, 0xeda, 0x100000000, 0x8, 0x2, 0x5465, 0xfffffffffffffa76, 0x6}, &(0x7f0000000b80), &(0x7f0000000c00)={&(0x7f0000000bc0), 0x8})
timer_create(0x6, &(0x7f0000000d00)={0x0, 0x2f, 0xb8bd0d313849cdc1, @thr={&(0x7f0000000c40)="2b2a231941c983d2f111b2ddedd86a070ac52085c03a039afaa68b31", &(0x7f0000000c80)="768d140770bfaaac1951ee53cea4796fabd21d0c97d49ff3ce231c643a353fbc060712625cc741ee239b3d7a04329bf629373d642ab263f1b080cd8261a756f4452b6f419551d05075dc30053c4ff85fa3da40cfcd21806d"}}, &(0x7f0000000d40))
timer_gettime(0x0, &(0x7f0000000e00))

17:49:09 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffff001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x10000, 0x6}}, './file0\x00'})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x900)
sendfile(r1, r2, &(0x7f00000001c0)=0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
r6 = memfd_secret(0x80000)
r7 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x66, 0x5, &(0x7f00000006c0)=[{&(0x7f0000000480)="92d3ce8a00ca3230cf988c608d4ec3c0b35678366689206ec1c7a9cdc49be4a388df43f3d3aab5e232d5d20c020cf67b591b3e014faff062f911b5d6bf5129d32bbe3c2ee301d881afcf5d915ece54b98423e92aa2180ba885cc3fda84eccc65514161758fa0ace276f2fce641c26391c4cd7a6daa4d607166cd41d2ce4f94fb7bd682c3cea9f9df338914244beb0d4d9d778f03290d026bb93451ffe38a9e2ba6b6bfd3e4b906326180ce354e3eab51ff3cc2d98d4d3cee05de7fe5a7abf46c5b5334159c2dce6adc2b9fb66b932c2e2b63a5cb9b722809857dd6d1ed2c6629804d226d156831ff051121", 0xeb, 0x3}, {&(0x7f0000000580)="1db150ce8036bb67b6ac890bcb7c0fc9820204ef2172b42ca189708537aecf29520d8f39a50485ab7a", 0x29, 0x2}, {&(0x7f00000005c0)="2d53fa0a93034062d2482252257a445b7a6f110f0742af38e641cae71fd83181510a1b8c54fb0ac88660c3996b9b8382f049725e78f1c38f4f7b555809c13e5a5e5e81845e6c087a6a8604ee0876fb9bfeb83b6c74843453da089eaace9aff43ae", 0x61, 0x7fffffff}, {&(0x7f0000000640)="6155ad9c733f3f7fb8cc028545d609b1518cbee7948be1df5df231fe839993361de675bd", 0x24, 0xffff}, {&(0x7f0000000680)="2e4518ce2eabc6270d34ba46365b83b7943c17735b4be224a17567cfdfddac907f3a2bf63816089cefc76073ea7e895eaa5c0de3584dafee49dc538be925c3", 0x3f, 0x41}], 0x2010, &(0x7f0000000740)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@shortname_winnt}, {@shortname_win95}, {@shortname_lower}, {@utf8}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/snd/timer\x00'}}, {@subj_type}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]})
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = dup2(r6, r1)
io_submit(0x0, 0x3, &(0x7f0000001980)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x4, r7, &(0x7f0000000800)="d44b5db6210f53887f9a67d2121bddfde97f7f9b7643e330c174b1256b43bf74b244b20047ad7885fe6e520df013a48f478950efddca1919bd17b691c5e7a1f32033b2482e22e99190553e8fd262f14fa75a0660dc14942627b53d44fe1eba85b7fe4edc", 0x64, 0x6d7c, 0x0, 0x2, r6}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x3, 0x6, r1, &(0x7f00000008c0)="bd435aac3c1486da31bf", 0xa, 0x2, 0x0, 0x1, r0}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x3, r8, &(0x7f0000000940)="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", 0x1000, 0xaebc, 0x0, 0x3, r9}])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001a40)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r0, &(0x7f00000019c0)={0x200800, 0x8, 0x12}, &(0x7f0000001a00)='./file0\x00', 0x18, 0x0, 0x23456}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000001a80)={{0x1, 0x1, 0x18, <r10=>r0, {0x4dff6e74}}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r10, 0x40485404, &(0x7f0000001ac0)={{0x0, 0x3, 0x1, 0x1, 0x1}, 0x4, 0x200})
r11 = openat$incfs(r0, &(0x7f0000001b40)='.log\x00', 0x400002, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000001b80)={0xa53a, [{r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3}, {r4, r5}, {r4}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {0x0, r5}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r3, r5}, {r4, r5}, {r4}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4}, {r4}, {r3, r5}, {r4, r5}, {r4, r5}, {r3}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3}, {<r12=>0x0, r5}, {r3, r5}, {0x0, r5}, {r3, r5}], 0x1, "82fbc49ba011ea"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000002b80)={0x0, ""/256, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000002d80)={0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000002f80)={{<r15=>r3, 0x7ff, 0xffffffff, 0xfffffffffffffc00, 0x401, 0xffffffff, 0x6034b4dd, 0x2, 0x1000, 0x9, 0x80000000, 0x40, 0x1, 0x631, 0x3}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, &(0x7f0000083e40)={0xff, [{0x0, r5}, {r12, r5}, {r4, r5}, {r13, r14}, {r15, r5}, {r3, r5}, {r3}, {r3}, {}, {r3}, {r4}, {r3}, {r3, r5}, {r4, r5}, {}, {r4}, {r4}, {r3}, {r4}, {r4, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3}, {}, {0x0, r5}, {r3, r5}, {r4}, {r4, r5}, {}, {r4, r5}, {r4, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {0x0, r5}, {r3}, {r3}, {r3, r5}, {}, {r4, r5}, {}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3}, {}, {}, {r4, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4}, {0x0, r5}, {}, {0x0, r5}, {r3}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {}, {r4, r5}, {r3}, {r3}, {r4}, {r3, r5}, {r3}, {r3, r5}, {r4}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {0x0, r5}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {}, {r4, r5}, {r3}, {r4, r5}, {}, {}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {r4, r5}, {r3}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r4}, {r4}, {0x0, r5}, {r3, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4}, {}, {}, {0x0, r5}, {r4}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {}, {0x0, r5}, {r3}, {r4, r5}, {r3}, {r3}, {}, {r4, r5}, {r3}, {0x0, r5}, {r3, r5}, {r3, r5}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {r4}, {r3, r5}, {r4, r5}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3}, {0x0, r5}, {r4}, {}, {}, {}, {r3, r5}, {}, {r4, r5}, {r3}, {0x0, r5}, {}, {r3}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r4}, {r3}, {}, {r3, r5}, {r4, r5}, {}, {r4, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {r3}, {r3}, {0x0, r5}, {r3, r5}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {r3}, {r4}, {0x0, r5}, {r4}, {r3, r5}, {r3, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3}, {r3}], 0x0, "e6c1dcac71164d"})

[   87.311625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.315588] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.316361] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.318062] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.319070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.378989] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.385578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.388712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.394210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.402045] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.441246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.442917] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.444643] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.446436] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.449073] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.450279] ==================================================================
[   87.451424] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0
[   87.452484] Read of size 2 at addr ffff88801f2abb78 by task kworker/u11:3/302
[   87.453573] 
[   87.454521] CPU: 1 UID: 0 PID: 302 Comm: kworker/u11:3 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) 
[   87.454553] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[   87.454568] Workqueue: hci3 hci_cmd_work
[   87.454599] Call Trace:
[   87.454607]  <TASK>
[   87.454615]  dump_stack_lvl+0xca/0x120
[   87.454644]  print_report+0xcb/0x610
[   87.454673]  ? __virt_addr_valid+0x100/0x5d0
[   87.454699]  ? hci_cmd_work+0x66d/0x6d0
[   87.454727]  ? hci_cmd_work+0x66d/0x6d0
[   87.454755]  kasan_report+0xca/0x100
[   87.454783]  ? hci_cmd_work+0x66d/0x6d0
[   87.454815]  hci_cmd_work+0x66d/0x6d0
[   87.454844]  process_one_work+0x8e1/0x19c0
[   87.454882]  ? __pfx_process_one_work+0x10/0x10
[   87.454913]  ? rcuwait_wake_up+0x27/0x290
[   87.454945]  ? move_linked_works+0x172/0x270
[   87.454970]  ? assign_work+0x196/0x240
[   87.455001]  worker_thread+0x67e/0xe90
[   87.455032]  ? trace_irq_enable.constprop.0+0xc2/0x100
[   87.455059]  ? __pfx_worker_thread+0x10/0x10
[   87.455091]  kthread+0x3c8/0x740
[   87.455119]  ? __pfx_kthread+0x10/0x10
[   87.455148]  ? ret_from_fork+0x79/0x7a0
[   87.455172]  ? lock_release+0xc8/0x290
[   87.455220]  ? __pfx_kthread+0x10/0x10
[   87.455249]  ret_from_fork+0x67a/0x7a0
[   87.455270]  ? __pfx_ret_from_fork+0x10/0x10
[   87.455294]  ? __switch_to+0x759/0x1060
[   87.455324]  ? __pfx_kthread+0x10/0x10
[   87.455353]  ret_from_fork_asm+0x1a/0x30
[   87.455389]  </TASK>
[   87.455397] 
[   87.480712] Allocated by task 291:
[   87.481262]  kasan_save_stack+0x24/0x50
[   87.481895]  kasan_save_track+0x14/0x30
[   87.482521]  __kasan_slab_alloc+0x59/0x70
[   87.483173]  kmem_cache_alloc_node_noprof+0x228/0x6b0
[   87.483985]  __alloc_skb+0x2ab/0x370
[   87.484582]  hci_cmd_sync_alloc+0x34/0x300
[   87.485248]  __hci_cmd_sync_sk+0xf7/0x5c0
[   87.485911]  hci_read_local_version_sync+0x2c/0x170
[   87.486683]  hci_dev_open_sync+0x145c/0x1f60
[   87.487371]  hci_power_on+0xdb/0x5d0
[   87.487967]  process_one_work+0x8e1/0x19c0
[   87.488623]  worker_thread+0x67e/0xe90
[   87.489243]  kthread+0x3c8/0x740
[   87.489792]  ret_from_fork+0x67a/0x7a0
[   87.490395]  ret_from_fork_asm+0x1a/0x30
[   87.491035] 
[   87.491311] Freed by task 303:
[   87.491807]  kasan_save_stack+0x24/0x50
[   87.492430]  kasan_save_track+0x14/0x30
[   87.493051]  kasan_save_free_info+0x3a/0x60
[   87.493731]  __kasan_slab_free+0x43/0x70
[   87.494364]  kmem_cache_free+0x26f/0x500
[   87.495009]  kfree_skbmem+0x18a/0x1f0
[   87.495618]  sk_skb_reason_drop+0x10e/0x1b0
[   87.496278]  vhci_read+0x3d5/0x5d0
[   87.496841]  vfs_read+0x1eb/0xc70
[   87.497389]  ksys_read+0x121/0x240
[   87.497942]  do_syscall_64+0xbf/0x430
[   87.498547]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.499361] 
[   87.499629] The buggy address belongs to the object at ffff88801f2abb40
[   87.499629]  which belongs to the cache skbuff_head_cache of size 232
[   87.501562] The buggy address is located 56 bytes inside of
[   87.501562]  freed 232-byte region [ffff88801f2abb40, ffff88801f2abc28)
[   87.503370] 
[   87.503640] The buggy address belongs to the physical page:
[   87.504484] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f2ab
[   87.505681] flags: 0x100000000000000(node=0|zone=1)
[   87.506442] page_type: f5(slab)
[   87.506959] raw: 0100000000000000 ffff8880096c78c0 dead000000000100 dead000000000122
[   87.508136] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000
[   87.509298] page dumped because: kasan: bad access detected
[   87.510143] 
[   87.510410] Memory state around the buggy address:
[   87.511154]  ffff88801f2aba00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   87.512253]  ffff88801f2aba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc
[   87.513360] >ffff88801f2abb00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[   87.514460]                                                                 ^
[   87.515556]  ffff88801f2abb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   87.516658]  ffff88801f2abc00: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc
[   87.517744] ==================================================================
[   87.519056] Disabling lock debugging due to kernel taint
[   87.520056] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.522821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.524080] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.526747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.528955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.530239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.532609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   87.533511] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.534742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.541884] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   87.542560] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   87.543221] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.544125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.545871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   87.552319] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   87.562659] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   87.563234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   87.570928] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   87.571823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   87.580867] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   87.681553] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   87.772902] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   87.773666] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   87.774712] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   87.775535] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   89.349552] Bluetooth: hci0: command tx timeout
[   89.477564] Bluetooth: hci1: command tx timeout
[   89.605525] Bluetooth: hci5: command tx timeout
[   89.605929] Bluetooth: hci6: command tx timeout
[   89.606307] Bluetooth: hci2: command tx timeout
[   89.606705] Bluetooth: hci3: command tx timeout
[   89.607076] Bluetooth: hci4: command tx timeout
[   89.799531] Bluetooth: hci7: command tx timeout
[   91.397534] Bluetooth: hci0: command tx timeout
[   91.525925] Bluetooth: hci1: command tx timeout
[   91.653730] Bluetooth: hci4: command tx timeout
[   91.654732] Bluetooth: hci3: command tx timeout
[   91.655846] Bluetooth: hci2: command tx timeout
[   91.656677] Bluetooth: hci6: command tx timeout
[   91.657509] Bluetooth: hci5: command tx timeout
[   91.845614] Bluetooth: hci7: command tx timeout
[   93.445522] Bluetooth: hci0: command tx timeout
[   93.573919] Bluetooth: hci1: command tx timeout
[   93.702485] Bluetooth: hci2: command tx timeout
[   93.702969] Bluetooth: hci4: command tx timeout
[   93.703395] Bluetooth: hci5: command tx timeout
[   93.704289] Bluetooth: hci6: command tx timeout
[   93.704947] Bluetooth: hci3: command tx timeout
[   93.893494] Bluetooth: hci7: command tx timeout
[   95.493497] Bluetooth: hci0: command tx timeout
[   95.622471] Bluetooth: hci1: command tx timeout
[   95.749546] Bluetooth: hci3: command tx timeout
[   95.749969] Bluetooth: hci6: command tx timeout
[   95.750341] Bluetooth: hci5: command tx timeout
[   95.751467] Bluetooth: hci4: command tx timeout
[   95.751851] Bluetooth: hci2: command tx timeout
[   95.941587] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
17:49:10  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88800f5a8000 RCX=ffffffff8144334a RDX=ffff88800f5a8000
RSI=ffffffff814432d3 RDI=ffff88800f5a802c RBP=0000000000000000 RSP=ffff88800f5b7d40
R8 =0000000000000000 R9 =ffffed1001e72b00 R10=ffff88800f395807 R11=0000000000000001
R12=ffffc90003db8ff9 R13=ffff88800e2b7250 R14=ffff88800f5a8000 R15=0000000000000086
RIP=ffffffff814432d7 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e538f000 00000000 00000000
LDT=0000 fffffe6d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb6273ae070 CR3=000000000d51e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f42d8c427c000007f42d8c427c8
XMM02=00007f42d8c427e000007f42d8c427c0 XMM03=00007f42d8c427c800007f42d8c427c0
XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff8293dd05 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff8880162a7618
R8 =0000000000000000 R9 =ffffed1001d60046 R10=0000000000000000 R11=617254206c6c6143
R12=0000000000000005 R13=0000000000000010 R14=ffffffff88974780 R15=ffffffff8293dcf0
RIP=ffffffff8293dd5d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e548f000 00000000 00000000
LDT=0000 fffffe6300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f76529a5070 CR3=000000000ae0a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=0000000000ff000000000000000000ff
XMM02=0000000000ff000000000000000000ff XMM03=093a646e427061430a66666666666666
XMM04=6e6f63093a68636e6172427463657269 XMM05=00000000000000000000000000000000
XMM06=6c6261093a68636e6120426163656869 XMM07=00000000000000000000000000000000
XMM08=636f72702f0064696e6f697373657300 XMM09=00000000000000000000000000000000
XMM10=20200000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000