last executing test programs: 12.069193861s ago: executing program 3 (id=1216): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_j1939(r3, 0x0, 0x0) r4 = epoll_create(0x2) setfsgid(0xee00) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r6, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x3000200a}) sendto$inet6(r1, &(0x7f00000004c0)="4747135f6fc2e0d41231cb53d9200128da8c2299af14b35b05219d463b6bc7b36d9626a6ff517591f014fb5fee2cd82055aa05a8cf03ef2635ba467a92ac0cbf3dafaffff6008ae6dd78da314d7ec7c3f89a91afc0dd4abfeb5270f4198e5d310ccdae130cccd7314b0065121c375d81ccc78032a86ff9514531e98fbe151254d48a85e2fc5703d1a3bd7328d1bb4a17ef1177a31518c1229a1077cb96f3df95e27f5fc4882b5fb39ad7b9c1201b08513d02dede7eed54511ed663faba48a329490854d2a4ec9db6b96c4e5c7afb9d8236b4a7eb91d3f28b6cdf348c5e344b2076bedc8f3685ede7e260d96fb46bd0f3fc604fdb", 0xf4, 0x408a1, 0x0, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) accept4$nfc_llcp(r3, &(0x7f0000000380), 0x0, 0x80000) fstat(r2, 0x0) 10.440280715s ago: executing program 4 (id=1220): syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x97}}, &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x3, 0x3a) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @empty, 0x101}, 0x1c) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty, 0x40}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000)=0x10fc4c16dadd9937, 0x4) sendfile(r1, r1, 0x0, 0x40008) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) io_setup(0x7be, &(0x7f0000001380)) 10.418425915s ago: executing program 2 (id=1221): syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x97}}, &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x3, 0x3a) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @empty, 0x101}, 0x1c) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty, 0x40}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000)=0x10fc4c16dadd9937, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) io_setup(0x7be, &(0x7f0000001380)) 8.924754748s ago: executing program 1 (id=1224): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) syz_emit_ethernet(0x1d1, &(0x7f00000004c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @remote, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x18, 0x4, 0x1, 0x3b, 0x1bf, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @private=0xa010100, {[@rr={0x7, 0x7, 0x74, [@local]}, @cipso={0x86, 0x3f, 0x0, [{0x7, 0xf, "2a5ee681784acc017c4201fb7f"}, {0x0, 0xa, "26dfdea150feafb8"}, {0x6, 0x2}, {0x2, 0x3, "c7"}, {0x7, 0xc, "b67c4a77563851051d9e"}, {0x0, 0x9, "4af14c80cd9f80"}, {0x5, 0x6, "a019e8f1"}]}, @ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x95, 0x3, [], "d3ea43c41e441c00207302eb92dce92e5ee71cbcfe2cd09c9d187973bc0f4c8931b211fc7c6ac9a3d290a347ff0ab047c6712b2a83d88f5c2c014ef02ef1d861c8e922ff5e7ff86020c6c68abcea7042bd0ddb51a389e4cfbaa7c516324c87f0800681572eecbcc732e9053715f5eb09764adf3e55183457caa65b975a8671769c99e92e53f3421dadb600f19dcbf6c47ea185a429"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0xbec, 0x7f], "a53ca95850e635a83992dc36c27a867dfd14fb1faffde4"}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0xfe, 0x0, 0x0, 0x1, 0x6, 0x6}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x1, {{0x4, 0x2, 0x94, 0x1, 0x0, 0x2, 0x5, 0x9}, 0x2, {0xffff, 0x80, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "e45a166f2573771f486ee2b8e1ed8c51dd6a5723b86e697a0f30a7cafdf8fcead9581a27eaaae816beb938bcd10e8d5e669b34f4e0ce5ccd73e3ddd51a5f1ea6a2cf9d952e8753837cbc8b97d0ef4185de85e6696243cb6c23d689ed02eb0b0018711220cd656a90539f22"}}}}}}}, 0x0) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedreceive(r1, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 8.685271494s ago: executing program 3 (id=1225): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r1, 0x0, 0x0) openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x240401, 0x46) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r2, 0x4, 0x0, @void}, 0x10) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x384, 0x0, 0x181, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\f\x00\x00', @ANYRES16=r6, @ANYBLOB="0100f5ff00000000000003000000140001800d0001007564703a73797a3000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 8.624932267s ago: executing program 4 (id=1226): syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x97}}, &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x3, 0x3a) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @empty, 0x101}, 0x1c) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty, 0x40}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000)=0x10fc4c16dadd9937, 0x4) sendfile(r1, r1, 0x0, 0x40008) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) io_setup(0x7be, &(0x7f0000001380)) 8.513140204s ago: executing program 2 (id=1227): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x7, 0x0, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x2, 0x6, 0x2, 0x9220000000000000, 0x3, 0x1, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f00002c6000/0x1000)=nil, 0x1000, 0x1000002, 0x13, r2, 0x20000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, r4, 0x200, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) syz_open_dev$video(0x0, 0x8, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) 7.512095031s ago: executing program 1 (id=1228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20044000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c0000001000390400"/20, @ANYRES32=r4, @ANYRES64=r0], 0x6c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r5 = socket(0x10, 0x3, 0x0) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000240)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000002800)={0x44, 0x0, &(0x7f0000002680)=[@transaction={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1500, 0x0}) 7.249888311s ago: executing program 0 (id=1229): syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x97}}, &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x3, 0x3a) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @empty, 0x101}, 0x1c) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty, 0x40}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000)=0x10fc4c16dadd9937, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x40008) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) io_setup(0x7be, &(0x7f0000001380)) 7.202735462s ago: executing program 1 (id=1230): syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x97}}, &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x3, 0x3a) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @empty, 0x101}, 0x1c) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty, 0x40}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000)=0x10fc4c16dadd9937, 0x4) sendfile(r1, r1, 0x0, 0x40008) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) io_setup(0x7be, &(0x7f0000001380)) 6.953712042s ago: executing program 4 (id=1231): syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x97}}, &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x3, 0x3a) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @empty, 0x101}, 0x1c) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty, 0x40}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000)=0x10fc4c16dadd9937, 0x4) sendfile(r1, r1, 0x0, 0x40008) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) io_setup(0x7be, &(0x7f0000001380)) 6.173989245s ago: executing program 3 (id=1232): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) syz_emit_ethernet(0x1c4, &(0x7f00000004c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @remote, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x16, 0x4, 0x1, 0x3b, 0x1b2, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @private=0xa010100, {[@rr={0x7, 0x7, 0x74, [@local]}, @cipso={0x86, 0x39, 0x0, [{0x7, 0xf, "2a5ee681784acc017c4201fb7f"}, {0x0, 0xc, "26dfdea150feafb8db3e"}, {0x6, 0x2}, {0x2, 0x3, "c7"}, {0x7, 0xb, "b67c4a77563851051d"}, {0x0, 0x2}, {0x5, 0x6, "a019e8f1"}]}, @ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x95, 0x3, [], "d3ea43c41e441c00207302eb92dce92e5ee71cbcfe2cd09c9d187973bc0f4c8931b211fc7c6ac9a3d290a347ff0ab047c6712b2a83d88f5c2c014ef02ef1d861c8e922ff5e7ff86020c6c68abcea7042bd0ddb51a389e4cfbaa7c516324c87f0800681572eecbcc732e9053715f5eb09764adf3e55183457caa65b975a8671769c99e92e53f3421dadb600f19dcbf6c47ea185a429"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0xbec, 0x7f], "a53ca95850e635a83992dc36c27a867dfd14"}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0xfe, 0x0, 0x0, 0x1, 0x6, 0x6}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x1, {{0x4, 0x2, 0x94, 0x1, 0x0, 0x2, 0x5, 0x9}, 0x2, {0xffff, 0x80, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "e45a166f2573771f486ee2b8e1ed8c51dd6a5723b86e697a0f30a7cafdf8fcead9581a27eaaae816beb938bcd10e8d5e669b34f4e0ce5ccd73e3ddd51a5f1ea6a2cf9d952e8753837cbc8b97d0ef4185de85e6696243cb6c23d689ed02eb0b0018711220cd656a90539f22"}}}}}}}, 0x0) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedreceive(r1, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 6.070499283s ago: executing program 1 (id=1233): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) syz_emit_ethernet(0x1d1, &(0x7f00000004c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @remote, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x18, 0x4, 0x1, 0x3b, 0x1bf, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @private=0xa010100, {[@rr={0x7, 0x7, 0x74, [@local]}, @cipso={0x86, 0x3e, 0x0, [{0x7, 0xf, "2a5ee681784acc017c4201fb7f"}, {0x0, 0xc, "26dfdea150feafb8db3e"}, {0x6, 0x2}, {0x7, 0xc, "b67c4a77563851051d9e"}, {0x0, 0x9, "4af14c80cd9f80"}, {0x5, 0x6, "a019e8f1"}]}, @ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x95, 0x3, [], "d3ea43c41e441c00207302eb92dce92e5ee71cbcfe2cd09c9d187973bc0f4c8931b211fc7c6ac9a3d290a347ff0ab047c6712b2a83d88f5c2c014ef02ef1d861c8e922ff5e7ff86020c6c68abcea7042bd0ddb51a389e4cfbaa7c516324c87f0800681572eecbcc732e9053715f5eb09764adf3e55183457caa65b975a8671769c99e92e53f3421dadb600f19dcbf6c47ea185a429"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0xbec, 0x7f], "a53ca95850e635a83992dc36c27a867dfd14fb1faffde4"}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0xfe, 0x0, 0x0, 0x1, 0x6, 0x6}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x1, {{0x4, 0x2, 0x94, 0x1, 0x0, 0x2, 0x5, 0x9}, 0x2, {0xffff, 0x80, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "e45a166f2573771f486ee2b8e1ed8c51dd6a5723b86e697a0f30a7cafdf8fcead9581a27eaaae816beb938bcd10e8d5e669b34f4e0ce5ccd73e3ddd51a5f1ea6a2cf9d952e8753837cbc8b97d0ef4185de85e6696243cb6c23d689ed02eb0b0018711220cd656a90539f22"}}}}}}}, 0x0) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedreceive(r1, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 5.943645042s ago: executing program 2 (id=1234): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[]) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_usbip_server_init(0x1) syz_open_procfs(0x0, &(0x7f0000001380)) 5.878720774s ago: executing program 0 (id=1235): syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x97}}, &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x3, 0x3a) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @empty, 0x101}, 0x1c) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty, 0x40}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000)=0x10fc4c16dadd9937, 0x4) sendfile(r1, r1, 0x0, 0x40008) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) io_setup(0x7be, &(0x7f0000001380)) 5.60715263s ago: executing program 4 (id=1236): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x30, r5, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) ptrace(0x11, r7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0) 5.22231636s ago: executing program 3 (id=1237): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_j1939(r3, 0x0, 0x0) r4 = epoll_create(0x2) setfsgid(0xee00) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r6, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x3000200a}) sendto$inet6(r1, &(0x7f00000004c0)="4747135f6fc2e0d41231cb53d9200128da8c2299af14b35b05219d463b6bc7b36d9626a6ff517591f014fb5fee2cd82055aa05a8cf03ef2635ba467a92ac0cbf3dafaffff6008ae6dd78da314d7ec7c3f89a91afc0dd4abfeb5270f4198e5d310ccdae130cccd7314b0065121c375d81ccc78032a86ff9514531e98fbe151254d48a85e2fc5703d1a3bd7328d1bb4a17ef1177a31518c1229a1077cb96f3df95e27f5fc4882b5fb39ad7b9c1201b08513d02dede7eed54511ed663faba48a329490854d2a4ec9db6b96c4e5c7afb9d8236b4a7eb91d3f28b6cdf348c5e344b2076bedc8f3685ede7e260d96fb46bd0f3fc604fdb", 0xf4, 0x408a1, 0x0, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) accept4$nfc_llcp(r3, &(0x7f0000000380), 0x0, 0x80000) fstat(r2, 0x0) 4.969728757s ago: executing program 0 (id=1238): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xfffffe83}, {0x0}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) bind$alg(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = timerfd_create(0x0, 0x0) r4 = syz_io_uring_setup(0x58f7, 0x0, &(0x7f0000000180), &(0x7f0000000240)) timerfd_settime(r3, 0x3, &(0x7f0000000840)={{0x77359400}, {0x0, 0x3938700}}, 0x0) io_uring_enter(r4, 0x1f82, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000cfc000/0x2000)=nil, 0x2000, 0x17) accept4(r0, 0x0, 0x0, 0x80800) syz_init_net_socket$x25(0x9, 0x5, 0x0) 4.07881031s ago: executing program 2 (id=1239): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) syz_emit_ethernet(0x1d1, &(0x7f00000004c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @remote, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x18, 0x4, 0x1, 0x3b, 0x1bf, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @private=0xa010100, {[@cipso={0x86, 0x47, 0x0, [{0x7, 0xf, "2a5ee681784acc017c4201fb7f"}, {0x0, 0xc, "26dfdea150feafb8db3e"}, {0x6, 0x2}, {0x2, 0x3, "c7"}, {0x7, 0xc, "b67c4a77563851051d9e"}, {0x0, 0xf, "4af14c80cd9f8029855016dd6a"}, {0x5, 0x6, "a019e8f1"}]}, @ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x95, 0x3, [], "d3ea43c41e441c00207302eb92dce92e5ee71cbcfe2cd09c9d187973bc0f4c8931b211fc7c6ac9a3d290a347ff0ab047c6712b2a83d88f5c2c014ef02ef1d861c8e922ff5e7ff86020c6c68abcea7042bd0ddb51a389e4cfbaa7c516324c87f0800681572eecbcc732e9053715f5eb09764adf3e55183457caa65b975a8671769c99e92e53f3421dadb600f19dcbf6c47ea185a429"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0xbec, 0x7f], "a53ca95850e635a83992dc36c27a867dfd14fb1faffde4"}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0xfe, 0x0, 0x0, 0x1, 0x6, 0x6}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x1, {{0x4, 0x2, 0x94, 0x1, 0x0, 0x2, 0x5, 0x9}, 0x2, {0xffff, 0x80, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "e45a166f2573771f486ee2b8e1ed8c51dd6a5723b86e697a0f30a7cafdf8fcead9581a27eaaae816beb938bcd10e8d5e669b34f4e0ce5ccd73e3ddd51a5f1ea6a2cf9d952e8753837cbc8b97d0ef4185de85e6696243cb6c23d689ed02eb0b0018711220cd656a90539f22"}}}}}}}, 0x0) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedreceive(r1, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3.917942784s ago: executing program 3 (id=1240): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) syz_emit_ethernet(0x1d9, &(0x7f00000004c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @remote, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x1a, 0x4, 0x1, 0x3b, 0x1c7, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @private=0xa010100, {[@rr={0x7, 0x7, 0x74, [@local]}, @cipso={0x86, 0x46, 0x0, [{0x7, 0xe, "2a5ee681784acc017c4201fb"}, {0x0, 0xc, "26dfdea150feafb8db3e"}, {0x6, 0x2}, {0x2, 0x3, "c7"}, {0x7, 0xc, "b67c4a77563851051d9e"}, {0x0, 0xf, "4af14c80cd9f8029855016dd6a"}, {0x5, 0x6, "a019e8f1"}]}, @ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x95, 0x3, [], "d3ea43c41e441c00207302eb92dce92e5ee71cbcfe2cd09c9d187973bc0f4c8931b211fc7c6ac9a3d290a347ff0ab047c6712b2a83d88f5c2c014ef02ef1d861c8e922ff5e7ff86020c6c68abcea7042bd0ddb51a389e4cfbaa7c516324c87f0800681572eecbcc732e9053715f5eb09764adf3e55183457caa65b975a8671769c99e92e53f3421dadb600f19dcbf6c47ea185a429"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0xbec, 0x7f], "a53ca95850e635a83992dc36c27a867dfd14fb1faffde4"}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0xfe, 0x0, 0x0, 0x1, 0x6, 0x6}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x1, {{0x4, 0x2, 0x94, 0x1, 0x0, 0x2, 0x5, 0x9}, 0x2, {0xffff, 0x80, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "e45a166f2573771f486ee2b8e1ed8c51dd6a5723b86e697a0f30a7cafdf8fcead9581a27eaaae816beb938bcd10e8d5e669b34f4e0ce5ccd73e3ddd51a5f1ea6a2cf9d952e8753837cbc8b97d0ef4185de85e6696243cb6c23d689ed02eb0b0018711220cd656a90539f22"}}}}}}}, 0x0) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedreceive(r1, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3.566493284s ago: executing program 0 (id=1241): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x7, 0x0, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x2, 0x6, 0x2, 0x9220000000000000, 0x3, 0x1, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f00002c6000/0x1000)=nil, 0x1000, 0x1000002, 0x13, r2, 0x20000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) remap_file_pages(&(0x7f0000799000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x40000) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, r3, 0x200, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) syz_open_dev$video(0x0, 0x8, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) 3.398228063s ago: executing program 1 (id=1242): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x7, 0x0, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x2, 0x6, 0x2, 0x9220000000000000, 0x3, 0x1, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f00002c6000/0x1000)=nil, 0x1000, 0x1000002, 0x13, r2, 0x20000) socket$netlink(0x10, 0x3, 0x0) remap_file_pages(&(0x7f0000799000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x40000) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, r3, 0x200, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) syz_open_dev$video(0x0, 0x8, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) 2.208023097s ago: executing program 1 (id=1243): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_io_uring_submit(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001380)) 2.181728386s ago: executing program 2 (id=1244): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r7 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r8 = fcntl$dupfd(r6, 0x406, r6) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, 0x0) ioctl$MON_IOCQ_URB_LEN(r7, 0x9201) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) socket$tipc(0x1e, 0x5, 0x0) gettid() sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x0, 0x3, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r9, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018"], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bind$rose(r0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 2.173579607s ago: executing program 4 (id=1245): syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x97}}, &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x3, 0x3a) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @empty, 0x101}, 0x1c) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty, 0x40}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4]}}, 0x5c) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x40008) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) io_setup(0x7be, &(0x7f0000001380)) 1.877459634s ago: executing program 3 (id=1246): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_j1939(r3, 0x0, 0x0) r4 = epoll_create(0x2) setfsgid(0xee00) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r6, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x3000200a}) sendto$inet6(r1, &(0x7f00000004c0)="4747135f6fc2e0d41231cb53d9200128da8c2299af14b35b05219d463b6bc7b36d9626a6ff517591f014fb5fee2cd82055aa05a8cf03ef2635ba467a92ac0cbf3dafaffff6008ae6dd78da314d7ec7c3f89a91afc0dd4abfeb5270f4198e5d310ccdae130cccd7314b0065121c375d81ccc78032a86ff9514531e98fbe151254d48a85e2fc5703d1a3bd7328d1bb4a17ef1177a31518c1229a1077cb96f3df95e27f5fc4882b5fb39ad7b9c1201b08513d02dede7eed54511ed663faba48a329490854d2a4ec9db6b96c4e5c7afb9d8236b4a7eb91d3f28b6cdf348c5e344b2076bedc8f3685ede7e260d96fb46bd0f3fc604fdb", 0xf4, 0x408a1, 0x0, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) accept4$nfc_llcp(r3, &(0x7f0000000380), 0x0, 0x80000) fstat(r2, 0x0) 1.740459465s ago: executing program 0 (id=1247): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) syz_emit_ethernet(0x144, &(0x7f00000004c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @remote, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x1a, 0x4, 0x1, 0x3b, 0x132, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @private=0xa010100, {[@rr={0x7, 0x7, 0x74, [@local]}, @cipso={0x86, 0x47, 0x0, [{0x7, 0xf, "2a5ee681784acc017c4201fb7f"}, {0x0, 0xc, "26dfdea150feafb8db3e"}, {0x6, 0x2}, {0x2, 0x3, "c7"}, {0x7, 0xc, "b67c4a77563851051d9e"}, {0x0, 0xf, "4af14c80cd9f8029855016dd6a"}, {0x5, 0x6, "a019e8f1"}]}, @ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0xbec, 0x7f], "a53ca95850e635a83992dc36c27a867dfd14fb1faffde4"}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0xfe, 0x0, 0x0, 0x1, 0x6, 0x6}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x1, {{0x4, 0x2, 0x94, 0x1, 0x0, 0x2, 0x5, 0x9}, 0x2, {0xffff, 0x80, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "e45a166f2573771f486ee2b8e1ed8c51dd6a5723b86e697a0f30a7cafdf8fcead9581a27eaaae816beb938bcd10e8d5e669b34f4e0ce5ccd73e3ddd51a5f1ea6a2cf9d952e8753837cbc8b97d0ef4185de85e6696243cb6c23d689ed02eb0b0018711220cd656a90539f22"}}}}}}}, 0x0) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedreceive(r1, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.206343243s ago: executing program 4 (id=1248): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xfffffe83}, {0x0}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) bind$alg(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = timerfd_create(0x0, 0x0) r6 = syz_io_uring_setup(0x58f7, 0x0, &(0x7f0000000180), &(0x7f0000000240)) timerfd_settime(r5, 0x3, &(0x7f0000000840)={{0x77359400}, {0x0, 0x3938700}}, 0x0) io_uring_enter(r6, 0x1f82, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000cfc000/0x2000)=nil, 0x2000, 0x17) accept4(r2, 0x0, 0x0, 0x80800) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 25.645653ms ago: executing program 0 (id=1249): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[]) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usbip_server_init(0x1) syz_open_procfs(0x0, &(0x7f0000001380)) 0s ago: executing program 2 (id=1250): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xfffffe83}, {0x0}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = timerfd_create(0x0, 0x0) r4 = syz_io_uring_setup(0x58f7, 0x0, &(0x7f0000000180), &(0x7f0000000240)) timerfd_settime(r3, 0x3, &(0x7f0000000840)={{0x77359400}, {0x0, 0x3938700}}, 0x0) io_uring_enter(r4, 0x1f82, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) kernel console output (not intermixed with test programs): de=0x7ffc0000 [ 402.676585][ T30] audit: type=1326 audit(1753866170.298:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe708f8e9a9 code=0x7ffc0000 [ 402.704735][ T30] audit: type=1326 audit(1753866170.298:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe708f8e9a9 code=0x7ffc0000 [ 402.745470][ T30] audit: type=1326 audit(1753866170.298:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe708f8e9a9 code=0x7ffc0000 [ 402.778430][ T30] audit: type=1326 audit(1753866170.338:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe708f8e9a9 code=0x7ffc0000 [ 402.820216][ T30] audit: type=1326 audit(1753866170.338:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe708f8e9a9 code=0x7ffc0000 [ 402.973879][ T30] audit: type=1326 audit(1753866170.338:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe708f8e9a9 code=0x7ffc0000 [ 403.035716][ T30] audit: type=1326 audit(1753866170.428:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fe708f8e9a9 code=0x7ffc0000 [ 403.257051][ T30] audit: type=1326 audit(1753866170.428:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe708f8e9a9 code=0x7ffc0000 [ 403.981611][ T9] vhci_hcd: vhci_device speed not set [ 406.840449][ T8646] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 407.195194][ T8646] netlink: 76 bytes leftover after parsing attributes in process `syz.1.647'. [ 407.225418][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 407.225441][ T30] audit: type=1400 audit(1753866175.768:1454): avc: denied { ioctl } for pid=8644 comm="syz.1.647" path="socket:[15556]" dev="sockfs" ino=15556 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 407.631918][ T30] audit: type=1400 audit(1753866175.858:1455): avc: denied { wake_alarm } for pid=8644 comm="syz.1.647" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 408.479004][ T8662] overlayfs: missing 'lowerdir' [ 409.727455][ T8669] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 409.736389][ T8669] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 414.086606][ T30] audit: type=1400 audit(1753866182.658:1456): avc: denied { read } for pid=8697 comm="syz.3.661" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 414.199349][ T30] audit: type=1400 audit(1753866182.688:1457): avc: denied { open } for pid=8697 comm="syz.3.661" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 414.228043][ T30] audit: type=1400 audit(1753866182.768:1458): avc: denied { ioctl } for pid=8697 comm="syz.3.661" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 414.254297][ T30] audit: type=1400 audit(1753866182.768:1459): avc: denied { set_context_mgr } for pid=8697 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 416.487033][ T8712] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 416.493665][ T8712] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 416.514246][ T8714] vhci_hcd: connection closed [ 416.514634][ T8712] vhci_hcd vhci_hcd.0: Device attached [ 416.585521][ T6832] vhci_hcd: stop threads [ 416.589820][ T6832] vhci_hcd: release socket [ 416.611842][ T6832] vhci_hcd: disconnect device [ 422.045472][ T8736] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 422.052155][ T8736] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 422.060441][ T8736] vhci_hcd vhci_hcd.0: Device attached [ 422.261987][ T24] vhci_hcd: vhci_device speed not set [ 422.325671][ T8743] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 422.328283][ T8742] vhci_hcd: connection closed [ 422.332390][ T8743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 422.352469][ T8743] vhci_hcd vhci_hcd.0: Device attached [ 422.426563][ T8746] vhci_hcd: connection closed [ 422.462752][ T3489] vhci_hcd: stop threads [ 422.500070][ T24] usb 39-1: new low-speed USB device number 7 using vhci_hcd [ 422.505624][ T3489] vhci_hcd: release socket [ 422.591757][ T3489] vhci_hcd: disconnect device [ 422.816642][ T3489] vhci_hcd: stop threads [ 423.332444][ T3489] vhci_hcd: release socket [ 423.337063][ T3489] vhci_hcd: disconnect device [ 424.833029][ T8767] netlink: 76 bytes leftover after parsing attributes in process `syz.2.674'. [ 425.037542][ T8767] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.674'. [ 425.148744][ T8767] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 425.214399][ T8774] netlink: 76 bytes leftover after parsing attributes in process `syz.1.675'. [ 425.282260][ T8776] xt_TCPMSS: Only works on TCP SYN packets [ 425.770662][ T8774] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.675'. [ 425.837420][ T8774] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' already exists in 'ieee80211' [ 427.991614][ T24] vhci_hcd: vhci_device speed not set [ 428.265971][ T8798] netlink: 76 bytes leftover after parsing attributes in process `syz.0.682'. [ 428.287050][ T8798] binder: BINDER_SET_CONTEXT_MGR already set [ 428.290143][ T30] audit: type=1400 audit(1753866196.858:1460): avc: denied { write } for pid=8797 comm="syz.0.682" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 428.293332][ T8798] binder: 8797:8798 ioctl 4018620d 2000000002c0 returned -16 [ 428.294901][ T8798] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.682'. [ 428.432810][ T30] audit: type=1400 audit(1753866196.858:1461): avc: denied { map } for pid=8797 comm="syz.0.682" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 429.190857][ T8804] xt_TCPMSS: Only works on TCP SYN packets [ 429.664773][ T8798] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' already exists in 'ieee80211' [ 431.754997][ T8818] xt_TCPMSS: Only works on TCP SYN packets [ 435.752169][ T8853] netlink: 76 bytes leftover after parsing attributes in process `syz.3.696'. [ 435.912358][ T30] audit: type=1400 audit(1753866204.418:1462): avc: denied { call } for pid=8852 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 438.044316][ T8872] overlayfs: failed to resolve './file0': -2 [ 440.019352][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.025812][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.574814][ T8888] netlink: 76 bytes leftover after parsing attributes in process `syz.0.705'. [ 444.947530][ T8922] overlayfs: failed to resolve './file0': -2 [ 446.018547][ T8936] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 446.025195][ T8936] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 446.111918][ T8936] vhci_hcd vhci_hcd.0: Device attached [ 446.111918][ T8930] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 446.111940][ T8930] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 446.409672][ T8930] vhci_hcd vhci_hcd.0: Device attached [ 446.771602][ T24] vhci_hcd: vhci_device speed not set [ 446.831572][ T24] usb 33-1: new full-speed USB device number 6 using vhci_hcd [ 447.049010][ T8937] vhci_hcd: connection closed [ 447.050779][ T6832] vhci_hcd: stop threads [ 447.118969][ T8933] vhci_hcd: connection reset by peer [ 447.163677][ T6832] vhci_hcd: release socket [ 447.168314][ T6832] vhci_hcd: disconnect device [ 447.194626][ T6832] vhci_hcd: stop threads [ 447.264940][ T6832] vhci_hcd: release socket [ 447.432233][ T8947] 9pnet_fd: Insufficient options for proto=fd [ 447.451844][ T6832] vhci_hcd: disconnect device [ 448.080957][ T8947] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 448.087585][ T8947] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 448.121611][ T8947] vhci_hcd vhci_hcd.0: Device attached [ 448.343381][ T8950] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 448.350035][ T8950] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 449.341822][ T5955] vhci_hcd: vhci_device speed not set [ 450.989667][ T8950] vhci_hcd vhci_hcd.0: Device attached [ 451.074444][ T5955] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 451.106935][ T8957] vhci_hcd: connection closed [ 451.108015][ T8954] vhci_hcd: connection closed [ 451.127537][ T2997] vhci_hcd: stop threads [ 451.136825][ T8955] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 451.156150][ T8967] netlink: 76 bytes leftover after parsing attributes in process `syz.4.723'. [ 451.171726][ T2997] vhci_hcd: release socket [ 451.305280][ T2997] vhci_hcd: disconnect device [ 452.459843][ T8979] overlayfs: failed to resolve './file0': -2 [ 452.491591][ T2997] vhci_hcd: stop threads [ 452.495869][ T2997] vhci_hcd: release socket [ 452.500319][ T2997] vhci_hcd: disconnect device [ 452.578367][ T24] vhci_hcd: vhci_device speed not set [ 452.606078][ T8967] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.723'. [ 452.669787][ T8967] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' already exists in 'ieee80211' [ 457.062817][ T5955] vhci_hcd: vhci_device speed not set [ 457.225699][ T9007] netlink: 76 bytes leftover after parsing attributes in process `syz.4.734'. [ 457.311473][ T9007] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.734'. [ 457.348875][ T9007] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' [ 457.385405][ T9007] CPU: 1 UID: 0 PID: 9007 Comm: syz.4.734 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 457.385437][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.385448][ T9007] Call Trace: [ 457.385454][ T9007] [ 457.385461][ T9007] dump_stack_lvl+0x16c/0x1f0 [ 457.385490][ T9007] sysfs_warn_dup+0x7f/0xa0 [ 457.385513][ T9007] sysfs_do_create_link_sd+0x124/0x140 [ 457.385537][ T9007] sysfs_create_link+0x61/0xc0 [ 457.385556][ T9007] device_add+0x62c/0x1a70 [ 457.385584][ T9007] ? __pfx_device_add+0x10/0x10 [ 457.385610][ T9007] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 457.385633][ T9007] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 457.385663][ T9007] wiphy_register+0x1c9c/0x2850 [ 457.385697][ T9007] ? __pfx_wiphy_register+0x10/0x10 [ 457.385731][ T9007] ? ieee80211_register_hw+0x22ad/0x4140 [ 457.385759][ T9007] ieee80211_register_hw+0x24ac/0x4140 [ 457.385794][ T9007] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 457.385820][ T9007] ? find_held_lock+0x2b/0x80 [ 457.385843][ T9007] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 457.385864][ T9007] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 457.385890][ T9007] ? __hrtimer_setup+0x176/0x280 [ 457.385913][ T9007] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 457.385947][ T9007] ? trace_kmalloc+0x2b/0xd0 [ 457.385968][ T9007] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 457.385986][ T9007] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 457.386005][ T9007] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 457.386028][ T9007] ? __asan_memcpy+0x3c/0x60 [ 457.386057][ T9007] hwsim_new_radio_nl+0xb51/0x12c0 [ 457.386082][ T9007] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 457.386112][ T9007] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 457.386139][ T9007] genl_family_rcv_msg_doit+0x206/0x2f0 [ 457.386171][ T9007] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 457.386218][ T9007] ? bpf_lsm_capable+0x9/0x10 [ 457.386249][ T9007] ? security_capable+0x7e/0x260 [ 457.386278][ T9007] ? ns_capable+0xd7/0x110 [ 457.386301][ T9007] genl_rcv_msg+0x55c/0x800 [ 457.386322][ T9007] ? __pfx_genl_rcv_msg+0x10/0x10 [ 457.386339][ T9007] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 457.386370][ T9007] netlink_rcv_skb+0x155/0x420 [ 457.386396][ T9007] ? __pfx_genl_rcv_msg+0x10/0x10 [ 457.386415][ T9007] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 457.386451][ T9007] ? netlink_deliver_tap+0x1ae/0xd30 [ 457.386479][ T9007] genl_rcv+0x28/0x40 [ 457.386502][ T9007] netlink_unicast+0x58d/0x850 [ 457.386530][ T9007] ? __pfx_netlink_unicast+0x10/0x10 [ 457.386553][ T9007] ? __build_skb_around+0x278/0x3b0 [ 457.386589][ T9007] netlink_sendmsg+0x8d1/0xdd0 [ 457.386620][ T9007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.386657][ T9007] ____sys_sendmsg+0xa98/0xc70 [ 457.386685][ T9007] ? copy_msghdr_from_user+0x10a/0x160 [ 457.386707][ T9007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.386741][ T9007] ? __pfx_futex_wake_mark+0x10/0x10 [ 457.386766][ T9007] ___sys_sendmsg+0x134/0x1d0 [ 457.386786][ T9007] ? futex_private_hash_put+0x176/0x300 [ 457.386813][ T9007] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.386832][ T9007] ? __lock_acquire+0x622/0x1c90 [ 457.386893][ T9007] __sys_sendmsg+0x16d/0x220 [ 457.386915][ T9007] ? __pfx___sys_sendmsg+0x10/0x10 [ 457.386936][ T9007] ? __x64_sys_futex+0x1e0/0x4c0 [ 457.386969][ T9007] do_syscall_64+0xcd/0x4c0 [ 457.386993][ T9007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.387013][ T9007] RIP: 0033:0x7fa99f38e9a9 [ 457.387030][ T9007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.387049][ T9007] RSP: 002b:00007fa9a024f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.387068][ T9007] RAX: ffffffffffffffda RBX: 00007fa99f5b5fa0 RCX: 00007fa99f38e9a9 [ 457.387081][ T9007] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 457.387092][ T9007] RBP: 00007fa99f410d69 R08: 0000000000000000 R09: 0000000000000000 [ 457.387103][ T9007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.387114][ T9007] R13: 0000000000000000 R14: 00007fa99f5b5fa0 R15: 00007ffd9a79dc18 [ 457.387139][ T9007] [ 457.875597][ T9014] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 457.882236][ T9014] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 458.137270][ T9014] vhci_hcd vhci_hcd.0: Device attached [ 458.274111][ T9017] vhci_hcd: connection closed [ 458.371708][ T9] usb 37-1: new low-speed USB device number 8 using vhci_hcd [ 459.014957][ T6832] vhci_hcd: stop threads [ 459.019264][ T6832] vhci_hcd: release socket [ 459.029897][ T6832] vhci_hcd: disconnect device [ 459.753262][ T9037] 9pnet_fd: Insufficient options for proto=fd [ 459.961587][ T9040] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 459.968120][ T9040] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 459.985417][ T9040] vhci_hcd vhci_hcd.0: Device attached [ 460.126902][ T9037] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 460.133536][ T9037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 460.145583][ T9037] vhci_hcd vhci_hcd.0: Device attached [ 460.156189][ T9042] vhci_hcd: connection closed [ 460.156893][ T3555] vhci_hcd: stop threads [ 460.167773][ T5896] vhci_hcd: vhci_device speed not set [ 460.173258][ T9044] vhci_hcd: connection closed [ 460.173787][ T3555] vhci_hcd: release socket [ 460.251609][ T5896] usb 33-1: new full-speed USB device number 7 using vhci_hcd [ 460.334370][ T3555] vhci_hcd: disconnect device [ 460.352741][ T3555] vhci_hcd: stop threads [ 460.872709][ T3555] vhci_hcd: release socket [ 460.877339][ T3555] vhci_hcd: disconnect device [ 467.271907][ T9] vhci_hcd: vhci_device speed not set [ 467.277431][ T5896] vhci_hcd: vhci_device speed not set [ 467.701762][ T9071] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 467.708402][ T9071] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 468.378915][ T9071] vhci_hcd vhci_hcd.0: Device attached [ 468.586596][ T9076] vhci_hcd: connection closed [ 468.607149][ T2997] vhci_hcd: stop threads [ 468.681622][ T2997] vhci_hcd: release socket [ 468.686299][ T2997] vhci_hcd: disconnect device [ 468.741642][ T24] usb 39-1: new low-speed USB device number 8 using vhci_hcd [ 473.960065][ T9114] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 473.966710][ T9114] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 473.975220][ T9114] vhci_hcd vhci_hcd.0: Device attached [ 474.241596][ T5896] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 474.500251][ T9123] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 474.592406][ T24] vhci_hcd: vhci_device speed not set [ 474.618382][ T3516] vhci_hcd: stop threads [ 474.622896][ T3516] vhci_hcd: release socket [ 474.633360][ T3516] vhci_hcd: disconnect device [ 475.597257][ T30] audit: type=1326 audit(1753866243.378:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 475.855754][ T30] audit: type=1326 audit(1753866243.388:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 475.959048][ T9134] netlink: 'syz.4.759': attribute type 20 has an invalid length. [ 476.091411][ T9134] dvmrp17: entered allmulticast mode [ 476.218916][ T30] audit: type=1326 audit(1753866243.388:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 476.330498][ T30] audit: type=1326 audit(1753866243.388:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 476.400836][ T30] audit: type=1326 audit(1753866243.388:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 476.441014][ T30] audit: type=1326 audit(1753866243.388:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 476.591288][ T9138] netlink: 'syz.3.760': attribute type 20 has an invalid length. [ 476.756612][ T9138] dvmrp17: entered allmulticast mode [ 477.101594][ T30] audit: type=1326 audit(1753866243.388:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 477.206559][ T30] audit: type=1326 audit(1753866243.388:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 478.030459][ T9154] netlink: 'syz.2.765': attribute type 20 has an invalid length. [ 478.183445][ T9154] dvmrp17: entered allmulticast mode [ 478.248691][ T30] audit: type=1326 audit(1753866243.388:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 478.414515][ T30] audit: type=1326 audit(1753866243.388:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 479.372098][ T5896] vhci_hcd: vhci_device speed not set [ 479.419763][ T9167] netlink: 'syz.2.768': attribute type 20 has an invalid length. [ 480.417660][ T9173] netlink: 'syz.3.770': attribute type 20 has an invalid length. [ 480.886581][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 480.886597][ T30] audit: type=1400 audit(1753866249.458:1481): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 482.205199][ T30] audit: type=1326 audit(1753866249.908:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 482.346420][ T30] audit: type=1326 audit(1753866249.908:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 482.370774][ T30] audit: type=1326 audit(1753866249.908:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 482.396232][ T30] audit: type=1326 audit(1753866249.908:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 482.420254][ T30] audit: type=1326 audit(1753866249.908:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 482.444873][ T30] audit: type=1326 audit(1753866249.918:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 482.469521][ T30] audit: type=1326 audit(1753866249.918:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 482.903195][ T30] audit: type=1326 audit(1753866249.918:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 482.967176][ T30] audit: type=1326 audit(1753866249.918:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 483.112759][ T9190] netlink: 'syz.0.775': attribute type 20 has an invalid length. [ 483.376082][ T9190] dvmrp17: entered allmulticast mode [ 484.200675][ T9198] netlink: 76 bytes leftover after parsing attributes in process `syz.4.776'. [ 484.215207][ T9192] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 484.221843][ T9192] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 484.238512][ T9198] binder: BINDER_SET_CONTEXT_MGR already set [ 484.244651][ T9198] binder: 9196:9198 ioctl 4018620d 2000000002c0 returned -16 [ 484.284867][ T9192] vhci_hcd vhci_hcd.0: Device attached [ 484.531644][ T5896] usb 37-1: new low-speed USB device number 9 using vhci_hcd [ 488.232782][ T9223] netlink: 76 bytes leftover after parsing attributes in process `syz.3.783'. [ 488.248529][ T9223] binder: BINDER_SET_CONTEXT_MGR already set [ 488.254863][ T9223] binder: 9222:9223 ioctl 4018620d 2000000002c0 returned -16 [ 488.755867][ T9237] cgroup: Need name or subsystem set [ 489.718322][ T9242] netlink: 'syz.3.786': attribute type 20 has an invalid length. [ 490.051218][ T9202] vhci_hcd: connection reset by peer [ 490.069294][ T3489] vhci_hcd: stop threads [ 490.073676][ T3489] vhci_hcd: release socket [ 490.081754][ T3489] vhci_hcd: disconnect device [ 490.958480][ T5896] vhci_hcd: vhci_device speed not set [ 492.114090][ T9256] netlink: 76 bytes leftover after parsing attributes in process `syz.3.789'. [ 492.131797][ T9256] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.789'. [ 492.153316][ T9256] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' already exists in 'ieee80211' [ 497.882625][ T9304] xt_TCPMSS: Only works on TCP SYN packets [ 498.362879][ T9305] netlink: 'syz.4.800': attribute type 20 has an invalid length. [ 498.796049][ T9308] netlink: 'syz.3.803': attribute type 20 has an invalid length. [ 501.075228][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.081793][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.486266][ T9342] netlink: 76 bytes leftover after parsing attributes in process `syz.2.811'. [ 504.501830][ T9342] binder: BINDER_SET_CONTEXT_MGR already set [ 504.508033][ T9342] binder: 9341:9342 ioctl 4018620d 2000000002c0 returned -16 [ 506.987315][ T9363] netlink: 'syz.0.816': attribute type 20 has an invalid length. [ 510.316453][ T9393] netlink: 'syz.0.824': attribute type 20 has an invalid length. [ 511.006983][ T9395] netlink: 76 bytes leftover after parsing attributes in process `syz.2.825'. [ 511.086684][ T9395] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.825'. [ 511.156968][ T9395] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' [ 511.212314][ T9395] CPU: 0 UID: 0 PID: 9395 Comm: syz.2.825 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 511.212346][ T9395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 511.212357][ T9395] Call Trace: [ 511.212365][ T9395] [ 511.212373][ T9395] dump_stack_lvl+0x16c/0x1f0 [ 511.212400][ T9395] sysfs_warn_dup+0x7f/0xa0 [ 511.212424][ T9395] sysfs_do_create_link_sd+0x124/0x140 [ 511.212448][ T9395] sysfs_create_link+0x61/0xc0 [ 511.212468][ T9395] device_add+0x62c/0x1a70 [ 511.212498][ T9395] ? __pfx_device_add+0x10/0x10 [ 511.212521][ T9395] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 511.212545][ T9395] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 511.212573][ T9395] wiphy_register+0x1c9c/0x2850 [ 511.212599][ T9395] ? netdev_run_todo+0x864/0x1320 [ 511.212622][ T9395] ? __dev_printk+0x260/0x270 [ 511.212643][ T9395] ? __pfx_wiphy_register+0x10/0x10 [ 511.212690][ T9395] ieee80211_register_hw+0x24ac/0x4140 [ 511.212726][ T9395] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 511.212755][ T9395] ? find_held_lock+0x2b/0x80 [ 511.212782][ T9395] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 511.212806][ T9395] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 511.212835][ T9395] ? __hrtimer_setup+0x176/0x280 [ 511.212866][ T9395] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 511.212902][ T9395] ? trace_kmalloc+0x2b/0xd0 [ 511.212921][ T9395] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 511.212941][ T9395] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 511.212962][ T9395] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 511.212983][ T9395] ? __asan_memcpy+0x3c/0x60 [ 511.213014][ T9395] hwsim_new_radio_nl+0xb51/0x12c0 [ 511.213037][ T9395] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 511.213066][ T9395] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 511.213096][ T9395] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 511.213131][ T9395] genl_family_rcv_msg_doit+0x206/0x2f0 [ 511.213161][ T9395] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 511.213198][ T9395] ? bpf_lsm_capable+0x9/0x10 [ 511.213222][ T9395] ? security_capable+0x7e/0x260 [ 511.213249][ T9395] ? ns_capable+0xd7/0x110 [ 511.213273][ T9395] genl_rcv_msg+0x55c/0x800 [ 511.213292][ T9395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.213310][ T9395] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 511.213346][ T9395] netlink_rcv_skb+0x155/0x420 [ 511.213371][ T9395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.213389][ T9395] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 511.213430][ T9395] ? netlink_deliver_tap+0x1ae/0xd30 [ 511.213465][ T9395] genl_rcv+0x28/0x40 [ 511.213492][ T9395] netlink_unicast+0x58d/0x850 [ 511.213523][ T9395] ? __pfx_netlink_unicast+0x10/0x10 [ 511.213546][ T9395] ? __build_skb_around+0x278/0x3b0 [ 511.213582][ T9395] netlink_sendmsg+0x8d1/0xdd0 [ 511.213612][ T9395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.213648][ T9395] ____sys_sendmsg+0xa98/0xc70 [ 511.213685][ T9395] ? copy_msghdr_from_user+0x10a/0x160 [ 511.213708][ T9395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.213750][ T9395] ___sys_sendmsg+0x134/0x1d0 [ 511.213772][ T9395] ? futex_private_hash_put+0x176/0x300 [ 511.213801][ T9395] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.213821][ T9395] ? __lock_acquire+0x622/0x1c90 [ 511.213885][ T9395] __sys_sendmsg+0x16d/0x220 [ 511.213909][ T9395] ? __pfx___sys_sendmsg+0x10/0x10 [ 511.213928][ T9395] ? __x64_sys_futex+0x1e0/0x4c0 [ 511.213961][ T9395] do_syscall_64+0xcd/0x4c0 [ 511.213986][ T9395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.214005][ T9395] RIP: 0033:0x7fe8fe58e9a9 [ 511.214024][ T9395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.214042][ T9395] RSP: 002b:00007fe8ff4ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.214063][ T9395] RAX: ffffffffffffffda RBX: 00007fe8fe7b5fa0 RCX: 00007fe8fe58e9a9 [ 511.214076][ T9395] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 511.214089][ T9395] RBP: 00007fe8fe610d69 R08: 0000000000000000 R09: 0000000000000000 [ 511.214102][ T9395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.214117][ T9395] R13: 0000000000000000 R14: 00007fe8fe7b5fa0 R15: 00007ffe688ad408 [ 511.214142][ T9395] [ 511.825195][ T9407] netlink: 76 bytes leftover after parsing attributes in process `syz.0.828'. [ 515.110607][ T9423] netlink: 76 bytes leftover after parsing attributes in process `syz.1.833'. [ 515.450266][ T9423] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.833'. [ 516.673807][ T9423] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' [ 516.777161][ T9423] CPU: 1 UID: 0 PID: 9423 Comm: syz.1.833 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 516.777199][ T9423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.777212][ T9423] Call Trace: [ 516.777219][ T9423] [ 516.777226][ T9423] dump_stack_lvl+0x16c/0x1f0 [ 516.777255][ T9423] sysfs_warn_dup+0x7f/0xa0 [ 516.777280][ T9423] sysfs_do_create_link_sd+0x124/0x140 [ 516.777308][ T9423] sysfs_create_link+0x61/0xc0 [ 516.777332][ T9423] device_add+0x62c/0x1a70 [ 516.777364][ T9423] ? __pfx_device_add+0x10/0x10 [ 516.777403][ T9423] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 516.777429][ T9423] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 516.777462][ T9423] wiphy_register+0x1c9c/0x2850 [ 516.777492][ T9423] ? netdev_run_todo+0x864/0x1320 [ 516.777520][ T9423] ? __dev_printk+0x260/0x270 [ 516.777547][ T9423] ? __pfx_wiphy_register+0x10/0x10 [ 516.777590][ T9423] ieee80211_register_hw+0x24ac/0x4140 [ 516.777634][ T9423] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 516.777664][ T9423] ? find_held_lock+0x2b/0x80 [ 516.777692][ T9423] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 516.777715][ T9423] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 516.777743][ T9423] ? __hrtimer_setup+0x176/0x280 [ 516.777766][ T9423] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 516.777804][ T9423] ? trace_kmalloc+0x2b/0xd0 [ 516.777824][ T9423] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 516.777845][ T9423] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 516.777866][ T9423] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 516.777888][ T9423] ? __asan_memcpy+0x3c/0x60 [ 516.777920][ T9423] hwsim_new_radio_nl+0xb51/0x12c0 [ 516.777945][ T9423] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 516.777977][ T9423] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 516.778008][ T9423] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 516.778045][ T9423] genl_family_rcv_msg_doit+0x206/0x2f0 [ 516.778077][ T9423] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 516.778116][ T9423] ? bpf_lsm_capable+0x9/0x10 [ 516.778141][ T9423] ? security_capable+0x7e/0x260 [ 516.778170][ T9423] ? ns_capable+0xd7/0x110 [ 516.778194][ T9423] genl_rcv_msg+0x55c/0x800 [ 516.778215][ T9423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.778233][ T9423] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 516.778265][ T9423] netlink_rcv_skb+0x155/0x420 [ 516.778291][ T9423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.778310][ T9423] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.778348][ T9423] ? netlink_deliver_tap+0x1ae/0xd30 [ 516.778378][ T9423] genl_rcv+0x28/0x40 [ 516.778403][ T9423] netlink_unicast+0x58d/0x850 [ 516.778439][ T9423] ? __pfx_netlink_unicast+0x10/0x10 [ 516.778463][ T9423] ? __build_skb_around+0x278/0x3b0 [ 516.778504][ T9423] netlink_sendmsg+0x8d1/0xdd0 [ 516.778536][ T9423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.778574][ T9423] ____sys_sendmsg+0xa98/0xc70 [ 516.778610][ T9423] ? copy_msghdr_from_user+0x10a/0x160 [ 516.778632][ T9423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.778668][ T9423] ? __pfx_futex_wake_mark+0x10/0x10 [ 516.778694][ T9423] ___sys_sendmsg+0x134/0x1d0 [ 516.778713][ T9423] ? futex_private_hash_put+0x176/0x300 [ 516.778743][ T9423] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.778762][ T9423] ? __lock_acquire+0x622/0x1c90 [ 516.778828][ T9423] __sys_sendmsg+0x16d/0x220 [ 516.778851][ T9423] ? __pfx___sys_sendmsg+0x10/0x10 [ 516.778872][ T9423] ? __x64_sys_futex+0x1e0/0x4c0 [ 516.778906][ T9423] do_syscall_64+0xcd/0x4c0 [ 516.778935][ T9423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.778953][ T9423] RIP: 0033:0x7fe708f8e9a9 [ 516.778971][ T9423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.778989][ T9423] RSP: 002b:00007fe709d1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.779012][ T9423] RAX: ffffffffffffffda RBX: 00007fe7091b5fa0 RCX: 00007fe708f8e9a9 [ 516.779024][ T9423] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 516.779035][ T9423] RBP: 00007fe709010d69 R08: 0000000000000000 R09: 0000000000000000 [ 516.779046][ T9423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.779057][ T9423] R13: 0000000000000000 R14: 00007fe7091b5fa0 R15: 00007fff257d6c88 [ 516.779083][ T9423] [ 522.353776][ T9484] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 522.360420][ T9484] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 522.408373][ T9484] vhci_hcd vhci_hcd.0: Device attached [ 523.392962][ T9486] vhci_hcd: connection closed [ 523.733174][ T36] vhci_hcd: stop threads [ 523.744577][ T24] usb 41-1: new low-speed USB device number 7 using vhci_hcd [ 523.780569][ T36] vhci_hcd: release socket [ 524.288479][ T36] vhci_hcd: disconnect device [ 524.891733][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 524.891749][ T30] audit: type=1326 audit(1753866293.458:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.2.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 525.010538][ T30] audit: type=1326 audit(1753866293.458:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.2.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 525.071740][ T30] audit: type=1326 audit(1753866293.458:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.2.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 525.122338][ T30] audit: type=1326 audit(1753866293.458:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.2.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 525.203170][ T9513] netlink: 76 bytes leftover after parsing attributes in process `syz.2.853'. [ 525.239564][ T30] audit: type=1326 audit(1753866293.458:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.2.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 525.266336][ T9515] netlink: 76 bytes leftover after parsing attributes in process `syz.3.854'. [ 525.284231][ T9515] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.854'. [ 525.294667][ T30] audit: type=1326 audit(1753866293.458:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.2.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 525.321876][ T9516] binder: BINDER_SET_CONTEXT_MGR already set [ 525.328849][ T9516] binder: 9512:9516 ioctl 4018620d 2000000002c0 returned -16 [ 525.347793][ T9515] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' [ 525.367098][ T9515] CPU: 0 UID: 0 PID: 9515 Comm: syz.3.854 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 525.367131][ T9515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 525.367143][ T9515] Call Trace: [ 525.367150][ T9515] [ 525.367159][ T9515] dump_stack_lvl+0x16c/0x1f0 [ 525.367188][ T9515] sysfs_warn_dup+0x7f/0xa0 [ 525.367211][ T9515] sysfs_do_create_link_sd+0x124/0x140 [ 525.367235][ T9515] sysfs_create_link+0x61/0xc0 [ 525.367260][ T9515] device_add+0x62c/0x1a70 [ 525.367289][ T9515] ? __pfx_device_add+0x10/0x10 [ 525.367316][ T9515] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 525.367342][ T9515] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 525.367371][ T9515] wiphy_register+0x1c9c/0x2850 [ 525.367398][ T9515] ? netdev_run_todo+0x864/0x1320 [ 525.367422][ T9515] ? __dev_printk+0x260/0x270 [ 525.367447][ T9515] ? __pfx_wiphy_register+0x10/0x10 [ 525.367494][ T9515] ieee80211_register_hw+0x24ac/0x4140 [ 525.367532][ T9515] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 525.367561][ T9515] ? find_held_lock+0x2b/0x80 [ 525.367588][ T9515] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 525.367612][ T9515] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 525.367640][ T9515] ? __hrtimer_setup+0x176/0x280 [ 525.367663][ T9515] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 525.367700][ T9515] ? trace_kmalloc+0x2b/0xd0 [ 525.367720][ T9515] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 525.367739][ T9515] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 525.367760][ T9515] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 525.367782][ T9515] ? __asan_memcpy+0x3c/0x60 [ 525.367813][ T9515] hwsim_new_radio_nl+0xb51/0x12c0 [ 525.367838][ T9515] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 525.367868][ T9515] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 525.367899][ T9515] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 525.367934][ T9515] genl_family_rcv_msg_doit+0x206/0x2f0 [ 525.367965][ T9515] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 525.368004][ T9515] ? bpf_lsm_capable+0x9/0x10 [ 525.368027][ T9515] ? security_capable+0x7e/0x260 [ 525.368059][ T9515] ? ns_capable+0xd7/0x110 [ 525.368082][ T9515] genl_rcv_msg+0x55c/0x800 [ 525.368103][ T9515] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.368121][ T9515] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 525.368152][ T9515] netlink_rcv_skb+0x155/0x420 [ 525.368178][ T9515] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.368196][ T9515] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.368234][ T9515] ? netlink_deliver_tap+0x1ae/0xd30 [ 525.368264][ T9515] genl_rcv+0x28/0x40 [ 525.368291][ T9515] netlink_unicast+0x58d/0x850 [ 525.368321][ T9515] ? __pfx_netlink_unicast+0x10/0x10 [ 525.368345][ T9515] ? __build_skb_around+0x278/0x3b0 [ 525.368382][ T9515] netlink_sendmsg+0x8d1/0xdd0 [ 525.368413][ T9515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.368449][ T9515] ____sys_sendmsg+0xa98/0xc70 [ 525.368510][ T9515] ? copy_msghdr_from_user+0x10a/0x160 [ 525.368534][ T9515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.368575][ T9515] ___sys_sendmsg+0x134/0x1d0 [ 525.368596][ T9515] ? futex_private_hash_put+0x176/0x300 [ 525.368627][ T9515] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.368648][ T9515] ? __lock_acquire+0x622/0x1c90 [ 525.368711][ T9515] __sys_sendmsg+0x16d/0x220 [ 525.368732][ T9515] ? __pfx___sys_sendmsg+0x10/0x10 [ 525.368753][ T9515] ? __x64_sys_futex+0x1e0/0x4c0 [ 525.368786][ T9515] do_syscall_64+0xcd/0x4c0 [ 525.368811][ T9515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.368830][ T9515] RIP: 0033:0x7f8cf918e9a9 [ 525.368846][ T9515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.368864][ T9515] RSP: 002b:00007f8cfa075038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.368883][ T9515] RAX: ffffffffffffffda RBX: 00007f8cf93b5fa0 RCX: 00007f8cf918e9a9 [ 525.368895][ T9515] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 525.368906][ T9515] RBP: 00007f8cf9210d69 R08: 0000000000000000 R09: 0000000000000000 [ 525.368917][ T9515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.368928][ T9515] R13: 0000000000000000 R14: 00007f8cf93b5fa0 R15: 00007fffd1ab3618 [ 525.368953][ T9515] [ 525.369174][ T30] audit: type=1326 audit(1753866293.458:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.2.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 525.901341][ T9516] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.853'. [ 526.670272][ T30] audit: type=1326 audit(1753866293.498:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.2.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 529.095207][ T30] audit: type=1326 audit(1753866293.498:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.2.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 529.120957][ T30] audit: type=1326 audit(1753866293.498:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.2.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 529.287162][ T24] vhci_hcd: vhci_device speed not set [ 529.427795][ T9535] 9pnet_fd: Insufficient options for proto=fd [ 530.185535][ T9540] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 530.192174][ T9540] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 530.431704][ T9547] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 530.438327][ T9547] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 530.544922][ T9540] vhci_hcd vhci_hcd.0: Device attached [ 530.576463][ T9547] vhci_hcd vhci_hcd.0: Device attached [ 530.731606][ T43] vhci_hcd: vhci_device speed not set [ 530.891791][ T43] usb 39-1: new full-speed USB device number 9 using vhci_hcd [ 530.935259][ T9548] vhci_hcd: connection closed [ 530.935597][ T9546] vhci_hcd: connection closed [ 530.944928][ T2966] vhci_hcd: stop threads [ 530.945025][ T9549] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 530.949629][ T2966] vhci_hcd: release socket [ 531.091644][ T2966] vhci_hcd: disconnect device [ 531.146223][ T2966] vhci_hcd: stop threads [ 531.326478][ T2966] vhci_hcd: release socket [ 531.339681][ T2966] vhci_hcd: disconnect device [ 533.403222][ T9571] netlink: 'syz.2.866': attribute type 20 has an invalid length. [ 534.702470][ T9585] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 534.709139][ T9585] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 534.877519][ T9585] vhci_hcd vhci_hcd.0: Device attached [ 535.111818][ T5968] usb 33-1: new low-speed USB device number 8 using vhci_hcd [ 536.320064][ T9587] vhci_hcd: connection reset by peer [ 536.330256][ T2966] vhci_hcd: stop threads [ 536.336087][ T2966] vhci_hcd: release socket [ 536.363063][ T2966] vhci_hcd: disconnect device [ 536.371562][ T43] vhci_hcd: vhci_device speed not set [ 536.738408][ T9600] netlink: 'syz.4.871': attribute type 20 has an invalid length. [ 536.813383][ T9598] mmap: syz.2.872 (9598) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 536.911590][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 536.911609][ T30] audit: type=1326 audit(1753866305.477:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe708f8e9a9 code=0x7ffc0000 [ 536.999939][ T30] audit: type=1326 audit(1753866305.477:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe708f8e9a9 code=0x7ffc0000 [ 537.029390][ T30] audit: type=1326 audit(1753866305.477:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe708f8e9a9 code=0x7ffc0000 [ 537.062891][ T30] audit: type=1326 audit(1753866305.477:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe708f8e9a9 code=0x7ffc0000 [ 537.099301][ T30] audit: type=1326 audit(1753866305.477:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe708f8e9a9 code=0x7ffc0000 [ 537.148091][ T30] audit: type=1326 audit(1753866305.477:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe708f8e9a9 code=0x7ffc0000 [ 537.187325][ T30] audit: type=1326 audit(1753866305.477:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe708f8e9a9 code=0x7ffc0000 [ 537.223637][ T30] audit: type=1326 audit(1753866305.477:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe708f8e9a9 code=0x7ffc0000 [ 537.431905][ T30] audit: type=1326 audit(1753866305.477:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fe708f8e9a9 code=0x7ffc0000 [ 537.615888][ T30] audit: type=1326 audit(1753866305.477:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe708f8e9a9 code=0x7ffc0000 [ 540.262021][ T5968] vhci_hcd: vhci_device speed not set [ 543.834593][ T9660] netlink: 'syz.3.887': attribute type 20 has an invalid length. [ 545.365226][ T9670] netlink: 'syz.1.890': attribute type 20 has an invalid length. [ 545.496963][ T9670] dvmrp17: entered allmulticast mode [ 550.158637][ T9703] netlink: 'syz.3.898': attribute type 20 has an invalid length. [ 550.504719][ T9707] netlink: 'syz.0.899': attribute type 20 has an invalid length. [ 552.419029][ T9723] netlink: 76 bytes leftover after parsing attributes in process `syz.2.903'. [ 552.434338][ T9723] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.903'. [ 552.449349][ T9723] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' [ 553.011652][ T9723] CPU: 0 UID: 0 PID: 9723 Comm: syz.2.903 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 553.011685][ T9723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 553.011698][ T9723] Call Trace: [ 553.011705][ T9723] [ 553.011713][ T9723] dump_stack_lvl+0x16c/0x1f0 [ 553.011742][ T9723] sysfs_warn_dup+0x7f/0xa0 [ 553.011765][ T9723] sysfs_do_create_link_sd+0x124/0x140 [ 553.011790][ T9723] sysfs_create_link+0x61/0xc0 [ 553.011813][ T9723] device_add+0x62c/0x1a70 [ 553.011843][ T9723] ? __pfx_device_add+0x10/0x10 [ 553.011869][ T9723] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 553.011894][ T9723] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 553.011924][ T9723] wiphy_register+0x1c9c/0x2850 [ 553.011951][ T9723] ? netdev_run_todo+0x864/0x1320 [ 553.011975][ T9723] ? __dev_printk+0x260/0x270 [ 553.011999][ T9723] ? __pfx_wiphy_register+0x10/0x10 [ 553.012040][ T9723] ieee80211_register_hw+0x24ac/0x4140 [ 553.012080][ T9723] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 553.012110][ T9723] ? find_held_lock+0x2b/0x80 [ 553.012135][ T9723] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 553.012157][ T9723] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 553.012185][ T9723] ? __hrtimer_setup+0x176/0x280 [ 553.012207][ T9723] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 553.012242][ T9723] ? trace_kmalloc+0x2b/0xd0 [ 553.012264][ T9723] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 553.012284][ T9723] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 553.012305][ T9723] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 553.012327][ T9723] ? __asan_memcpy+0x3c/0x60 [ 553.012357][ T9723] hwsim_new_radio_nl+0xb51/0x12c0 [ 553.012382][ T9723] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 553.012413][ T9723] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 553.012443][ T9723] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 553.012487][ T9723] genl_family_rcv_msg_doit+0x206/0x2f0 [ 553.012518][ T9723] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 553.012556][ T9723] ? bpf_lsm_capable+0x9/0x10 [ 553.012582][ T9723] ? security_capable+0x7e/0x260 [ 553.012612][ T9723] ? ns_capable+0xd7/0x110 [ 553.012635][ T9723] genl_rcv_msg+0x55c/0x800 [ 553.012655][ T9723] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.012672][ T9723] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 553.012703][ T9723] netlink_rcv_skb+0x155/0x420 [ 553.012731][ T9723] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.012749][ T9723] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 553.012787][ T9723] ? netlink_deliver_tap+0x1ae/0xd30 [ 553.012816][ T9723] genl_rcv+0x28/0x40 [ 553.012842][ T9723] netlink_unicast+0x58d/0x850 [ 553.012872][ T9723] ? __pfx_netlink_unicast+0x10/0x10 [ 553.012896][ T9723] ? __build_skb_around+0x278/0x3b0 [ 553.012931][ T9723] netlink_sendmsg+0x8d1/0xdd0 [ 553.012962][ T9723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.012998][ T9723] ____sys_sendmsg+0xa98/0xc70 [ 553.013026][ T9723] ? copy_msghdr_from_user+0x10a/0x160 [ 553.013048][ T9723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.013081][ T9723] ? __pfx_futex_wake_mark+0x10/0x10 [ 553.013106][ T9723] ___sys_sendmsg+0x134/0x1d0 [ 553.013126][ T9723] ? futex_private_hash_put+0x176/0x300 [ 553.013155][ T9723] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.013174][ T9723] ? __lock_acquire+0x622/0x1c90 [ 553.013235][ T9723] __sys_sendmsg+0x16d/0x220 [ 553.013258][ T9723] ? __pfx___sys_sendmsg+0x10/0x10 [ 553.013283][ T9723] ? __x64_sys_futex+0x1e0/0x4c0 [ 553.013316][ T9723] do_syscall_64+0xcd/0x4c0 [ 553.013341][ T9723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.013360][ T9723] RIP: 0033:0x7fe8fe58e9a9 [ 553.013377][ T9723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.013396][ T9723] RSP: 002b:00007fe8ff4ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.013415][ T9723] RAX: ffffffffffffffda RBX: 00007fe8fe7b5fa0 RCX: 00007fe8fe58e9a9 [ 553.013427][ T9723] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 553.013439][ T9723] RBP: 00007fe8fe610d69 R08: 0000000000000000 R09: 0000000000000000 [ 553.013451][ T9723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.013469][ T9723] R13: 0000000000000000 R14: 00007fe8fe7b5fa0 R15: 00007ffe688ad408 [ 553.013496][ T9723] [ 555.738913][ T9754] netlink: 'syz.2.912': attribute type 20 has an invalid length. [ 557.301189][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 557.301209][ T30] audit: type=1326 audit(1753866325.031:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 557.501616][ T30] audit: type=1326 audit(1753866325.031:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 557.535629][ T30] audit: type=1326 audit(1753866325.031:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 557.590370][ T30] audit: type=1326 audit(1753866325.031:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 557.949092][ T30] audit: type=1326 audit(1753866325.031:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 558.076918][ T30] audit: type=1326 audit(1753866325.031:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 558.601521][ T30] audit: type=1326 audit(1753866325.031:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 558.741551][ T30] audit: type=1326 audit(1753866325.031:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 558.864352][ T30] audit: type=1326 audit(1753866325.031:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 558.928824][ T30] audit: type=1326 audit(1753866325.041:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9ab8e9a9 code=0x7ffc0000 [ 561.446803][ T9799] netlink: 76 bytes leftover after parsing attributes in process `syz.1.923'. [ 561.584624][ T9799] binder: BINDER_SET_CONTEXT_MGR already set [ 561.615212][ T9799] binder: 9798:9799 ioctl 4018620d 2000000002c0 returned -16 [ 561.693713][ T9799] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.923'. [ 561.793805][ T9799] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' [ 561.908448][ T9799] CPU: 1 UID: 0 PID: 9799 Comm: syz.1.923 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 561.908478][ T9799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 561.908485][ T9799] Call Trace: [ 561.908490][ T9799] [ 561.908496][ T9799] dump_stack_lvl+0x16c/0x1f0 [ 561.908516][ T9799] sysfs_warn_dup+0x7f/0xa0 [ 561.908532][ T9799] sysfs_do_create_link_sd+0x124/0x140 [ 561.908548][ T9799] sysfs_create_link+0x61/0xc0 [ 561.908562][ T9799] device_add+0x62c/0x1a70 [ 561.908580][ T9799] ? __pfx_device_add+0x10/0x10 [ 561.908596][ T9799] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 561.908612][ T9799] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 561.908631][ T9799] wiphy_register+0x1c9c/0x2850 [ 561.908647][ T9799] ? netdev_run_todo+0x864/0x1320 [ 561.908662][ T9799] ? __dev_printk+0x260/0x270 [ 561.908677][ T9799] ? __pfx_wiphy_register+0x10/0x10 [ 561.908700][ T9799] ieee80211_register_hw+0x24ac/0x4140 [ 561.908721][ T9799] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 561.908738][ T9799] ? find_held_lock+0x2b/0x80 [ 561.908753][ T9799] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 561.908767][ T9799] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 561.908785][ T9799] ? __hrtimer_setup+0x176/0x280 [ 561.908799][ T9799] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 561.908820][ T9799] ? trace_kmalloc+0x2b/0xd0 [ 561.908833][ T9799] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 561.908845][ T9799] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 561.908858][ T9799] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 561.908871][ T9799] ? __asan_memcpy+0x3c/0x60 [ 561.908889][ T9799] hwsim_new_radio_nl+0xb51/0x12c0 [ 561.908904][ T9799] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 561.908921][ T9799] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 561.908940][ T9799] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 561.908961][ T9799] genl_family_rcv_msg_doit+0x206/0x2f0 [ 561.908980][ T9799] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 561.909001][ T9799] ? bpf_lsm_capable+0x9/0x10 [ 561.909017][ T9799] ? security_capable+0x7e/0x260 [ 561.909034][ T9799] ? ns_capable+0xd7/0x110 [ 561.909049][ T9799] genl_rcv_msg+0x55c/0x800 [ 561.909072][ T9799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 561.909087][ T9799] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 561.909106][ T9799] netlink_rcv_skb+0x155/0x420 [ 561.909123][ T9799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 561.909134][ T9799] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.909156][ T9799] ? netlink_deliver_tap+0x1ae/0xd30 [ 561.909174][ T9799] genl_rcv+0x28/0x40 [ 561.909190][ T9799] netlink_unicast+0x58d/0x850 [ 561.909210][ T9799] ? __pfx_netlink_unicast+0x10/0x10 [ 561.909225][ T9799] ? __build_skb_around+0x278/0x3b0 [ 561.909248][ T9799] netlink_sendmsg+0x8d1/0xdd0 [ 561.909266][ T9799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.909287][ T9799] ____sys_sendmsg+0xa98/0xc70 [ 561.909304][ T9799] ? copy_msghdr_from_user+0x10a/0x160 [ 561.909319][ T9799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.909338][ T9799] ? __pfx_futex_wake_mark+0x10/0x10 [ 561.909353][ T9799] ___sys_sendmsg+0x134/0x1d0 [ 561.909365][ T9799] ? futex_private_hash_put+0x176/0x300 [ 561.909382][ T9799] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.909393][ T9799] ? __lock_acquire+0x622/0x1c90 [ 561.909428][ T9799] __sys_sendmsg+0x16d/0x220 [ 561.909441][ T9799] ? __pfx___sys_sendmsg+0x10/0x10 [ 561.909453][ T9799] ? __x64_sys_futex+0x1e0/0x4c0 [ 561.909472][ T9799] do_syscall_64+0xcd/0x4c0 [ 561.909487][ T9799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.909498][ T9799] RIP: 0033:0x7fe708f8e9a9 [ 561.909508][ T9799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.909519][ T9799] RSP: 002b:00007fe709d1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.909531][ T9799] RAX: ffffffffffffffda RBX: 00007fe7091b5fa0 RCX: 00007fe708f8e9a9 [ 561.909538][ T9799] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 561.909544][ T9799] RBP: 00007fe709010d69 R08: 0000000000000000 R09: 0000000000000000 [ 561.909551][ T9799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.909557][ T9799] R13: 0000000000000000 R14: 00007fe7091b5fa0 R15: 00007fff257d6c88 [ 561.909571][ T9799] [ 562.669158][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.682306][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.552835][ T9813] netlink: 'syz.2.927': attribute type 20 has an invalid length. [ 564.003663][ T9822] 9pnet_fd: Insufficient options for proto=fd [ 564.443719][ T9826] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 564.450366][ T9826] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 564.507809][ T9826] vhci_hcd vhci_hcd.0: Device attached [ 564.686273][ T24] vhci_hcd: vhci_device speed not set [ 564.692567][ T9831] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 564.699285][ T9831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 564.771982][ T9831] vhci_hcd vhci_hcd.0: Device attached [ 564.817462][ T24] usb 35-1: new full-speed USB device number 6 using vhci_hcd [ 565.229353][ T9840] 9pnet_fd: Insufficient options for proto=fd [ 566.157161][ T9832] vhci_hcd: connection closed [ 566.164316][ T9829] vhci_hcd: connection reset by peer [ 566.164414][ T2997] vhci_hcd: stop threads [ 566.187866][ T9843] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 566.194510][ T9843] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 566.205203][ T2997] vhci_hcd: release socket [ 566.303019][ T2997] vhci_hcd: disconnect device [ 566.335865][ T9846] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 566.342492][ T9846] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 566.361219][ T2997] vhci_hcd: stop threads [ 566.415974][ T9853] cgroup: Need name or subsystem set [ 566.438656][ T9853] netlink: 32 bytes leftover after parsing attributes in process `syz.4.933'. [ 566.544102][ T2997] vhci_hcd: release socket [ 566.599519][ T2997] vhci_hcd: disconnect device [ 566.829360][ T9843] vhci_hcd vhci_hcd.0: Device attached [ 566.913913][ T9846] vhci_hcd vhci_hcd.0: Device attached [ 567.061564][ T5955] vhci_hcd: vhci_device speed not set [ 567.157988][ T5955] usb 39-1: new full-speed USB device number 10 using vhci_hcd [ 569.816444][ T9848] vhci_hcd: connection reset by peer [ 569.825018][ T9849] vhci_hcd: connection closed [ 569.825774][ T2966] vhci_hcd: stop threads [ 569.918600][ T2966] vhci_hcd: release socket [ 569.951561][ T24] vhci_hcd: vhci_device speed not set [ 570.041637][ T2966] vhci_hcd: disconnect device [ 570.365591][ T2966] vhci_hcd: stop threads [ 570.369887][ T2966] vhci_hcd: release socket [ 570.441073][ T2966] vhci_hcd: disconnect device [ 572.351902][ T5955] vhci_hcd: vhci_device speed not set [ 573.452880][ T9909] 9pnet_fd: Insufficient options for proto=fd [ 574.392874][ T9912] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 574.399606][ T9912] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 574.423992][ T9912] vhci_hcd vhci_hcd.0: Device attached [ 574.784080][ T5904] vhci_hcd: vhci_device speed not set [ 574.861579][ T5904] usb 37-1: new full-speed USB device number 10 using vhci_hcd [ 575.067841][ T9912] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 575.074485][ T9912] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 575.313747][ T9912] vhci_hcd vhci_hcd.0: Device attached [ 576.156403][ T9921] vhci_hcd: connection reset by peer [ 576.156405][ T9930] vhci_hcd: connection closed [ 576.328197][ T999] vhci_hcd: stop threads [ 576.354731][ T999] vhci_hcd: release socket [ 576.391519][ T999] vhci_hcd: disconnect device [ 576.424480][ T999] vhci_hcd: stop threads [ 576.428816][ T999] vhci_hcd: release socket [ 576.471998][ T999] vhci_hcd: disconnect device [ 576.706874][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 576.706888][ T30] audit: type=1326 audit(1753866345.267:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf918e9a9 code=0x7ffc0000 [ 576.794167][ T30] audit: type=1326 audit(1753866345.267:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf918e9a9 code=0x7ffc0000 [ 576.848397][ T30] audit: type=1326 audit(1753866345.267:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f8cf918e9a9 code=0x7ffc0000 [ 576.888200][ T9947] 9pnet_fd: Insufficient options for proto=fd [ 576.943427][ T30] audit: type=1326 audit(1753866345.267:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf918e9a9 code=0x7ffc0000 [ 577.432963][ T30] audit: type=1326 audit(1753866345.267:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf918e9a9 code=0x7ffc0000 [ 577.456530][ T30] audit: type=1326 audit(1753866345.267:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8cf918e9a9 code=0x7ffc0000 [ 577.482068][ T30] audit: type=1326 audit(1753866345.267:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf918e9a9 code=0x7ffc0000 [ 577.530735][ T30] audit: type=1326 audit(1753866345.267:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf918e9a9 code=0x7ffc0000 [ 577.608363][ T30] audit: type=1326 audit(1753866345.267:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f8cf918e9a9 code=0x7ffc0000 [ 578.001702][ T9952] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 578.008340][ T9952] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 578.017575][ T30] audit: type=1326 audit(1753866345.267:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf918e9a9 code=0x7ffc0000 [ 578.061379][ T9954] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 578.067998][ T9954] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 578.140564][ T9954] vhci_hcd vhci_hcd.0: Device attached [ 578.146364][ T9952] vhci_hcd vhci_hcd.0: Device attached [ 578.346561][ T24] vhci_hcd: vhci_device speed not set [ 578.443782][ T9957] vhci_hcd: connection closed [ 578.484257][ T3555] vhci_hcd: stop threads [ 578.484481][ T9958] vhci_hcd: connection closed [ 578.489011][ T3555] vhci_hcd: release socket [ 578.559488][ T3555] vhci_hcd: disconnect device [ 578.561901][ T24] usb 39-1: new full-speed USB device number 11 using vhci_hcd [ 578.573544][ T3555] vhci_hcd: stop threads [ 578.577887][ T3555] vhci_hcd: release socket [ 578.582649][ T3555] vhci_hcd: disconnect device [ 579.134498][ T24] usb 39-1: enqueue for inactive port 0 [ 579.221547][ T24] vhci_hcd: vhci_device speed not set [ 580.242562][ T5904] vhci_hcd: vhci_device speed not set [ 580.277939][ T9989] netlink: 'syz.0.962': attribute type 20 has an invalid length. [ 581.520330][T10004] netlink: 'syz.3.965': attribute type 20 has an invalid length. [ 583.395679][T10025] netlink: 76 bytes leftover after parsing attributes in process `syz.2.970'. [ 584.693441][T10044] netlink: 'syz.3.974': attribute type 20 has an invalid length. [ 585.033879][T10046] 9pnet_fd: Insufficient options for proto=fd [ 585.467961][T10047] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 585.474634][T10047] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 585.485848][T10047] vhci_hcd vhci_hcd.0: Device attached [ 585.503026][T10049] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13) [ 585.509660][T10049] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.518320][T10049] vhci_hcd vhci_hcd.0: Device attached [ 585.813514][ T5941] vhci_hcd: vhci_device speed not set [ 585.908291][ T5941] usb 41-1: new full-speed USB device number 8 using vhci_hcd [ 586.555594][T10072] netlink: 'syz.1.980': attribute type 20 has an invalid length. [ 587.646362][T10052] vhci_hcd: connection closed [ 587.648980][T10051] vhci_hcd: connection reset by peer [ 587.771541][ T999] vhci_hcd: stop threads [ 587.797111][ T999] vhci_hcd: release socket [ 587.806811][ T999] vhci_hcd: disconnect device [ 587.822326][ T999] vhci_hcd: stop threads [ 587.826874][ T999] vhci_hcd: release socket [ 587.847147][ T999] vhci_hcd: disconnect device [ 589.774086][T10106] netlink: 76 bytes leftover after parsing attributes in process `syz.0.988'. [ 589.787394][T10106] binder: BINDER_SET_CONTEXT_MGR already set [ 589.794473][T10106] binder: 10105:10106 ioctl 4018620d 2000000002c0 returned -16 [ 591.051642][ T5941] vhci_hcd: vhci_device speed not set [ 591.275281][T10121] netlink: 'syz.4.992': attribute type 20 has an invalid length. [ 591.575264][T10125] 9pnet_fd: Insufficient options for proto=fd [ 591.691322][T10126] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 591.698023][T10126] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 591.836296][T10126] vhci_hcd vhci_hcd.0: Device attached [ 591.860524][T10131] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 591.867231][T10131] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 591.876419][T10131] vhci_hcd vhci_hcd.0: Device attached [ 592.746357][ T43] vhci_hcd: vhci_device speed not set [ 592.961528][ T43] usb 37-1: new full-speed USB device number 11 using vhci_hcd [ 593.563405][T10148] netlink: 76 bytes leftover after parsing attributes in process `syz.0.998'. [ 593.576774][T10148] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.998'. [ 593.588497][T10148] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' [ 593.611718][T10148] CPU: 0 UID: 0 PID: 10148 Comm: syz.0.998 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 593.611755][T10148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 593.611767][T10148] Call Trace: [ 593.611773][T10148] [ 593.611780][T10148] dump_stack_lvl+0x16c/0x1f0 [ 593.611799][T10148] sysfs_warn_dup+0x7f/0xa0 [ 593.611815][T10148] sysfs_do_create_link_sd+0x124/0x140 [ 593.611831][T10148] sysfs_create_link+0x61/0xc0 [ 593.611845][T10148] device_add+0x62c/0x1a70 [ 593.611864][T10148] ? __pfx_device_add+0x10/0x10 [ 593.611880][T10148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 593.611897][T10148] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 593.611915][T10148] wiphy_register+0x1c9c/0x2850 [ 593.611932][T10148] ? netdev_run_todo+0x864/0x1320 [ 593.611947][T10148] ? __dev_printk+0x260/0x270 [ 593.611961][T10148] ? __pfx_wiphy_register+0x10/0x10 [ 593.611984][T10148] ieee80211_register_hw+0x24ac/0x4140 [ 593.612010][T10148] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 593.612027][T10148] ? find_held_lock+0x2b/0x80 [ 593.612042][T10148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 593.612056][T10148] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 593.612073][T10148] ? __hrtimer_setup+0x176/0x280 [ 593.612088][T10148] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 593.612109][T10148] ? trace_kmalloc+0x2b/0xd0 [ 593.612122][T10148] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 593.612134][T10148] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 593.612147][T10148] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 593.612160][T10148] ? __asan_memcpy+0x3c/0x60 [ 593.612179][T10148] hwsim_new_radio_nl+0xb51/0x12c0 [ 593.612194][T10148] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 593.612212][T10148] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 593.612231][T10148] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 593.612252][T10148] genl_family_rcv_msg_doit+0x206/0x2f0 [ 593.612270][T10148] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 593.612292][T10148] ? bpf_lsm_capable+0x9/0x10 [ 593.612307][T10148] ? security_capable+0x7e/0x260 [ 593.612325][T10148] ? ns_capable+0xd7/0x110 [ 593.612339][T10148] genl_rcv_msg+0x55c/0x800 [ 593.612350][T10148] ? __pfx_genl_rcv_msg+0x10/0x10 [ 593.612361][T10148] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 593.612379][T10148] netlink_rcv_skb+0x155/0x420 [ 593.612394][T10148] ? __pfx_genl_rcv_msg+0x10/0x10 [ 593.612405][T10148] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 593.612426][T10148] ? netlink_deliver_tap+0x1ae/0xd30 [ 593.612443][T10148] genl_rcv+0x28/0x40 [ 593.612458][T10148] netlink_unicast+0x58d/0x850 [ 593.612476][T10148] ? __pfx_netlink_unicast+0x10/0x10 [ 593.612490][T10148] ? __build_skb_around+0x278/0x3b0 [ 593.612511][T10148] netlink_sendmsg+0x8d1/0xdd0 [ 593.612529][T10148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.612550][T10148] ____sys_sendmsg+0xa98/0xc70 [ 593.612567][T10148] ? copy_msghdr_from_user+0x10a/0x160 [ 593.612580][T10148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 593.612602][T10148] ___sys_sendmsg+0x134/0x1d0 [ 593.612614][T10148] ? futex_private_hash_put+0x176/0x300 [ 593.612631][T10148] ? __pfx____sys_sendmsg+0x10/0x10 [ 593.612643][T10148] ? __lock_acquire+0x622/0x1c90 [ 593.612677][T10148] __sys_sendmsg+0x16d/0x220 [ 593.612690][T10148] ? __pfx___sys_sendmsg+0x10/0x10 [ 593.612703][T10148] ? __x64_sys_futex+0x1e0/0x4c0 [ 593.612722][T10148] do_syscall_64+0xcd/0x4c0 [ 593.612744][T10148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.612757][T10148] RIP: 0033:0x7f5b9ab8e9a9 [ 593.612768][T10148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.612780][T10148] RSP: 002b:00007f5b9ba83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.612794][T10148] RAX: ffffffffffffffda RBX: 00007f5b9adb5fa0 RCX: 00007f5b9ab8e9a9 [ 593.612802][T10148] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 593.612810][T10148] RBP: 00007f5b9ac10d69 R08: 0000000000000000 R09: 0000000000000000 [ 593.612818][T10148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.612826][T10148] R13: 0000000000000000 R14: 00007f5b9adb5fa0 R15: 00007ffcf5a09998 [ 593.612841][T10148] [ 593.693733][T10149] netlink: 76 bytes leftover after parsing attributes in process `syz.3.997'. [ 593.906711][T10150] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.997'. [ 594.245269][T10150] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²ÿ' already exists in 'ieee80211' [ 595.084970][T10128] vhci_hcd: connection reset by peer [ 595.146347][T10132] vhci_hcd: connection closed [ 595.146731][ T6832] vhci_hcd: stop threads [ 595.171379][ T6832] vhci_hcd: release socket [ 595.189435][ T6832] vhci_hcd: disconnect device [ 595.391713][ T6832] vhci_hcd: stop threads [ 595.396010][ T6832] vhci_hcd: release socket [ 595.408701][ T6832] vhci_hcd: disconnect device [ 596.061191][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 596.061231][ T30] audit: type=1400 audit(1753866364.630:1575): avc: denied { map } for pid=10158 comm="syz.0.1001" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 596.266412][ T30] audit: type=1400 audit(1753866364.680:1576): avc: denied { execute } for pid=10158 comm="syz.0.1001" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 597.104168][T10175] netlink: 'syz.3.1005': attribute type 20 has an invalid length. [ 598.091640][ T43] vhci_hcd: vhci_device speed not set [ 599.679767][T10200] netlink: 'syz.1.1011': attribute type 20 has an invalid length. [ 605.023478][T10248] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1025'. [ 605.044018][T10248] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.1025'. [ 607.328063][T10277] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1031'. [ 607.477167][T10277] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.1031'. [ 607.488157][T10277] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' [ 607.753639][T10277] CPU: 1 UID: 0 PID: 10277 Comm: syz.4.1031 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 607.753672][T10277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 607.753684][T10277] Call Trace: [ 607.753691][T10277] [ 607.753699][T10277] dump_stack_lvl+0x16c/0x1f0 [ 607.753728][T10277] sysfs_warn_dup+0x7f/0xa0 [ 607.753752][T10277] sysfs_do_create_link_sd+0x124/0x140 [ 607.753777][T10277] sysfs_create_link+0x61/0xc0 [ 607.753801][T10277] device_add+0x62c/0x1a70 [ 607.753830][T10277] ? __pfx_device_add+0x10/0x10 [ 607.753853][T10277] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 607.753876][T10277] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 607.753904][T10277] wiphy_register+0x1c9c/0x2850 [ 607.753930][T10277] ? netdev_run_todo+0x864/0x1320 [ 607.753954][T10277] ? __dev_printk+0x260/0x270 [ 607.753978][T10277] ? __pfx_wiphy_register+0x10/0x10 [ 607.754019][T10277] ieee80211_register_hw+0x24ac/0x4140 [ 607.754056][T10277] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 607.754085][T10277] ? find_held_lock+0x2b/0x80 [ 607.754109][T10277] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 607.754132][T10277] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 607.754160][T10277] ? __hrtimer_setup+0x176/0x280 [ 607.754183][T10277] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 607.754220][T10277] ? trace_kmalloc+0x2b/0xd0 [ 607.754240][T10277] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 607.754260][T10277] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 607.754280][T10277] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 607.754302][T10277] ? __asan_memcpy+0x3c/0x60 [ 607.754332][T10277] hwsim_new_radio_nl+0xb51/0x12c0 [ 607.754357][T10277] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 607.754387][T10277] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 607.754418][T10277] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 607.754453][T10277] genl_family_rcv_msg_doit+0x206/0x2f0 [ 607.754484][T10277] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 607.754521][T10277] ? bpf_lsm_capable+0x9/0x10 [ 607.754546][T10277] ? security_capable+0x7e/0x260 [ 607.754580][T10277] ? ns_capable+0xd7/0x110 [ 607.754607][T10277] genl_rcv_msg+0x55c/0x800 [ 607.754628][T10277] ? __pfx_genl_rcv_msg+0x10/0x10 [ 607.754648][T10277] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 607.754680][T10277] netlink_rcv_skb+0x155/0x420 [ 607.754707][T10277] ? __pfx_genl_rcv_msg+0x10/0x10 [ 607.754725][T10277] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 607.754763][T10277] ? netlink_deliver_tap+0x1ae/0xd30 [ 607.754791][T10277] genl_rcv+0x28/0x40 [ 607.754815][T10277] netlink_unicast+0x58d/0x850 [ 607.754845][T10277] ? __pfx_netlink_unicast+0x10/0x10 [ 607.754868][T10277] ? __build_skb_around+0x278/0x3b0 [ 607.754903][T10277] netlink_sendmsg+0x8d1/0xdd0 [ 607.754933][T10277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.754969][T10277] ____sys_sendmsg+0xa98/0xc70 [ 607.754998][T10277] ? copy_msghdr_from_user+0x10a/0x160 [ 607.755020][T10277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 607.755059][T10277] ___sys_sendmsg+0x134/0x1d0 [ 607.755078][T10277] ? futex_private_hash_put+0x176/0x300 [ 607.755106][T10277] ? __pfx____sys_sendmsg+0x10/0x10 [ 607.755126][T10277] ? __lock_acquire+0x622/0x1c90 [ 607.755188][T10277] __sys_sendmsg+0x16d/0x220 [ 607.755211][T10277] ? __pfx___sys_sendmsg+0x10/0x10 [ 607.755232][T10277] ? __x64_sys_futex+0x1e0/0x4c0 [ 607.755265][T10277] do_syscall_64+0xcd/0x4c0 [ 607.755289][T10277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.755308][T10277] RIP: 0033:0x7fa99f38e9a9 [ 607.755324][T10277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.755343][T10277] RSP: 002b:00007fa9a024f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.755362][T10277] RAX: ffffffffffffffda RBX: 00007fa99f5b5fa0 RCX: 00007fa99f38e9a9 [ 607.755374][T10277] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 607.755385][T10277] RBP: 00007fa99f410d69 R08: 0000000000000000 R09: 0000000000000000 [ 607.755396][T10277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.755406][T10277] R13: 0000000000000000 R14: 00007fa99f5b5fa0 R15: 00007ffd9a79dc18 [ 607.755431][T10277] [ 608.263979][T10286] 9pnet_fd: Insufficient options for proto=fd [ 609.171332][T10294] netlink: 'syz.4.1035': attribute type 20 has an invalid length. [ 609.948671][T10289] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 609.955316][T10289] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 610.091700][T10297] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 610.098342][T10297] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 610.164221][T10289] vhci_hcd vhci_hcd.0: Device attached [ 610.173515][T10297] vhci_hcd vhci_hcd.0: Device attached [ 610.621514][ T5941] vhci_hcd: vhci_device speed not set [ 610.691569][ T5941] usb 37-1: new full-speed USB device number 12 using vhci_hcd [ 610.875728][T10311] netlink: 'syz.0.1039': attribute type 20 has an invalid length. [ 611.171119][T10298] vhci_hcd: connection reset by peer [ 611.176470][T10300] vhci_hcd: connection closed [ 611.176691][ T6832] vhci_hcd: stop threads [ 611.185906][ T6832] vhci_hcd: release socket [ 611.190387][ T6832] vhci_hcd: disconnect device [ 611.214884][ T6832] vhci_hcd: stop threads [ 611.487428][ T6832] vhci_hcd: release socket [ 611.519429][ T6832] vhci_hcd: disconnect device [ 614.021345][T10338] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 614.028005][T10338] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 614.036056][T10338] vhci_hcd vhci_hcd.0: Device attached [ 614.128142][T10341] vhci_hcd: connection closed [ 614.141912][ T1096] vhci_hcd: stop threads [ 614.166394][ T1096] vhci_hcd: release socket [ 614.204081][ T1096] vhci_hcd: disconnect device [ 615.891582][ T5941] vhci_hcd: vhci_device speed not set [ 617.674427][T10390] 9pnet_fd: Insufficient options for proto=fd [ 618.899512][T10392] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 618.906164][T10392] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 618.914128][T10392] vhci_hcd vhci_hcd.0: Device attached [ 619.068297][T10392] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 619.074938][T10392] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 619.084101][T10392] vhci_hcd vhci_hcd.0: Device attached [ 619.171674][ T5968] vhci_hcd: vhci_device speed not set [ 619.231543][ T5968] usb 33-1: new full-speed USB device number 9 using vhci_hcd [ 620.577939][T10397] vhci_hcd: connection closed [ 620.772099][T10395] vhci_hcd: connection reset by peer [ 620.834345][ T3489] vhci_hcd: stop threads [ 620.847788][ T3489] vhci_hcd: release socket [ 620.873865][ T3489] vhci_hcd: disconnect device [ 620.885341][ T3489] vhci_hcd: stop threads [ 620.889610][ T3489] vhci_hcd: release socket [ 620.923163][ T3489] vhci_hcd: disconnect device [ 623.955099][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.962656][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.451560][ T5968] vhci_hcd: vhci_device speed not set [ 628.380036][T10480] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1076'. [ 628.394654][T10480] binder: BINDER_SET_CONTEXT_MGR already set [ 628.401371][T10480] binder: 10479:10480 ioctl 4018620d 2000000002c0 returned -16 [ 628.508361][T10484] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.1076'. [ 628.541194][T10484] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' [ 628.629983][T10484] CPU: 1 UID: 0 PID: 10484 Comm: syz.1.1076 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 628.630013][T10484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 628.630024][T10484] Call Trace: [ 628.630030][T10484] [ 628.630038][T10484] dump_stack_lvl+0x16c/0x1f0 [ 628.630067][T10484] sysfs_warn_dup+0x7f/0xa0 [ 628.630092][T10484] sysfs_do_create_link_sd+0x124/0x140 [ 628.630115][T10484] sysfs_create_link+0x61/0xc0 [ 628.630137][T10484] device_add+0x62c/0x1a70 [ 628.630170][T10484] ? __pfx_device_add+0x10/0x10 [ 628.630194][T10484] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 628.630219][T10484] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 628.630248][T10484] wiphy_register+0x1c9c/0x2850 [ 628.630271][T10484] ? netdev_run_todo+0x864/0x1320 [ 628.630295][T10484] ? __dev_printk+0x260/0x270 [ 628.630317][T10484] ? __pfx_wiphy_register+0x10/0x10 [ 628.630360][T10484] ieee80211_register_hw+0x24ac/0x4140 [ 628.630396][T10484] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 628.630425][T10484] ? find_held_lock+0x2b/0x80 [ 628.630447][T10484] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 628.630468][T10484] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 628.630488][T10484] ? __hrtimer_setup+0x176/0x280 [ 628.630502][T10484] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 628.630523][T10484] ? trace_kmalloc+0x2b/0xd0 [ 628.630536][T10484] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 628.630548][T10484] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 628.630560][T10484] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 628.630574][T10484] ? __asan_memcpy+0x3c/0x60 [ 628.630592][T10484] hwsim_new_radio_nl+0xb51/0x12c0 [ 628.630609][T10484] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 628.630626][T10484] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 628.630646][T10484] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 628.630667][T10484] genl_family_rcv_msg_doit+0x206/0x2f0 [ 628.630686][T10484] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 628.630708][T10484] ? bpf_lsm_capable+0x9/0x10 [ 628.630723][T10484] ? security_capable+0x7e/0x260 [ 628.630740][T10484] ? ns_capable+0xd7/0x110 [ 628.630755][T10484] genl_rcv_msg+0x55c/0x800 [ 628.630767][T10484] ? __pfx_genl_rcv_msg+0x10/0x10 [ 628.630778][T10484] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 628.630796][T10484] netlink_rcv_skb+0x155/0x420 [ 628.630812][T10484] ? __pfx_genl_rcv_msg+0x10/0x10 [ 628.630822][T10484] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 628.630844][T10484] ? netlink_deliver_tap+0x1ae/0xd30 [ 628.630861][T10484] genl_rcv+0x28/0x40 [ 628.630876][T10484] netlink_unicast+0x58d/0x850 [ 628.630894][T10484] ? __pfx_netlink_unicast+0x10/0x10 [ 628.630909][T10484] ? __build_skb_around+0x278/0x3b0 [ 628.630931][T10484] netlink_sendmsg+0x8d1/0xdd0 [ 628.630949][T10484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.630970][T10484] ____sys_sendmsg+0xa98/0xc70 [ 628.630987][T10484] ? copy_msghdr_from_user+0x10a/0x160 [ 628.631000][T10484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 628.631023][T10484] ___sys_sendmsg+0x134/0x1d0 [ 628.631035][T10484] ? futex_private_hash_put+0x176/0x300 [ 628.631052][T10484] ? __pfx____sys_sendmsg+0x10/0x10 [ 628.631063][T10484] ? __lock_acquire+0x622/0x1c90 [ 628.631098][T10484] __sys_sendmsg+0x16d/0x220 [ 628.631112][T10484] ? __pfx___sys_sendmsg+0x10/0x10 [ 628.631124][T10484] ? __x64_sys_futex+0x1e0/0x4c0 [ 628.631144][T10484] do_syscall_64+0xcd/0x4c0 [ 628.631158][T10484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.631170][T10484] RIP: 0033:0x7fe708f8e9a9 [ 628.631181][T10484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.631193][T10484] RSP: 002b:00007fe706df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 628.631205][T10484] RAX: ffffffffffffffda RBX: 00007fe7091b6080 RCX: 00007fe708f8e9a9 [ 628.631212][T10484] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 628.631218][T10484] RBP: 00007fe709010d69 R08: 0000000000000000 R09: 0000000000000000 [ 628.631224][T10484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.631231][T10484] R13: 0000000000000000 R14: 00007fe7091b6080 R15: 00007fff257d6c88 [ 628.631245][T10484] [ 629.504164][T10490] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1079'. [ 629.640266][T10491] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1078'. [ 629.798778][T10491] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.1078'. [ 629.809452][T10491] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' [ 629.841778][T10491] CPU: 1 UID: 0 PID: 10491 Comm: syz.3.1078 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 629.841810][T10491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.841823][T10491] Call Trace: [ 629.841829][T10491] [ 629.841837][T10491] dump_stack_lvl+0x16c/0x1f0 [ 629.841864][T10491] sysfs_warn_dup+0x7f/0xa0 [ 629.841887][T10491] sysfs_do_create_link_sd+0x124/0x140 [ 629.841913][T10491] sysfs_create_link+0x61/0xc0 [ 629.841936][T10491] device_add+0x62c/0x1a70 [ 629.841967][T10491] ? __pfx_device_add+0x10/0x10 [ 629.841992][T10491] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 629.842018][T10491] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 629.842046][T10491] wiphy_register+0x1c9c/0x2850 [ 629.842073][T10491] ? netdev_run_todo+0x864/0x1320 [ 629.842097][T10491] ? __dev_printk+0x260/0x270 [ 629.842121][T10491] ? __pfx_wiphy_register+0x10/0x10 [ 629.842163][T10491] ieee80211_register_hw+0x24ac/0x4140 [ 629.842200][T10491] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 629.842229][T10491] ? find_held_lock+0x2b/0x80 [ 629.842253][T10491] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 629.842275][T10491] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 629.842302][T10491] ? __hrtimer_setup+0x176/0x280 [ 629.842326][T10491] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 629.842362][T10491] ? trace_kmalloc+0x2b/0xd0 [ 629.842382][T10491] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 629.842402][T10491] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 629.842424][T10491] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 629.842447][T10491] ? __asan_memcpy+0x3c/0x60 [ 629.842480][T10491] hwsim_new_radio_nl+0xb51/0x12c0 [ 629.842506][T10491] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 629.842537][T10491] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 629.842569][T10491] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 629.842604][T10491] genl_family_rcv_msg_doit+0x206/0x2f0 [ 629.842643][T10491] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 629.842681][T10491] ? bpf_lsm_capable+0x9/0x10 [ 629.842706][T10491] ? security_capable+0x7e/0x260 [ 629.842737][T10491] ? ns_capable+0xd7/0x110 [ 629.842761][T10491] genl_rcv_msg+0x55c/0x800 [ 629.842783][T10491] ? __pfx_genl_rcv_msg+0x10/0x10 [ 629.842802][T10491] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 629.842834][T10491] netlink_rcv_skb+0x155/0x420 [ 629.842860][T10491] ? __pfx_genl_rcv_msg+0x10/0x10 [ 629.842878][T10491] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 629.842916][T10491] ? netlink_deliver_tap+0x1ae/0xd30 [ 629.842946][T10491] genl_rcv+0x28/0x40 [ 629.842971][T10491] netlink_unicast+0x58d/0x850 [ 629.842998][T10491] ? __pfx_netlink_unicast+0x10/0x10 [ 629.843018][T10491] ? __build_skb_around+0x278/0x3b0 [ 629.843051][T10491] netlink_sendmsg+0x8d1/0xdd0 [ 629.843079][T10491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.843111][T10491] ____sys_sendmsg+0xa98/0xc70 [ 629.843137][T10491] ? copy_msghdr_from_user+0x10a/0x160 [ 629.843158][T10491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 629.843189][T10491] ? __pfx_futex_wake_mark+0x10/0x10 [ 629.843210][T10491] ___sys_sendmsg+0x134/0x1d0 [ 629.843228][T10491] ? futex_private_hash_put+0x176/0x300 [ 629.843253][T10491] ? __pfx____sys_sendmsg+0x10/0x10 [ 629.843269][T10491] ? __lock_acquire+0x622/0x1c90 [ 629.843336][T10491] __sys_sendmsg+0x16d/0x220 [ 629.843360][T10491] ? __pfx___sys_sendmsg+0x10/0x10 [ 629.843380][T10491] ? __x64_sys_futex+0x1e0/0x4c0 [ 629.843408][T10491] do_syscall_64+0xcd/0x4c0 [ 629.843431][T10491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.843448][T10491] RIP: 0033:0x7f8cf918e9a9 [ 629.843464][T10491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.843479][T10491] RSP: 002b:00007f8cfa075038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.843497][T10491] RAX: ffffffffffffffda RBX: 00007f8cf93b5fa0 RCX: 00007f8cf918e9a9 [ 629.843509][T10491] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 629.843520][T10491] RBP: 00007f8cf9210d69 R08: 0000000000000000 R09: 0000000000000000 [ 629.843531][T10491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.843542][T10491] R13: 0000000000000000 R14: 00007f8cf93b5fa0 R15: 00007fffd1ab3618 [ 629.843568][T10491] [ 633.753507][T10537] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1092'. [ 634.117385][T10537] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.1092'. [ 634.148385][T10537] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' [ 634.164282][T10537] CPU: 1 UID: 0 PID: 10537 Comm: syz.1.1092 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 634.164316][T10537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 634.164324][T10537] Call Trace: [ 634.164329][T10537] [ 634.164334][T10537] dump_stack_lvl+0x16c/0x1f0 [ 634.164352][T10537] sysfs_warn_dup+0x7f/0xa0 [ 634.164369][T10537] sysfs_do_create_link_sd+0x124/0x140 [ 634.164384][T10537] sysfs_create_link+0x61/0xc0 [ 634.164399][T10537] device_add+0x62c/0x1a70 [ 634.164418][T10537] ? __pfx_device_add+0x10/0x10 [ 634.164434][T10537] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 634.164450][T10537] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 634.164468][T10537] wiphy_register+0x1c9c/0x2850 [ 634.164484][T10537] ? netdev_run_todo+0x864/0x1320 [ 634.164500][T10537] ? __dev_printk+0x260/0x270 [ 634.164515][T10537] ? __pfx_wiphy_register+0x10/0x10 [ 634.164538][T10537] ieee80211_register_hw+0x24ac/0x4140 [ 634.164563][T10537] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 634.164581][T10537] ? find_held_lock+0x2b/0x80 [ 634.164595][T10537] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 634.164609][T10537] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 634.164626][T10537] ? __hrtimer_setup+0x176/0x280 [ 634.164639][T10537] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 634.164660][T10537] ? trace_kmalloc+0x2b/0xd0 [ 634.164672][T10537] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 634.164685][T10537] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 634.164697][T10537] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 634.164710][T10537] ? __asan_memcpy+0x3c/0x60 [ 634.164728][T10537] hwsim_new_radio_nl+0xb51/0x12c0 [ 634.164743][T10537] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 634.164760][T10537] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 634.164779][T10537] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 634.164799][T10537] genl_family_rcv_msg_doit+0x206/0x2f0 [ 634.164818][T10537] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 634.164840][T10537] ? bpf_lsm_capable+0x9/0x10 [ 634.164855][T10537] ? security_capable+0x7e/0x260 [ 634.164873][T10537] ? ns_capable+0xd7/0x110 [ 634.164887][T10537] genl_rcv_msg+0x55c/0x800 [ 634.164899][T10537] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.164909][T10537] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 634.164926][T10537] netlink_rcv_skb+0x155/0x420 [ 634.164942][T10537] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.164952][T10537] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.164973][T10537] ? netlink_deliver_tap+0x1ae/0xd30 [ 634.164990][T10537] genl_rcv+0x28/0x40 [ 634.165006][T10537] netlink_unicast+0x58d/0x850 [ 634.165023][T10537] ? __pfx_netlink_unicast+0x10/0x10 [ 634.165038][T10537] ? __build_skb_around+0x278/0x3b0 [ 634.165058][T10537] netlink_sendmsg+0x8d1/0xdd0 [ 634.165076][T10537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.165097][T10537] ____sys_sendmsg+0xa98/0xc70 [ 634.165114][T10537] ? copy_msghdr_from_user+0x10a/0x160 [ 634.165128][T10537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.165150][T10537] ___sys_sendmsg+0x134/0x1d0 [ 634.165162][T10537] ? futex_private_hash_put+0x176/0x300 [ 634.165179][T10537] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.165191][T10537] ? __lock_acquire+0x622/0x1c90 [ 634.165225][T10537] __sys_sendmsg+0x16d/0x220 [ 634.165238][T10537] ? __pfx___sys_sendmsg+0x10/0x10 [ 634.165251][T10537] ? __x64_sys_futex+0x1e0/0x4c0 [ 634.165268][T10537] do_syscall_64+0xcd/0x4c0 [ 634.165283][T10537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.165295][T10537] RIP: 0033:0x7fe708f8e9a9 [ 634.165315][T10537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.165328][T10537] RSP: 002b:00007fe709d1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.165340][T10537] RAX: ffffffffffffffda RBX: 00007fe7091b5fa0 RCX: 00007fe708f8e9a9 [ 634.165348][T10537] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 634.165355][T10537] RBP: 00007fe709010d69 R08: 0000000000000000 R09: 0000000000000000 [ 634.165362][T10537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.165370][T10537] R13: 0000000000000000 R14: 00007fe7091b5fa0 R15: 00007fff257d6c88 [ 634.165385][T10537] [ 637.383459][T10574] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1098'. [ 637.537724][T10567] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.1098'. [ 637.553661][T10577] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1102'. [ 637.572383][T10577] binder: BINDER_SET_CONTEXT_MGR already set [ 637.578411][T10577] binder: 10576:10577 ioctl 4018620d 2000000002c0 returned -16 [ 637.601742][T10567] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' [ 637.641806][T10567] CPU: 0 UID: 0 PID: 10567 Comm: syz.3.1098 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 637.641838][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 637.641850][T10567] Call Trace: [ 637.641856][T10567] [ 637.641864][T10567] dump_stack_lvl+0x16c/0x1f0 [ 637.641892][T10567] sysfs_warn_dup+0x7f/0xa0 [ 637.641916][T10567] sysfs_do_create_link_sd+0x124/0x140 [ 637.641942][T10567] sysfs_create_link+0x61/0xc0 [ 637.641963][T10567] device_add+0x62c/0x1a70 [ 637.641992][T10567] ? __pfx_device_add+0x10/0x10 [ 637.642016][T10567] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 637.642041][T10567] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 637.642070][T10567] wiphy_register+0x1c9c/0x2850 [ 637.642102][T10567] ? netdev_run_todo+0x864/0x1320 [ 637.642126][T10567] ? __dev_printk+0x260/0x270 [ 637.642151][T10567] ? __pfx_wiphy_register+0x10/0x10 [ 637.642195][T10567] ieee80211_register_hw+0x24ac/0x4140 [ 637.642234][T10567] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 637.642264][T10567] ? find_held_lock+0x2b/0x80 [ 637.642288][T10567] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 637.642317][T10567] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 637.642345][T10567] ? __hrtimer_setup+0x176/0x280 [ 637.642368][T10567] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 637.642404][T10567] ? trace_kmalloc+0x2b/0xd0 [ 637.642424][T10567] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 637.642448][T10567] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 637.642469][T10567] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 637.642491][T10567] ? __asan_memcpy+0x3c/0x60 [ 637.642528][T10567] hwsim_new_radio_nl+0xb51/0x12c0 [ 637.642556][T10567] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 637.642586][T10567] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 637.642619][T10567] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 637.642659][T10567] genl_family_rcv_msg_doit+0x206/0x2f0 [ 637.642691][T10567] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 637.642730][T10567] ? bpf_lsm_capable+0x9/0x10 [ 637.642754][T10567] ? security_capable+0x7e/0x260 [ 637.642782][T10567] ? ns_capable+0xd7/0x110 [ 637.642807][T10567] genl_rcv_msg+0x55c/0x800 [ 637.642830][T10567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 637.642847][T10567] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 637.642879][T10567] netlink_rcv_skb+0x155/0x420 [ 637.642908][T10567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 637.642926][T10567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 637.642964][T10567] ? netlink_deliver_tap+0x1ae/0xd30 [ 637.642993][T10567] genl_rcv+0x28/0x40 [ 637.643018][T10567] netlink_unicast+0x58d/0x850 [ 637.643048][T10567] ? __pfx_netlink_unicast+0x10/0x10 [ 637.643072][T10567] ? __build_skb_around+0x278/0x3b0 [ 637.643112][T10567] netlink_sendmsg+0x8d1/0xdd0 [ 637.643146][T10567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.643183][T10567] ____sys_sendmsg+0xa98/0xc70 [ 637.643210][T10567] ? copy_msghdr_from_user+0x10a/0x160 [ 637.643229][T10567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 637.643257][T10567] ? __pfx_futex_wake_mark+0x10/0x10 [ 637.643279][T10567] ___sys_sendmsg+0x134/0x1d0 [ 637.643296][T10567] ? futex_private_hash_put+0x176/0x300 [ 637.643324][T10567] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.643342][T10567] ? __lock_acquire+0x622/0x1c90 [ 637.643404][T10567] __sys_sendmsg+0x16d/0x220 [ 637.643425][T10567] ? __pfx___sys_sendmsg+0x10/0x10 [ 637.643446][T10567] ? __x64_sys_futex+0x1e0/0x4c0 [ 637.643478][T10567] do_syscall_64+0xcd/0x4c0 [ 637.643515][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.643535][T10567] RIP: 0033:0x7f8cf918e9a9 [ 637.643551][T10567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.643570][T10567] RSP: 002b:00007f8cfa075038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.643589][T10567] RAX: ffffffffffffffda RBX: 00007f8cf93b5fa0 RCX: 00007f8cf918e9a9 [ 637.643602][T10567] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 637.643613][T10567] RBP: 00007f8cf9210d69 R08: 0000000000000000 R09: 0000000000000000 [ 637.643624][T10567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.643635][T10567] R13: 0000000000000000 R14: 00007f8cf93b5fa0 R15: 00007fffd1ab3618 [ 637.643658][T10567] [ 638.294247][T10577] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.1102'. [ 638.308879][T10577] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' [ 638.319549][T10577] CPU: 0 UID: 0 PID: 10577 Comm: syz.4.1102 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 638.319567][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 638.319574][T10577] Call Trace: [ 638.319579][T10577] [ 638.319583][T10577] dump_stack_lvl+0x16c/0x1f0 [ 638.319603][T10577] sysfs_warn_dup+0x7f/0xa0 [ 638.319617][T10577] sysfs_do_create_link_sd+0x124/0x140 [ 638.319633][T10577] sysfs_create_link+0x61/0xc0 [ 638.319646][T10577] device_add+0x62c/0x1a70 [ 638.319667][T10577] ? __pfx_device_add+0x10/0x10 [ 638.319684][T10577] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 638.319700][T10577] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 638.319719][T10577] wiphy_register+0x1c9c/0x2850 [ 638.319735][T10577] ? netdev_run_todo+0x864/0x1320 [ 638.319750][T10577] ? __dev_printk+0x260/0x270 [ 638.319764][T10577] ? __pfx_wiphy_register+0x10/0x10 [ 638.319787][T10577] ieee80211_register_hw+0x24ac/0x4140 [ 638.319808][T10577] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 638.319825][T10577] ? find_held_lock+0x2b/0x80 [ 638.319840][T10577] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 638.319853][T10577] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 638.319870][T10577] ? __hrtimer_setup+0x176/0x280 [ 638.319883][T10577] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 638.319904][T10577] ? trace_kmalloc+0x2b/0xd0 [ 638.319916][T10577] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 638.319928][T10577] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 638.319940][T10577] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 638.319953][T10577] ? __asan_memcpy+0x3c/0x60 [ 638.319971][T10577] hwsim_new_radio_nl+0xb51/0x12c0 [ 638.319985][T10577] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 638.320003][T10577] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 638.320022][T10577] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 638.320043][T10577] genl_family_rcv_msg_doit+0x206/0x2f0 [ 638.320061][T10577] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 638.320083][T10577] ? bpf_lsm_capable+0x9/0x10 [ 638.320098][T10577] ? security_capable+0x7e/0x260 [ 638.320115][T10577] ? ns_capable+0xd7/0x110 [ 638.320129][T10577] genl_rcv_msg+0x55c/0x800 [ 638.320141][T10577] ? __pfx_genl_rcv_msg+0x10/0x10 [ 638.320151][T10577] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 638.320169][T10577] netlink_rcv_skb+0x155/0x420 [ 638.320184][T10577] ? __pfx_genl_rcv_msg+0x10/0x10 [ 638.320195][T10577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 638.320217][T10577] ? netlink_deliver_tap+0x1ae/0xd30 [ 638.320242][T10577] genl_rcv+0x28/0x40 [ 638.320265][T10577] netlink_unicast+0x58d/0x850 [ 638.320296][T10577] ? __pfx_netlink_unicast+0x10/0x10 [ 638.320316][T10577] ? __build_skb_around+0x278/0x3b0 [ 638.320339][T10577] netlink_sendmsg+0x8d1/0xdd0 [ 638.320358][T10577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.320380][T10577] ____sys_sendmsg+0xa98/0xc70 [ 638.320399][T10577] ? copy_msghdr_from_user+0x10a/0x160 [ 638.320413][T10577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 638.320437][T10577] ___sys_sendmsg+0x134/0x1d0 [ 638.320450][T10577] ? futex_private_hash_put+0x176/0x300 [ 638.320467][T10577] ? __pfx____sys_sendmsg+0x10/0x10 [ 638.320479][T10577] ? __lock_acquire+0x622/0x1c90 [ 638.320514][T10577] __sys_sendmsg+0x16d/0x220 [ 638.320527][T10577] ? __pfx___sys_sendmsg+0x10/0x10 [ 638.320540][T10577] ? __x64_sys_futex+0x1e0/0x4c0 [ 638.320562][T10577] do_syscall_64+0xcd/0x4c0 [ 638.320577][T10577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.320589][T10577] RIP: 0033:0x7fa99f38e9a9 [ 638.320599][T10577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.320612][T10577] RSP: 002b:00007fa9a024f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.320624][T10577] RAX: ffffffffffffffda RBX: 00007fa99f5b5fa0 RCX: 00007fa99f38e9a9 [ 638.320631][T10577] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000007 [ 638.320637][T10577] RBP: 00007fa99f410d69 R08: 0000000000000000 R09: 0000000000000000 [ 638.320644][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.320650][T10577] R13: 0000000000000000 R14: 00007fa99f5b5fa0 R15: 00007ffd9a79dc18 [ 638.320663][T10577] [ 639.463967][T10595] 9pnet_fd: Insufficient options for proto=fd [ 640.365277][T10605] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 640.371921][T10605] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 640.501649][T10605] vhci_hcd vhci_hcd.0: Device attached [ 640.534961][T10601] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 640.541620][T10601] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 640.550882][T10601] vhci_hcd vhci_hcd.0: Device attached [ 640.681698][ T9] vhci_hcd: vhci_device speed not set [ 640.755064][ T9] usb 35-1: new full-speed USB device number 7 using vhci_hcd [ 641.751641][T10610] vhci_hcd: connection closed [ 641.751887][ T36] vhci_hcd: stop threads [ 641.921615][ T36] vhci_hcd: release socket [ 641.926298][T10607] vhci_hcd: connection reset by peer [ 641.926316][ T36] vhci_hcd: disconnect device [ 641.953197][ T36] vhci_hcd: stop threads [ 641.957478][ T36] vhci_hcd: release socket [ 642.041708][ T36] vhci_hcd: disconnect device [ 642.467116][T10632] 9pnet_fd: Insufficient options for proto=fd [ 643.761580][ T30] audit: type=1326 audit(1753866411.495:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 643.881516][ T30] audit: type=1326 audit(1753866411.495:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 643.906471][ T30] audit: type=1326 audit(1753866411.495:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 643.932504][ T30] audit: type=1326 audit(1753866411.495:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 643.969246][T10632] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 643.975880][T10632] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 643.993817][ T30] audit: type=1326 audit(1753866411.495:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 644.082080][T10638] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 644.088733][T10638] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 644.127497][ T30] audit: type=1326 audit(1753866411.495:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 644.158532][T10632] vhci_hcd vhci_hcd.0: Device attached [ 644.205015][T10638] vhci_hcd vhci_hcd.0: Device attached [ 644.231894][ T30] audit: type=1326 audit(1753866411.505:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 644.259738][ T30] audit: type=1326 audit(1753866411.505:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 644.329568][ T30] audit: type=1326 audit(1753866411.505:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 644.331701][ T5876] vhci_hcd: vhci_device speed not set [ 644.358580][ T30] audit: type=1326 audit(1753866411.505:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe58e9a9 code=0x7ffc0000 [ 644.881659][T10654] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 644.888320][T10654] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 644.898096][T10654] vhci_hcd vhci_hcd.0: Device attached [ 645.045344][ T5876] usb 33-1: new full-speed USB device number 10 using vhci_hcd [ 645.096648][T10658] vhci_hcd: connection closed [ 645.137376][ T3489] vhci_hcd: stop threads [ 645.194747][ T3489] vhci_hcd: release socket [ 645.200582][ T3489] vhci_hcd: disconnect device [ 645.772648][T10643] vhci_hcd: connection closed [ 645.772859][ T2997] vhci_hcd: stop threads [ 645.782894][ T2997] vhci_hcd: release socket [ 645.787435][ T2997] vhci_hcd: disconnect device [ 645.851571][ T9] vhci_hcd: vhci_device speed not set [ 645.991752][T10642] vhci_hcd: connection reset by peer [ 646.023619][ T2997] vhci_hcd: stop threads [ 646.042067][ T2997] vhci_hcd: release socket [ 646.089436][ T2997] vhci_hcd: disconnect device [ 650.182466][ T5876] vhci_hcd: vhci_device speed not set [ 664.583368][T10858] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 664.589938][T10858] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 664.633491][T10865] 9pnet_fd: Insufficient options for proto=fd [ 664.644789][T10858] vhci_hcd vhci_hcd.0: Device attached [ 664.942094][ T5941] usb 41-1: new low-speed USB device number 9 using vhci_hcd [ 666.058104][T10860] vhci_hcd: connection reset by peer [ 666.383086][T10867] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 666.389739][T10867] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 666.404042][ T6832] vhci_hcd: stop threads [ 666.408353][ T6832] vhci_hcd: release socket [ 666.415645][T10865] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 666.422279][T10865] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 666.466284][ T6832] vhci_hcd: disconnect device [ 666.481359][T10867] vhci_hcd vhci_hcd.0: Device attached [ 666.979136][T10865] vhci_hcd vhci_hcd.0: Device attached [ 667.228835][ T9] usb 35-2: new low-speed USB device number 8 using vhci_hcd [ 667.596301][T10874] vhci_hcd: connection closed [ 667.596571][ T3518] vhci_hcd: stop threads [ 667.606276][ T3518] vhci_hcd: release socket [ 667.612986][ T3518] vhci_hcd: disconnect device [ 667.618760][T10878] vhci_hcd: connection reset by peer [ 667.677575][ T2997] vhci_hcd: stop threads [ 667.685740][ T2997] vhci_hcd: release socket [ 667.696952][ T2997] vhci_hcd: disconnect device [ 670.585163][ T5941] vhci_hcd: vhci_device speed not set [ 672.411620][ T9] vhci_hcd: vhci_device speed not set [ 673.501523][T10961] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1188'. [ 673.653179][T10961] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.1188'. [ 673.703144][T10961] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' [ 673.745070][T10961] CPU: 1 UID: 0 PID: 10961 Comm: syz.4.1188 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 673.745105][T10961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 673.745116][T10961] Call Trace: [ 673.745123][T10961] [ 673.745131][T10961] dump_stack_lvl+0x16c/0x1f0 [ 673.745160][T10961] sysfs_warn_dup+0x7f/0xa0 [ 673.745184][T10961] sysfs_do_create_link_sd+0x124/0x140 [ 673.745209][T10961] sysfs_create_link+0x61/0xc0 [ 673.745231][T10961] device_add+0x62c/0x1a70 [ 673.745262][T10961] ? __pfx_device_add+0x10/0x10 [ 673.745286][T10961] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 673.745312][T10961] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 673.745340][T10961] wiphy_register+0x1c9c/0x2850 [ 673.745365][T10961] ? netdev_run_todo+0x864/0x1320 [ 673.745388][T10961] ? __dev_printk+0x260/0x270 [ 673.745412][T10961] ? __pfx_wiphy_register+0x10/0x10 [ 673.745453][T10961] ieee80211_register_hw+0x24ac/0x4140 [ 673.745487][T10961] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 673.745515][T10961] ? find_held_lock+0x2b/0x80 [ 673.745538][T10961] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 673.745562][T10961] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 673.745590][T10961] ? __hrtimer_setup+0x176/0x280 [ 673.745612][T10961] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 673.745647][T10961] ? trace_kmalloc+0x2b/0xd0 [ 673.745667][T10961] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 673.745686][T10961] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 673.745705][T10961] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 673.745726][T10961] ? __asan_memcpy+0x3c/0x60 [ 673.745754][T10961] hwsim_new_radio_nl+0xb51/0x12c0 [ 673.745778][T10961] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 673.745806][T10961] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 673.745836][T10961] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 673.745871][T10961] genl_family_rcv_msg_doit+0x206/0x2f0 [ 673.745907][T10961] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 673.745943][T10961] ? bpf_lsm_capable+0x9/0x10 [ 673.745966][T10961] ? security_capable+0x7e/0x260 [ 673.745995][T10961] ? ns_capable+0xd7/0x110 [ 673.746020][T10961] genl_rcv_msg+0x55c/0x800 [ 673.746040][T10961] ? __pfx_genl_rcv_msg+0x10/0x10 [ 673.746059][T10961] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 673.746089][T10961] netlink_rcv_skb+0x155/0x420 [ 673.746118][T10961] ? __pfx_genl_rcv_msg+0x10/0x10 [ 673.746134][T10961] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 673.746171][T10961] ? netlink_deliver_tap+0x1ae/0xd30 [ 673.746204][T10961] genl_rcv+0x28/0x40 [ 673.746228][T10961] netlink_unicast+0x58d/0x850 [ 673.746257][T10961] ? __pfx_netlink_unicast+0x10/0x10 [ 673.746281][T10961] ? __build_skb_around+0x278/0x3b0 [ 673.746317][T10961] netlink_sendmsg+0x8d1/0xdd0 [ 673.746346][T10961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.746379][T10961] ____sys_sendmsg+0xa98/0xc70 [ 673.746405][T10961] ? copy_msghdr_from_user+0x10a/0x160 [ 673.746425][T10961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.746456][T10961] ? __pfx_futex_wake_mark+0x10/0x10 [ 673.746478][T10961] ___sys_sendmsg+0x134/0x1d0 [ 673.746497][T10961] ? futex_private_hash_put+0x176/0x300 [ 673.746523][T10961] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.746542][T10961] ? __lock_acquire+0x622/0x1c90 [ 673.746599][T10961] __sys_sendmsg+0x16d/0x220 [ 673.746620][T10961] ? __pfx___sys_sendmsg+0x10/0x10 [ 673.746640][T10961] ? __x64_sys_futex+0x1e0/0x4c0 [ 673.746671][T10961] do_syscall_64+0xcd/0x4c0 [ 673.746693][T10961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.746711][T10961] RIP: 0033:0x7fa99f38e9a9 [ 673.746726][T10961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.746742][T10961] RSP: 002b:00007fa9a024f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.746762][T10961] RAX: ffffffffffffffda RBX: 00007fa99f5b5fa0 RCX: 00007fa99f38e9a9 [ 673.746773][T10961] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 673.746783][T10961] RBP: 00007fa99f410d69 R08: 0000000000000000 R09: 0000000000000000 [ 673.746793][T10961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.746803][T10961] R13: 0000000000000000 R14: 00007fa99f5b5fa0 R15: 00007ffd9a79dc18 [ 673.746827][T10961] [ 679.303077][T11009] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1200'. [ 679.358316][T11009] binder: BINDER_SET_CONTEXT_MGR already set [ 679.364478][T11009] binder: 11008:11009 ioctl 4018620d 2000000002c0 returned -16 [ 679.383704][T11009] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.1200'. [ 679.411340][T11009] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' [ 679.436155][T11009] CPU: 0 UID: 0 PID: 11009 Comm: syz.3.1200 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 679.436185][T11009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 679.436199][T11009] Call Trace: [ 679.436205][T11009] [ 679.436213][T11009] dump_stack_lvl+0x16c/0x1f0 [ 679.436241][T11009] sysfs_warn_dup+0x7f/0xa0 [ 679.436265][T11009] sysfs_do_create_link_sd+0x124/0x140 [ 679.436290][T11009] sysfs_create_link+0x61/0xc0 [ 679.436315][T11009] device_add+0x62c/0x1a70 [ 679.436346][T11009] ? __pfx_device_add+0x10/0x10 [ 679.436372][T11009] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 679.436397][T11009] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 679.436427][T11009] wiphy_register+0x1c9c/0x2850 [ 679.436453][T11009] ? netdev_run_todo+0x864/0x1320 [ 679.436478][T11009] ? __dev_printk+0x260/0x270 [ 679.436503][T11009] ? __pfx_wiphy_register+0x10/0x10 [ 679.436544][T11009] ieee80211_register_hw+0x24ac/0x4140 [ 679.436581][T11009] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 679.436611][T11009] ? find_held_lock+0x2b/0x80 [ 679.436637][T11009] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 679.436662][T11009] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 679.436690][T11009] ? __hrtimer_setup+0x176/0x280 [ 679.436713][T11009] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 679.436750][T11009] ? trace_kmalloc+0x2b/0xd0 [ 679.436770][T11009] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 679.436796][T11009] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 679.436817][T11009] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 679.436840][T11009] ? __asan_memcpy+0x3c/0x60 [ 679.436871][T11009] hwsim_new_radio_nl+0xb51/0x12c0 [ 679.436896][T11009] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 679.436926][T11009] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 679.436957][T11009] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 679.436993][T11009] genl_family_rcv_msg_doit+0x206/0x2f0 [ 679.437025][T11009] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 679.437062][T11009] ? bpf_lsm_capable+0x9/0x10 [ 679.437086][T11009] ? security_capable+0x7e/0x260 [ 679.437116][T11009] ? ns_capable+0xd7/0x110 [ 679.437140][T11009] genl_rcv_msg+0x55c/0x800 [ 679.437160][T11009] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.437181][T11009] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 679.437213][T11009] netlink_rcv_skb+0x155/0x420 [ 679.437239][T11009] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.437257][T11009] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 679.437295][T11009] ? netlink_deliver_tap+0x1ae/0xd30 [ 679.437324][T11009] genl_rcv+0x28/0x40 [ 679.437349][T11009] netlink_unicast+0x58d/0x850 [ 679.437381][T11009] ? __pfx_netlink_unicast+0x10/0x10 [ 679.437406][T11009] ? __build_skb_around+0x278/0x3b0 [ 679.437442][T11009] netlink_sendmsg+0x8d1/0xdd0 [ 679.437472][T11009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.437509][T11009] ____sys_sendmsg+0xa98/0xc70 [ 679.437537][T11009] ? copy_msghdr_from_user+0x10a/0x160 [ 679.437559][T11009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.437599][T11009] ___sys_sendmsg+0x134/0x1d0 [ 679.437619][T11009] ? futex_private_hash_put+0x176/0x300 [ 679.437647][T11009] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.437666][T11009] ? __lock_acquire+0x622/0x1c90 [ 679.437728][T11009] __sys_sendmsg+0x16d/0x220 [ 679.437750][T11009] ? __pfx___sys_sendmsg+0x10/0x10 [ 679.437771][T11009] ? __x64_sys_futex+0x1e0/0x4c0 [ 679.437809][T11009] do_syscall_64+0xcd/0x4c0 [ 679.437835][T11009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.437854][T11009] RIP: 0033:0x7f8cf918e9a9 [ 679.437871][T11009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.437891][T11009] RSP: 002b:00007f8cfa075038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.437911][T11009] RAX: ffffffffffffffda RBX: 00007f8cf93b5fa0 RCX: 00007f8cf918e9a9 [ 679.437924][T11009] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 679.437936][T11009] RBP: 00007f8cf9210d69 R08: 0000000000000000 R09: 0000000000000000 [ 679.437947][T11009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.437959][T11009] R13: 0000000000000000 R14: 00007f8cf93b5fa0 R15: 00007fffd1ab3618 [ 679.437985][T11009] [ 680.665792][T11026] 9pnet_fd: Insufficient options for proto=fd [ 680.817916][T11029] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 680.824564][T11029] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 680.837050][T11029] vhci_hcd vhci_hcd.0: Device attached [ 681.121845][ T24] vhci_hcd: vhci_device speed not set [ 681.252729][ T24] usb 33-1: new full-speed USB device number 11 using vhci_hcd [ 682.063496][T11029] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 682.070128][T11029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 682.133511][T11029] vhci_hcd vhci_hcd.0: Device attached [ 682.164275][T11032] vhci_hcd: connection reset by peer [ 682.170064][T11037] vhci_hcd: connection closed [ 682.171524][ T3518] vhci_hcd: stop threads [ 682.180412][ T3518] vhci_hcd: release socket [ 682.184982][ T3518] vhci_hcd: disconnect device [ 682.247165][ T3518] vhci_hcd: stop threads [ 682.307778][ T3518] vhci_hcd: release socket [ 682.333726][ T3518] vhci_hcd: disconnect device [ 685.462260][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.468665][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.651946][ T24] vhci_hcd: vhci_device speed not set [ 691.191272][T11129] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1228'. [ 691.215000][T11129] binder: BINDER_SET_CONTEXT_MGR already set [ 691.230537][T11129] binder: 11128:11129 ioctl 4018620d 2000000002c0 returned -16 [ 693.271647][T11152] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 693.278240][T11152] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 693.293862][T11152] vhci_hcd vhci_hcd.0: Device attached [ 693.321851][T11156] vhci_hcd: connection closed [ 693.338415][ T999] vhci_hcd: stop threads [ 693.361700][ T999] vhci_hcd: release socket [ 693.427444][ T999] vhci_hcd: disconnect device [ 693.468743][T11161] netlink: 'syz.4.1236': attribute type 20 has an invalid length. [ 693.527563][ T24] vhci_hcd: vhci_device speed not set [ 696.942482][T11194] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 696.949050][T11194] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 696.962724][T11194] vhci_hcd vhci_hcd.0: Device attached [ 697.009319][T11194] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 697.015964][T11194] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 697.166230][ T9328] vhci_hcd: vhci_device speed not set [ 697.271530][ T9328] usb 35-1: new full-speed USB device number 9 using vhci_hcd [ 697.307999][T11194] vhci_hcd vhci_hcd.0: Device attached [ 697.655192][T11202] vhci_hcd: connection closed [ 697.664713][T11196] vhci_hcd: connection reset by peer [ 697.671645][ T3555] vhci_hcd: stop threads [ 697.726952][ T3555] vhci_hcd: release socket [ 697.744031][ T3555] vhci_hcd: disconnect device [ 697.761187][ T3555] vhci_hcd: stop threads [ 697.771440][ T3555] vhci_hcd: release socket [ 697.783614][ T3555] vhci_hcd: disconnect device [ 702.431817][ T9328] vhci_hcd: vhci_device speed not set [ 746.825008][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.831299][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 804.031386][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 804.038376][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11219/1:b..l [ 804.046701][ C1] rcu: (detected by 1, t=10502 jiffies, g=36709, q=87 ncpus=2) [ 804.054333][ C1] task:vhost-11217 state:R running task stack:28728 pid:11219 tgid:11216 ppid:5825 task_flags:0x404040 flags:0x00004002 [ 804.068259][ C1] Call Trace: [ 804.071538][ C1] [ 804.074469][ C1] __schedule+0x118d/0x5df0 [ 804.079005][ C1] ? __pfx___schedule+0x10/0x10 [ 804.083869][ C1] ? mark_held_locks+0x49/0x80 [ 804.088645][ C1] preempt_schedule_irq+0x51/0x90 [ 804.093675][ C1] irqentry_exit+0x36/0x90 [ 804.098096][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 804.104079][ C1] RIP: 0010:stack_access_ok+0x16d/0x200 [ 804.109642][ C1] Code: 8b 43 10 49 39 ee 77 29 48 39 e8 76 24 4c 01 e5 48 39 e8 0f 93 c0 49 39 ee 0f 92 c2 21 d0 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e <41> 5f c3 cc cc cc cc 48 83 c4 08 31 c0 5b 5d 41 5c 41 5d 41 5e 41 [ 804.129258][ C1] RSP: 0018:ffffc9000525f7b8 EFLAGS: 00000296 [ 804.135334][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffc90005260000 [ 804.143300][ C1] RDX: ffffc9000525fc01 RSI: ffffc9000525fc50 RDI: ffffc9000525f838 [ 804.151274][ C1] RBP: ffffc9000525fc50 R08: 0000000000000001 R09: 0000000000000000 [ 804.159419][ C1] R10: 0000000000000000 R11: 0000000000085e31 R12: ffffc9000525f888 [ 804.167391][ C1] R13: ffffc9000525f838 R14: ffffc9000525fc78 R15: ffffc90005258000 [ 804.175376][ C1] unwind_next_frame+0x15c5/0x20a0 [ 804.180931][ C1] ? sk_skb_reason_drop+0x136/0x1a0 [ 804.186135][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 804.192296][ C1] arch_stack_walk+0x94/0x100 [ 804.196985][ C1] ? vhost_vsock_handle_tx_kick+0x819/0xc00 [ 804.202886][ C1] stack_trace_save+0x8e/0xc0 [ 804.207567][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 804.212946][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 804.217900][ C1] kasan_save_stack+0x33/0x60 [ 804.222587][ C1] ? kasan_save_stack+0x33/0x60 [ 804.227438][ C1] ? kasan_save_track+0x14/0x30 [ 804.232285][ C1] ? kasan_save_free_info+0x3b/0x60 [ 804.237486][ C1] ? __kasan_slab_free+0x51/0x70 [ 804.242422][ C1] ? kmem_cache_free+0x2d1/0x4d0 [ 804.247366][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 804.252049][ C1] ? sk_skb_reason_drop+0x136/0x1a0 [ 804.257291][ C1] kasan_save_track+0x14/0x30 [ 804.261970][ C1] kasan_save_free_info+0x3b/0x60 [ 804.266997][ C1] __kasan_slab_free+0x51/0x70 [ 804.271758][ C1] kmem_cache_free+0x2d1/0x4d0 [ 804.276503][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 804.281161][ C1] kfree_skbmem+0x1a4/0x1f0 [ 804.285665][ C1] sk_skb_reason_drop+0x136/0x1a0 [ 804.290682][ C1] vhost_vsock_handle_tx_kick+0x819/0xc00 [ 804.296388][ C1] ? __pfx_vhost_vsock_handle_tx_kick+0x10/0x10 [ 804.302611][ C1] ? find_held_lock+0x2b/0x80 [ 804.307281][ C1] ? find_held_lock+0x2b/0x80 [ 804.311938][ C1] ? kcov_remote_start+0x3c9/0x6d0 [ 804.317045][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 804.322229][ C1] vhost_run_work_list+0x18b/0x230 [ 804.327324][ C1] vhost_task_fn+0x165/0x460 [ 804.331900][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 804.336999][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 804.342027][ C1] ? find_held_lock+0x2b/0x80 [ 804.346694][ C1] ? rcu_is_watching+0x12/0xc0 [ 804.351435][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 804.356520][ C1] ret_from_fork+0x5d7/0x6f0 [ 804.361082][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 804.366182][ C1] ret_from_fork_asm+0x1a/0x30 [ 804.370939][ C1] [ 804.373937][ C1] rcu: rcu_preempt kthread starved for 9765 jiffies! g36709 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 804.385113][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 804.395144][ C1] rcu: RCU grace-period kthread stack dump: [ 804.401013][ C1] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 804.414462][ C1] Call Trace: [ 804.417720][ C1] [ 804.420639][ C1] __schedule+0x118d/0x5df0 [ 804.425152][ C1] ? __pfx___schedule+0x10/0x10 [ 804.430001][ C1] ? find_held_lock+0x2b/0x80 [ 804.434692][ C1] ? schedule+0x2d7/0x3a0 [ 804.438997][ C1] schedule+0xe7/0x3a0 [ 804.443043][ C1] schedule_timeout+0x123/0x290 [ 804.447894][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 804.453365][ C1] ? __pfx_process_timeout+0x10/0x10 [ 804.458722][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 804.464513][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 804.469953][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 804.474696][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 804.479961][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 804.485136][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 804.490056][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 804.494900][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 804.500783][ C1] rcu_gp_kthread+0x270/0x380 [ 804.505436][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 804.510608][ C1] ? rcu_is_watching+0x12/0xc0 [ 804.515351][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 804.520527][ C1] ? __kthread_parkme+0x19e/0x250 [ 804.525537][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 804.530710][ C1] kthread+0x3c2/0x780 [ 804.534758][ C1] ? __pfx_kthread+0x10/0x10 [ 804.539336][ C1] ? rcu_is_watching+0x12/0xc0 [ 804.544089][ C1] ? __pfx_kthread+0x10/0x10 [ 804.548656][ C1] ret_from_fork+0x5d7/0x6f0 [ 804.553232][ C1] ? __pfx_kthread+0x10/0x10 [ 804.557810][ C1] ret_from_fork_asm+0x1a/0x30 [ 804.562557][ C1] [ 804.565551][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 804.571850][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 804.583104][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 804.593150][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 804.598761][ C1] Code: 3b 67 02 e9 43 0b 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 6c 1f 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 804.618361][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 804.624490][ C1] RAX: 0000000003eb91f7 RBX: 0000000000000001 RCX: ffffffff8b8aac99 [ 804.632454][ C1] RDX: 0000000000000000 RSI: ffffffff8de0e9cd RDI: ffffffff8c15ed80 [ 804.640992][ C1] RBP: ffffed1003c55488 R08: 0000000000000001 R09: ffffed10170a6645 [ 804.648962][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 804.656912][ C1] R13: ffff88801e2aa440 R14: ffffffff90a7bf50 R15: 0000000000000000 [ 804.664882][ C1] FS: 0000000000000000(0000) GS:ffff888124822000(0000) knlGS:0000000000000000 [ 804.673796][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 804.680369][ C1] CR2: 00007ff3c6453154 CR3: 000000005bad6000 CR4: 00000000003526f0 [ 804.688317][ C1] Call Trace: [ 804.691578][ C1] [ 804.694515][ C1] default_idle+0x13/0x20 [ 804.698836][ C1] default_idle_call+0x6d/0xb0 [ 804.703578][ C1] do_idle+0x391/0x510 [ 804.707719][ C1] ? __pfx_do_idle+0x10/0x10 [ 804.712294][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 804.717473][ C1] cpu_startup_entry+0x4f/0x60 [ 804.722224][ C1] start_secondary+0x21d/0x2b0 [ 804.726974][ C1] ? __pfx_start_secondary+0x10/0x10 [ 804.732247][ C1] common_startup_64+0x13e/0x148 [ 804.737171][ C1] [ 805.467359][T11217] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 805.473919][T11217] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 805.695566][T11217] vhci_hcd vhci_hcd.0: Device attached [ 805.701198][T11221] vhci_hcd: connection closed [ 805.735094][T11233] vhci_hcd: stop threads SYZFAIL: failed to send rpc fd=3 want=23160 sent=0 n=-1 (errno 32: Broken pipe) [ 805.863651][T11233] vhci_hcd: release socket [ 805.921601][T11233] vhci_hcd: disconnect device [ 807.196721][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.315746][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.382010][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.446120][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.594879][ T36] bridge_slave_1: left allmulticast mode [ 807.601708][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 807.601722][ T30] audit: type=1400 audit(1753866576.169:1592): avc: denied { search } for pid=5494 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.604683][ T36] bridge_slave_1: left promiscuous mode [ 807.609031][ T30] audit: type=1400 audit(1753866576.169:1593): avc: denied { search } for pid=5494 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.635416][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.656679][ T30] audit: type=1400 audit(1753866576.169:1594): avc: denied { search } for pid=5494 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.685620][ T30] audit: type=1400 audit(1753866576.179:1595): avc: denied { read } for pid=5494 comm="dhcpcd" name="n100" dev="tmpfs" ino=6627 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 807.708740][ T30] audit: type=1400 audit(1753866576.179:1596): avc: denied { open } for pid=5494 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=6627 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 807.710654][ T36] bridge_slave_0: left allmulticast mode [ 807.737369][ T30] audit: type=1400 audit(1753866576.179:1597): avc: denied { getattr } for pid=5494 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=6627 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 807.737792][ T36] bridge_slave_0: left promiscuous mode [ 807.766821][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.883875][ T36] dvmrp17 (unregistering): left allmulticast mode [ 807.974692][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.985280][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.997939][ T36] bond0 (unregistering): Released all slaves [ 808.073988][ T30] audit: type=1400 audit(1753866576.639:1598): avc: denied { read open } for pid=11238 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 808.115057][ T30] audit: type=1400 audit(1753866576.639:1599): avc: denied { getattr } for pid=11238 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 808.256784][ T30] audit: type=1400 audit(1753866576.829:1600): avc: denied { add_name } for pid=11237 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 808.283453][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.285853][ T30] audit: type=1400 audit(1753866576.829:1601): avc: denied { create } for pid=11237 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 808.289731][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.558068][ T36] hsr_slave_0: left promiscuous mode [ 808.571979][ T36] hsr_slave_1: left promiscuous mode [ 808.582197][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.589830][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.600002][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.609489][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.632167][ T36] veth1_macvtap: left promiscuous mode [ 808.638190][ T36] veth0_macvtap: left promiscuous mode [ 808.644825][ T36] veth1_vlan: left promiscuous mode [ 808.650285][ T36] veth0_vlan: left promiscuous mode [ 809.002922][ T36] team0 (unregistering): Port device team_slave_1 removed [ 809.033189][ T36] team0 (unregistering): Port device team_slave_0 removed [ 809.566993][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.634182][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.684807][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.746006][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.924790][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.013004][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.090194][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.158478][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.349336][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.440057][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.495398][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.595432][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.808238][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.867614][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.936627][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.017651][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.179322][ T36] bridge_slave_1: left allmulticast mode [ 811.189512][ T36] bridge_slave_1: left promiscuous mode [ 811.196451][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.207836][ T36] bridge_slave_0: left allmulticast mode [ 811.213642][ T36] bridge_slave_0: left promiscuous mode [ 811.219369][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.230731][ T36] bridge_slave_1: left allmulticast mode [ 811.236497][ T36] bridge_slave_1: left promiscuous mode [ 811.242538][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.250623][ T36] bridge_slave_0: left allmulticast mode [ 811.258498][ T36] bridge_slave_0: left promiscuous mode [ 811.264281][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.274281][ T36] bridge_slave_1: left allmulticast mode [ 811.279916][ T36] bridge_slave_1: left promiscuous mode [ 811.286528][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.295479][ T36] bridge_slave_0: left allmulticast mode [ 811.301121][ T36] bridge_slave_0: left promiscuous mode [ 811.307041][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.316802][ T36] bridge_slave_1: left allmulticast mode [ 811.323520][ T36] bridge_slave_1: left promiscuous mode [ 811.329915][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.339489][ T36] bridge_slave_0: left allmulticast mode [ 811.345872][ T36] bridge_slave_0: left promiscuous mode [ 811.351930][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.525812][ T36] dvmrp17 (unregistering): left allmulticast mode [ 811.646785][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.657428][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.667041][ T36] bond0 (unregistering): Released all slaves [ 811.749634][ T36] dvmrp17 (unregistering): left allmulticast mode [ 811.858052][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.868552][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.878913][ T36] bond0 (unregistering): Released all slaves [ 811.963837][ T36] dvmrp17 (unregistering): left allmulticast mode [ 812.094786][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.106124][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.115990][ T36] bond0 (unregistering): Released all slaves [ 812.202961][ T36] dvmrp17 (unregistering): left allmulticast mode [ 812.318794][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.330466][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.341290][ T36] bond0 (unregistering): Released all slaves [ 813.410244][ T36] hsr_slave_0: left promiscuous mode [ 813.419704][ T36] hsr_slave_1: left promiscuous mode [ 813.425748][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.435849][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.445160][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.454556][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.467222][ T36] hsr_slave_0: left promiscuous mode [ 813.474213][ T36] hsr_slave_1: left promiscuous mode [ 813.480110][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.488052][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.496082][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.506202][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.522389][ T36] hsr_slave_0: left promiscuous mode [ 813.528408][ T36] hsr_slave_1: left promiscuous mode [ 813.542116][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.549557][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.559217][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.566906][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.578830][ T36] hsr_slave_0: left promiscuous mode [ 813.584878][ T36] hsr_slave_1: left promiscuous mode [ 813.590503][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.597969][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.605902][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.613328][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.646138][ T36] veth1_macvtap: left promiscuous mode [ 813.651740][ T36] veth0_macvtap: left promiscuous mode [ 813.657260][ T36] veth1_vlan: left promiscuous mode [ 813.662648][ T36] veth0_vlan: left promiscuous mode [ 813.668682][ T36] veth1_macvtap: left promiscuous mode [ 813.674808][ T36] veth0_macvtap: left promiscuous mode [ 813.680348][ T36] veth1_vlan: left promiscuous mode [ 813.685877][ T36] veth0_vlan: left promiscuous mode [ 813.693744][ T36] veth1_macvtap: left promiscuous mode [ 813.699265][ T36] veth0_macvtap: left promiscuous mode [ 813.704979][ T36] veth1_vlan: left promiscuous mode [ 813.710235][ T36] veth0_vlan: left promiscuous mode [ 813.716819][ T36] veth1_macvtap: left promiscuous mode [ 813.722343][ T36] veth0_macvtap: left promiscuous mode [ 813.727877][ T36] veth1_vlan: left promiscuous mode [ 813.733431][ T36] veth0_vlan: left promiscuous mode