last executing test programs: 36m53.135724811s ago: executing program 32 (id=266): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) close_range(r0, r1, 0x0) 36m23.464277396s ago: executing program 33 (id=404): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) landlock_restrict_self(r0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) creat(&(0x7f0000001380)='./file0\x00', 0x12c) 36m7.494520858s ago: executing program 0 (id=715): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_kthread_stop\x00', r0}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r2) 36m7.286194748s ago: executing program 0 (id=717): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/74, 0x4a}, 0x2}, {{0x0, 0xfffffffffffffdca, &(0x7f0000001d40), 0x16, &(0x7f0000001ec0)=""/129, 0x87}, 0x8}], 0x2, 0x1832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000001400)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207", 0x31, 0x6d91fb6102dc910c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 36m7.132151117s ago: executing program 0 (id=719): r0 = socket(0x1, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 36m7.042835453s ago: executing program 0 (id=720): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 36m6.899181573s ago: executing program 0 (id=722): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x1000) 36m6.77026104s ago: executing program 0 (id=724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=r2}, 0x20) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r5, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20) 36m6.311614616s ago: executing program 34 (id=724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=r2}, 0x20) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r5, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20) 35m32.942196965s ago: executing program 7 (id=1004): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 35m32.31992225s ago: executing program 7 (id=1010): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) 35m32.154285533s ago: executing program 7 (id=1012): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r3, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) close_range(r1, 0xffffffffffffffff, 0x0) 35m31.910541386s ago: executing program 7 (id=1016): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 35m31.804233888s ago: executing program 7 (id=1018): socket(0x2a, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) close(0x4) 35m30.589789218s ago: executing program 7 (id=1024): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) setresgid(0x0, 0xee01, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) 35m29.922517648s ago: executing program 35 (id=1024): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) setresgid(0x0, 0xee01, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) 34m39.566340774s ago: executing program 6 (id=1380): unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00') ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x8000000000000005, 0x400000000000009, 0x1, 0xd, 0x800000010000, 0x4, 0x20004002004c2, 0x0, 0x654, 0x20000cfa6, 0x3ffffc, 0xfffffffffffffffd, 0x47fffffff, 0x20000000006, 0xffff, 0xfffffffffffffff7], 0x100000, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 34m39.335560234s ago: executing program 6 (id=1381): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 34m39.005702608s ago: executing program 6 (id=1382): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x1000, 0x476, 0x0, 0x7f, 0x3, 0xffffffffffffffff, 0x6}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34m38.658965681s ago: executing program 6 (id=1384): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x2002c2, 0x2) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 34m38.574199987s ago: executing program 6 (id=1385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x2e, 0x0, @void}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800010000000009000000b7080000000000007b"], 0x0, 0x3}, 0x94) 34m37.337882675s ago: executing program 6 (id=1393): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0xfffd, 0xbf, 0x0, 0x0, 0x2}, {0x2e6, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x0, 0xf800000, 0x4000}}, 0xe8) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 34m37.197452915s ago: executing program 36 (id=1393): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0xfffd, 0xbf, 0x0, 0x0, 0x2}, {0x2e6, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x0, 0xf800000, 0x4000}}, 0xe8) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 33m21.203885711s ago: executing program 5 (id=1944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="e7cc2b6cfed20ac8", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) 33m21.072728555s ago: executing program 5 (id=1945): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) syz_clone(0xd0c0080, 0x0, 0x11, 0x0, 0x0, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 33m20.745864222s ago: executing program 5 (id=1949): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x91, 0x1080a422012f758f}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000540)={0x0, 0x59c4, 0x8, 0x1000, 0x200007cc}, &(0x7f0000000040)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/219, 0xdb}], 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 33m20.654168457s ago: executing program 5 (id=1951): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x180020, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 33m20.325707018s ago: executing program 5 (id=1956): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x2) 33m19.377749849s ago: executing program 5 (id=1967): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000100)=""/141, 0x26, 0x8d, 0x1, 0x7}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x8201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x9, 0x9, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 33m4.225643379s ago: executing program 37 (id=1967): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000100)=""/141, 0x26, 0x8d, 0x1, 0x7}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x8201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x9, 0x9, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 30m41.154447767s ago: executing program 1 (id=2809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) getgroups(0x0, &(0x7f0000000dc0)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x7, r2, 0xcaa2, 0x4) 30m39.305767852s ago: executing program 1 (id=2815): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0xee01, 0xee01, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 30m36.939006149s ago: executing program 1 (id=2826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xfff3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 30m36.345743992s ago: executing program 1 (id=2827): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) mount$nfs(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x91014, 0x0) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=""/35) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) 30m35.975161378s ago: executing program 1 (id=2829): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) 30m35.845018337s ago: executing program 1 (id=2830): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f0000000c80)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x40000cc, 0xc000) 30m35.316818245s ago: executing program 38 (id=2830): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f0000000c80)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x40000cc, 0xc000) 14.408771916s ago: executing program 3 (id=8059): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000001c0)=""/88) r4 = socket(0x1d, 0x2, 0x6) socket(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d5001020301090239000100001647"], 0x0) 13.025562039s ago: executing program 8 (id=8063): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/stat\x00') getdents64(r0, &(0x7f0000000440)=""/38, 0x26) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) getdents(r0, 0xffffffffffffffff, 0x5a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 11.353217578s ago: executing program 8 (id=8067): socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000100)=0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) syz_genetlink_get_family_id$l2tp(0x0, r4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2020, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) 11.055629859s ago: executing program 4 (id=8069): socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000100)=0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000), 0x0, 0x1}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) syz_genetlink_get_family_id$l2tp(0x0, r4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2020, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) 9.875670198s ago: executing program 4 (id=8071): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffffff, 0x3}, 0x0) r2 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000001c0), 0x2) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) shmctl$IPC_RMID(r2, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000140)={0x3, {0x6, 0x10001, 0x3ff, 0x100}}) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r5, &(0x7f0000000200)={0x1, 0x20, 0x1, 0x20, 0x8}, 0x48) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = dup(r6) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000280)={{{@in=@broadcast, @in=@remote}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x40, 0xff, 0x0, 0xffeffffe}]}) 9.835933736s ago: executing program 3 (id=8072): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) timer_create(0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c, 0x0}, 0xc000) sendmmsg$inet6(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001b40)={0xa, 0x4e21, 0x80003, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x60bc}, 0x1c, 0x0}}], 0x2, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) flock(0xffffffffffffffff, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$video4linux(&(0x7f00000000c0), 0x4, 0x40440) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0xa0b0}, 0x3}) 9.755767136s ago: executing program 9 (id=8073): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$netlink(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x7133}) r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x890d, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) gettid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000024c0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x655, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) 8.43722296s ago: executing program 9 (id=8074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket(0x2, 0x3, 0x6) bind$inet(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000001010400000000000000000200100024000280140001800800"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004803000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x6c, 0x8000, 0x820}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, 0x0}, 0x20) 7.693743538s ago: executing program 8 (id=8075): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5bde05"], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) r3 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) 7.506971946s ago: executing program 9 (id=8076): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x2200000, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fsopen(&(0x7f00000000c0)='hpfs\x00', 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 7.268324079s ago: executing program 3 (id=8077): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x20000000009, &(0x7f0000006680)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="57ea0000", @ANYBLOB="110025bd7000000000002500000008000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202020000050008000000000008003500030000000a00"], 0x58}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000005400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000053c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="08010000", @ANYRESDEC=r2, @ANYBLOB="02012bbd7000fbdbdf253a00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0xc000}, 0x20044804) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='fib6_table_lookup\x00', r2, 0x0, 0xe}, 0x7) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x415, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@overlay={0x1000001, 0x3, 0x4, 0x8, 0x5, {}, {0x3, 0x1, 0x2, 0x0, 0xa, 0x4, '\r\rS4'}, 0x2, 0x3, {}, 0x8}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1158c1, 0x0) 7.079402228s ago: executing program 2 (id=8078): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/stat\x00') getdents64(r0, &(0x7f0000000440)=""/38, 0x26) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) getdents(r0, 0xffffffffffffffff, 0x5a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6.80169504s ago: executing program 4 (id=8079): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5bde05"], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) r3 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) 6.075176733s ago: executing program 8 (id=8080): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$netlink(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x7133}) r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x890d, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) gettid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000024c0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x655, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) 5.896010349s ago: executing program 9 (id=8081): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc090}, 0x2000004) socket$alg(0x26, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) r3 = dup(r2) r4 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setgroups(0x4000000000000190, &(0x7f0000000080)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = eventfd2(0xff, 0x80801) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000440)={0x10000000}) read$eventfd(r6, &(0x7f00000001c0), 0x8) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{0x0, 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000002c0)={0x15, 0xefd6, 0x6, 0x4, 0x1, 0x1}) write(r8, &(0x7f0000000000)="2e000400010002", 0x7) syz_emit_ethernet(0x0, 0x0, 0x0) 5.295229997s ago: executing program 3 (id=8082): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1, 0x8}, {0x10}, {0xe}}, [@TCA_STAB={0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 5.282180181s ago: executing program 2 (id=8083): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xee8c0000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0xf567, 0x100, 0x0, 0x34d}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r4, r4) read$FUSE(r5, &(0x7f0000002b00)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 5.192345957s ago: executing program 4 (id=8084): socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000100)=0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) syz_genetlink_get_family_id$l2tp(0x0, r4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2020, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) 4.661282712s ago: executing program 8 (id=8085): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x0, &(0x7f0000000200)}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000000002, 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x2000000000000153, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, r6, 0x0, 0xfe00}]) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') ppoll(&(0x7f0000000040)=[{r5, 0x830}], 0x1, 0x0, 0x0, 0x0) r7 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r8 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086201, &(0x7f0000000080)=0x2) 4.039825534s ago: executing program 2 (id=8086): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket(0x2, 0x3, 0x6) bind$inet(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000001010400000000000000000200100024000280140001800800"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004803000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x6c, 0x8000, 0x820}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, 0x0}, 0x20) 3.286786105s ago: executing program 3 (id=8087): r0 = gettid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ptrace$peekuser(0x3, r0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000000)="f6", 0x1, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000001840)={0x0, 0x3}, 0x8) unshare(0x8000000) timer_create(0x0, 0x0, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.039654579s ago: executing program 2 (id=8088): r0 = gettid() r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$setownex(r1, 0xf, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000001714000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008050) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0x44800}, 0x0) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x3) open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r4, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r8, 0x24, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9, r9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) flock(r4, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 3.015263037s ago: executing program 9 (id=8089): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket(0x2, 0x3, 0x6) bind$inet(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000001010400000000000000000200100024000280140001800800"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004803000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x6c, 0x8000, 0x820}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, 0x0}, 0x20) 2.043272732s ago: executing program 3 (id=8090): socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000010000009500200c00"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x501000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89ef, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getcwd(&(0x7f0000000140)=""/115, 0x73) r5 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/d\n\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280", @ANYRES32], 0x3c}}, 0x0) 2.042119408s ago: executing program 9 (id=8091): syz_usb_connect(0x3, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r0 = gettid() rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x31) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000280)={0x20, r8, &(0x7f0000000480)=[{0x1, 0x1}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x200000b9}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r9, 0x4}, 0x50) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') preadv(r10, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xb6, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_DELFLOWTABLE={0x50, 0x18, 0xa, 0x40b, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x408d0}, 0x0) 1.905840022s ago: executing program 4 (id=8092): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7cb, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r7, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4, "b0d5b301d1f8337291bd9c59c55dc059097d659cfe0320cadd0901cd3b14689e1c77bcf683e35c68f0455930ab19ce80052e1b4d478fc7c371bd292e05a810", 0x3a}, 0x80, 0x0}}], 0x1, 0x48094) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x4e22, 0x1, @mcast2}}}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) 1.719684697s ago: executing program 2 (id=8093): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/stat\x00') getdents64(r0, &(0x7f0000000440)=""/38, 0x26) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) getdents(r0, 0xffffffffffffffff, 0x5a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 681.651997ms ago: executing program 2 (id=8094): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5bde05"], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) r3 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) 598.780931ms ago: executing program 8 (id=8095): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$netlink(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x7133}) r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x890d, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) gettid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000024c0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x655, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) 0s ago: executing program 4 (id=8096): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x5000, 0x8, 0xffffffffffffffff, 0x3}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000380)) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x3}) r2 = socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(r3, 0x409, 0x1) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, 0x0, &(0x7f0000000100), 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r2, 0x0, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC, @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b8768", @ANYRESHEX=0x0, @ANYRESDEC, @ANYBLOB="000000000200"/28], 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) socket$netlink(0x10, 0x3, 0x5) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x1a870, @dev={0xfe, 0x80, '\x00', 0x10}, 0x6}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x7505, 0x1f49, 0x0, &(0x7f0000000340), 0x8) io_submit(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES16=r5, @ANYRESOCT=0x0], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x4000814) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000461ea784066a8c34b85535abb1204287f029f14c41879e7e8ca77fd7784c4d630ff06e61f7d01ee5806bdd24ea39b791b1c93026580244b3142f53beb86be41c22785573792686def88b317e071cf0ff6e1ae0a256fb395ba1173b1fa2661cfbbfa481694549242de180bd78de6cfc9b0fd22fb306b27dee5bb4c75362ecc0363d"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) kernel console output (not intermixed with test programs): 86.328533][ T3991] ? __pfx_netlink_unicast+0x10/0x10 [ 2186.328553][ T3991] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2186.328581][ T3991] netlink_sendmsg+0x8d1/0xdd0 [ 2186.328605][ T3991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2186.328634][ T3991] ____sys_sendmsg+0xa95/0xc70 [ 2186.328657][ T3991] ? copy_msghdr_from_user+0x10a/0x160 [ 2186.328675][ T3991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2186.328707][ T3991] ___sys_sendmsg+0x134/0x1d0 [ 2186.328726][ T3991] ? __pfx____sys_sendmsg+0x10/0x10 [ 2186.328771][ T3991] __sys_sendmsg+0x16d/0x220 [ 2186.328789][ T3991] ? __pfx___sys_sendmsg+0x10/0x10 [ 2186.328816][ T3991] ? __secure_computing+0x28e/0x3b0 [ 2186.328841][ T3991] do_syscall_64+0xcd/0x4e0 [ 2186.328861][ T3991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.328876][ T3991] RIP: 0033:0x7fb08158eec9 [ 2186.328890][ T3991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2186.328904][ T3991] RSP: 002b:00007fb0824b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2186.328920][ T3991] RAX: ffffffffffffffda RBX: 00007fb0817e6180 RCX: 00007fb08158eec9 [ 2186.328930][ T3991] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 2186.328939][ T3991] RBP: 00007fb081611f91 R08: 0000000000000000 R09: 0000000000000000 [ 2186.328949][ T3991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2186.328959][ T3991] R13: 00007fb0817e6218 R14: 00007fb0817e6180 R15: 00007fff679c94b8 [ 2186.328981][ T3991] [ 2187.837932][ T4014] Invalid ELF header magic: != ELF [ 2188.281467][ T4022] netlink: 5 bytes leftover after parsing attributes in process `syz.9.7749'. [ 2189.282080][ T4037] netlink: 5 bytes leftover after parsing attributes in process `syz.9.7751'. [ 2189.721985][ T4053] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7756'. [ 2189.854982][ T4053] 0猉功D: renamed from 31猉功D (while UP) [ 2189.966060][ T4057] UBIFS error (pid: 4057): cannot open "c:::", error -22 [ 2189.970722][ T4057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7758'. [ 2190.350504][ T4053] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 2190.393470][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 2190.394028][ T30] audit: type=1326 audit(1758662058.107:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.7757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2190.426387][ T30] audit: type=1326 audit(1758662058.107:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.7757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2190.516215][ T30] audit: type=1326 audit(1758662058.117:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.7757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2190.544059][ T30] audit: type=1326 audit(1758662058.117:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.7757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2190.616989][ T4058] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2190.624570][ T4058] CPU: 1 UID: 0 PID: 4058 Comm: syz.3.7757 Not tainted syzkaller #0 PREEMPT(full) [ 2190.624596][ T4058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2190.624608][ T4058] Call Trace: [ 2190.624615][ T4058] [ 2190.624623][ T4058] dump_stack_lvl+0x16c/0x1f0 [ 2190.624653][ T4058] sysfs_warn_dup+0x7f/0xa0 [ 2190.624684][ T4058] sysfs_do_create_link_sd+0x124/0x140 [ 2190.624714][ T4058] sysfs_create_link+0x61/0xc0 [ 2190.624739][ T4058] device_add+0x62c/0x1aa0 [ 2190.624770][ T4058] ? __pfx_device_add+0x10/0x10 [ 2190.624797][ T4058] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2190.624818][ T4058] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2190.624840][ T4058] wiphy_register+0x1df4/0x29f0 [ 2190.624858][ T4058] ? netdev_run_todo+0x864/0x1320 [ 2190.624878][ T4058] ? __dev_printk+0x270/0x270 [ 2190.624899][ T4058] ? __pfx_wiphy_register+0x10/0x10 [ 2190.624924][ T4058] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2190.624946][ T4058] ieee80211_register_hw+0x2546/0x4120 [ 2190.624974][ T4058] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2190.624996][ T4058] ? find_held_lock+0x2b/0x80 [ 2190.625016][ T4058] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2190.625033][ T4058] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2190.625050][ T4058] ? __hrtimer_setup+0x176/0x280 [ 2190.625068][ T4058] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2190.625101][ T4058] ? trace_kmalloc+0x2b/0xd0 [ 2190.625118][ T4058] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2190.625135][ T4058] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2190.625155][ T4058] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2190.625178][ T4058] ? __asan_memcpy+0x3c/0x60 [ 2190.625203][ T4058] hwsim_new_radio_nl+0xb51/0x12c0 [ 2190.625227][ T4058] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2190.625255][ T4058] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2190.625278][ T4058] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2190.625304][ T4058] genl_family_rcv_msg_doit+0x206/0x2f0 [ 2190.625328][ T4058] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2190.625356][ T4058] ? bpf_lsm_capable+0x9/0x10 [ 2190.625376][ T4058] ? security_capable+0x7e/0x260 [ 2190.625394][ T4058] ? ns_capable+0xd7/0x110 [ 2190.625414][ T4058] genl_rcv_msg+0x55c/0x800 [ 2190.625437][ T4058] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2190.625459][ T4058] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2190.625488][ T4058] netlink_rcv_skb+0x158/0x420 [ 2190.625507][ T4058] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2190.625529][ T4058] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2190.625563][ T4058] genl_rcv+0x28/0x40 [ 2190.625581][ T4058] netlink_unicast+0x5a7/0x870 [ 2190.625603][ T4058] ? __pfx_netlink_unicast+0x10/0x10 [ 2190.625622][ T4058] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2190.625648][ T4058] netlink_sendmsg+0x8d1/0xdd0 [ 2190.625675][ T4058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2190.625703][ T4058] ____sys_sendmsg+0xa95/0xc70 [ 2190.625725][ T4058] ? copy_msghdr_from_user+0x10a/0x160 [ 2190.625743][ T4058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2190.625775][ T4058] ___sys_sendmsg+0x134/0x1d0 [ 2190.625795][ T4058] ? __pfx____sys_sendmsg+0x10/0x10 [ 2190.625844][ T4058] __sys_sendmsg+0x16d/0x220 [ 2190.625864][ T4058] ? __pfx___sys_sendmsg+0x10/0x10 [ 2190.625892][ T4058] ? __secure_computing+0x28e/0x3b0 [ 2190.625917][ T4058] do_syscall_64+0xcd/0x4e0 [ 2190.625939][ T4058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2190.625954][ T4058] RIP: 0033:0x7fc4a738eec9 [ 2190.625967][ T4058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2190.625981][ T4058] RSP: 002b:00007fc4a821d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2190.625995][ T4058] RAX: ffffffffffffffda RBX: 00007fc4a75e6180 RCX: 00007fc4a738eec9 [ 2190.626006][ T4058] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 2190.626015][ T4058] RBP: 00007fc4a7411f91 R08: 0000000000000000 R09: 0000000000000000 [ 2190.626025][ T4058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2190.626034][ T4058] R13: 00007fc4a75e6218 R14: 00007fc4a75e6180 R15: 00007ffc6d868308 [ 2190.626055][ T4058] [ 2191.235959][ T30] audit: type=1326 audit(1758662058.117:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.7757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2191.680174][ T30] audit: type=1326 audit(1758662058.117:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.7757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2191.799237][ T30] audit: type=1326 audit(1758662058.117:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.7757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2191.825023][ T30] audit: type=1326 audit(1758662058.117:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.7757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2191.905537][ T30] audit: type=1326 audit(1758662058.117:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.7757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2192.015970][ T30] audit: type=1326 audit(1758662058.787:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.7757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2192.991581][ T4092] netlink: 5 bytes leftover after parsing attributes in process `syz.8.7764'. [ 2193.010846][ T4092] 1猉功D: renamed from 30猉功D (while UP) [ 2193.049780][ T4092] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 2193.079442][ T4094] bridge5: entered promiscuous mode [ 2193.261520][ T4106] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7769'. [ 2193.282778][ T4106] 1猉功D: renamed from 30猉功D (while UP) [ 2193.293852][ T4106] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 2193.905705][ T4120] netlink: 5 bytes leftover after parsing attributes in process `syz.8.7772'. [ 2193.915311][ T4120] 0猉功D: renamed from 31猉功D (while UP) [ 2193.941096][ T4120] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 2194.251558][ T4128] overlayfs: failed to clone upperpath [ 2194.328796][ T4130] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7774'. [ 2195.509908][ T4142] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7777'. [ 2195.541007][ T4142] 1猉功D: renamed from 30猉功D (while UP) [ 2195.602965][ T4142] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 2195.687056][ T4141] netlink: 'syz.8.7775': attribute type 21 has an invalid length. [ 2195.695463][ T4141] netlink: 156 bytes leftover after parsing attributes in process `syz.8.7775'. [ 2195.714154][ T4141] netlink: 'syz.8.7775': attribute type 21 has an invalid length. [ 2195.723004][ T4141] netlink: 156 bytes leftover after parsing attributes in process `syz.8.7775'. [ 2195.744890][ T4147] netlink: 'syz.4.7779': attribute type 3 has an invalid length. [ 2195.777347][ T4147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7779'. [ 2196.193719][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 2196.193737][ T30] audit: type=1326 audit(1758662063.907:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4144 comm="syz.9.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2196.229382][ T30] audit: type=1326 audit(1758662063.947:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4144 comm="syz.9.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2196.261915][ T30] audit: type=1326 audit(1758662063.977:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4144 comm="syz.9.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2196.289500][ T30] audit: type=1326 audit(1758662064.007:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4144 comm="syz.9.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2196.361448][ T30] audit: type=1326 audit(1758662064.077:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4144 comm="syz.9.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2196.402847][ T30] audit: type=1326 audit(1758662064.117:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4144 comm="syz.9.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2196.711193][ T4167] Invalid ELF header magic: != ELF [ 2197.859737][ T4179] netlink: 5 bytes leftover after parsing attributes in process `syz.8.7784'. [ 2197.910193][ T4179] 1猉功D: renamed from 30猉功D (while UP) [ 2197.990177][ T4179] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 2198.017663][ T4185] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7786'. [ 2198.040466][ T4185] 0猉功D: renamed from 31猉功D (while UP) [ 2198.052649][ T4185] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 2198.536824][ T4193] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7788'. [ 2198.546166][ T4193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7788'. [ 2199.248628][ T4205] __nla_validate_parse: 1 callbacks suppressed [ 2199.248646][ T4205] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7790'. [ 2199.264173][ T4205] 1猉功D: renamed from 30猉功D (while UP) [ 2199.289920][ T4205] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 2201.531779][ T4239] netlink: 'syz.2.7797': attribute type 4 has an invalid length. [ 2201.622022][ T4243] netlink: 'syz.2.7797': attribute type 4 has an invalid length. [ 2201.748518][ T4243] trusted_key: encrypted_key: insufficient parameters specified [ 2201.916490][ T30] audit: type=1326 audit(1758662069.627:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.4.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2201.953433][ T30] audit: type=1326 audit(1758662069.637:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.4.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2201.995942][ T30] audit: type=1326 audit(1758662069.657:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.4.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2202.031398][ T30] audit: type=1326 audit(1758662069.657:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.4.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2202.062105][ T4252] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2202.079265][ T4252] CPU: 0 UID: 0 PID: 4252 Comm: syz.4.7801 Not tainted syzkaller #0 PREEMPT(full) [ 2202.079294][ T4252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2202.079307][ T4252] Call Trace: [ 2202.079314][ T4252] [ 2202.079323][ T4252] dump_stack_lvl+0x16c/0x1f0 [ 2202.079352][ T4252] sysfs_warn_dup+0x7f/0xa0 [ 2202.079379][ T4252] sysfs_do_create_link_sd+0x124/0x140 [ 2202.079402][ T4252] sysfs_create_link+0x61/0xc0 [ 2202.079424][ T4252] device_add+0x62c/0x1aa0 [ 2202.079453][ T4252] ? __pfx_device_add+0x10/0x10 [ 2202.079477][ T4252] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2202.079499][ T4252] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2202.079526][ T4252] wiphy_register+0x1df4/0x29f0 [ 2202.079550][ T4252] ? netdev_run_todo+0x864/0x1320 [ 2202.079577][ T4252] ? __dev_printk+0x270/0x270 [ 2202.079604][ T4252] ? __pfx_wiphy_register+0x10/0x10 [ 2202.079645][ T4252] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2202.079676][ T4252] ieee80211_register_hw+0x2546/0x4120 [ 2202.079715][ T4252] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2202.079743][ T4252] ? find_held_lock+0x2b/0x80 [ 2202.079765][ T4252] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2202.079785][ T4252] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2202.079805][ T4252] ? __hrtimer_setup+0x176/0x280 [ 2202.079826][ T4252] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2202.079865][ T4252] ? trace_kmalloc+0x2b/0xd0 [ 2202.079885][ T4252] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2202.079904][ T4252] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2202.079928][ T4252] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2202.079953][ T4252] ? __asan_memcpy+0x3c/0x60 [ 2202.079982][ T4252] hwsim_new_radio_nl+0xb51/0x12c0 [ 2202.080011][ T4252] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2202.080044][ T4252] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2202.080072][ T4252] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2202.080107][ T4252] genl_family_rcv_msg_doit+0x206/0x2f0 [ 2202.080136][ T4252] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2202.080173][ T4252] ? bpf_lsm_capable+0x9/0x10 [ 2202.080197][ T4252] ? security_capable+0x7e/0x260 [ 2202.080219][ T4252] ? ns_capable+0xd7/0x110 [ 2202.080247][ T4252] genl_rcv_msg+0x55c/0x800 [ 2202.080281][ T4252] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2202.080309][ T4252] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2202.080336][ T4252] ? mark_held_locks+0x49/0x80 [ 2202.080361][ T4252] ? irqentry_exit+0x3b/0x90 [ 2202.080387][ T4252] netlink_rcv_skb+0x158/0x420 [ 2202.080411][ T4252] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2202.080436][ T4252] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2202.080471][ T4252] ? netlink_deliver_tap+0x1ae/0xd30 [ 2202.080492][ T4252] ? selinux_netlink_send+0x578/0x830 [ 2202.080515][ T4252] ? is_vmalloc_addr+0x86/0xa0 [ 2202.080538][ T4252] genl_rcv+0x28/0x40 [ 2202.080560][ T4252] netlink_unicast+0x5a7/0x870 [ 2202.080589][ T4252] ? __pfx_netlink_unicast+0x10/0x10 [ 2202.080611][ T4252] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2202.080651][ T4252] netlink_sendmsg+0x8d1/0xdd0 [ 2202.080681][ T4252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2202.080719][ T4252] ____sys_sendmsg+0xa95/0xc70 [ 2202.080751][ T4252] ? copy_msghdr_from_user+0x10a/0x160 [ 2202.080776][ T4252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2202.080818][ T4252] ___sys_sendmsg+0x134/0x1d0 [ 2202.080844][ T4252] ? __pfx____sys_sendmsg+0x10/0x10 [ 2202.080905][ T4252] __sys_sendmsg+0x16d/0x220 [ 2202.080930][ T4252] ? __pfx___sys_sendmsg+0x10/0x10 [ 2202.080965][ T4252] ? __secure_computing+0x28e/0x3b0 [ 2202.080997][ T4252] do_syscall_64+0xcd/0x4e0 [ 2202.081025][ T4252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2202.081043][ T4252] RIP: 0033:0x7fafb958eec9 [ 2202.081058][ T4252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2202.081072][ T4252] RSP: 002b:00007fafba40e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2202.081090][ T4252] RAX: ffffffffffffffda RBX: 00007fafb97e6180 RCX: 00007fafb958eec9 [ 2202.081103][ T4252] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 2202.081115][ T4252] RBP: 00007fafb9611f91 R08: 0000000000000000 R09: 0000000000000000 [ 2202.081125][ T4252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2202.081134][ T4252] R13: 00007fafb97e6218 R14: 00007fafb97e6180 R15: 00007ffc003f7bf8 [ 2202.081157][ T4252] [ 2202.559039][ T30] audit: type=1326 audit(1758662069.657:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.4.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2202.582558][ T30] audit: type=1326 audit(1758662069.657:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.4.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2202.606553][ T30] audit: type=1326 audit(1758662069.657:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.4.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2202.630017][ T30] audit: type=1326 audit(1758662069.657:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.4.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2202.653843][ T30] audit: type=1326 audit(1758662069.657:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.4.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2203.122296][ T30] audit: type=1326 audit(1758662070.837:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.4.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2203.742295][ T4263] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7804'. [ 2203.772211][ T4263] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7804'. [ 2203.802370][ T4264] netlink: 'syz.9.7804': attribute type 21 has an invalid length. [ 2203.811310][ T4264] netlink: 128 bytes leftover after parsing attributes in process `syz.9.7804'. [ 2204.033318][ T4266] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7803'. [ 2204.042401][ T4266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7803'. [ 2204.051455][ T4266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7803'. [ 2204.380194][ T4264] netlink: 'syz.9.7804': attribute type 5 has an invalid length. [ 2204.388217][ T4264] netlink: 'syz.9.7804': attribute type 6 has an invalid length. [ 2204.396166][ T4264] netlink: 3 bytes leftover after parsing attributes in process `syz.9.7804'. [ 2204.800970][ T4283] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7807'. [ 2205.756501][ T4295] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7820'. [ 2205.766004][ T4295] 0猉功D: renamed from 31猉功D (while UP) [ 2205.785599][ T4295] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 2205.947364][ T4302] netlink: 'syz.8.7811': attribute type 13 has an invalid length. [ 2206.029749][ T4301] macvlan3: entered promiscuous mode [ 2206.035161][ T4301] macvlan3: entered allmulticast mode [ 2206.043545][ T4301] bond10: entered promiscuous mode [ 2206.049708][ T4301] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 2206.092623][ T4301] bond10: left promiscuous mode [ 2206.466855][ T3662] page_pool_release_retry() stalled pool shutdown: id 111, 40 inflight 785 sec [ 2206.528925][ T4310] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7812'. [ 2206.714964][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2207.538967][ T4302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2207.553556][ T4302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2207.668106][ T4302] veth1_vlan: left promiscuous mode [ 2207.761524][ T4302] veth1_vlan: entered promiscuous mode [ 2207.848419][ T4302] tipc: Resetting bearer [ 2207.908200][ T4302] veth1_macvtap: left promiscuous mode [ 2207.934352][ T4302] veth1_macvtap: entered promiscuous mode [ 2207.994392][ T4302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2208.023993][ T4302] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 2208.036453][ T4302] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 2208.044957][ T4302] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2208.065222][ T4302] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2208.115705][ T4302] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2208.152128][ T4302] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2208.292005][ T4302] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2208.406077][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 2208.406095][ T30] audit: type=1326 audit(1758662076.117:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.3.7815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2208.460745][ T30] audit: type=1326 audit(1758662076.157:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.3.7815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2208.512978][ T30] audit: type=1326 audit(1758662076.157:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.3.7815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2208.602282][ T30] audit: type=1326 audit(1758662076.157:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.3.7815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2208.638414][ T30] audit: type=1326 audit(1758662076.157:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.3.7815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2208.692119][ T30] audit: type=1326 audit(1758662076.157:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.3.7815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2208.722106][ T30] audit: type=1326 audit(1758662076.157:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.3.7815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2208.752537][ T4302] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2208.762632][ T30] audit: type=1326 audit(1758662076.157:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.3.7815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2209.040759][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2209.196964][ T4310] 0猉功D: renamed from 31猉功D (while UP) [ 2209.262711][ T4310] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 2209.311931][ T4315] netlink: 60 bytes leftover after parsing attributes in process `syz.9.7813'. [ 2209.384218][T24363] syz!: Port: 1 Link ACTIVE [ 2209.396352][ T12] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2209.404556][ T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2209.443199][ T12] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2209.464421][ T12] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2209.502405][ T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2209.526347][ T12] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2209.567006][ T12] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2209.575206][ T12] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2209.593770][ T12] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2209.710256][ T12] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2209.730942][ T12] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2209.751449][ T12] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2209.815232][ T4339] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7818'. [ 2209.824486][ T4339] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7818'. [ 2209.833629][ T4339] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7818'. [ 2210.217943][ T4326] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2210.225587][ T4326] CPU: 1 UID: 0 PID: 4326 Comm: syz.3.7815 Not tainted syzkaller #0 PREEMPT(full) [ 2210.225615][ T4326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2210.225627][ T4326] Call Trace: [ 2210.225634][ T4326] [ 2210.225643][ T4326] dump_stack_lvl+0x16c/0x1f0 [ 2210.225674][ T4326] sysfs_warn_dup+0x7f/0xa0 [ 2210.225700][ T4326] sysfs_do_create_link_sd+0x124/0x140 [ 2210.225729][ T4326] sysfs_create_link+0x61/0xc0 [ 2210.225755][ T4326] device_add+0x62c/0x1aa0 [ 2210.225786][ T4326] ? __pfx_device_add+0x10/0x10 [ 2210.225812][ T4326] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2210.225837][ T4326] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2210.225866][ T4326] wiphy_register+0x1df4/0x29f0 [ 2210.225890][ T4326] ? netdev_run_todo+0x864/0x1320 [ 2210.225916][ T4326] ? __dev_printk+0x270/0x270 [ 2210.225943][ T4326] ? __pfx_wiphy_register+0x10/0x10 [ 2210.225976][ T4326] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2210.226005][ T4326] ieee80211_register_hw+0x2546/0x4120 [ 2210.226041][ T4326] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2210.226071][ T4326] ? find_held_lock+0x2b/0x80 [ 2210.226095][ T4326] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2210.226117][ T4326] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2210.226139][ T4326] ? __hrtimer_setup+0x176/0x280 [ 2210.226163][ T4326] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2210.226206][ T4326] ? trace_kmalloc+0x2b/0xd0 [ 2210.226228][ T4326] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2210.226250][ T4326] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2210.226277][ T4326] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2210.226306][ T4326] ? __asan_memcpy+0x3c/0x60 [ 2210.226337][ T4326] hwsim_new_radio_nl+0xb51/0x12c0 [ 2210.226368][ T4326] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2210.226406][ T4326] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2210.226436][ T4326] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2210.226470][ T4326] genl_family_rcv_msg_doit+0x206/0x2f0 [ 2210.226500][ T4326] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2210.226538][ T4326] ? bpf_lsm_capable+0x9/0x10 [ 2210.226564][ T4326] ? security_capable+0x7e/0x260 [ 2210.226594][ T4326] ? ns_capable+0xd7/0x110 [ 2210.226619][ T4326] genl_rcv_msg+0x55c/0x800 [ 2210.226650][ T4326] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2210.226679][ T4326] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2210.226718][ T4326] netlink_rcv_skb+0x158/0x420 [ 2210.226745][ T4326] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2210.226776][ T4326] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2210.226814][ T4326] ? netlink_deliver_tap+0x1ae/0xd30 [ 2210.226844][ T4326] genl_rcv+0x28/0x40 [ 2210.226869][ T4326] netlink_unicast+0x5a7/0x870 [ 2210.226897][ T4326] ? __pfx_netlink_unicast+0x10/0x10 [ 2210.226922][ T4326] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2210.226955][ T4326] netlink_sendmsg+0x8d1/0xdd0 [ 2210.226985][ T4326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2210.227021][ T4326] ____sys_sendmsg+0xa95/0xc70 [ 2210.227050][ T4326] ? copy_msghdr_from_user+0x10a/0x160 [ 2210.227072][ T4326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2210.227115][ T4326] ___sys_sendmsg+0x134/0x1d0 [ 2210.227140][ T4326] ? __pfx____sys_sendmsg+0x10/0x10 [ 2210.227199][ T4326] __sys_sendmsg+0x16d/0x220 [ 2210.227222][ T4326] ? __pfx___sys_sendmsg+0x10/0x10 [ 2210.227257][ T4326] ? __secure_computing+0x28e/0x3b0 [ 2210.227290][ T4326] do_syscall_64+0xcd/0x4e0 [ 2210.227318][ T4326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2210.227338][ T4326] RIP: 0033:0x7fc4a738eec9 [ 2210.227355][ T4326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2210.227373][ T4326] RSP: 002b:00007fc4a821d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2210.227392][ T4326] RAX: ffffffffffffffda RBX: 00007fc4a75e6180 RCX: 00007fc4a738eec9 [ 2210.227404][ T4326] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 2210.227416][ T4326] RBP: 00007fc4a7411f91 R08: 0000000000000000 R09: 0000000000000000 [ 2210.227427][ T4326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2210.227438][ T4326] R13: 00007fc4a75e6218 R14: 00007fc4a75e6180 R15: 00007ffc6d868308 [ 2210.227465][ T4326] [ 2211.542694][ T30] audit: type=1326 audit(1758662079.257:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4341 comm="syz.9.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2211.574106][ T4353] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7822'. [ 2211.612994][ T4353] 1猉功D: renamed from 30猉功D (while UP) [ 2211.619413][ T30] audit: type=1326 audit(1758662079.287:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4341 comm="syz.9.7819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2211.669502][ T4353] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 2211.943772][ T4354] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2212.026551][ T4354] CPU: 1 UID: 0 PID: 4354 Comm: syz.9.7819 Not tainted syzkaller #0 PREEMPT(full) [ 2212.026580][ T4354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2212.026592][ T4354] Call Trace: [ 2212.026599][ T4354] [ 2212.026607][ T4354] dump_stack_lvl+0x16c/0x1f0 [ 2212.026638][ T4354] sysfs_warn_dup+0x7f/0xa0 [ 2212.026663][ T4354] sysfs_do_create_link_sd+0x124/0x140 [ 2212.026689][ T4354] sysfs_create_link+0x61/0xc0 [ 2212.026713][ T4354] device_add+0x62c/0x1aa0 [ 2212.026743][ T4354] ? __pfx_device_add+0x10/0x10 [ 2212.026769][ T4354] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2212.026792][ T4354] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2212.026819][ T4354] wiphy_register+0x1df4/0x29f0 [ 2212.026843][ T4354] ? netdev_run_todo+0x864/0x1320 [ 2212.026869][ T4354] ? __dev_printk+0x270/0x270 [ 2212.026894][ T4354] ? __pfx_wiphy_register+0x10/0x10 [ 2212.026924][ T4354] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2212.026950][ T4354] ieee80211_register_hw+0x2546/0x4120 [ 2212.026983][ T4354] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2212.027011][ T4354] ? find_held_lock+0x2b/0x80 [ 2212.027033][ T4354] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2212.027055][ T4354] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2212.027078][ T4354] ? __hrtimer_setup+0x176/0x280 [ 2212.027101][ T4354] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2212.027145][ T4354] ? trace_kmalloc+0x2b/0xd0 [ 2212.027168][ T4354] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2212.027190][ T4354] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2212.027218][ T4354] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2212.027247][ T4354] ? __asan_memcpy+0x3c/0x60 [ 2212.027280][ T4354] hwsim_new_radio_nl+0xb51/0x12c0 [ 2212.027311][ T4354] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2212.027348][ T4354] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2212.027386][ T4354] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2212.027424][ T4354] genl_family_rcv_msg_doit+0x206/0x2f0 [ 2212.027456][ T4354] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2212.027501][ T4354] ? genl_rcv_msg+0x670/0x800 [ 2212.027532][ T4354] genl_rcv_msg+0x55c/0x800 [ 2212.027566][ T4354] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2212.027599][ T4354] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2212.027631][ T4354] ? lock_is_held_type+0x57/0x150 [ 2212.027657][ T4354] netlink_rcv_skb+0x158/0x420 [ 2212.027682][ T4354] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2212.027711][ T4354] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2212.027747][ T4354] ? netlink_deliver_tap+0x1ae/0xd30 [ 2212.027769][ T4354] ? selinux_netlink_send+0x578/0x830 [ 2212.027793][ T4354] ? is_vmalloc_addr+0x86/0xa0 [ 2212.027816][ T4354] genl_rcv+0x28/0x40 [ 2212.027841][ T4354] netlink_unicast+0x5a7/0x870 [ 2212.027871][ T4354] ? __pfx_netlink_unicast+0x10/0x10 [ 2212.027907][ T4354] netlink_sendmsg+0x8d1/0xdd0 [ 2212.027937][ T4354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2212.027973][ T4354] ____sys_sendmsg+0xa95/0xc70 [ 2212.028002][ T4354] ? copy_msghdr_from_user+0x10a/0x160 [ 2212.028025][ T4354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2212.028067][ T4354] ___sys_sendmsg+0x134/0x1d0 [ 2212.028092][ T4354] ? __pfx____sys_sendmsg+0x10/0x10 [ 2212.028150][ T4354] __sys_sendmsg+0x16d/0x220 [ 2212.028174][ T4354] ? __pfx___sys_sendmsg+0x10/0x10 [ 2212.028208][ T4354] ? __secure_computing+0x28e/0x3b0 [ 2212.028241][ T4354] do_syscall_64+0xcd/0x4e0 [ 2212.028268][ T4354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2212.028288][ T4354] RIP: 0033:0x7ffaa2d8eec9 [ 2212.028305][ T4354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2212.028322][ T4354] RSP: 002b:00007ffaa3c99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2212.028341][ T4354] RAX: ffffffffffffffda RBX: 00007ffaa2fe6180 RCX: 00007ffaa2d8eec9 [ 2212.028353][ T4354] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 2212.028368][ T4354] RBP: 00007ffaa2e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2212.028380][ T4354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2212.028391][ T4354] R13: 00007ffaa2fe6218 R14: 00007ffaa2fe6180 R15: 00007ffea68c8cb8 [ 2212.028419][ T4354] [ 2212.859036][ T4360] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7823'. [ 2212.875552][ T4372] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7825'. [ 2212.888480][ T4372] 0猉功D: renamed from 31猉功D (while UP) [ 2212.940065][ T4372] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 2213.258535][ T4382] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2213.266469][ T4382] CPU: 0 UID: 0 PID: 4382 Comm: syz.2.7826 Not tainted syzkaller #0 PREEMPT(full) [ 2213.266495][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2213.266507][ T4382] Call Trace: [ 2213.266514][ T4382] [ 2213.266523][ T4382] dump_stack_lvl+0x16c/0x1f0 [ 2213.266553][ T4382] sysfs_warn_dup+0x7f/0xa0 [ 2213.266579][ T4382] sysfs_do_create_link_sd+0x124/0x140 [ 2213.266608][ T4382] sysfs_create_link+0x61/0xc0 [ 2213.266633][ T4382] device_add+0x62c/0x1aa0 [ 2213.266666][ T4382] ? __pfx_device_add+0x10/0x10 [ 2213.266690][ T4382] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2213.266714][ T4382] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2213.266738][ T4382] wiphy_register+0x1df4/0x29f0 [ 2213.266757][ T4382] ? netdev_run_todo+0x864/0x1320 [ 2213.266776][ T4382] ? __dev_printk+0x270/0x270 [ 2213.266798][ T4382] ? __pfx_wiphy_register+0x10/0x10 [ 2213.266824][ T4382] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2213.266847][ T4382] ieee80211_register_hw+0x2546/0x4120 [ 2213.266875][ T4382] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2213.266898][ T4382] ? find_held_lock+0x2b/0x80 [ 2213.266917][ T4382] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2213.266934][ T4382] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2213.266952][ T4382] ? __hrtimer_setup+0x176/0x280 [ 2213.266970][ T4382] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2213.267004][ T4382] ? trace_kmalloc+0x2b/0xd0 [ 2213.267021][ T4382] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2213.267038][ T4382] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2213.267059][ T4382] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2213.267081][ T4382] ? __asan_memcpy+0x3c/0x60 [ 2213.267107][ T4382] hwsim_new_radio_nl+0xb51/0x12c0 [ 2213.267131][ T4382] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2213.267160][ T4382] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2213.267184][ T4382] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2213.267211][ T4382] genl_family_rcv_msg_doit+0x206/0x2f0 [ 2213.267234][ T4382] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2213.267264][ T4382] ? bpf_lsm_capable+0x9/0x10 [ 2213.267284][ T4382] ? security_capable+0x7e/0x260 [ 2213.267303][ T4382] ? ns_capable+0xd7/0x110 [ 2213.267329][ T4382] genl_rcv_msg+0x55c/0x800 [ 2213.267356][ T4382] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2213.267383][ T4382] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2213.267415][ T4382] netlink_rcv_skb+0x158/0x420 [ 2213.267437][ T4382] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2213.267462][ T4382] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2213.267494][ T4382] ? netlink_deliver_tap+0x1ae/0xd30 [ 2213.267517][ T4382] genl_rcv+0x28/0x40 [ 2213.267537][ T4382] netlink_unicast+0x5a7/0x870 [ 2213.267559][ T4382] ? __pfx_netlink_unicast+0x10/0x10 [ 2213.267579][ T4382] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2213.267604][ T4382] netlink_sendmsg+0x8d1/0xdd0 [ 2213.267627][ T4382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2213.267654][ T4382] ____sys_sendmsg+0xa95/0xc70 [ 2213.267677][ T4382] ? copy_msghdr_from_user+0x10a/0x160 [ 2213.267695][ T4382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2213.267727][ T4382] ___sys_sendmsg+0x134/0x1d0 [ 2213.267746][ T4382] ? __pfx____sys_sendmsg+0x10/0x10 [ 2213.267791][ T4382] __sys_sendmsg+0x16d/0x220 [ 2213.267809][ T4382] ? __pfx___sys_sendmsg+0x10/0x10 [ 2213.267836][ T4382] ? __secure_computing+0x28e/0x3b0 [ 2213.267861][ T4382] do_syscall_64+0xcd/0x4e0 [ 2213.267883][ T4382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2213.267898][ T4382] RIP: 0033:0x7f8b4f78eec9 [ 2213.267912][ T4382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2213.267926][ T4382] RSP: 002b:00007f8b4d9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2213.267942][ T4382] RAX: ffffffffffffffda RBX: 00007f8b4f9e6180 RCX: 00007f8b4f78eec9 [ 2213.267951][ T4382] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 2213.267960][ T4382] RBP: 00007f8b4f811f91 R08: 0000000000000000 R09: 0000000000000000 [ 2213.267969][ T4382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2213.267977][ T4382] R13: 00007f8b4f9e6218 R14: 00007f8b4f9e6180 R15: 00007ffc7e372548 [ 2213.267998][ T4382] [ 2213.688095][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 2213.688106][ T30] audit: type=1326 audit(1758662081.407:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.2.7826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2213.742663][ T30] audit: type=1326 audit(1758662081.407:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.2.7826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2213.766725][ T30] audit: type=1326 audit(1758662081.447:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.2.7826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2213.847966][ T30] audit: type=1326 audit(1758662081.447:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.2.7826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2214.011217][ T30] audit: type=1326 audit(1758662081.447:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.2.7826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2214.055236][ T30] audit: type=1326 audit(1758662081.447:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.2.7826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2214.080909][ T30] audit: type=1326 audit(1758662081.447:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.2.7826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2214.121070][ T30] audit: type=1326 audit(1758662081.447:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.2.7826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2214.230003][ T30] audit: type=1326 audit(1758662081.447:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.2.7826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2214.257955][ T30] audit: type=1326 audit(1758662081.457:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.2.7826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2214.586270][ T4400] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7831'. [ 2214.595324][ T4400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7831'. [ 2214.604345][ T4400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7831'. [ 2216.363242][ T4420] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7835'. [ 2216.386990][ T4420] 1猉功D: renamed from 30猉功D (while UP) [ 2216.485833][ T4420] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 2216.604905][ T4426] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7834'. [ 2218.083044][ T4443] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2218.097286][ T4443] CPU: 1 UID: 0 PID: 4443 Comm: syz.2.7839 Not tainted syzkaller #0 PREEMPT(full) [ 2218.097317][ T4443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2218.097330][ T4443] Call Trace: [ 2218.097342][ T4443] [ 2218.097352][ T4443] dump_stack_lvl+0x16c/0x1f0 [ 2218.097383][ T4443] sysfs_warn_dup+0x7f/0xa0 [ 2218.097413][ T4443] sysfs_do_create_link_sd+0x124/0x140 [ 2218.097442][ T4443] sysfs_create_link+0x61/0xc0 [ 2218.097468][ T4443] device_add+0x62c/0x1aa0 [ 2218.097498][ T4443] ? __pfx_device_add+0x10/0x10 [ 2218.097524][ T4443] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2218.097542][ T4443] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2218.097564][ T4443] wiphy_register+0x1df4/0x29f0 [ 2218.097582][ T4443] ? netdev_run_todo+0x864/0x1320 [ 2218.097602][ T4443] ? __dev_printk+0x270/0x270 [ 2218.097622][ T4443] ? __pfx_wiphy_register+0x10/0x10 [ 2218.097649][ T4443] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2218.097671][ T4443] ieee80211_register_hw+0x2546/0x4120 [ 2218.097698][ T4443] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2218.097721][ T4443] ? find_held_lock+0x2b/0x80 [ 2218.097739][ T4443] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2218.097756][ T4443] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2218.097774][ T4443] ? __hrtimer_setup+0x176/0x280 [ 2218.097792][ T4443] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2218.097826][ T4443] ? trace_kmalloc+0x2b/0xd0 [ 2218.097843][ T4443] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2218.097859][ T4443] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2218.097880][ T4443] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2218.097902][ T4443] ? __asan_memcpy+0x3c/0x60 [ 2218.097927][ T4443] hwsim_new_radio_nl+0xb51/0x12c0 [ 2218.097951][ T4443] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2218.097979][ T4443] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2218.098003][ T4443] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2218.098033][ T4443] genl_family_rcv_msg_doit+0x206/0x2f0 [ 2218.098058][ T4443] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2218.098086][ T4443] ? bpf_lsm_capable+0x9/0x10 [ 2218.098106][ T4443] ? security_capable+0x7e/0x260 [ 2218.098125][ T4443] ? ns_capable+0xd7/0x110 [ 2218.098144][ T4443] genl_rcv_msg+0x55c/0x800 [ 2218.098168][ T4443] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2218.098190][ T4443] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2218.098220][ T4443] netlink_rcv_skb+0x158/0x420 [ 2218.098238][ T4443] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2218.098261][ T4443] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2218.098288][ T4443] ? netlink_deliver_tap+0x1ae/0xd30 [ 2218.098310][ T4443] genl_rcv+0x28/0x40 [ 2218.098329][ T4443] netlink_unicast+0x5a7/0x870 [ 2218.098356][ T4443] ? __pfx_netlink_unicast+0x10/0x10 [ 2218.098375][ T4443] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2218.098400][ T4443] netlink_sendmsg+0x8d1/0xdd0 [ 2218.098423][ T4443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2218.098450][ T4443] ____sys_sendmsg+0xa95/0xc70 [ 2218.098475][ T4443] ? copy_msghdr_from_user+0x10a/0x160 [ 2218.098495][ T4443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2218.098532][ T4443] ___sys_sendmsg+0x134/0x1d0 [ 2218.098557][ T4443] ? __pfx____sys_sendmsg+0x10/0x10 [ 2218.098609][ T4443] __sys_sendmsg+0x16d/0x220 [ 2218.098627][ T4443] ? __pfx___sys_sendmsg+0x10/0x10 [ 2218.098653][ T4443] ? __secure_computing+0x28e/0x3b0 [ 2218.098678][ T4443] do_syscall_64+0xcd/0x4e0 [ 2218.098700][ T4443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2218.098715][ T4443] RIP: 0033:0x7f8b4f78eec9 [ 2218.098729][ T4443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2218.098743][ T4443] RSP: 002b:00007f8b4d9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2218.098760][ T4443] RAX: ffffffffffffffda RBX: 00007f8b4f9e6180 RCX: 00007f8b4f78eec9 [ 2218.098770][ T4443] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 2218.098779][ T4443] RBP: 00007f8b4f811f91 R08: 0000000000000000 R09: 0000000000000000 [ 2218.098788][ T4443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2218.098796][ T4443] R13: 00007f8b4f9e6218 R14: 00007f8b4f9e6180 R15: 00007ffc7e372548 [ 2218.098817][ T4443] [ 2218.760927][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 2218.760943][ T30] audit: type=1326 audit(1758662086.437:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.2.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2218.798721][ T30] audit: type=1326 audit(1758662086.437:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.2.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2218.822809][ T30] audit: type=1326 audit(1758662086.507:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.2.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2218.847987][ T30] audit: type=1326 audit(1758662086.507:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.2.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2218.871745][ T30] audit: type=1326 audit(1758662086.507:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.2.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2218.895392][ T30] audit: type=1326 audit(1758662086.507:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.2.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2218.922708][ T30] audit: type=1326 audit(1758662086.517:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.2.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2218.951774][ T30] audit: type=1326 audit(1758662086.517:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.2.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2218.995894][ T30] audit: type=1326 audit(1758662086.517:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.2.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2219.037344][ T30] audit: type=1326 audit(1758662086.517:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.2.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2219.099026][ T4457] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7841'. [ 2219.120351][ T4454] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7837'. [ 2219.548518][ T4468] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7840'. [ 2219.557727][ T4468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7840'. [ 2219.566719][ T4468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7840'. [ 2221.226359][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.236084][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.164963][ T4489] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7847'. [ 2222.603247][ T4493] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7848'. [ 2223.421405][ T4505] netlink: 'syz.9.7851': attribute type 6 has an invalid length. [ 2224.638840][ T4518] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7854'. [ 2224.647958][ T4518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7854'. [ 2224.656976][ T4518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7854'. [ 2225.119818][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7856'. [ 2225.367336][ T4526] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7855'. [ 2225.376518][ T4526] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7855'. [ 2225.385492][ T4526] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7855'. [ 2226.995514][ T4556] overlayfs: failed to clone upperpath [ 2227.261057][ T4559] netlink: 5 bytes leftover after parsing attributes in process `syz.8.7863'. [ 2227.291194][ T4559] 0猉功D: renamed from 31猉功D (while UP) [ 2227.311856][ T4559] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 2227.446440][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2227.446456][ T30] audit: type=1326 audit(1758662095.157:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.3.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2227.571080][ T30] audit: type=1326 audit(1758662095.157:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.3.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2227.614958][ T30] audit: type=1326 audit(1758662095.207:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.3.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2227.659699][ T30] audit: type=1326 audit(1758662095.207:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.3.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2227.703841][ T4565] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2227.723555][ T30] audit: type=1326 audit(1758662095.207:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.3.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2227.799344][ T4565] CPU: 1 UID: 0 PID: 4565 Comm: syz.3.7864 Not tainted syzkaller #0 PREEMPT(full) [ 2227.799372][ T4565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2227.799382][ T4565] Call Trace: [ 2227.799390][ T4565] [ 2227.799397][ T4565] dump_stack_lvl+0x16c/0x1f0 [ 2227.799426][ T4565] sysfs_warn_dup+0x7f/0xa0 [ 2227.799449][ T4565] sysfs_do_create_link_sd+0x124/0x140 [ 2227.799476][ T4565] sysfs_create_link+0x61/0xc0 [ 2227.799499][ T4565] device_add+0x62c/0x1aa0 [ 2227.799528][ T4565] ? __pfx_device_add+0x10/0x10 [ 2227.799552][ T4565] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2227.799576][ T4565] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2227.799604][ T4565] wiphy_register+0x1df4/0x29f0 [ 2227.799629][ T4565] ? netdev_run_todo+0x864/0x1320 [ 2227.799654][ T4565] ? __dev_printk+0x270/0x270 [ 2227.799681][ T4565] ? __pfx_wiphy_register+0x10/0x10 [ 2227.799715][ T4565] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2227.799745][ T4565] ieee80211_register_hw+0x2546/0x4120 [ 2227.799781][ T4565] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2227.799811][ T4565] ? find_held_lock+0x2b/0x80 [ 2227.799835][ T4565] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2227.799858][ T4565] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2227.799880][ T4565] ? __hrtimer_setup+0x176/0x280 [ 2227.799903][ T4565] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2227.799947][ T4565] ? trace_kmalloc+0x2b/0xd0 [ 2227.799969][ T4565] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2227.799991][ T4565] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2227.800019][ T4565] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2227.800048][ T4565] ? __asan_memcpy+0x3c/0x60 [ 2227.800081][ T4565] hwsim_new_radio_nl+0xb51/0x12c0 [ 2227.800112][ T4565] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2227.800149][ T4565] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2227.800179][ T4565] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2227.800218][ T4565] genl_family_rcv_msg_doit+0x206/0x2f0 [ 2227.800248][ T4565] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2227.800293][ T4565] ? bpf_lsm_capable+0x9/0x10 [ 2227.800319][ T4565] ? security_capable+0x7e/0x260 [ 2227.800344][ T4565] ? ns_capable+0xd7/0x110 [ 2227.800371][ T4565] genl_rcv_msg+0x55c/0x800 [ 2227.800405][ T4565] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2227.800434][ T4565] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2227.800475][ T4565] netlink_rcv_skb+0x158/0x420 [ 2227.800500][ T4565] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2227.800528][ T4565] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2227.800564][ T4565] ? netlink_deliver_tap+0x1ae/0xd30 [ 2227.800592][ T4565] genl_rcv+0x28/0x40 [ 2227.800616][ T4565] netlink_unicast+0x5a7/0x870 [ 2227.800645][ T4565] ? __pfx_netlink_unicast+0x10/0x10 [ 2227.800669][ T4565] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2227.800702][ T4565] netlink_sendmsg+0x8d1/0xdd0 [ 2227.800731][ T4565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2227.800767][ T4565] ____sys_sendmsg+0xa95/0xc70 [ 2227.800797][ T4565] ? copy_msghdr_from_user+0x10a/0x160 [ 2227.800820][ T4565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2227.800862][ T4565] ___sys_sendmsg+0x134/0x1d0 [ 2227.800887][ T4565] ? __pfx____sys_sendmsg+0x10/0x10 [ 2227.800945][ T4565] __sys_sendmsg+0x16d/0x220 [ 2227.800969][ T4565] ? __pfx___sys_sendmsg+0x10/0x10 [ 2227.801004][ T4565] ? __secure_computing+0x28e/0x3b0 [ 2227.801038][ T4565] do_syscall_64+0xcd/0x4e0 [ 2227.801065][ T4565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2227.801084][ T4565] RIP: 0033:0x7fc4a738eec9 [ 2227.801102][ T4565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2227.801119][ T4565] RSP: 002b:00007fc4a821d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2227.801138][ T4565] RAX: ffffffffffffffda RBX: 00007fc4a75e6180 RCX: 00007fc4a738eec9 [ 2227.801150][ T4565] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 2227.801162][ T4565] RBP: 00007fc4a7411f91 R08: 0000000000000000 R09: 0000000000000000 [ 2227.801173][ T4565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2227.801185][ T4565] R13: 00007fc4a75e6218 R14: 00007fc4a75e6180 R15: 00007ffc6d868308 [ 2227.801212][ T4565] [ 2228.301726][ T30] audit: type=1326 audit(1758662095.207:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.3.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2228.325492][ T30] audit: type=1326 audit(1758662095.207:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.3.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2228.349209][ T30] audit: type=1326 audit(1758662095.207:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.3.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2228.375302][ T30] audit: type=1326 audit(1758662095.207:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.3.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2228.398777][ T30] audit: type=1326 audit(1758662095.317:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.2.7865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2228.462547][ T4575] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7866'. [ 2228.471831][ T4575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7866'. [ 2228.480835][ T4575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7866'. [ 2228.929260][ T4569] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2228.939268][ T4569] CPU: 0 UID: 0 PID: 4569 Comm: syz.2.7865 Not tainted syzkaller #0 PREEMPT(full) [ 2228.939295][ T4569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2228.939306][ T4569] Call Trace: [ 2228.939313][ T4569] [ 2228.939321][ T4569] dump_stack_lvl+0x16c/0x1f0 [ 2228.939347][ T4569] sysfs_warn_dup+0x7f/0xa0 [ 2228.939373][ T4569] sysfs_do_create_link_sd+0x124/0x140 [ 2228.939398][ T4569] sysfs_create_link+0x61/0xc0 [ 2228.939421][ T4569] device_add+0x62c/0x1aa0 [ 2228.939449][ T4569] ? __pfx_device_add+0x10/0x10 [ 2228.939472][ T4569] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2228.939495][ T4569] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2228.939521][ T4569] wiphy_register+0x1df4/0x29f0 [ 2228.939543][ T4569] ? netdev_run_todo+0x864/0x1320 [ 2228.939566][ T4569] ? __dev_printk+0x270/0x270 [ 2228.939590][ T4569] ? __pfx_wiphy_register+0x10/0x10 [ 2228.939622][ T4569] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2228.939649][ T4569] ieee80211_register_hw+0x2546/0x4120 [ 2228.939683][ T4569] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2228.939710][ T4569] ? find_held_lock+0x2b/0x80 [ 2228.939733][ T4569] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2228.939753][ T4569] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2228.939775][ T4569] ? __hrtimer_setup+0x176/0x280 [ 2228.939796][ T4569] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2228.939837][ T4569] ? trace_kmalloc+0x2b/0xd0 [ 2228.939858][ T4569] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2228.939878][ T4569] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2228.939904][ T4569] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2228.939931][ T4569] ? __asan_memcpy+0x3c/0x60 [ 2228.939961][ T4569] hwsim_new_radio_nl+0xb51/0x12c0 [ 2228.939991][ T4569] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2228.940026][ T4569] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2228.940054][ T4569] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2228.940087][ T4569] genl_family_rcv_msg_doit+0x206/0x2f0 [ 2228.940116][ T4569] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2228.940151][ T4569] ? bpf_lsm_capable+0x9/0x10 [ 2228.940175][ T4569] ? security_capable+0x7e/0x260 [ 2228.940206][ T4569] ? ns_capable+0xd7/0x110 [ 2228.940232][ T4569] genl_rcv_msg+0x55c/0x800 [ 2228.940260][ T4569] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2228.940284][ T4569] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2228.940318][ T4569] netlink_rcv_skb+0x158/0x420 [ 2228.940340][ T4569] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2228.940357][ T4569] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2228.940379][ T4569] ? netlink_deliver_tap+0x1ae/0xd30 [ 2228.940395][ T4569] genl_rcv+0x28/0x40 [ 2228.940409][ T4569] netlink_unicast+0x5a7/0x870 [ 2228.940426][ T4569] ? __pfx_netlink_unicast+0x10/0x10 [ 2228.940441][ T4569] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2228.940462][ T4569] netlink_sendmsg+0x8d1/0xdd0 [ 2228.940479][ T4569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2228.940500][ T4569] ____sys_sendmsg+0xa95/0xc70 [ 2228.940518][ T4569] ? copy_msghdr_from_user+0x10a/0x160 [ 2228.940531][ T4569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2228.940555][ T4569] ___sys_sendmsg+0x134/0x1d0 [ 2228.940570][ T4569] ? __pfx____sys_sendmsg+0x10/0x10 [ 2228.940602][ T4569] __sys_sendmsg+0x16d/0x220 [ 2228.940616][ T4569] ? __pfx___sys_sendmsg+0x10/0x10 [ 2228.940636][ T4569] ? __secure_computing+0x28e/0x3b0 [ 2228.940656][ T4569] do_syscall_64+0xcd/0x4e0 [ 2228.940673][ T4569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2228.940684][ T4569] RIP: 0033:0x7f8b4f78eec9 [ 2228.940694][ T4569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2228.940705][ T4569] RSP: 002b:00007f8b4d9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2228.940716][ T4569] RAX: ffffffffffffffda RBX: 00007f8b4f9e6180 RCX: 00007f8b4f78eec9 [ 2228.940724][ T4569] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 2228.940730][ T4569] RBP: 00007f8b4f811f91 R08: 0000000000000000 R09: 0000000000000000 [ 2228.940737][ T4569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2228.940744][ T4569] R13: 00007f8b4f9e6218 R14: 00007f8b4f9e6180 R15: 00007ffc7e372548 [ 2228.940758][ T4569] [ 2230.145572][ T4591] netlink: 88 bytes leftover after parsing attributes in process `syz.8.7869'. [ 2230.510321][ T4592] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2230.850378][ T4600] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2230.858742][ T4600] CPU: 0 UID: 0 PID: 4600 Comm: syz.9.7871 Not tainted syzkaller #0 PREEMPT(full) [ 2230.858768][ T4600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2230.858780][ T4600] Call Trace: [ 2230.858787][ T4600] [ 2230.858795][ T4600] dump_stack_lvl+0x16c/0x1f0 [ 2230.858825][ T4600] sysfs_warn_dup+0x7f/0xa0 [ 2230.858853][ T4600] sysfs_do_create_link_sd+0x124/0x140 [ 2230.858883][ T4600] sysfs_create_link+0x61/0xc0 [ 2230.858910][ T4600] device_add+0x62c/0x1aa0 [ 2230.858943][ T4600] ? __pfx_device_add+0x10/0x10 [ 2230.858969][ T4600] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2230.858995][ T4600] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2230.859024][ T4600] wiphy_register+0x1df4/0x29f0 [ 2230.859049][ T4600] ? netdev_run_todo+0x864/0x1320 [ 2230.859074][ T4600] ? __dev_printk+0x270/0x270 [ 2230.859101][ T4600] ? __pfx_wiphy_register+0x10/0x10 [ 2230.859136][ T4600] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2230.859165][ T4600] ieee80211_register_hw+0x2546/0x4120 [ 2230.859200][ T4600] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2230.859231][ T4600] ? find_held_lock+0x2b/0x80 [ 2230.859257][ T4600] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2230.859280][ T4600] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2230.859302][ T4600] ? __hrtimer_setup+0x176/0x280 [ 2230.859327][ T4600] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2230.859370][ T4600] ? trace_kmalloc+0x2b/0xd0 [ 2230.859395][ T4600] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2230.859417][ T4600] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2230.859450][ T4600] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2230.859481][ T4600] ? __asan_memcpy+0x3c/0x60 [ 2230.859514][ T4600] hwsim_new_radio_nl+0xb51/0x12c0 [ 2230.859546][ T4600] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2230.859586][ T4600] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2230.859619][ T4600] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2230.859657][ T4600] genl_family_rcv_msg_doit+0x206/0x2f0 [ 2230.859689][ T4600] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2230.859728][ T4600] ? bpf_lsm_capable+0x9/0x10 [ 2230.859755][ T4600] ? security_capable+0x7e/0x260 [ 2230.859780][ T4600] ? ns_capable+0xd7/0x110 [ 2230.859805][ T4600] genl_rcv_msg+0x55c/0x800 [ 2230.859837][ T4600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2230.859866][ T4600] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2230.859898][ T4600] ? __lock_acquire+0x62e/0x1ce0 [ 2230.859932][ T4600] netlink_rcv_skb+0x158/0x420 [ 2230.859958][ T4600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2230.859987][ T4600] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2230.860024][ T4600] ? netlink_deliver_tap+0x1ae/0xd30 [ 2230.860047][ T4600] ? selinux_netlink_send+0x578/0x830 [ 2230.860071][ T4600] ? is_vmalloc_addr+0x86/0xa0 [ 2230.860093][ T4600] genl_rcv+0x28/0x40 [ 2230.860116][ T4600] netlink_unicast+0x5a7/0x870 [ 2230.860142][ T4600] ? __pfx_netlink_unicast+0x10/0x10 [ 2230.860163][ T4600] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2230.860189][ T4600] netlink_sendmsg+0x8d1/0xdd0 [ 2230.860212][ T4600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2230.860239][ T4600] ____sys_sendmsg+0xa95/0xc70 [ 2230.860262][ T4600] ? copy_msghdr_from_user+0x10a/0x160 [ 2230.860279][ T4600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2230.860312][ T4600] ___sys_sendmsg+0x134/0x1d0 [ 2230.860330][ T4600] ? __pfx____sys_sendmsg+0x10/0x10 [ 2230.860376][ T4600] __sys_sendmsg+0x16d/0x220 [ 2230.860394][ T4600] ? __pfx___sys_sendmsg+0x10/0x10 [ 2230.860421][ T4600] ? __secure_computing+0x28e/0x3b0 [ 2230.860452][ T4600] do_syscall_64+0xcd/0x4e0 [ 2230.860474][ T4600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2230.860491][ T4600] RIP: 0033:0x7ffaa2d8eec9 [ 2230.860506][ T4600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2230.860521][ T4600] RSP: 002b:00007ffaa3c99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2230.860537][ T4600] RAX: ffffffffffffffda RBX: 00007ffaa2fe6180 RCX: 00007ffaa2d8eec9 [ 2230.860548][ T4600] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 2230.860559][ T4600] RBP: 00007ffaa2e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2230.860569][ T4600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2230.860578][ T4600] R13: 00007ffaa2fe6218 R14: 00007ffaa2fe6180 R15: 00007ffea68c8cb8 [ 2230.860600][ T4600] [ 2231.817788][ T4613] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7872'. [ 2231.827551][ T4613] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7872'. [ 2231.836604][ T4613] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7872'. [ 2232.316439][ T4615] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7874'. [ 2232.496075][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 2232.496090][ T30] audit: type=1326 audit(1758662100.217:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.9.7871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2232.544674][ T30] audit: type=1326 audit(1758662100.247:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.9.7871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2232.668696][ T4616] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7873'. [ 2233.286459][ T4626] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7877'. [ 2233.295517][ T4626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7877'. [ 2233.304517][ T4626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7877'. [ 2234.030778][ T4638] netlink: 5 bytes leftover after parsing attributes in process `syz.9.7879'. [ 2234.693890][ T4651] UBIFS error (pid: 4651): cannot open "c:::", error -22 [ 2235.150353][ T4657] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7884'. [ 2235.475140][ T4661] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7885'. [ 2235.705977][ T4666] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7886'. [ 2235.715009][ T4666] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7886'. [ 2236.691123][ T4682] netlink: 'syz.9.7889': attribute type 6 has an invalid length. [ 2238.128416][ T4697] __nla_validate_parse: 2 callbacks suppressed [ 2238.128451][ T4697] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7892'. [ 2238.143727][ T4697] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7892'. [ 2238.152854][ T4697] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7892'. [ 2239.251786][ T4715] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7897'. [ 2240.406394][ T4732] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7911'. [ 2240.415444][ T4732] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7911'. [ 2240.424527][ T4732] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7911'. [ 2241.523007][ T30] audit: type=1326 audit(1758662109.227:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.8.7902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2241.689648][ T30] audit: type=1326 audit(1758662109.377:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.8.7902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2241.764586][ T30] audit: type=1326 audit(1758662109.437:3745): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.8.7902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2241.804607][ T30] audit: type=1326 audit(1758662109.437:3746): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.8.7902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2241.866154][ T4754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7903'. [ 2241.899651][ T30] audit: type=1326 audit(1758662109.617:3747): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.8.7902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2241.940195][T27560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2241.949866][T27560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2241.978203][ T30] audit: type=1326 audit(1758662109.677:3748): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.8.7902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2242.033735][ T30] audit: type=1326 audit(1758662109.677:3749): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.8.7902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2242.060800][ T30] audit: type=1326 audit(1758662109.677:3750): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.8.7902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2242.087956][ T30] audit: type=1326 audit(1758662109.677:3751): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.8.7902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2242.142555][ T30] audit: type=1326 audit(1758662109.677:3752): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.8.7902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2242.545192][ T4768] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7906'. [ 2242.554474][ T4768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7906'. [ 2245.793301][ T4802] __nla_validate_parse: 1 callbacks suppressed [ 2245.793313][ T4802] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7915'. [ 2248.713800][ T4833] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7923'. [ 2250.722832][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2250.722848][ T30] audit: type=1326 audit(1758662118.437:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.8.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2250.765991][ T30] audit: type=1326 audit(1758662118.437:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.8.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2250.797534][ T30] audit: type=1326 audit(1758662118.437:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.8.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2250.821495][ T30] audit: type=1326 audit(1758662118.447:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.8.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2250.844924][ T30] audit: type=1326 audit(1758662118.447:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.8.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2250.868457][ T30] audit: type=1326 audit(1758662118.447:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.8.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2250.891800][ T30] audit: type=1326 audit(1758662118.447:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.8.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2250.919589][ T30] audit: type=1326 audit(1758662118.447:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.8.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2251.028014][ T30] audit: type=1326 audit(1758662118.447:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.8.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2251.109044][ T4858] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2251.118962][ T4858] CPU: 0 UID: 0 PID: 4858 Comm: syz.8.7927 Not tainted syzkaller #0 PREEMPT(full) [ 2251.118987][ T4858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2251.118998][ T4858] Call Trace: [ 2251.119004][ T4858] [ 2251.119012][ T4858] dump_stack_lvl+0x16c/0x1f0 [ 2251.119039][ T4858] sysfs_warn_dup+0x7f/0xa0 [ 2251.119057][ T4858] sysfs_do_create_link_sd+0x124/0x140 [ 2251.119073][ T4858] sysfs_create_link+0x61/0xc0 [ 2251.119088][ T4858] device_add+0x62c/0x1aa0 [ 2251.119108][ T4858] ? __pfx_device_add+0x10/0x10 [ 2251.119123][ T4858] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2251.119138][ T4858] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2251.119160][ T4858] wiphy_register+0x1df4/0x29f0 [ 2251.119175][ T4858] ? netdev_run_todo+0x864/0x1320 [ 2251.119191][ T4858] ? __dev_printk+0x270/0x270 [ 2251.119206][ T4858] ? __pfx_wiphy_register+0x10/0x10 [ 2251.119227][ T4858] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2251.119244][ T4858] ieee80211_register_hw+0x2546/0x4120 [ 2251.119265][ T4858] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2251.119284][ T4858] ? find_held_lock+0x2b/0x80 [ 2251.119299][ T4858] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2251.119312][ T4858] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2251.119326][ T4858] ? __hrtimer_setup+0x176/0x280 [ 2251.119341][ T4858] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2251.119366][ T4858] ? trace_kmalloc+0x2b/0xd0 [ 2251.119381][ T4858] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2251.119394][ T4858] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2251.119411][ T4858] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2251.119429][ T4858] ? __asan_memcpy+0x3c/0x60 [ 2251.119449][ T4858] hwsim_new_radio_nl+0xb51/0x12c0 [ 2251.119468][ T4858] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2251.119490][ T4858] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2251.119510][ T4858] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2251.119531][ T4858] genl_family_rcv_msg_doit+0x206/0x2f0 [ 2251.119549][ T4858] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2251.119571][ T4858] ? bpf_lsm_capable+0x9/0x10 [ 2251.119587][ T4858] ? security_capable+0x7e/0x260 [ 2251.119602][ T4858] ? ns_capable+0xd7/0x110 [ 2251.119618][ T4858] genl_rcv_msg+0x55c/0x800 [ 2251.119636][ T4858] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2251.119654][ T4858] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2251.119676][ T4858] netlink_rcv_skb+0x158/0x420 [ 2251.119691][ T4858] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2251.119709][ T4858] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2251.119730][ T4858] ? netlink_deliver_tap+0x1ae/0xd30 [ 2251.119747][ T4858] genl_rcv+0x28/0x40 [ 2251.119762][ T4858] netlink_unicast+0x5a7/0x870 [ 2251.119779][ T4858] ? __pfx_netlink_unicast+0x10/0x10 [ 2251.119794][ T4858] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2251.119814][ T4858] netlink_sendmsg+0x8d1/0xdd0 [ 2251.119831][ T4858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2251.119852][ T4858] ____sys_sendmsg+0xa95/0xc70 [ 2251.119871][ T4858] ? copy_msghdr_from_user+0x10a/0x160 [ 2251.119885][ T4858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2251.119909][ T4858] ___sys_sendmsg+0x134/0x1d0 [ 2251.119924][ T4858] ? __pfx____sys_sendmsg+0x10/0x10 [ 2251.119956][ T4858] __sys_sendmsg+0x16d/0x220 [ 2251.119971][ T4858] ? __pfx___sys_sendmsg+0x10/0x10 [ 2251.119991][ T4858] ? __secure_computing+0x28e/0x3b0 [ 2251.120010][ T4858] do_syscall_64+0xcd/0x4e0 [ 2251.120027][ T4858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2251.120039][ T4858] RIP: 0033:0x7fb08158eec9 [ 2251.120049][ T4858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2251.120060][ T4858] RSP: 002b:00007fb0824b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2251.120071][ T4858] RAX: ffffffffffffffda RBX: 00007fb0817e6180 RCX: 00007fb08158eec9 [ 2251.120079][ T4858] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 2251.120086][ T4858] RBP: 00007fb081611f91 R08: 0000000000000000 R09: 0000000000000000 [ 2251.120093][ T4858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2251.120099][ T4858] R13: 00007fb0817e6218 R14: 00007fb0817e6180 R15: 00007fff679c94b8 [ 2251.120114][ T4858] [ 2252.100418][ T30] audit: type=1326 audit(1758662119.817:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.8.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2253.270654][ T4876] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7931'. [ 2253.709805][ T4890] netlink: 'syz.2.7934': attribute type 10 has an invalid length. [ 2254.538222][ T4892] tipc: Enabled bearer , priority 0 [ 2254.617177][ T4905] /dev/nullb0: Can't lookup blockdev [ 2256.145552][ T4918] overlayfs: failed to clone upperpath [ 2256.342513][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2256.342528][ T30] audit: type=1326 audit(1758662124.057:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4922 comm="syz.4.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2256.379466][ T4926] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2256.388666][ T30] audit: type=1326 audit(1758662124.087:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4922 comm="syz.4.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2256.425665][ T4926] CPU: 1 UID: 0 PID: 4926 Comm: syz.4.7938 Not tainted syzkaller #0 PREEMPT(full) [ 2256.425694][ T4926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2256.425707][ T4926] Call Trace: [ 2256.425715][ T4926] [ 2256.425723][ T4926] dump_stack_lvl+0x16c/0x1f0 [ 2256.425754][ T4926] sysfs_warn_dup+0x7f/0xa0 [ 2256.425782][ T4926] sysfs_do_create_link_sd+0x124/0x140 [ 2256.425811][ T4926] sysfs_create_link+0x61/0xc0 [ 2256.425837][ T4926] device_add+0x62c/0x1aa0 [ 2256.425869][ T4926] ? __pfx_device_add+0x10/0x10 [ 2256.425892][ T4926] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2256.425916][ T4926] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2256.425944][ T4926] wiphy_register+0x1df4/0x29f0 [ 2256.425966][ T4926] ? netdev_run_todo+0x864/0x1320 [ 2256.425986][ T4926] ? __dev_printk+0x270/0x270 [ 2256.426006][ T4926] ? __pfx_wiphy_register+0x10/0x10 [ 2256.426031][ T4926] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2256.426053][ T4926] ieee80211_register_hw+0x2546/0x4120 [ 2256.426081][ T4926] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2256.426104][ T4926] ? find_held_lock+0x2b/0x80 [ 2256.426123][ T4926] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2256.426140][ T4926] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2256.426157][ T4926] ? __hrtimer_setup+0x176/0x280 [ 2256.426176][ T4926] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2256.426209][ T4926] ? trace_kmalloc+0x2b/0xd0 [ 2256.426226][ T4926] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2256.426243][ T4926] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2256.426263][ T4926] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2256.426285][ T4926] ? __asan_memcpy+0x3c/0x60 [ 2256.426310][ T4926] hwsim_new_radio_nl+0xb51/0x12c0 [ 2256.426340][ T4926] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2256.426368][ T4926] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2256.426391][ T4926] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2256.426418][ T4926] genl_family_rcv_msg_doit+0x206/0x2f0 [ 2256.426441][ T4926] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2256.426474][ T4926] ? bpf_lsm_capable+0x9/0x10 [ 2256.426496][ T4926] ? security_capable+0x7e/0x260 [ 2256.426515][ T4926] ? ns_capable+0xd7/0x110 [ 2256.426534][ T4926] genl_rcv_msg+0x55c/0x800 [ 2256.426557][ T4926] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2256.426579][ T4926] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2256.426603][ T4926] ? __lock_acquire+0x62e/0x1ce0 [ 2256.426629][ T4926] netlink_rcv_skb+0x158/0x420 [ 2256.426648][ T4926] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2256.426670][ T4926] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2256.426699][ T4926] ? netlink_deliver_tap+0x1ae/0xd30 [ 2256.426716][ T4926] ? selinux_netlink_send+0x578/0x830 [ 2256.426734][ T4926] ? is_vmalloc_addr+0x86/0xa0 [ 2256.426751][ T4926] genl_rcv+0x28/0x40 [ 2256.426769][ T4926] netlink_unicast+0x5a7/0x870 [ 2256.426791][ T4926] ? __pfx_netlink_unicast+0x10/0x10 [ 2256.426810][ T4926] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2256.426836][ T4926] netlink_sendmsg+0x8d1/0xdd0 [ 2256.426858][ T4926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2256.426886][ T4926] ____sys_sendmsg+0xa95/0xc70 [ 2256.426909][ T4926] ? copy_msghdr_from_user+0x10a/0x160 [ 2256.426927][ T4926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2256.426959][ T4926] ___sys_sendmsg+0x134/0x1d0 [ 2256.426978][ T4926] ? __pfx____sys_sendmsg+0x10/0x10 [ 2256.427023][ T4926] __sys_sendmsg+0x16d/0x220 [ 2256.427041][ T4926] ? __pfx___sys_sendmsg+0x10/0x10 [ 2256.427068][ T4926] ? __secure_computing+0x28e/0x3b0 [ 2256.427093][ T4926] do_syscall_64+0xcd/0x4e0 [ 2256.427114][ T4926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2256.427129][ T4926] RIP: 0033:0x7fafb958eec9 [ 2256.427143][ T4926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2256.427157][ T4926] RSP: 002b:00007fafba40e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2256.427172][ T4926] RAX: ffffffffffffffda RBX: 00007fafb97e6180 RCX: 00007fafb958eec9 [ 2256.427181][ T4926] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 2256.427190][ T4926] RBP: 00007fafb9611f91 R08: 0000000000000000 R09: 0000000000000000 [ 2256.427198][ T4926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2256.427206][ T4926] R13: 00007fafb97e6218 R14: 00007fafb97e6180 R15: 00007ffc003f7bf8 [ 2256.427227][ T4926] [ 2256.955005][ T30] audit: type=1326 audit(1758662124.087:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4922 comm="syz.4.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2256.978492][ T30] audit: type=1326 audit(1758662124.087:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4922 comm="syz.4.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2257.001903][ T30] audit: type=1326 audit(1758662124.087:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4922 comm="syz.4.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2257.025218][ T30] audit: type=1326 audit(1758662124.087:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4922 comm="syz.4.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2257.048691][ T30] audit: type=1326 audit(1758662124.097:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4922 comm="syz.4.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2257.072126][ T30] audit: type=1326 audit(1758662124.097:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4922 comm="syz.4.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2257.173226][ T30] audit: type=1326 audit(1758662124.887:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4922 comm="syz.4.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2257.342545][ T30] audit: type=1326 audit(1758662125.057:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4922 comm="syz.4.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2258.831089][ T4945] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7943'. [ 2259.090975][ T4948] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7944'. [ 2259.288612][ T4953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7944'. [ 2260.033926][ T4959] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7947'. [ 2260.071846][ T4966] overlayfs: failed to clone upperpath [ 2260.102573][ T4969] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7949'. [ 2262.085530][ T1983] libceph: connect (1)[c::]:6789 error -22 [ 2262.106050][ T1983] libceph: mon0 (1)[c::]:6789 connect error [ 2262.396224][ T1983] libceph: connect (1)[c::]:6789 error -22 [ 2262.402208][ T1983] libceph: mon0 (1)[c::]:6789 connect error [ 2262.534863][ T4994] ceph: No mds server is up or the cluster is laggy [ 2262.691495][ T5002] overlayfs: failed to clone upperpath [ 2262.827769][ T5006] netlink: 'syz.2.7958': attribute type 4 has an invalid length. [ 2264.181421][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2264.181437][ T30] audit: type=1326 audit(1758662131.897:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5015 comm="syz.9.7959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2264.220693][ T30] audit: type=1326 audit(1758662131.937:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5015 comm="syz.9.7959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2264.281197][ T30] audit: type=1326 audit(1758662131.937:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5015 comm="syz.9.7959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2264.306762][ T30] audit: type=1326 audit(1758662131.937:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5015 comm="syz.9.7959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2264.340313][ T30] audit: type=1326 audit(1758662131.937:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5015 comm="syz.9.7959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2264.422381][ T30] audit: type=1326 audit(1758662131.937:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5015 comm="syz.9.7959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2264.455597][ T30] audit: type=1326 audit(1758662131.937:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5015 comm="syz.9.7959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2264.496026][ T30] audit: type=1326 audit(1758662131.957:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5015 comm="syz.9.7959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2264.529724][ T30] audit: type=1326 audit(1758662131.967:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5015 comm="syz.9.7959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2264.564107][ T30] audit: type=1326 audit(1758662131.967:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5015 comm="syz.9.7959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2264.698303][ T5036] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7962'. [ 2266.124084][ T5059] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7968'. [ 2267.235722][ T5066] overlay: Unknown parameter 'smackfsroot' [ 2267.505979][ T1983] page_pool_release_retry() stalled pool shutdown: id 111, 40 inflight 846 sec [ 2267.788740][ T5072] new mount options do not match the existing superblock, will be ignored [ 2268.309009][ T5072] vxcan1 speed is unknown, defaulting to 1000 [ 2269.263789][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2269.263805][ T30] audit: type=1400 audit(1758662136.977:3809): avc: denied { getopt } for pid=5076 comm="syz.8.7975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2269.791178][ T5098] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7979'. [ 2271.415548][ T30] audit: type=1326 audit(1758662139.127:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5107 comm="syz.3.7982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2271.527084][ T30] audit: type=1326 audit(1758662139.127:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5107 comm="syz.3.7982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2271.554207][ T30] audit: type=1326 audit(1758662139.247:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5107 comm="syz.3.7982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2271.772279][ T30] audit: type=1326 audit(1758662139.487:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5107 comm="syz.3.7982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2271.814114][ T30] audit: type=1326 audit(1758662139.527:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5107 comm="syz.3.7982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a738eec9 code=0x7ffc0000 [ 2272.010622][ T5131] overlayfs: missing 'lowerdir' [ 2273.106686][ T30] audit: type=1326 audit(1758662140.817:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.2.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2273.146013][ T30] audit: type=1326 audit(1758662140.817:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.2.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2273.178015][ T30] audit: type=1326 audit(1758662140.817:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.2.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2273.210152][ T30] audit: type=1326 audit(1758662140.817:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.2.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f78eec9 code=0x7ffc0000 [ 2274.899484][ T5173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7993'. [ 2277.316883][ T5193] vxcan1 speed is unknown, defaulting to 1000 [ 2282.146510][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 2282.146526][ T30] audit: type=1326 audit(1758662149.857:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5245 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2282.236855][ T30] audit: type=1326 audit(1758662149.857:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5245 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2282.327139][ T30] audit: type=1326 audit(1758662149.857:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5245 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2282.350699][ T30] audit: type=1326 audit(1758662149.857:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5245 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2282.466602][ T30] audit: type=1326 audit(1758662149.857:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5245 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2282.649021][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2282.655359][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2282.903977][ T30] audit: type=1326 audit(1758662149.857:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5245 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2282.972735][ T30] audit: type=1326 audit(1758662149.857:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5245 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2283.005303][ T30] audit: type=1326 audit(1758662149.857:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5245 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2283.021391][ T5256] netlink: 'syz.2.8011': attribute type 6 has an invalid length. [ 2283.032849][ T30] audit: type=1326 audit(1758662149.857:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5245 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2283.142463][ T30] audit: type=1326 audit(1758662149.857:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5245 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb958eec9 code=0x7ffc0000 [ 2283.415192][ T5266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2284.107916][ T5273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2284.555457][ T5278] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8016'. [ 2284.566745][ T5278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8016'. [ 2284.575731][ T5278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8016'. [ 2284.960219][ T5283] ceph: No mds server is up or the cluster is laggy [ 2285.364782][ T5300] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8021'. [ 2285.374138][ T5300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8021'. [ 2285.383161][ T5300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8021'. [ 2285.755294][ T5301] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8020'. [ 2286.672231][ T5313] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8024'. [ 2288.355347][ T5337] overlayfs: failed to clone lowerpath [ 2289.608986][ T5354] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8032'. [ 2289.758069][ T5361] pimreg: entered allmulticast mode [ 2289.773448][ T5361] pimreg: left allmulticast mode [ 2290.859709][ T5377] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8038'. [ 2290.909820][ T5377] 0猉功D: renamed from 31猉功D (while UP) [ 2290.982797][ T5377] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 2291.337593][ T5393] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8042'. [ 2291.435170][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 2291.435186][ T30] audit: type=1326 audit(1758662159.147:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.9.8039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2291.485570][ T30] audit: type=1326 audit(1758662159.187:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.9.8039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2292.007642][ T30] audit: type=1800 audit(1758662159.727:3873): pid=5404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.8043" name="SYSV00000000" dev="tmpfs" ino=10 res=0 errno=0 [ 2292.709720][ T5414] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8055'. [ 2292.718913][ T5414] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8055'. [ 2292.727975][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8055'. [ 2293.897534][ T5431] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8049'. [ 2293.930193][ T5431] 1猉功D: renamed from 30猉功D (while UP) [ 2293.940023][ T5431] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 2294.401208][ T5443] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8050'. [ 2294.410338][ T5443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8050'. [ 2294.419356][ T5443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8050'. [ 2295.352255][ T30] audit: type=1326 audit(1758662163.067:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.8.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2295.377411][ T30] audit: type=1326 audit(1758662163.067:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.8.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2295.401057][ T30] audit: type=1326 audit(1758662163.067:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.8.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2295.425127][ T30] audit: type=1326 audit(1758662163.067:3877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.8.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2295.465873][ T30] audit: type=1326 audit(1758662163.067:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.8.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2295.495879][ T30] audit: type=1326 audit(1758662163.067:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.8.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2295.524448][ T30] audit: type=1326 audit(1758662163.067:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.8.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08158eec9 code=0x7ffc0000 [ 2295.668527][ T5457] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8054'. [ 2295.932914][ T5460] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8056'. [ 2295.942995][ T5460] 0猉功D: renamed from 31猉功D (while UP) [ 2295.953591][ T5460] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 2297.024982][ T5467] ceph: No mds server is up or the cluster is laggy [ 2298.020019][ T5490] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8060'. [ 2298.029100][ T5490] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8060'. [ 2298.038117][ T5490] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8060'. [ 2298.391509][ T5492] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8062'. [ 2300.153280][ T5526] netlink: 5 bytes leftover after parsing attributes in process `syz.8.8067'. [ 2300.165768][ T5526] 1猉功D: renamed from 30猉功D (while UP) [ 2300.193500][ T5526] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 2300.365035][ T5528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8068'. [ 2300.375364][ T5528] netlink: 'syz.2.8068': attribute type 5 has an invalid length. [ 2300.383842][ T5528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8068'. [ 2300.401422][ T5533] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8069'. [ 2300.427837][ T5528] geneve6: entered promiscuous mode [ 2300.433079][ T5528] geneve6: entered allmulticast mode [ 2300.453708][ T5533] 1猉功D: renamed from 30猉功D (while UP) [ 2300.482173][ T5533] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 2300.515651][ T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 2300.531623][ T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 2300.541906][ T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 2300.555801][ T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 2301.658993][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2301.659011][ T30] audit: type=1326 audit(1758662169.377:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5542 comm="syz.9.8073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2301.713181][ T5549] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2301.723122][ T5549] CPU: 0 UID: 0 PID: 5549 Comm: syz.9.8073 Not tainted syzkaller #0 PREEMPT(full) [ 2301.723159][ T5549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2301.723170][ T5549] Call Trace: [ 2301.723177][ T5549] [ 2301.723185][ T5549] dump_stack_lvl+0x16c/0x1f0 [ 2301.723213][ T5549] sysfs_warn_dup+0x7f/0xa0 [ 2301.723236][ T5549] sysfs_do_create_link_sd+0x124/0x140 [ 2301.723261][ T5549] sysfs_create_link+0x61/0xc0 [ 2301.723276][ T5549] device_add+0x62c/0x1aa0 [ 2301.723295][ T5549] ? __pfx_device_add+0x10/0x10 [ 2301.723310][ T5549] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2301.723325][ T5549] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2301.723342][ T5549] wiphy_register+0x1df4/0x29f0 [ 2301.723356][ T5549] ? netdev_run_todo+0x864/0x1320 [ 2301.723372][ T5549] ? __dev_printk+0x270/0x270 [ 2301.723387][ T5549] ? __pfx_wiphy_register+0x10/0x10 [ 2301.723406][ T5549] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2301.723423][ T5549] ieee80211_register_hw+0x2546/0x4120 [ 2301.723445][ T5549] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2301.723462][ T5549] ? find_held_lock+0x2b/0x80 [ 2301.723477][ T5549] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2301.723491][ T5549] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2301.723504][ T5549] ? __hrtimer_setup+0x176/0x280 [ 2301.723518][ T5549] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2301.723546][ T5549] ? trace_kmalloc+0x2b/0xd0 [ 2301.723560][ T5549] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2301.723574][ T5549] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2301.723590][ T5549] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2301.723607][ T5549] ? __asan_memcpy+0x3c/0x60 [ 2301.723626][ T5549] hwsim_new_radio_nl+0xb51/0x12c0 [ 2301.723645][ T5549] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2301.723666][ T5549] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2301.723685][ T5549] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2301.723708][ T5549] genl_family_rcv_msg_doit+0x206/0x2f0 [ 2301.723726][ T5549] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2301.723748][ T5549] ? bpf_lsm_capable+0x9/0x10 [ 2301.723764][ T5549] ? security_capable+0x7e/0x260 [ 2301.723778][ T5549] ? ns_capable+0xd7/0x110 [ 2301.723793][ T5549] genl_rcv_msg+0x55c/0x800 [ 2301.723811][ T5549] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2301.723827][ T5549] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2301.723846][ T5549] ? __lock_acquire+0x62e/0x1ce0 [ 2301.723865][ T5549] netlink_rcv_skb+0x158/0x420 [ 2301.723881][ T5549] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2301.723899][ T5549] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2301.723920][ T5549] ? netlink_deliver_tap+0x1ae/0xd30 [ 2301.723933][ T5549] ? selinux_netlink_send+0x578/0x830 [ 2301.723948][ T5549] ? is_vmalloc_addr+0x86/0xa0 [ 2301.723961][ T5549] genl_rcv+0x28/0x40 [ 2301.723975][ T5549] netlink_unicast+0x5a7/0x870 [ 2301.723992][ T5549] ? __pfx_netlink_unicast+0x10/0x10 [ 2301.724007][ T5549] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2301.724026][ T5549] netlink_sendmsg+0x8d1/0xdd0 [ 2301.724044][ T5549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2301.724064][ T5549] ____sys_sendmsg+0xa95/0xc70 [ 2301.724082][ T5549] ? copy_msghdr_from_user+0x10a/0x160 [ 2301.724096][ T5549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2301.724120][ T5549] ___sys_sendmsg+0x134/0x1d0 [ 2301.724139][ T5549] ? __pfx____sys_sendmsg+0x10/0x10 [ 2301.724189][ T5549] __sys_sendmsg+0x16d/0x220 [ 2301.724211][ T5549] ? __pfx___sys_sendmsg+0x10/0x10 [ 2301.724236][ T5549] ? __secure_computing+0x28e/0x3b0 [ 2301.724256][ T5549] do_syscall_64+0xcd/0x4e0 [ 2301.724273][ T5549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2301.724285][ T5549] RIP: 0033:0x7ffaa2d8eec9 [ 2301.724296][ T5549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2301.724307][ T5549] RSP: 002b:00007ffaa3c99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2301.724319][ T5549] RAX: ffffffffffffffda RBX: 00007ffaa2fe6180 RCX: 00007ffaa2d8eec9 [ 2301.724326][ T5549] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000005 [ 2301.724333][ T5549] RBP: 00007ffaa2e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2301.724339][ T5549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2301.724346][ T5549] R13: 00007ffaa2fe6218 R14: 00007ffaa2fe6180 R15: 00007ffea68c8cb8 [ 2301.724361][ T5549] [ 2302.145825][ T30] audit: type=1326 audit(1758662169.377:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5542 comm="syz.9.8073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2302.169598][ T30] audit: type=1326 audit(1758662169.407:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5542 comm="syz.9.8073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2302.193193][ T30] audit: type=1326 audit(1758662169.407:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5542 comm="syz.9.8073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2302.216926][ T30] audit: type=1326 audit(1758662169.407:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5542 comm="syz.9.8073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2302.240484][ T30] audit: type=1326 audit(1758662169.407:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5542 comm="syz.9.8073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2302.264462][ T30] audit: type=1326 audit(1758662169.407:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5542 comm="syz.9.8073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2302.288459][ T30] audit: type=1326 audit(1758662169.407:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5542 comm="syz.9.8073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2302.312007][ T30] audit: type=1326 audit(1758662169.407:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5542 comm="syz.9.8073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2302.348096][ T30] audit: type=1326 audit(1758662170.067:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5542 comm="syz.9.8073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8eec9 code=0x7ffc0000 [ 2303.108063][ T5558] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8074'. [ 2303.117742][ T5558] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8074'. [ 2303.126743][ T5558] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8074'. [ 2304.000465][ T5567] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8076'. [ 2305.419469][ T5584] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2305.455912][ T5584] CPU: 0 UID: 0 PID: 5584 Comm: syz.8.8080 Not tainted syzkaller #0 PREEMPT(full) [ 2305.455940][ T5584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2305.455951][ T5584] Call Trace: [ 2305.455958][ T5584] [ 2305.455966][ T5584] dump_stack_lvl+0x16c/0x1f0 [ 2305.455997][ T5584] sysfs_warn_dup+0x7f/0xa0 [ 2305.456024][ T5584] sysfs_do_create_link_sd+0x124/0x140 [ 2305.456054][ T5584] sysfs_create_link+0x61/0xc0 [ 2305.456081][ T5584] device_add+0x62c/0x1aa0 [ 2305.456112][ T5584] ? __pfx_device_add+0x10/0x10 [ 2305.456136][ T5584] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2305.456157][ T5584] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2305.456180][ T5584] wiphy_register+0x1df4/0x29f0 [ 2305.456199][ T5584] ? netdev_run_todo+0x864/0x1320 [ 2305.456219][ T5584] ? __dev_printk+0x270/0x270 [ 2305.456240][ T5584] ? __pfx_wiphy_register+0x10/0x10 [ 2305.456266][ T5584] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2305.456290][ T5584] ieee80211_register_hw+0x2546/0x4120 [ 2305.456318][ T5584] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2305.456342][ T5584] ? find_held_lock+0x2b/0x80 [ 2305.456362][ T5584] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2305.456379][ T5584] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2305.456397][ T5584] ? __hrtimer_setup+0x176/0x280 [ 2305.456415][ T5584] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2305.456448][ T5584] ? trace_kmalloc+0x2b/0xd0 [ 2305.456465][ T5584] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2305.456482][ T5584] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2305.456503][ T5584] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2305.456525][ T5584] ? __asan_memcpy+0x3c/0x60 [ 2305.456551][ T5584] hwsim_new_radio_nl+0xb51/0x12c0 [ 2305.456576][ T5584] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2305.456604][ T5584] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2305.456628][ T5584] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2305.456655][ T5584] genl_family_rcv_msg_doit+0x206/0x2f0 [ 2305.456678][ T5584] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2305.456710][ T5584] ? bpf_lsm_capable+0x9/0x10 [ 2305.456730][ T5584] ? security_capable+0x7e/0x260 [ 2305.456749][ T5584] ? ns_capable+0xd7/0x110 [ 2305.456768][ T5584] genl_rcv_msg+0x55c/0x800 [ 2305.456792][ T5584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2305.456816][ T5584] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2305.456845][ T5584] netlink_rcv_skb+0x158/0x420 [ 2305.456864][ T5584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2305.456892][ T5584] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2305.456920][ T5584] ? netlink_deliver_tap+0x1ae/0xd30 [ 2305.456941][ T5584] genl_rcv+0x28/0x40 [ 2305.456959][ T5584] netlink_unicast+0x5a7/0x870 [ 2305.456982][ T5584] ? __pfx_netlink_unicast+0x10/0x10 [ 2305.457001][ T5584] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2305.457028][ T5584] netlink_sendmsg+0x8d1/0xdd0 [ 2305.457053][ T5584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2305.457083][ T5584] ____sys_sendmsg+0xa95/0xc70 [ 2305.457108][ T5584] ? copy_msghdr_from_user+0x10a/0x160 [ 2305.457126][ T5584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2305.457158][ T5584] ___sys_sendmsg+0x134/0x1d0 [ 2305.457177][ T5584] ? __pfx____sys_sendmsg+0x10/0x10 [ 2305.457222][ T5584] __sys_sendmsg+0x16d/0x220 [ 2305.457240][ T5584] ? __pfx___sys_sendmsg+0x10/0x10 [ 2305.457266][ T5584] ? __secure_computing+0x28e/0x3b0 [ 2305.457291][ T5584] do_syscall_64+0xcd/0x4e0 [ 2305.457313][ T5584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2305.457328][ T5584] RIP: 0033:0x7fb08158eec9 [ 2305.457341][ T5584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2305.457355][ T5584] RSP: 002b:00007fb0824b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2305.457369][ T5584] RAX: ffffffffffffffda RBX: 00007fb0817e6180 RCX: 00007fb08158eec9 [ 2305.457379][ T5584] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 2305.457388][ T5584] RBP: 00007fb081611f91 R08: 0000000000000000 R09: 0000000000000000 [ 2305.457397][ T5584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2305.457405][ T5584] R13: 00007fb0817e6218 R14: 00007fb0817e6180 R15: 00007fff679c94b8 [ 2305.457426][ T5584] [ 2307.544587][ T5617] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8086'. [ 2307.553708][ T5617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8086'. [ 2307.562776][ T5617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8086'. [ 2308.737123][ T5628] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8089'. [ 2308.747502][ T5628] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8089'. [ 2308.756550][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8089'. [ 2309.411870][ T5637] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8091'. [ 2309.543482][ T5641] netlink: 'syz.3.8090': attribute type 10 has an invalid length. [ 2309.725052][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8090'. [ 2310.833950][ T5659] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2310.847050][ T5659] CPU: 1 UID: 0 PID: 5659 Comm: syz.8.8095 Not tainted syzkaller #0 PREEMPT(full) [ 2310.847081][ T5659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2310.847093][ T5659] Call Trace: [ 2310.847101][ T5659] [ 2310.847109][ T5659] dump_stack_lvl+0x16c/0x1f0 [ 2310.847140][ T5659] sysfs_warn_dup+0x7f/0xa0 [ 2310.847168][ T5659] sysfs_do_create_link_sd+0x124/0x140 [ 2310.847195][ T5659] sysfs_create_link+0x61/0xc0 [ 2310.847221][ T5659] device_add+0x62c/0x1aa0 [ 2310.847256][ T5659] ? __pfx_device_add+0x10/0x10 [ 2310.847278][ T5659] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2310.847300][ T5659] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 2310.847325][ T5659] wiphy_register+0x1df4/0x29f0 [ 2310.847349][ T5659] ? netdev_run_todo+0x864/0x1320 [ 2310.847374][ T5659] ? __dev_printk+0x270/0x270 [ 2310.847401][ T5659] ? __pfx_wiphy_register+0x10/0x10 [ 2310.847435][ T5659] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 2310.847463][ T5659] ieee80211_register_hw+0x2546/0x4120 [ 2310.847500][ T5659] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2310.847531][ T5659] ? find_held_lock+0x2b/0x80 [ 2310.847556][ T5659] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2310.847578][ T5659] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2310.847601][ T5659] ? __hrtimer_setup+0x176/0x280 [ 2310.847623][ T5659] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 2310.847667][ T5659] ? trace_kmalloc+0x2b/0xd0 [ 2310.847687][ T5659] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 2310.847709][ T5659] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2310.847737][ T5659] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 2310.847766][ T5659] ? __asan_memcpy+0x3c/0x60 [ 2310.847798][ T5659] hwsim_new_radio_nl+0xb51/0x12c0 [ 2310.847826][ T5659] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2310.847864][ T5659] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2310.847901][ T5659] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2310.847936][ T5659] genl_family_rcv_msg_doit+0x206/0x2f0 [ 2310.847968][ T5659] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2310.848007][ T5659] ? bpf_lsm_capable+0x9/0x10 [ 2310.848036][ T5659] ? security_capable+0x7e/0x260 [ 2310.848061][ T5659] ? ns_capable+0xd7/0x110 [ 2310.848088][ T5659] genl_rcv_msg+0x55c/0x800 [ 2310.848119][ T5659] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2310.848146][ T5659] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2310.848184][ T5659] netlink_rcv_skb+0x158/0x420 [ 2310.848209][ T5659] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2310.848238][ T5659] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2310.848274][ T5659] ? netlink_deliver_tap+0x1ae/0xd30 [ 2310.848301][ T5659] genl_rcv+0x28/0x40 [ 2310.848325][ T5659] netlink_unicast+0x5a7/0x870 [ 2310.848354][ T5659] ? __pfx_netlink_unicast+0x10/0x10 [ 2310.848379][ T5659] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2310.848413][ T5659] netlink_sendmsg+0x8d1/0xdd0 [ 2310.848442][ T5659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2310.848478][ T5659] ____sys_sendmsg+0xa95/0xc70 [ 2310.848507][ T5659] ? copy_msghdr_from_user+0x10a/0x160 [ 2310.848530][ T5659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2310.848564][ T5659] ? __pfx_futex_wake_mark+0x10/0x10 [ 2310.848590][ T5659] ___sys_sendmsg+0x134/0x1d0 [ 2310.848614][ T5659] ? __pfx____sys_sendmsg+0x10/0x10 [ 2310.848673][ T5659] __sys_sendmsg+0x16d/0x220 [ 2310.848696][ T5659] ? __pfx___sys_sendmsg+0x10/0x10 [ 2310.848718][ T5659] ? __x64_sys_futex+0x1e0/0x4c0 [ 2310.848752][ T5659] do_syscall_64+0xcd/0x4e0 [ 2310.848779][ T5659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2310.848798][ T5659] RIP: 0033:0x7fb08158eec9 [ 2310.848814][ T5659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2310.848833][ T5659] RSP: 002b:00007fb0824b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2310.848852][ T5659] RAX: ffffffffffffffda RBX: 00007fb0817e6180 RCX: 00007fb08158eec9 [ 2310.848864][ T5659] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 2310.848876][ T5659] RBP: 00007fb081611f91 R08: 0000000000000000 R09: 0000000000000000 [ 2310.848889][ T5659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2310.848907][ T5659] R13: 00007fb0817e6218 R14: 00007fb0817e6180 R15: 00007fff679c94b8 [ 2310.848934][ T5659] [ 2311.348668][ T5663] smc: removing ib device syz0 [ 2311.943507][ T5663] ------------[ cut here ]------------ [ 2311.949022][ T5663] WARNING: CPU: 0 PID: 5663 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 2311.960046][ T5663] Modules linked in: [ 2311.964192][ T5663] CPU: 0 UID: 0 PID: 5663 Comm: syz.4.8096 Not tainted syzkaller #0 PREEMPT(full) [ 2311.973481][ T5663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2311.983548][ T5663] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 2311.989317][ T5663] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 25 b6 fc f8 e8 20 b6 fc f8 90 <0f> 0b 90 5b e9 16 b6 fc f8 e8 21 1e 63 f9 eb da 66 66 2e 0f 1f 84 [ 2312.009068][ T5663] RSP: 0018:ffffc900053271c8 EFLAGS: 00010246 [ 2312.015298][ T5663] RAX: 0000000000080000 RBX: ffff888057015358 RCX: ffffc9000ff2b000 [ 2312.023601][ T5663] RDX: 0000000000080000 RSI: ffffffff88bee760 RDI: ffff8880570153d8 [ 2312.031572][ T5663] RBP: ffffffff88bd4c00 R08: 0000000000000005 R09: 0000000000000001 [ 2312.039532][ T5663] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888057014698 [ 2312.047798][ T5663] R13: ffff888057013fe0 R14: ffff888057013fe0 R15: ffff8880570150b8 [ 2312.055903][ T5663] FS: 00007fafba4506c0(0000) GS:ffff8881246b2000(0000) knlGS:0000000000000000 [ 2312.064851][ T5663] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2312.071452][ T5663] CR2: 00002000003f8030 CR3: 000000003fe59000 CR4: 00000000003526f0 [ 2312.079734][ T5663] Call Trace: [ 2312.082991][ T5663] [ 2312.085917][ T5663] rxe_dealloc+0x25/0xc0 [ 2312.090138][ T5663] ib_dealloc_device+0x46/0x230 [ 2312.094965][ T5663] __ib_unregister_device+0x396/0x480 [ 2312.100324][ T5663] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 2312.106526][ T5663] ib_unregister_device_and_put+0x5a/0x80 [ 2312.112226][ T5663] nldev_dellink+0x21f/0x320 [ 2312.117018][ T5663] ? __pfx_nldev_dellink+0x10/0x10 [ 2312.122144][ T5663] ? cap_capable+0xb3/0x250 [ 2312.126657][ T5663] ? bpf_lsm_capable+0x9/0x10 [ 2312.131315][ T5663] ? security_capable+0x7e/0x260 [ 2312.136541][ T5663] ? ns_capable+0xd7/0x110 [ 2312.140948][ T5663] ? __pfx_nldev_dellink+0x10/0x10 [ 2312.146155][ T5663] rdma_nl_rcv_msg+0x38a/0x6e0 [ 2312.150914][ T5663] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 2312.156187][ T5663] ? __lock_acquire+0x62e/0x1ce0 [ 2312.161106][ T5663] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 2312.167842][ T5663] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 2312.174761][ T5663] ? netlink_deliver_tap+0x1ae/0xd30 [ 2312.180046][ T5663] ? selinux_netlink_send+0x578/0x830 [ 2312.185396][ T5663] ? is_vmalloc_addr+0x86/0xa0 [ 2312.190144][ T5663] netlink_unicast+0x5a7/0x870 [ 2312.194894][ T5663] ? __pfx_netlink_unicast+0x10/0x10 [ 2312.200485][ T5663] netlink_sendmsg+0x8d1/0xdd0 [ 2312.205230][ T5663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2312.210528][ T5663] ____sys_sendmsg+0xa95/0xc70 [ 2312.215472][ T5663] ? copy_msghdr_from_user+0x10a/0x160 [ 2312.220934][ T5663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2312.226528][ T5663] ? __pfx_futex_wake_mark+0x10/0x10 [ 2312.231794][ T5663] ___sys_sendmsg+0x134/0x1d0 [ 2312.236460][ T5663] ? __pfx____sys_sendmsg+0x10/0x10 [ 2312.241666][ T5663] __sys_sendmsg+0x16d/0x220 [ 2312.246253][ T5663] ? __pfx___sys_sendmsg+0x10/0x10 [ 2312.251340][ T5663] ? __x64_sys_futex+0x1e0/0x4c0 [ 2312.256582][ T5663] do_syscall_64+0xcd/0x4e0 [ 2312.261079][ T5663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2312.266969][ T5663] RIP: 0033:0x7fafb958eec9 [ 2312.271359][ T5663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2312.291268][ T5663] RSP: 002b:00007fafba450038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2312.299677][ T5663] RAX: ffffffffffffffda RBX: 00007fafb97e5fa0 RCX: 00007fafb958eec9 [ 2312.307698][ T5663] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 2312.315644][ T5663] RBP: 00007fafb9611f91 R08: 0000000000000000 R09: 0000000000000000 [ 2312.324095][ T5663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2312.332065][ T5663] R13: 00007fafb97e6038 R14: 00007fafb97e5fa0 R15: 00007ffc003f7bf8 [ 2312.340038][ T5663] [ 2312.343048][ T5663] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2312.350298][ T5663] CPU: 0 UID: 0 PID: 5663 Comm: syz.4.8096 Not tainted syzkaller #0 PREEMPT(full) [ 2312.359550][ T5663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2312.369576][ T5663] Call Trace: [ 2312.372840][ T5663] [ 2312.375749][ T5663] dump_stack_lvl+0x3d/0x1f0 [ 2312.380326][ T5663] vpanic+0x6e8/0x7a0 [ 2312.384287][ T5663] ? __pfx_vpanic+0x10/0x10 [ 2312.388772][ T5663] ? rxe_pool_cleanup+0x41/0x60 [ 2312.393600][ T5663] panic+0xca/0xd0 [ 2312.397290][ T5663] ? __pfx_panic+0x10/0x10 [ 2312.401690][ T5663] check_panic_on_warn+0xab/0xb0 [ 2312.406600][ T5663] __warn+0xf6/0x3c0 [ 2312.410464][ T5663] ? rxe_pool_cleanup+0x41/0x60 [ 2312.415287][ T5663] report_bug+0x3c3/0x580 [ 2312.419605][ T5663] ? rxe_pool_cleanup+0x41/0x60 [ 2312.424433][ T5663] handle_bug+0x184/0x210 [ 2312.428742][ T5663] exc_invalid_op+0x17/0x50 [ 2312.433225][ T5663] asm_exc_invalid_op+0x1a/0x20 [ 2312.438046][ T5663] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 2312.443478][ T5663] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 25 b6 fc f8 e8 20 b6 fc f8 90 <0f> 0b 90 5b e9 16 b6 fc f8 e8 21 1e 63 f9 eb da 66 66 2e 0f 1f 84 [ 2312.463056][ T5663] RSP: 0018:ffffc900053271c8 EFLAGS: 00010246 [ 2312.469107][ T5663] RAX: 0000000000080000 RBX: ffff888057015358 RCX: ffffc9000ff2b000 [ 2312.477051][ T5663] RDX: 0000000000080000 RSI: ffffffff88bee760 RDI: ffff8880570153d8 [ 2312.485005][ T5663] RBP: ffffffff88bd4c00 R08: 0000000000000005 R09: 0000000000000001 [ 2312.492949][ T5663] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888057014698 [ 2312.500897][ T5663] R13: ffff888057013fe0 R14: ffff888057013fe0 R15: ffff8880570150b8 [ 2312.508846][ T5663] ? __pfx_rxe_dealloc+0x10/0x10 [ 2312.513772][ T5663] ? rxe_pool_cleanup+0x40/0x60 [ 2312.518599][ T5663] ? rxe_pool_cleanup+0x40/0x60 [ 2312.523423][ T5663] rxe_dealloc+0x25/0xc0 [ 2312.527640][ T5663] ib_dealloc_device+0x46/0x230 [ 2312.532475][ T5663] __ib_unregister_device+0x396/0x480 [ 2312.537836][ T5663] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 2312.543713][ T5663] ib_unregister_device_and_put+0x5a/0x80 [ 2312.549412][ T5663] nldev_dellink+0x21f/0x320 [ 2312.553978][ T5663] ? __pfx_nldev_dellink+0x10/0x10 [ 2312.559105][ T5663] ? cap_capable+0xb3/0x250 [ 2312.563603][ T5663] ? bpf_lsm_capable+0x9/0x10 [ 2312.568259][ T5663] ? security_capable+0x7e/0x260 [ 2312.573181][ T5663] ? ns_capable+0xd7/0x110 [ 2312.577572][ T5663] ? __pfx_nldev_dellink+0x10/0x10 [ 2312.582662][ T5663] rdma_nl_rcv_msg+0x38a/0x6e0 [ 2312.587410][ T5663] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 2312.592694][ T5663] ? __lock_acquire+0x62e/0x1ce0 [ 2312.597612][ T5663] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 2312.604005][ T5663] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 2312.610922][ T5663] ? netlink_deliver_tap+0x1ae/0xd30 [ 2312.616187][ T5663] ? selinux_netlink_send+0x578/0x830 [ 2312.621534][ T5663] ? is_vmalloc_addr+0x86/0xa0 [ 2312.626272][ T5663] netlink_unicast+0x5a7/0x870 [ 2312.631013][ T5663] ? __pfx_netlink_unicast+0x10/0x10 [ 2312.636278][ T5663] netlink_sendmsg+0x8d1/0xdd0 [ 2312.641019][ T5663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2312.646284][ T5663] ____sys_sendmsg+0xa95/0xc70 [ 2312.651026][ T5663] ? copy_msghdr_from_user+0x10a/0x160 [ 2312.656459][ T5663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2312.661750][ T5663] ? __pfx_futex_wake_mark+0x10/0x10 [ 2312.667044][ T5663] ___sys_sendmsg+0x134/0x1d0 [ 2312.671709][ T5663] ? __pfx____sys_sendmsg+0x10/0x10 [ 2312.676900][ T5663] __sys_sendmsg+0x16d/0x220 [ 2312.681481][ T5663] ? __pfx___sys_sendmsg+0x10/0x10 [ 2312.686569][ T5663] ? __x64_sys_futex+0x1e0/0x4c0 [ 2312.691487][ T5663] do_syscall_64+0xcd/0x4e0 [ 2312.695972][ T5663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2312.701838][ T5663] RIP: 0033:0x7fafb958eec9 [ 2312.706240][ T5663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2312.725824][ T5663] RSP: 002b:00007fafba450038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2312.734217][ T5663] RAX: ffffffffffffffda RBX: 00007fafb97e5fa0 RCX: 00007fafb958eec9 [ 2312.742162][ T5663] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 2312.750129][ T5663] RBP: 00007fafb9611f91 R08: 0000000000000000 R09: 0000000000000000 [ 2312.758085][ T5663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2312.766054][ T5663] R13: 00007fafb97e6038 R14: 00007fafb97e5fa0 R15: 00007ffc003f7bf8 [ 2312.774022][ T5663] [ 2312.777269][ T5663] Kernel Offset: disabled [ 2312.781569][ T5663] Rebooting in 86400 seconds..