last executing test programs:

5.809759307s ago: executing program 3 (id=4949):
mmap$auto(0x0, 0x400008, 0xdf, 0xfffffffffffffc10, 0xffffffffffffffff, 0x800008000)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r1 = socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, r1, 0x8000)
setsockopt$auto(r1, 0x6a, 0x3, 0x0, 0x4)
mmap$auto(0x0, 0x402000a, 0xdf, 0xeb1, 0x401, 0x1ff)
io_uring_setup$auto(0x1, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSTI2(r2, 0x545c, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = fcntl$auto(r0, 0x400, 0x1)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd6\x00', 0x8001, 0x0)
ioctl$auto(0x3, 0x80000541b, 0x38)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_SNDCTL_TMR_CONTINUE(r4, 0x5419, &(0x7f0000000040))
timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x4)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CHECK_EXTENSION(r5, 0xae03, 0xe9)
r6 = openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/udp_ports_table1\x00', 0x80, 0x0)
close_range$auto(r4, r6, 0x80)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cpu.pressure\x00', 0x183142, 0x0)
sendfile$auto(r3, r7, 0x0, 0xc01)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0)
keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e)
ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000f80)=[{0x403, 0x2, 0x9}, {0x5, 0x5, 0x2}, {0x2, 0x1, 0x2}])
r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r8, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
mmap$auto(0x0, 0x400005, 0x200, 0x9b72, 0x2, 0x8000)

5.166410831s ago: executing program 3 (id=4953):
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r0 = socket(0xa, 0x5, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
r1 = getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90)
r2 = socket(0x2, 0x1, 0x106)
getsockopt$auto_SO_BINDTOIFINDEX(r2, 0x1, 0x3e, &(0x7f0000000080)='/dev/audio1\x00', &(0x7f00000000c0)=0x8)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
r3 = bpf$auto(0x0, 0x0, 0x6f3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x7, 0x8, 0x4, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x0, 0x3, 0x1, 0x381, 0x6, 0x8001, 0x800010, 0x6, 0x10001, 0xefe, 0xfffffffa, 0x5, 0x8001, 0x62f, 0x101, 0x4, 0x200, 0xfffffff0, 0x1000, 0x7, 0x3, 0x3, 0x0, 0x6, 0xb94, 0x0, 0x1, 0x7, 0x3, 0xe8, 0x4, 0x0, 0x9, 0x46f, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0x80, 0x9, 0x65b, 0x9, 0x7, 0x81, 0x1ce8, 0x9, 0x34b5, 0xfff, 0x5, 0x4, 0x2, 0x1000, 0x9, 0x3, 0x400, 0xd, 0x0, 0x0, 0x207d, 0xa7a, 0x5, 0x5, 0x4, 0x80, 0x6ed, 0x0, 0x1, 0x1, 0x6, 0x4, 0x8, 0x1, 0x4003ff, 0x5, 0x8, 0x6, 0x0, 0xa, 0x2, 0x5, 0x400, 0x6, 0x4, 0x9, 0x29, 0x8, 0x30971ad3, 0x9, 0x78e, 0x7f, 0x0, 0x8001, 0x20000, 0x40, 0x0, 0x4, 0x5, 0xfffff43e, 0x0, 0x4f000, 0xfe, 0x5, 0x4, 0xd49e923b, 0x4, 0x80000000, 0x77, 0xf2, 0x0, 0x7fffffff, 0x7f77, 0x9, 0x5b, 0x8, 0x10001, 0x8, 0x0, 0xc2, 0x0, 0x5, 0x1000, 0x1, 0x7, 0x400, 0x8, 0x3], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca54ca1b0aefb60ffa8d501b1329af8d4108ac145aa564c6e7a09ea1b2dfae0f309c6ea508833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"})
poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6)
mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0))
r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x8040, 0x0)
io_uring_setup$auto(0x9, 0x0)
io_uring_setup$auto(0x3, &(0x7f00000002c0)={0xa, 0x2, 0x2, 0x8, 0x1, 0x80000001, r3, [0x8861, 0x896], {0x0, 0x3, 0x1, 0x5, 0x7, 0x3, 0x7f, 0x1, 0x9}, {0xfffffffd, 0x6, 0x80000001, 0x2, 0xf, 0xfffffffa, 0x4, 0x10001, 0x3}})
ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x403c6f2b, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto(r1, &(0x7f0000000640)={&(0x7f0000000400)="d48842bd8c3e0a244af1fbf41be564171d44fd653b1a120d482a433b9042ba2eee646acbd8583c24b70bd2026d087fa9ec3b3801285e61c3680cba76e69419", 0x2, &(0x7f0000000580)={&(0x7f0000000480)="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", 0x4}, 0x2, &(0x7f00000005c0)="fc2d4abe7a9517d8c7a76ae3e78faf948badb78eb0753ef19f7b713f2817a761f859eb3110ce3eea3780b0b1034d05c130536698188451d20dea595b00a0d23ac498c3c63fd7f23fa7215a6fcf20ef266e35bb7b65d0ae79109a14a74a228e686c5a922bd30bbb2b2bed80f9db4db7c6", 0x6, 0x80000001}, 0x6503)
acct$auto(&(0x7f0000000380)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/fo\"mat\x00')
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, 0x0, 0x4048000)

4.971740353s ago: executing program 3 (id=4954):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/035/001\x00', 0xa901, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)=' \f', 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0})
socket(0x3c, 0x3, 0x4)
r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
r2 = getpid()
mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb0, r1, 0x8000)
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x8866}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x1)
epoll_create$auto(0x4)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2a00, 0x0)
socket(0x2, 0x1, 0x106)
sysfs$auto(0x9, 0x2, 0x3)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = socketcall$auto(0xffffba07, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_GET_MSRS(r3, 0x8138ae83, &(0x7f00000000c0)={0xdd})

4.734067115s ago: executing program 3 (id=4956):
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x100)
io_uring_setup$auto(0x6, 0x0)
ustat$auto(0x801, 0x0)
close_range$auto(0x0, 0x5, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
settimeofday$auto(&(0x7f00000002c0)={0xe, 0x2}, &(0x7f0000000300)={0x7, 0x3})
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x205ac, &(0x7f0000000100)={0x0, 0x7}, 0x5, 0x0, 0x5, 0x4}, 0x20000005}, 0x5, 0xcae)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008)
r0 = socket(0x29, 0x2, 0x0)
r1 = socket(0x10, 0x2, 0x0)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="17000000", @ANYBLOB="7600279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfc2, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
write$auto(r2, 0x0, 0x6051)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
mmap$auto(0x0, 0x10008, 0x4000000000df, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0)
ioctl$auto(r0, 0x89f0, 0x24)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/020/001\x00', 0x209403, 0x0)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xc0482, 0x0)
ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000080)=0x7)
mlockall$auto(0x4)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
write$auto_sg_fops_sg(r4, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e)
io_uring_register$auto_IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000000c0)='4//', 0x7)
r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/wchan\x00', 0x2, 0x0)
read$auto_proc_single_file_operations_base(r5, &(0x7f0000000040)=""/228, 0xe4)

2.301966228s ago: executing program 1 (id=4977):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x7c)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="130026bd7000dddbcfc23e16000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x20040894)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0x1000}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000180)="62d82947186c29a7", 0x1ffffffff}, 0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x3f, 0x0)
r5 = fsopen$auto(0x0, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x4, 0x0)
r6 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0)
fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r7 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r7, 0x0, 0x1f40)
r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r8, &(0x7f0000000240)={0x0, 0x7}, 0x3)
shmctl$auto_SHM_UNLOCK(0x2, 0xc, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x183841, 0x0)

2.25661866s ago: executing program 0 (id=4978):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
poll$auto(&(0x7f0000000040)={r0, 0x1, 0xa}, 0x5, 0x108)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd3\x00', 0x0, 0x0)
socket(0xa, 0x801, 0x84)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x2, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000001240), 0x40, 0x0)
ioctl$auto(r1, 0xfffffffa, r0)

2.195840884s ago: executing program 2 (id=4979):
r0 = socket(0x15, 0x5, 0x3)
socket(0x1d, 0x3, 0x1)
setns(0xffffffffffffffff, 0x60020000)
socket(0x1d, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7073000000001400000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000380)={0x2dc, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_MASK={0x63, 0xd7, "88971e5cf4917e0c8538bac323512c70c1456c6d605429dd8cf1375ca1cad439cc6d7c755f0290d467e5587aa6ed7f709d672af5ccfdccc57065469b9006edeb0c94c1fdb06476b05b104000a568608f7b53017aa57d158edf2124d3513fce"}, @NL80211_ATTR_AUTH_DATA={0xdd, 0x9c, "2c26b515091231a7204afaec6918826a4daeaf0e22052923cdd758793c5d0b2f76c0e1c6ac985af349143be51c29f99c92a6b9d2d213f6fbb7ce9faf4256826840176f3b6c36fec5553c3fb3fee17662196086bb5677214ba9e9727b65c25a8f7aabeb0e573a2bbab5342c221d7c1f34c8584b382cf24eb2c48860fd06b5ee1bffa99212937e5c6eb1d6b85b2345aa0deec5dcd818cd68762c29ca670412d6fffabfca1025e13dc40583b55d0d39c29c31aeeb7e7495da7e7c29f0fb8e7f78e40038052ffab4322f7b546ed862135a0af5f351cad87b55b833"}, @NL80211_ATTR_TX_RATES={0x159, 0x5a, 0x0, 0x1, [@generic="f9cf4ff3231959e98f5d6102fb59e2ac8b4be1fe9af733670223a2d7055019e9b60f45bcdbc69badbe77b07dffea94301059fd476f2e70ab33e17f6374688add379ded6dd6bc56887fe91e68c0a9436f149605990e81524c3a9a9f5381d11e4bb63a93cc4d37a2c2205f645511a4b921ef", @generic="9fb320d170c6609007078d1e5504cad94fb3676adb006d8ad0f3491bb668f48325498d628d1e3ad43acc131fb835977a12a94d611ccf1831b5a135e289f19c096dd682a903cd56b311bf9e4d68508f5ec1988a2a53712e768a1751f6fa3ed4bec7f2c1f45878a3863918395fc0eaa6f9569363dd72b95b1000462274a4d52fa036ef67205acc334da2362726d1b4dfaa53795b320d827ffc64f23766ef2cfefdd732075d4818f4805eefea60b810849bc2bd485fd8c3680f4466a443c642007d197d9070e78ae52df25eed2504783e55c2151bf01cd149a959416657a2a803340866c243"]}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0xa}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x67a}, @NL80211_ATTR_VHT_CAPABILITY={0x4}, @NL80211_ATTR_FILS_ERP_REALM={0x4}, @NL80211_ATTR_PREV_BSSID={0x4}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x840}, 0x50)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x40, 0x801ffdf, 0xffffffff, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3b9, 0x0, 0x0, 0x0, 0xdc1, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000]}, 0x5, 0x2)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000)

2.103161713s ago: executing program 2 (id=4980):
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000180), r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40c8}, 0x4040004)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f00000001c0)="8d10a50b60e1380b545f89c54bab4fbfb3e0feda7edd7e46ae550aa997ff56be56fea27cb83751daf5f24ad06844d84862e0d8ddb179f76038831d67eaac8ab77003e5fc4eaf9d788521bd99b2729d94e367eabcdce535dd22dee07e455f0d28213b56b89d026239a1a68f51487800b3643829c256b36302e01c43618a797b05025b5feebfc59d59d2d916fd4248245863a0fd01593abab17301a9c36f0ec8bcbd4d8e6757f5b19d5092696e8e3e7ae1179791a4d12d4b6e213364b1f45cbae151889a10e446fe3ddc6e35545780a45518a4", 0x3, &(0x7f00000003c0)={&(0x7f00000002c0)="a05773e17fc3f097c1dda9674cdda8495227cbf6143b1c9daeff868eb2521113ee53fe55139a6cafe81097998f467936029d7cc2a59bd8df4aac7fbffdb14dfbc4dabe4693db529a457b072d24a74a8cc4064a179611df8dbc3eb7d0d68f653f5c970fe5e8039b309bf88b2d95319ac03fe3fed98f97feb30230ed7bc44c009694c3a27e9526df2fdf2b2d30adf6f4e00f90211708f37043fdc4153b871250e305e2c21184eaa67cb94b2d8e79f89ec13959f9918ffa08e8a519c2adc3e53ac9a46dd3476fb8cf5ae99cbd9397b8187ea2e9c37e5535d88c6ce6ca1e247930b3585aa92c14", 0x3}, 0x5, &(0x7f0000000400)="2491e2f933b13df8b9767a34918374d206e5f3c766ee0baae721e41d7b28fc255fc9387e8c68e335e84ca7720ac49cdfdff203042b32ffe2ddf3fee62aa25966f135af5acda0f5ee35af2663f7f69d40ea81d8bce8fc80c0add9b8", 0x8, 0x1}, 0x7}, 0x5, 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
ioctl$auto(r3, 0x4018620d, 0x9)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
socketpair$auto(0x5, 0x205, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
getsockopt$auto_SO_SNDLOWAT(r0, 0xd0, 0x13, &(0x7f00000000c0)='/dev/binderfs/binder1\x00', &(0x7f0000000100)=0x6)
open(0x0, 0x422240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

1.837392489s ago: executing program 1 (id=4981):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084)
r2 = socket(0xa, 0x5, 0x84)
sendto$auto(r2, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f)

1.807987631s ago: executing program 0 (id=4982):
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
fanotify_init$auto(0x1f53, 0x2000000000002)
open(0x0, 0x4242, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r1 = epoll_create$auto(0x8800001)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
epoll_ctl$auto(r1, 0x1, r0, 0x0)
r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0)
fcntl$auto_F_GETPIPE_SZ(r2, 0x408, 0x4)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x2, 0x1)
io_uring_setup$auto(0x2, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop4\x00', 0x141100, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sysfs$auto(0x2, 0x4a, 0x0)
r3 = fsopen$auto(0x0, 0x1)
read$auto_stats_fops_2(r3, &(0x7f0000000280)=""/167, 0xa7)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3)
sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x180, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_VIF_RADIO_MASK={0x8}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xff}, @NL80211_ATTR_FILS_DISCOVERY={0xe8, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_TMPL={0xc3, 0x3, "3b46c91561a05a106688654d9678aabb1b055405552d15e6cad59e361ea6724b8eabc6e85a3abf88dae634c8a9ff4ee317f656dc465d5151c0f61da1399ae69297852aea3d75c563138a06e3de252037af6b0cf23a1b796595c45a0ff6f524969504de123547bff26d195913a96b053c39e98f8ab2ecbcda799448d20cec7ee09adc76627c1ee4212c3a20e733ed88eb6c6000024717e6038f253a950271c29c4d024b574180bf0c63e6674160493c75a7334a4ab49dd37159b98e79a40099"}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0xb45}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x1}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0xffffffff}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0xa}]}, @NL80211_ATTR_MBSSID_ELEMS={0x55, 0x133, 0x0, 0x1, [@typed={0x8, 0x142, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x44}}, @generic="5724710430665511008c105dc48ac3eb72fbdf3dc6ad4a0b1c37ddfa67d2f0f306e68a93d739e0e411687decafdaeb94ef341a2ce67636a8ed994b9c4f9018ee90dccfd32effcea8e2"]}, @NL80211_ATTR_FTM_RESPONDER={0x1c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x16, 0x3, "b78442bae3b81dfb353a0544254c8f529092"}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4008081}, 0x4000)
close_range$auto(0x2, 0x8, 0x0)

1.740201936s ago: executing program 0 (id=4983):
socket(0xa, 0x801, 0x84)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x1)
setfsuid$auto(0xee00)
set_tid_address$auto(0x0)
r1 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r1, 0x4, 0x7ff)
openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
read$auto(0x3, 0x0, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r3 = socket(0xa, 0x3, 0x3b)
sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, 0x0, 0x24040000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x68, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x24, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x18, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800)
r6 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000200), r4)
sendmsg$auto_NET_DM_CMD_STOP(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0xffff}, @NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0x9}, @NET_DM_ATTR_SW_DROPS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008010}, 0x8040)
sendmsg$auto_NET_DM_CMD_CONFIG_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x71}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x884)
sendmsg$auto_NET_DM_CMD_CONFIG_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_UNSPEC={0xa8, 0x0, "5623adcaad55032742e6b1b420053c75432bb7e2d9549e249056004235c572c8771f9225c6c36d8a6ad20895a2bc3558bd33b4006bab12488e4e4f8d1c72a25faa8f816642b247ffe5ae37920cea5070be33e32e9e54a6985e0d5ebf940080152b6e07ee5f6deec85db7e21cf764b317e4e4b86e4684d1c735debb45063dd0d532561a8b8e947328eaa00d0d33fb5a3da569af0ae549b3c6a9333187874e859097d4f3ac"}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0x10001}, @NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0x3}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x20004001)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r0, 0x4004ae8b, 0x0)
r7 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
r8 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/printk_formats\x00', 0x100000, 0x0)
pread64$auto(r8, &(0x7f0000000040)='],{(@&&\x00', 0xa1fb, 0x1)
read$auto_component_list_fops_(r7, &(0x7f0000000100)=""/78, 0x4e)

1.189545607s ago: executing program 1 (id=4984):
r0 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = setfsuid$auto(0xffffffffffffffff)
r3 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/binderfs/features/oneway_spam_detection\x00', 0x216000, 0x0)
r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim0/health/break_health\x00', 0x101000, 0x0)
msgctl$auto_IPC_SET(0xc, 0x1, &(0x7f00000002c0)={{0x2, <r5=>0x0, 0x0, 0xa6b, 0x0, 0x2, 0x3}, &(0x7f0000000240), &(0x7f0000000280)=0x81, 0x9, 0x1, 0x6, 0x7ff, 0x5611d998, 0x6, 0x8001, 0xd6c, @inferred=<r6=>0xffffffffffffffff, @raw=0x6})
sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000015c0)={&(0x7f0000000340)={0x1258, r1, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x10000}, @NL80211_ATTR_MLO_TTLM_ULINK={0xb3, 0x149, "32329cd14985d0bea541016055adba93e47cda03ec68d29e777e9d0b1816254fc6121ec6028e7de537c38355ccbb52ab2161b456b24f72d5ab8c72e62aa59848ad11604987833998e78a8e1b49b0da6b4d28c2cbb9b70ad12f4fcf2ab684ae1fc9a84d9f219f30ac080d7a7cadc5a7ca85acee4f3e670f7e369905cb4e3466d43b37f5f0c7c1275bae49084ef7fd5ad579a962bc1ea4c91bbe4cc6977b0ef28fe951877eb98efecddcf7febb2b94d3"}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1188, 0x75, 0x0, 0x1, [@generic="38d6b497166af0ca0feedbbb888aa7807ac0", @nested={0x4e, 0x126, 0x0, 0x1, [@typed={0xe, 0x13e, 0x0, 0x0, @str='SMBD_GENL\x00'}, @typed={0xe, 0xb5, 0x0, 0x0, @str='SMBD_GENL\x00'}, @typed={0x8, 0x36, 0x0, 0x0, @uid=r2}, @nested={0x4, 0x45}, @typed={0xe, 0x85, 0x0, 0x0, @str='SMBD_GENL\x00'}, @nested={0x4, 0x105}, @nested={0x4, 0xdf}, @generic="2426b806268a"]}, @typed={0x8, 0x6f, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x20, 0x6d, 0x0, 0x1, [@nested={0x4, 0x105}, @nested={0x4, 0x13c}, @nested={0x4, 0x40}, @typed={0x8, 0x10c, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x34, 0x0, 0x0, @pid}]}, @generic="e381d1caa358728f8add0f9d205a7e537e3167ab9dd2f8607144c23c17bc17ae32d46ebaab56100bedf5c14b4af60519a5f6c6e7c3a7b86f2dad9cb9180c80e0c0f9b81a88235417e298dd9183affb9a0438e1e6ab36678a7fad83fd2a6de4c01c64ebf0297a59836cdceb085e69370fb887b17b8cac9af2ede0c44143b162e570922e6c1a71683c6c374d53a1dc63322df2e01cd22f1612ae43b2135af7a1da019de629a7d835eaad7c1d4920b92a4f413dc5548103cdb56753e7d0d7f69d52f66f525f91245dadda9ae8e2c689a3e9c7be8d18694bb7b5d2863a89db06", @typed={0x8, 0x15d, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0x14, 0x14f, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x13c, 0x0, 0x0, @uid=r5}]}, @generic="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"]}]}, 0x1258}, 0x1, 0x0, 0x0, 0x1084}, 0x80)
sendmmsg$auto(r4, &(0x7f0000001800)={{&(0x7f0000001640)="5777de5d0c371181058340341b367c605a93eeb0b940304fbd90db950bf34fee8df147089570f7b2d3ba3b288569f1892affc44b0f3498a6fed6783cc591da0bfc06d7732c8e499422b153b7c8e7ce96e24917a06bbface71618192ebc9b4d4667262b8d98b499236c0f02f5693d272a6d98dd78f5afd9798c783f892b334b936fa07cc660c09bcb4b4815ac9fafcccb1305e3de47683fc827d053e1c39ee60ffeab367acc34888ee92b58a36d329df1ce107bdb604310579469", 0xdc, &(0x7f0000001780)={&(0x7f0000001700)="28958386d15836b3cd80da92d600373a253f474e44398a9a7dfa2380dca5ac9f279522f3954727ff0a0ade9fb6bf33e28d16f249a065b93a03531b19615fd529c48eb723781085e88e2cacab3c3c82dbdc38"}, 0xeff9, &(0x7f00000017c0)="13158d542d5113621ba09242fbc7bb38", 0x80000001, 0x7}, 0x1}, 0xfff, 0x400)
r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001840)='/dev/v4l-touch9\x00', 0x200000, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001880), r8)
connect$auto(r8, &(0x7f00000018c0)=@ethernet={0x6, @broadcast}, 0x89)
r9 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000001940), r8)
sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r8, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r9, 0x10, 0x70bd29, 0x25dfdbff, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x49, 0x0, 0x1, [@typed={0x8, 0xbf, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x1)
r10 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000001a40), 0x612280, 0x0)
openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/dri/vkms/Virtual-1/vrr_range\x00', 0x101200, 0x0)
write$auto_proc_timens_offsets_operations_base(0xffffffffffffffff, &(0x7f0000001ac0)="6447013943bc8bbf6fa3c47c9c27313f9d4a427c8f6cc673c4005fd9900c001bb416d3be163c54eb52fb15f14efef8a7a9e2b84c39474303c07a6b9cc1e54e018d0bf28d97464e7dc3f98ea19383fcb03e826a1cc0c87f7d78de0bae9974fc5e16381ffb337cb9dd0c79cb9c8da40f18e01b0184c0ef0e481e29a80f0c613342ee74cff97d2ae9cc45078d412e6efe061aae1cc743e0a1bdb8c1a2201c212e00881bee39084ce0b1aabe6cc177b62a04e76ea247cd3ccc2a517eeb9db776e080c323ebe44c0c9ee69d844186d9bf623ccfe4aa3ac565fe4360e634df3550fe1b57e843afd884b7594e5e02b8c87729637b880872c5f651b5f7", 0xf9)
r11 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sda\x00', 0x10000, 0x0)
mkdir$auto(&(0x7f0000001c00)='./file0\x00', 0xd)
ioctl$auto_BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001c40)={@raw=0x6, 0xb, 0xfffffffffffffffa, @unused, @devid=0x2})
connect$auto(r11, &(0x7f0000002c40)=@vsock={0x28, 0x0, 0x2711}, 0x3)
pwritev$auto(r7, &(0x7f0000002d00)={&(0x7f0000002c80)="49aa6a19b16c18ee961bc1ae01508c684c8216d30ffbd8d33404d470a7e3b16ce34ccc821218ba0be8473b0287cdb45852bdcf1c8fd523d6190bb99e786639ba0e8ab3d2a8c788370a598c9fa35b2c345fdd019f50c40c4f983e16546ec09c7aa56757520fe69dc8e44efa82288fbee19518c641de78e5941e8dd38b22", 0xfffffffffffffffd}, 0x6, 0x3, 0x1c5e)
ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, &(0x7f0000002d40)="692fc89b2cd7a713d0daf2ba8a0c6ffbda726dc640e98f95f1c5c64733673113a56c761a2b19d42c9d5b8f9a020c3a91568461a3e4ca711f3fa34043262480d7fd6efef09348f298e8e768c4421d189c802ff24de22d0b66a4a377c0ebbaf204335a1aeb557b5cc494f1741d1ccf683e3c5160fbf9d816318d766c78c72628c2cab5665f2763be6bbf61f7eec48303cd1750c66ab81c931085d39326a8aa2d890415d8a7e5ea031e9a53cfb177ad8fb54fb7e9a4d7ce53325021a594e5a3cd88feba944c309359bb7d5c")
r12 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000002e40), 0x204201, 0x0)
ioctl$auto_BCH_IOCTL_DISK_GET_IDX(r12, 0x4008bc0d, &(0x7f0000002e80)={0x9})
recvmmsg$auto(r4, &(0x7f0000004040)={{&(0x7f0000002ec0), 0xc2c, &(0x7f0000003f00)={&(0x7f0000002f00)="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", 0xea7e}, 0x9d, &(0x7f0000003f40)="97b720aa357c57a83fa4f5f59e2cc867de44176a41b08f4baa2dfb8e600d893517bd364e1f1df1f087164b64f0dd54fe4be5c69bad7033e6848aa19dd7a56e1bb98c0b65dbf64da076f44125ee0c58ccc45ea967ff8ac96fb3267736986ac5db423b7f81ab2e29d4231b0a4c101d64cc025d993b68bf43993480b58b6e89b81fc7cc6ee16e79f50c34be9de59d4c53c295235dbbd68f2c1725e360eb15d791668e8eb37c589724dcfc5766559e1d6fd9714dc8ff304a871cff5936eb6d56b90469b82ab2092820d046bd92b411e291cfa28ac1bd1b9b6a", 0x8, 0x800}, 0xdcd3}, 0x8000, 0x5e7, &(0x7f0000004080)={0x1ff, 0x10000000000000})
r13 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000004100), r8)
r14 = waitid$auto_P_ALL(0x0, 0x2, &(0x7f0000004140)={@siginfo_0_0={0x0, 0x9, 0x9, @_kill={r6, r2}}}, 0xa0bb, &(0x7f00000041c0)={{0xde0d, 0x2}, {0x4, 0x9}, 0x100, 0x4, 0xfc, 0xf, 0x9, 0x80, 0x7, 0x5b0af44f, 0x7, 0x0, 0xe9e, 0x2, 0x1})
sendmsg$auto_TIPC_NL_SOCK_GET(r8, &(0x7f0000004d40)={&(0x7f00000040c0), 0xc, &(0x7f0000004d00)={&(0x7f0000004280)={0xa44, r13, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1a2, 0x7, 0x0, 0x1, [@nested={0x3a, 0x154, 0x0, 0x1, [@nested={0x4, 0x113}, @generic="51c6b42d3e6edb44eb1bf3a9d4d6056ef0ff815caae629b1c6357e697c3f173caece31f22fc891392887", @typed={0x5, 0xdc, 0x0, 0x0, @str='\x00'}]}, @nested={0x51, 0x18, 0x0, 0x1, [@generic="49fb2aafaaff751fa6d94b723eccc6bbd83bdbda5d5e218e98f302bbf4170a44db30053c66b749637365dd14511c679da4fb2ee6d2e352d4924a9e022a37374c56cfe2ab2c145bea0fc374696c"]}, @generic="3b29ab673aed131290f024e4fc902ccf5d151859de859099209bf7bdb3cd4369ec186b0331c6872fc55a42c3ee5cba989095e388aac2b9f9f267bd423d9e9868a480a5c8b3af6f96fa03bb8093abc3748bd45c43d4fb9a13a7854ba022cb", @typed={0x8, 0xbb, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x3f, 0xf4, 0x0, 0x1, [@generic="119bc55d1cb954ef5fb0a9310e7762e2ef9d63c3a2dd4ca5d6604b821e458d633a5bbccd81f4fa11eb2c7adbefc5c1041c8d9b904aa6a6b2384d82"]}, @generic="d87e23912af2ea69d70ace235513a49b1df692a24323628c7414dfd7b3bd9f7f3173eb080159022a6713b18afb5fd2be13ea0836357d60759491c6c500d22879d00910b350646291d845c5c318bb06a9c345aac071d98068", @typed={0x8, 0x91, 0x0, 0x0, @fd=r10}, @typed={0x8, 0x137, 0x0, 0x0, @uid=r2}]}, @TIPC_NLA_MEDIA={0x3ba, 0x5, 0x0, 0x1, [@generic="b53a5be5bbfcde46ea65821e8f87fa26fedbda5bc06a9a70add71f6e819c58fbb1ee15017fac3614d0aae4a3592cb0c4e38ee7cd014d47ecdeb5b7a6fee3fa844c4873fafc290acc65834d340f536fba551c80e5cd19dfccf6ec6cd976148630e248fea35c56b8e2", @generic="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", @typed={0x8, 0x22, 0x0, 0x0, @u32}, @generic="dc33744851a2478571ebc1381b8a642cc3428958d10f418dfaa6687f0bff3e800f33f73bc21a849ed6118c164b76ddd7259395c1302776a23f1aba3ccc592b1ce7f5cb94a9b1992c82bf1f033b5489fc5caada67835a519dd752a97706aeaa2cc256b1", @generic="5a9a871766150009895f2cec266cabb00e9bcf4a2b7f78b6064aa3049e1662841cf0e036b0977c8d698d59c3394e248aa8eac850a4d05f0cc6697e0f9fe81bd7ea831b147ccdd6c0a0ae5e6abec64af88afe6b75bd0ef02ec8fba09a057a8db1c7a848966f22d42250fe51cb3cd742ed0440e4c8715c31040f33963d56c84d3ee73efe94e07306d246cff0e22fd648ba0aae8f69ac77ff27c313570e30828c42b11e01bfff39c7b59dd30ec1d6ce7502672b", @typed={0x14, 0xdd, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x60, 0x13c, 0x0, 0x1, [@generic="68078f32d5dabb57f65a302b43d3c4916d0bd6b75859eb3ebd1793843bf68fe328b59425995f0e9319f2f3e27e504b7a6a4ee3b2393db167fef80d55af66c21b292ec46ae78edbf78b7ca75510d8678ae2f226816f345bfa2b5830b9"]}, @generic="14febc35693039b79e14e8479d19eebb219dd0d0a055ed7b71bdabc7077d03354c23bcbec5cf8811435615da172b973e62f9c0d4d1e7c30c028847d13ae43e77ac755bc8db7e9d68fa9bb613657876f6761b0204805396a5ddd5bf051878ae6a6c26998ae14b01561f26958a4b8134aa7be80e0e31fcdd29d4607fe88e72968b1d949ede977704c613b5af9f01733f09bd853bd6d15b3a792b90eba0bf2f9b3406c490cc898e7894648ea02bb44a1e28eb3fe5642b72ec83ad95ab3296c58157c143"]}, @TIPC_NLA_NAME_TABLE={0x38b, 0x8, 0x0, 0x1, [@typed={0x8, 0x107, 0x0, 0x0, @fd=r10}, @generic="d5d33c5e254034e419e70af84bd6bf9ab957ec484808be9f680ed7f2852d356bfc4c13199d23ae4f1536f7b25bd5972b20c73b73ae2b3ef48834750b271044f277817116723aa7234acdf32a1cea6e1eb82093e8a7be43d62ce5891bcdb642c63d9742ee71948f1ffd673cc309d3ead6d8faa0fcc9663bfe8c161af663290fd69ec79a801e05cb552424f6b1a43e3e15b861ca", @nested={0x2ea, 0x3, 0x0, 0x1, [@generic="09487ea306e77984ef0bce579c5c208294ec233ce43de774069ad9e964b4006b3d4b81f7c2c61f9f42b86c7d3ac482dd16f7e973ed028e6069027e67ab5e900de32166e2f5ed75cdd8eaebab70a90240c6480d9a7262ccc257de20f23c6af6daffd3a07cbf07be6304925097f49bf0bc7c5d0f08f2b316a2847e9120c4efda1c03c1e61e1d22c31696c23e023558f1c7d80822cb72f70eed0c2cc97cee51657a54d65c600d0d39d10d7b275789785cbf5dc665244fb0eb0f2143da49d983ac8947e6e4fdcf35993b61a88cdf2ba51dcca92fbec45da6f0894a5697f5723f281d679b0e9eb8ffcf6c3844b42edeabc629c55ae838", @nested={0x4, 0xd3}, @nested={0x4, 0x135}, @generic="48ab7863dab96148fc0d569e6e9704c10b999998ac1965126e95759f781a78e133c19cf9c7467335e796413d40dcfa8c81640f0d78e4d962c022a5fc35a912418e9c4ff0041f71ab01be4c2a593775d75165a13950fa43c61ef2d6a1dc6b6a19099026b895d81a9d7dbee183945a2057b063d398be3ca51a18e21fc1efa3253a2bac2504824e3603196fd3", @generic="b64830c96695744fb34749cc6065067b6aa5cf2f380a18590a9d42f88066cb0b319299248b64839405f72b3b261f991d66e1342f2d068ed40149399a120c60101a19bd495ce80cf506c04208f3cb096a49e4a30ebcc9f7f358a1ad50db3e239d3eab36705a73f811f0ee37cab19ecc8afeddacd654ac42ec9b69b18b29e56f612ab7ce361d0cf2f9b6c884c01629884470fe610763ffd4aba57c2c64f89eaf4eb83f7cb3dfa2c41c6a972c993a807c56955c57c3bcb9c21843f33ad8e37aef29b25bc031a2366a880f7c79585ba94adccb61fa8e49df20c500de9f07568aa247a9b59a0053ecd7341bd209fbf8a5", @generic="17412351d6261fa6a898808d7d51fd8746a00da21379502720efc4e07cb1a8b5fe56cb3cc96136a791683b08ca5ce17b3d464bee3fc97b5e9ceddaec1b5787888ea1a1163e7b251883884c0015fab52027c7524c50caa46bc4873cd06bfd28e9223b88bc53f6fa02328abff6453083bf1f"]}]}, @TIPC_NLA_NET={0x144, 0x7, 0x0, 0x1, [@typed={0x5f, 0xf6, 0x0, 0x0, @binary="bf0b5f073334c980a4344a56d2e4c2aaa68a457e4e43f691b7ce023c0b5a759294c3fd7c430c5f79335552a5ac0b0d00c062cf41e3ea305b43a365d8141328b504ce48e55f0b2ddff7a7c6396f830945c2d2284640b44f69057d66"}, @nested={0xde, 0xa2, 0x0, 0x1, [@typed={0x4, 0xbc}, @generic="a41b29dc7737fa1a324b6a03694b39398200fff27b5130cabb008166ca3d7cc226643f15e2f0fea732ebfb29df3cef3ab4267f0663f8058cc3a5fdc5833edde436c7fa85cd6d048418e319dc5bce5d817677df38f2753ad57a20403165a70defb91fef4cd4ec57cf9e00a784335bea3859b3701aeca21d30a3aa414cfeea24fdc09b298e4f780e33240e6644cd496ca55fcc74942a9cc0439f64ff5f70efa03d52b1370613efb1345f47c788de089d18df1c55c8a4d27aa1b9033c861552453cc09b8a4f19c9cab75527e2903a0b", @typed={0x8, 0x123, 0x0, 0x0, @pid=r14}]}]}]}, 0xa44}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

1.119907073s ago: executing program 3 (id=4985):
waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x863, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x1)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x200000001000000, 0xfffff7fffffffff7, 0x3ee)
r0 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci0/msft_opcode\x00', 0x0, 0x0)
read$auto(r0, &(0x7f0000006740)='^%-[)>\'\xdf\x00', 0xffff)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
bpf$auto(0x6, 0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2)
mprotect$auto(0x0, 0x806121, 0x6)
r1 = io_uring_setup$auto(0x5, 0x0)
close_range$auto(0x2, r1, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x100, 0x0)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0)
r2 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x200, 0x1, 0x9, 0x7, 0x3c, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x1, 0x9, 0x4, 0xb2, 0x9, 0x0, 0xfffd, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0xfffffffffffffffd, 0x6, 0x4, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2000000ffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x5]}, 0x205, 0x2000000d)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0)

810.989585ms ago: executing program 2 (id=4986):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/035/001\x00', 0xa901, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)=' \f', 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0})
socket(0x3c, 0x3, 0x4)
r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
getpid()
mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb0, r1, 0x8000)
ioctl$auto(0x3, 0x400454ca, 0x38)
epoll_create$auto(0x4)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2a00, 0x0)
socket(0x2, 0x1, 0x106)
sysfs$auto(0x9, 0x2, 0x3)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socketcall$auto(0xffffba07, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_GET_MSRS(r2, 0x8138ae83, &(0x7f00000000c0)={0xdd})

682.369788ms ago: executing program 1 (id=4987):
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r0 = socket(0xa, 0x5, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
r1 = getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90)
r2 = socket(0x2, 0x1, 0x106)
getsockopt$auto_SO_BINDTOIFINDEX(r2, 0x1, 0x3e, &(0x7f0000000080)='/dev/audio1\x00', &(0x7f00000000c0)=0x8)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
r3 = bpf$auto(0x0, 0x0, 0x6f3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x7, 0x8, 0x4, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x0, 0x3, 0x1, 0x381, 0x6, 0x8001, 0x800010, 0x6, 0x10001, 0xefe, 0xfffffffa, 0x5, 0x8001, 0x62f, 0x101, 0x4, 0x200, 0xfffffff0, 0x1000, 0x7, 0x3, 0x3, 0x0, 0x6, 0xb94, 0x0, 0x1, 0x7, 0x3, 0xe8, 0x4, 0x0, 0x9, 0x46f, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0x80, 0x9, 0x65b, 0x9, 0x7, 0x81, 0x1ce8, 0x9, 0x34b5, 0xfff, 0x5, 0x4, 0x2, 0x1000, 0x9, 0x3, 0x400, 0xd, 0x0, 0x0, 0x207d, 0xa7a, 0x5, 0x5, 0x4, 0x80, 0x6ed, 0x0, 0x1, 0x1, 0x6, 0x4, 0x8, 0x1, 0x4003ff, 0x5, 0x8, 0x6, 0x0, 0xa, 0x2, 0x5, 0x400, 0x6, 0x4, 0x9, 0x29, 0x8, 0x30971ad3, 0x9, 0x78e, 0x7f, 0x0, 0x8001, 0x20000, 0x40, 0x0, 0x4, 0x5, 0xfffff43e, 0x0, 0x4f000, 0xfe, 0x5, 0x4, 0xd49e923b, 0x4, 0x80000000, 0x77, 0xf2, 0x0, 0x7fffffff, 0x7f77, 0x9, 0x5b, 0x8, 0x10001, 0x8, 0x0, 0xc2, 0x0, 0x5, 0x1000, 0x1, 0x7, 0x400, 0x8, 0x3], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca54ca1b0aefb60ffa8d501b1329af8d4108ac145aa564c6e7a09ea1b2dfae0f309c6ea508833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"})
poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6)
mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0))
r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x8040, 0x0)
io_uring_setup$auto(0x9, 0x0)
io_uring_setup$auto(0x3, &(0x7f00000002c0)={0xa, 0x2, 0x2, 0x8, 0x1, 0x80000001, r3, [0x8861, 0x896], {0x0, 0x3, 0x1, 0x5, 0x7, 0x3, 0x7f, 0x1, 0x9}, {0xfffffffd, 0x6, 0x80000001, 0x2, 0xf, 0xfffffffa, 0x4, 0x10001, 0x3}})
ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x403c6f2b, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto(r1, &(0x7f0000000640)={&(0x7f0000000400)="d48842bd8c3e0a244af1fbf41be564171d44fd653b1a120d482a433b9042ba2eee646acbd8583c24b70bd2026d087fa9ec3b3801285e61c3680cba76e69419a3e1b41c88b8dca2954f", 0x2, &(0x7f0000000580)={&(0x7f0000000480)="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", 0x4}, 0x2, &(0x7f00000005c0)="fc2d4abe7a9517d8c7a76ae3e78faf948badb78eb0753ef19f7b713f2817a761f859eb3110ce3eea3780b0b1034d05c130536698188451d20dea595b00a0d23ac498c3c63fd7f23fa7215a6fcf20ef266e35bb7b65d0ae79109a14a74a228e686c5a922bd30bbb2b2bed80f9db4db7c6", 0x6, 0x80000001}, 0x6503)
acct$auto(&(0x7f0000000380)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/fo\"mat\x00')
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, 0x0, 0x4048000)

624.758421ms ago: executing program 0 (id=4988):
mmap$auto(0x0, 0x20009, 0x4000000000cf, 0xeb1, 0xffffffffffffffff, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084)
r2 = socket(0xa, 0x5, 0x84)
sendto$auto(r2, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe80003f00"}, 0x1f)

614.984631ms ago: executing program 2 (id=4989):
r0 = socket(0x15, 0x5, 0x3)
socket(0x1d, 0x3, 0x1)
setns(0xffffffffffffffff, 0x60020000)
socket(0x1d, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7073000000001400000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000380)={0x2e0, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_MASK={0x63, 0xd7, "88971e5cf4917e0c8538bac323512c70c1456c6d605429dd8cf1375ca1cad439cc6d7c755f0290d467e5587aa6ed7f709d672af5ccfdccc57065469b9006edeb0c94c1fdb06476b05b104000a568608f7b53017aa57d158edf2124d3513fce"}, @NL80211_ATTR_AUTH_DATA={0xdd, 0x9c, "2c26b515091231a7204afaec6918826a4daeaf0e22052923cdd758793c5d0b2f76c0e1c6ac985af349143be51c29f99c92a6b9d2d213f6fbb7ce9faf4256826840176f3b6c36fec5553c3fb3fee17662196086bb5677214ba9e9727b65c25a8f7aabeb0e573a2bbab5342c221d7c1f34c8584b382cf24eb2c48860fd06b5ee1bffa99212937e5c6eb1d6b85b2345aa0deec5dcd818cd68762c29ca670412d6fffabfca1025e13dc40583b55d0d39c29c31aeeb7e7495da7e7c29f0fb8e7f78e40038052ffab4322f7b546ed862135a0af5f351cad87b55b833"}, @NL80211_ATTR_TX_RATES={0x159, 0x5a, 0x0, 0x1, [@generic="f9cf4ff3231959e98f5d6102fb59e2ac8b4be1fe9af733670223a2d7055019e9b60f45bcdbc69badbe77b07dffea94301059fd476f2e70ab33e17f6374688add379ded6dd6bc56887fe91e68c0a9436f149605990e81524c3a9a9f5381d11e4bb63a93cc4d37a2c2205f645511a4b921ef", @generic="9fb320d170c6609007078d1e5504cad94fb3676adb006d8ad0f3491bb668f48325498d628d1e3ad43acc131fb835977a12a94d611ccf1831b5a135e289f19c096dd682a903cd56b311bf9e4d68508f5ec1988a2a53712e768a1751f6fa3ed4bec7f2c1f45878a3863918395fc0eaa6f9569363dd72b95b1000462274a4d52fa036ef67205acc334da2362726d1b4dfaa53795b320d827ffc64f23766ef2cfefdd732075d4818f4805eefea60b810849bc2bd485fd8c3680f4466a443c642007d197d9070e78ae52df25eed2504783e55c2151bf01cd149a959416657a2a803340866c243"]}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0xa}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x67a}, @NL80211_ATTR_VHT_CAPABILITY={0x4}, @NL80211_ATTR_FILS_ERP_REALM={0x4}, @NL80211_ATTR_PREV_BSSID={0x4}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x840}, 0x50)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x40, 0x801ffdf, 0xffffffff, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3b9, 0x0, 0x0, 0x0, 0xdc1, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000]}, 0x5, 0x2)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000)

432.665281ms ago: executing program 2 (id=4990):
mmap$auto(0x7ffffffffffffe, 0x22020001, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2)
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
mmap$auto(0x10000000000000, 0x2020009, 0x100001, 0x9000000eb1, r0, 0x0)
r1 = fsopen$auto(0x0, 0x1)
fsconfig$auto_FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00', &(0x7f0000000180), 0x100d1)
getsockopt$auto_SO_PASSSEC(r1, 0xb9, 0x22, &(0x7f0000000380)='\x00\xc4\x86\xc9?\xbc\x0fX\xcf\xde\xa3m\xbd-.]\xb1\x82\x16\xb8\xedQ\x03\xbfjd\x0e\x96oA\t=y\x97f\x1bt\x89\x9e\xfa\rpl\xa9vl\x0eH\a', &(0x7f0000001680)=0xffffeffd)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x208e5)
close_range$auto(0x0, 0x5, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptytf\x00', 0x20a00, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/set_event_pid\x00', 0x220a02, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptyb1\x00', 0x101c40, 0x0)
r3 = socketpair$auto(0x22, 0x4, 0x6, 0x0)
ioctl$auto(0xffffffffffffffff, 0x541c, r3)
r4 = socket(0x11, 0x3, 0xfffff958)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)={0x80040, 0x184, 0xa}, 0x18)
r5 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000280)='/dev/etherd/discover\x00', 0x541, 0x0)
write$auto(0x3, 0x0, 0x7fe)
read$auto(r5, &(0x7f00000002c0)='sy\x96tem.pos\f\x90ix>\bH4_acCes\xdeVd\xf2\vhn\xe6Px\x14\x068\xab\xf8\xc8\x96qjY\xeb\xee<\xf8\x91R\x15U<\xc0\x06\x98\xff\xb2\f\x8a`\xf2\xbdYr\xbf\x0e)\xf8\xd5\xf0\xdb\xba\xda?\x8e\xe8F\x04\x89\xd4\a\x19\xe0\xf1bJzx\xf6T3\xff\xdet\x14', 0x4000080000001)
r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x940, 0x0)
ioctl$auto_MEMGETBADBLOCK(r6, 0x40084d0b, &(0x7f0000000040)=0x7)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r7=>0x0})
connect$auto(r2, &(0x7f00000001c0)=@xdp={0x2c, 0x0, r7, 0x37}, 0x1)
setgroups$auto(0xe32, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)

254.559338ms ago: executing program 3 (id=4991):
open(0x0, 0x22240, 0x154)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1)
socket(0xa, 0x2, 0x3a) (async)
r0 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async)
r1 = io_uring_setup$auto(0x1, 0x0)
write$auto_fops_init_pkru_pkeys(r1, 0x0, 0x0) (async)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async)
bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000440)=@raw_tracepoint={0x5, r0, 0x0, 0x6641}, 0x2) (async)
r2 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) (async)
setns(0xffffffffffffffff, 0x2000000) (async)
shmctl$auto(0x1d, 0x58, &(0x7f0000000340)={{0x2, 0xee00, <r3=>0xee01, 0x6, 0x9, 0x7, 0x5}, 0x2, 0x9, 0x7, 0x7, @raw=0x6, @inferred, 0x1, 0x0, &(0x7f0000000180), &(0x7f0000000240)="0ef32451a60d2cc131fc3bd79f24803892096ce0b6f220150548040098f54447a216bb9ebffa36194bb2811eaf5f8d4d34264b16821295d4fe6bf68c4c2007f60a394f3cf79e0fe1f0decdd2f3a9e30143e5e8e80e7d7a4397d59dad8c6196617da6e6a905e8a6bd1676c13a150fe05dee9f52d591926ac06e243d419e6eb862c59f6bf2f42a55224b3233a82e8068b35229f3b4f5ce6de7440e1b56fe0fe5aa5b444d061d7eb1d011468b205134e67467c67e44b3b97e50a41751492683f287af2f26885424398735818c5f81c7c6848cfaf6334fa40006d78284e1fcda7cf198e3ae0a12fbe6322886b83665ed4487d5d6a78300e9be7d94"})
quotactl_fd$auto(0xffffffffffffffff, 0x2, r3, &(0x7f00000003c0)="9f52291e498685be2776eab6237834e85f2e25e426a9a6f2a804cd74d3a8a02c9b9d3638d79138a8e5c3b09d8e9e777f5f0c5922dd86f7211af986aab3bf13cf9be5a0617026") (async)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1}]}, 0x24}, 0x1, 0x1400}, 0x20000084) (async)
sendmsg$auto_NL80211_CMD_GET_STATION(r2, 0x0, 0x24044081) (async)
r6 = openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/usb/usbmon/30s\x00', 0x0, 0x0)
read$auto_mon_fops_stat_usb_mon(r6, 0x0, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') (async)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop6/rqos/wbt/enabled\x00', 0x880, 0x0) (async)
r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyu3\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r7, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) (async)
io_uring_register$auto(0xffffffffffffffff, 0x6, &(0x7f00000000c0)="6ae562dade3e1f8069d7b2a5aceb254509b104e900eacaadfaea4a43015c4a16c4357d8685025283e80c57e83b30aafcb25211eaf04f942639b3cc56d6f1cd04d3989a8dbbd114bf07c3683f3ef9f4ef092b12e8b3daeaad4d035689478e061a6e3488e668d50251e41b45be5ddc26ef187d7398380d5b494386808192f945023f4487062349c882abdef6afa171caca13448d5ee23f0a370945d4eb6e4bedb3c4a805ac4f91265794a4ddabda", 0xfffff23f)

238.097981ms ago: executing program 0 (id=4992):
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
fanotify_init$auto(0x1f53, 0x2000000000002)
open(0x0, 0x4242, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r1 = epoll_create$auto(0x8800001)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
epoll_ctl$auto(r1, 0x1, r0, 0x0)
r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0)
fcntl$auto_F_GETPIPE_SZ(r2, 0x408, 0x4)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x2, 0x1)
io_uring_setup$auto(0x2, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop4\x00', 0x141100, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sysfs$auto(0x2, 0x4a, 0x0)
r3 = fsopen$auto(0x0, 0x1)
read$auto_stats_fops_2(r3, &(0x7f0000000280)=""/167, 0xa7)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3)
sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008081}, 0x4000)
close_range$auto(0x2, 0x8, 0x0)

211.306703ms ago: executing program 1 (id=4993):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084)
r2 = socket(0xa, 0x5, 0x84)
sendto$auto(r2, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f)

59.822101ms ago: executing program 2 (id=4994):
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x100)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0)
sendfile$auto(r0, r0, 0x0, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
bpf$auto(0x24, 0x0, 0x8)
socket(0x2, 0x1, 0x106)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x22641, 0x0)
lseek$auto(0x3, 0x2, 0x4)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
ustat$auto(0x801, 0x0)
close_range$auto(0x0, 0x5, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xc0482, 0x0)
getrandom$auto(&(0x7f00000000c0)='/dev/bus/usb/020/001\x00', 0x2, 0x80000000)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xc1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r2, 0x0)
r3 = fcntl$auto_F_WRLCK(0xffffffffffffffff, 0x207, 0x1)
syz_genetlink_get_family_id$auto_psample(&(0x7f0000000100), r3)
r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x364f9cefc8a0a83, 0x0)
ioctl$auto_tracing_buffers_fops_trace(r4, 0x5220, 0x0)
write$auto_sg_fops_sg(r1, &(0x7f0000000080)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a40500ed0e91b86c61b6b42ed6", 0x2e)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
socket(0x29, 0x800, 0xa)

17.699577ms ago: executing program 1 (id=4995):
r0 = open(0x0, 0x595002, 0x52)
mmap$auto(0x400000000, 0x2020009, 0x1, 0x10000000000001d, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x1a, 0xffffffffffffffff, 0x8000)
mseal$auto(0x0, 0x7dda, 0x0)
mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x20000000008000)
io_uring_enter$auto(r0, 0x200, 0x2, 0x4000, &(0x7f0000000000)="cc9d2890cea3d7e670a9bf8030c6711a6d33fe42a065c40322059f5c4f1f05a3cbc5eb1ff443d8e46235b0b0c18bc19f4837d88024ef177c055d3a443e60baa271439e3281cd14b963466b6d99c8a529368a7f4deff5213be50377ec03a36d0f54624eab7d71adcdec6e44a2d233fadc70844ce61dc721c61424961db2bce289b56328c6b61453ddcf76afec69b98f0e9511bb10aa07b0c21c43bff5398f84e1036e64f9ac1b9b1b0415ebe0921cef428d8e1aad92d9a8cddaa51aabed5a72366cca46bfe10307346da7ff1f94946581c5f244bc4cf5f69d374ee33c", 0x400)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55)
capget$auto(0x0, 0xfffffffffffffffe)
setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'})
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket(0xa, 0x2, 0x0)
r1 = socket(0x18, 0x5, 0x1)
connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
close_range$auto(0x0, 0xfffff004, 0x2)
unshare$auto(0x40000080)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x0, 0x0)

0s ago: executing program 0 (id=4996):
r0 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mtd/mtd0/oobsize\x00', 0x40000, 0x0)
r1 = io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0xa0040, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
ioctl$auto(0xffffffffffffffff, 0x545c, 0xffffffffffffffff)
migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0)
ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0))
readv$auto(r2, &(0x7f0000000200)={0x0, 0xfffc}, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f0000000080)=r3)
r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
mmap$auto(0x0, 0x477, 0xdf, 0x9b72, r1, 0x8000)
r6 = prctl$auto_PR_SET_MM_START_CODE(0x80, 0x1, 0xffffffffffffffff, 0x7, 0x410)
read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/45, 0x2d)
r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/003/001\x00', 0x8001, 0x0)
ioctl$auto_USBDEVFS_RELEASE_PORT(r7, 0x80045519, 0x0)
read$auto(r5, 0x0, 0x9)
select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x1, 0x10001, 0x3, 0x5e, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
fallocate$auto(0x3, 0x0, 0xe, 0x8ec5)
finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004)

kernel console output (not intermixed with test programs):

le 03/18/2026
[ 1069.430778][T25355] Call Trace:
[ 1069.430784][T25355]  <TASK>
[ 1069.430791][T25355]  dump_stack_lvl+0x100/0x190
[ 1069.430820][T25355]  sysfs_warn_dup.cold+0x1c/0x28
[ 1069.430842][T25355]  sysfs_do_create_link_sd+0x113/0x140
[ 1069.430866][T25355]  sysfs_create_link+0x61/0xc0
[ 1069.430887][T25355]  device_add+0x675/0x1950
[ 1069.430910][T25355]  ? __pfx_device_add+0x10/0x10
[ 1069.430929][T25355]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1069.430947][T25355]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[ 1069.430976][T25355]  wiphy_register+0x1e5b/0x2d30
[ 1069.430994][T25355]  ? __rtnl_unlock+0xb9/0xf0
[ 1069.431012][T25355]  ? netdev_run_todo+0x840/0x12c0
[ 1069.431032][T25355]  ? __pfx_wiphy_register+0x10/0x10
[ 1069.431050][T25355]  ? __asan_memset+0x23/0x50
[ 1069.431073][T25355]  ? minstrel_ht_alloc+0x5e6/0x7f0
[ 1069.431098][T25355]  ieee80211_register_hw+0x2cfd/0x4140
[ 1069.431127][T25355]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1069.431144][T25355]  ? __pfx___debug_object_init+0x10/0x10
[ 1069.431166][T25355]  ? find_held_lock+0x2b/0x80
[ 1069.431182][T25355]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1069.431213][T25355]  ? __hrtimer_setup+0x178/0x280
[ 1069.431236][T25355]  mac80211_hwsim_new_radio+0x2847/0x57d0
[ 1069.431270][T25355]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1069.431294][T25355]  hwsim_new_radio_nl+0xc1f/0x1340
[ 1069.431313][T25355]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1069.431337][T25355]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[ 1069.431356][T25355]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[ 1069.431380][T25355]  genl_family_rcv_msg_doit+0x214/0x300
[ 1069.431401][T25355]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1069.431420][T25355]  ? genl_get_cmd+0x3ef/0x720
[ 1069.431441][T25355]  ? bpf_lsm_capable+0x9/0x10
[ 1069.431458][T25355]  ? security_capable+0x80/0x260
[ 1069.431474][T25355]  ? ns_capable+0xd2/0xf0
[ 1069.431492][T25355]  genl_rcv_msg+0x560/0x800
[ 1069.431513][T25355]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1069.431532][T25355]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1069.431557][T25355]  netlink_rcv_skb+0x159/0x420
[ 1069.431573][T25355]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1069.431592][T25355]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1069.431617][T25355]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1069.431636][T25355]  genl_rcv+0x28/0x40
[ 1069.431652][T25355]  netlink_unicast+0x5aa/0x870
[ 1069.431674][T25355]  ? __pfx_netlink_unicast+0x10/0x10
[ 1069.431690][T25355]  ? __pfx___might_resched+0x10/0x10
[ 1069.431712][T25355]  ? __lock_acquire+0x4a5/0x2630
[ 1069.431736][T25355]  netlink_sendmsg+0x8b0/0xda0
[ 1069.431756][T25355]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1069.431771][T25355]  ? __import_iovec+0x1d2/0x640
[ 1069.431792][T25355]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1069.431812][T25355]  ____sys_sendmsg+0x9e1/0xb70
[ 1069.431829][T25355]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1069.431847][T25355]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1069.431869][T25355]  ? try_to_wake_up+0x644/0x1a80
[ 1069.431889][T25355]  ___sys_sendmsg+0x190/0x1e0
[ 1069.431910][T25355]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1069.431929][T25355]  ? futex_private_hash_put+0x107/0x1c0
[ 1069.431971][T25355]  __sys_sendmsg+0x170/0x220
[ 1069.431986][T25355]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1069.432001][T25355]  ? __x64_sys_futex+0x34f/0x4d0
[ 1069.432033][T25355]  do_syscall_64+0x106/0xf80
[ 1069.432049][T25355]  ? clear_bhb_loop+0x40/0x90
[ 1069.432069][T25355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1069.432086][T25355] RIP: 0033:0x7f526079c819
[ 1069.432100][T25355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1069.432116][T25355] RSP: 002b:00007f52616ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1069.432132][T25355] RAX: ffffffffffffffda RBX: 00007f5260a15fa0 RCX: 00007f526079c819
[ 1069.432143][T25355] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1069.432153][T25355] RBP: 00007f5260832c91 R08: 0000000000000000 R09: 0000000000000000
[ 1069.432163][T25355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1069.432172][T25355] R13: 00007f5260a16038 R14: 00007f5260a15fa0 R15: 00007ffcc2443548
[ 1069.432194][T25355]  </TASK>
[ 1069.436495][T25337] chnl_net:caif_netlink_parms(): no params data found
[ 1070.460107][T25363] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[ 1070.490424][T25363] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1070.509739][T25363] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1070.531526][T25363] page_type: f5(slab)
[ 1070.550156][T25363] raw: 00fff00000000040 ffff88813fe3b140 dead000000000100 dead000000000122
[ 1070.585693][T25363] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 1070.600273][T25338] Bluetooth: hci1: command tx timeout
[ 1070.617707][T25363] head: 00fff00000000040 ffff88813fe3b140 dead000000000100 dead000000000122
[ 1070.651681][T25363] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 1070.670348][T25363] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[ 1070.700361][T25363] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1070.730831][T25363] page dumped because: unmovable page
[ 1070.750347][T25363] page_owner tracks the page as allocated
[ 1070.770324][T25363] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8086, tgid 8086 (kworker/u8:17), ts 533458641063, free_ts 524450743130
[ 1070.832515][T25363]  post_alloc_hook+0x153/0x170
[ 1070.841165][T25363]  get_page_from_freelist+0x111d/0x3140
[ 1070.847317][T25363]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[ 1070.878015][T25363]  new_slab+0xa6/0x6b0
[ 1070.887979][T25363]  refill_objects+0x26b/0x400
[ 1070.908274][T25363]  __pcs_replace_empty_main+0x1ab/0x660
[ 1070.918750][T25363]  __kmalloc_node_track_caller_noprof+0x694/0x850
[ 1070.939174][T25363]  kmalloc_reserve+0xe8/0x350
[ 1070.959959][T25363]  __alloc_skb+0x185/0x710
[ 1070.969270][T25363]  nsim_dev_trap_report_work+0x2af/0xd10
[ 1070.995163][T25363]  process_one_work+0xa23/0x19a0
[ 1071.012368][T25363]  worker_thread+0x5ef/0xe50
[ 1071.017075][T25363]  kthread+0x370/0x450
[ 1071.038416][T25363]  ret_from_fork+0x754/0xd80
[ 1071.057609][T25363]  ret_from_fork_asm+0x1a/0x30
[ 1071.078113][T25363] page last free pid 5811 tgid 5811 stack trace:
[ 1071.097752][T25363]  __free_frozen_pages+0x7e1/0x10d0
[ 1071.116024][T25363]  __folio_put+0x3b4/0x540
[ 1071.133075][T25363]  skb_release_data+0x667/0x9d0
[ 1071.149352][T25363]  __kfree_skb+0x4f/0x70
[ 1071.170832][T25363]  tcp_ack+0x2072/0x74f0
[ 1071.175154][T25363]  tcp_rcv_established+0x1175/0x3980
[ 1071.200457][T25363]  tcp_v4_do_rcv+0xc87/0x10d0
[ 1071.216461][T25363]  __release_sock+0x35a/0x440
[ 1071.235919][T25363]  release_sock+0x5a/0x220
[ 1071.249049][T25363]  tcp_sendmsg+0x38/0x50
[ 1071.263703][T25363]  inet_sendmsg+0xb9/0x140
[ 1071.284689][T25363]  sock_write_iter+0x4ea/0x5a0
[ 1071.289548][T25363]  vfs_write+0x6ac/0x1070
[ 1071.312605][T25363]  ksys_write+0x1f8/0x250
[ 1071.325773][T25363]  do_syscall_64+0x106/0xf80
[ 1071.339847][T25363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1071.657560][T25371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4681'.
[ 1071.743108][T25374] <
[ 1071.806941][T25337] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1071.869062][T25337] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1071.912101][T25337] bridge_slave_0: entered allmulticast mode
[ 1071.946602][T25378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4684'.
[ 1071.963087][T25337] bridge_slave_0: entered promiscuous mode
[ 1072.008234][T25337] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1072.016886][T25379] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4684'.
[ 1072.044095][T25337] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1072.075636][T25337] bridge_slave_1: entered allmulticast mode
[ 1072.105338][T25337] bridge_slave_1: entered promiscuous mode
[ 1072.277430][T25337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1072.367070][T25337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1072.635963][T25337] team0: Port device team_slave_0 added
[ 1072.673054][T25338] Bluetooth: hci1: command tx timeout
[ 1072.692950][T25337] team0: Port device team_slave_1 added
[ 1073.012607][T25337] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1073.058364][T25337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1073.201686][T25337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1073.267873][T25394] sysfs: cannot create duplicate filename '/class/ieee80211/!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]'
[ 1073.320709][T25394] CPU: 0 UID: 0 PID: 25394 Comm: syz.1.4689 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1073.320739][T25394] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1073.320746][T25394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1073.320756][T25394] Call Trace:
[ 1073.320762][T25394]  <TASK>
[ 1073.320769][T25394]  dump_stack_lvl+0x100/0x190
[ 1073.320806][T25394]  sysfs_warn_dup.cold+0x1c/0x28
[ 1073.320829][T25394]  sysfs_do_create_link_sd+0x113/0x140
[ 1073.320854][T25394]  sysfs_create_link+0x61/0xc0
[ 1073.320876][T25394]  device_add+0x675/0x1950
[ 1073.320899][T25394]  ? __pfx_device_add+0x10/0x10
[ 1073.320918][T25394]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1073.320936][T25394]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[ 1073.320966][T25394]  wiphy_register+0x1e5b/0x2d30
[ 1073.320984][T25394]  ? __rtnl_unlock+0xb9/0xf0
[ 1073.321001][T25394]  ? netdev_run_todo+0x840/0x12c0
[ 1073.321020][T25394]  ? __pfx_wiphy_register+0x10/0x10
[ 1073.321039][T25394]  ? __asan_memset+0x23/0x50
[ 1073.321061][T25394]  ? minstrel_ht_alloc+0x5e6/0x7f0
[ 1073.321087][T25394]  ieee80211_register_hw+0x2cfd/0x4140
[ 1073.321118][T25394]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1073.321136][T25394]  ? __pfx___debug_object_init+0x10/0x10
[ 1073.321157][T25394]  ? find_held_lock+0x2b/0x80
[ 1073.321173][T25394]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1073.321194][T25394]  ? __hrtimer_setup+0x178/0x280
[ 1073.321216][T25394]  mac80211_hwsim_new_radio+0x2847/0x57d0
[ 1073.321247][T25394]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1073.321271][T25394]  hwsim_new_radio_nl+0xc1f/0x1340
[ 1073.321291][T25394]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1073.321314][T25394]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[ 1073.321334][T25394]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[ 1073.321357][T25394]  genl_family_rcv_msg_doit+0x214/0x300
[ 1073.321378][T25394]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1073.321397][T25394]  ? genl_get_cmd+0x3ef/0x720
[ 1073.321418][T25394]  ? bpf_lsm_capable+0x9/0x10
[ 1073.321434][T25394]  ? security_capable+0x80/0x260
[ 1073.321450][T25394]  ? ns_capable+0xd2/0xf0
[ 1073.321467][T25394]  genl_rcv_msg+0x560/0x800
[ 1073.321488][T25394]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1073.321507][T25394]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1073.321531][T25394]  netlink_rcv_skb+0x159/0x420
[ 1073.321547][T25394]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1073.321566][T25394]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1073.321591][T25394]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1073.321609][T25394]  genl_rcv+0x28/0x40
[ 1073.321625][T25394]  netlink_unicast+0x5aa/0x870
[ 1073.321644][T25394]  ? __pfx_netlink_unicast+0x10/0x10
[ 1073.321660][T25394]  ? __pfx___might_resched+0x10/0x10
[ 1073.321681][T25394]  ? __lock_acquire+0x4a5/0x2630
[ 1073.321705][T25394]  netlink_sendmsg+0x8b0/0xda0
[ 1073.321725][T25394]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1073.321740][T25394]  ? __import_iovec+0x1d2/0x640
[ 1073.321761][T25394]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1073.321780][T25394]  ____sys_sendmsg+0x9e1/0xb70
[ 1073.321804][T25394]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1073.321823][T25394]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1073.321845][T25394]  ? try_to_wake_up+0x644/0x1a80
[ 1073.321866][T25394]  ___sys_sendmsg+0x190/0x1e0
[ 1073.321887][T25394]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1073.321907][T25394]  ? futex_private_hash_put+0x107/0x1c0
[ 1073.321950][T25394]  __sys_sendmsg+0x170/0x220
[ 1073.322007][T25394]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1073.322022][T25394]  ? __x64_sys_futex+0x34f/0x4d0
[ 1073.322055][T25394]  do_syscall_64+0x106/0xf80
[ 1073.322072][T25394]  ? clear_bhb_loop+0x40/0x90
[ 1073.322091][T25394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1073.322107][T25394] RIP: 0033:0x7f526079c819
[ 1073.322123][T25394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1073.322137][T25394] RSP: 002b:00007f52616ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1073.322153][T25394] RAX: ffffffffffffffda RBX: 00007f5260a15fa0 RCX: 00007f526079c819
[ 1073.322165][T25394] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1073.322177][T25394] RBP: 00007f5260832c91 R08: 0000000000000000 R09: 0000000000000000
[ 1073.322187][T25394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1073.322195][T25394] R13: 00007f5260a16038 R14: 00007f5260a15fa0 R15: 00007ffcc2443548
[ 1073.322216][T25394]  </TASK>
[ 1074.712338][T25406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4690'.
[ 1074.776494][T25402] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[ 1074.818810][T25402] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1074.827898][T25338] Bluetooth: hci1: command tx timeout
[ 1074.862275][T25402] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1074.892209][T25402] page_type: f5(slab)
[ 1074.902190][T25402] raw: 00fff00000000040 ffff88813fe3b140 dead000000000100 dead000000000122
[ 1074.942293][T25402] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 1074.982318][T25402] head: 00fff00000000040 ffff88813fe3b140 dead000000000100 dead000000000122
[ 1075.013650][T25402] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 1075.048920][T25402] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[ 1075.096925][T25402] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1075.142472][T25402] page dumped because: unmovable page
[ 1075.163439][T25402] page_owner tracks the page as allocated
[ 1075.202335][T25402] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8086, tgid 8086 (kworker/u8:17), ts 533458641063, free_ts 524450743130
[ 1075.303201][T25402]  post_alloc_hook+0x153/0x170
[ 1075.308048][T25402]  get_page_from_freelist+0x111d/0x3140
[ 1075.353095][T25402]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[ 1075.370101][T25402]  new_slab+0xa6/0x6b0
[ 1075.402459][T25402]  refill_objects+0x26b/0x400
[ 1075.407231][T25402]  __pcs_replace_empty_main+0x1ab/0x660
[ 1075.454262][T25402]  __kmalloc_node_track_caller_noprof+0x694/0x850
[ 1075.460780][T25402]  kmalloc_reserve+0xe8/0x350
[ 1075.470677][T25337] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1075.497420][T25337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1075.542610][T25402]  __alloc_skb+0x185/0x710
[ 1075.563816][T25402]  nsim_dev_trap_report_work+0x2af/0xd10
[ 1075.591889][T25402]  process_one_work+0xa23/0x19a0
[ 1075.618527][T25402]  worker_thread+0x5ef/0xe50
[ 1075.635527][T25402]  kthread+0x370/0x450
[ 1075.641163][T25337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1075.674188][T25402]  ret_from_fork+0x754/0xd80
[ 1075.678873][T25402]  ret_from_fork_asm+0x1a/0x30
[ 1075.711981][T25402] page last free pid 5811 tgid 5811 stack trace:
[ 1075.757932][T25402]  __free_frozen_pages+0x7e1/0x10d0
[ 1075.782072][T25402]  __folio_put+0x3b4/0x540
[ 1075.805117][T25402]  skb_release_data+0x667/0x9d0
[ 1075.824673][T25402]  __kfree_skb+0x4f/0x70
[ 1075.843586][T25402]  tcp_ack+0x2072/0x74f0
[ 1075.864948][T25402]  tcp_rcv_established+0x1175/0x3980
[ 1075.886776][T25402]  tcp_v4_do_rcv+0xc87/0x10d0
[ 1075.904781][T25402]  __release_sock+0x35a/0x440
[ 1075.909537][T25402]  release_sock+0x5a/0x220
[ 1075.946789][T25402]  tcp_sendmsg+0x38/0x50
[ 1075.965784][T25402]  inet_sendmsg+0xb9/0x140
[ 1075.970281][T25402]  sock_write_iter+0x4ea/0x5a0
[ 1076.005101][T25402]  vfs_write+0x6ac/0x1070
[ 1076.022992][T25402]  ksys_write+0x1f8/0x250
[ 1076.027381][T25402]  do_syscall_64+0x106/0xf80
[ 1076.062566][T25402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1076.375346][T25337] hsr_slave_0: entered promiscuous mode
[ 1076.429607][T25337] hsr_slave_1: entered promiscuous mode
[ 1076.473573][T25409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4692'.
[ 1076.913288][ T5827] Bluetooth: hci1: command tx timeout
[ 1077.070104][   T30] audit: type=1800 audit(4294967358.459:24): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4697" name="SYSV0000000a" dev="tmpfs" ino=0 res=0 errno=0
[ 1077.381323][T25337] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1077.597010][T25337] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1077.887281][T25427] NFSD: Failed to start, no listeners configured.
[ 1078.061308][T25337] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1078.420846][T25447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4703'.
[ 1078.547568][T25337] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1078.682075][T25443] sysfs: cannot create duplicate filename '/class/ieee80211/!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]'
[ 1078.838226][T25451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4702'.
[ 1078.868705][T25443] CPU: 0 UID: 0 PID: 25443 Comm: syz.2.4701 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1078.868734][T25443] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1078.868740][T25443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1078.868749][T25443] Call Trace:
[ 1078.868755][T25443]  <TASK>
[ 1078.868762][T25443]  dump_stack_lvl+0x100/0x190
[ 1078.868791][T25443]  sysfs_warn_dup.cold+0x1c/0x28
[ 1078.868813][T25443]  sysfs_do_create_link_sd+0x113/0x140
[ 1078.868837][T25443]  sysfs_create_link+0x61/0xc0
[ 1078.868859][T25443]  device_add+0x675/0x1950
[ 1078.868881][T25443]  ? __pfx_device_add+0x10/0x10
[ 1078.868900][T25443]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1078.868918][T25443]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[ 1078.868946][T25443]  wiphy_register+0x1e5b/0x2d30
[ 1078.868964][T25443]  ? __rtnl_unlock+0xb9/0xf0
[ 1078.868981][T25443]  ? netdev_run_todo+0x840/0x12c0
[ 1078.869000][T25443]  ? __pfx_wiphy_register+0x10/0x10
[ 1078.869019][T25443]  ? __asan_memset+0x23/0x50
[ 1078.869042][T25443]  ? minstrel_ht_alloc+0x5e6/0x7f0
[ 1078.869067][T25443]  ieee80211_register_hw+0x2cfd/0x4140
[ 1078.869095][T25443]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1078.869113][T25443]  ? __pfx___debug_object_init+0x10/0x10
[ 1078.869134][T25443]  ? find_held_lock+0x2b/0x80
[ 1078.869150][T25443]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1078.869166][T25443]  ? __hrtimer_setup+0x178/0x280
[ 1078.869189][T25443]  mac80211_hwsim_new_radio+0x2847/0x57d0
[ 1078.869220][T25443]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1078.869243][T25443]  hwsim_new_radio_nl+0xc1f/0x1340
[ 1078.869263][T25443]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1078.869286][T25443]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[ 1078.869316][T25443]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[ 1078.869340][T25443]  genl_family_rcv_msg_doit+0x214/0x300
[ 1078.869361][T25443]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1078.869381][T25443]  ? genl_get_cmd+0x3ef/0x720
[ 1078.869406][T25443]  ? bpf_lsm_capable+0x9/0x10
[ 1078.869422][T25443]  ? security_capable+0x80/0x260
[ 1078.869438][T25443]  ? ns_capable+0xd2/0xf0
[ 1078.869456][T25443]  genl_rcv_msg+0x560/0x800
[ 1078.869477][T25443]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1078.869495][T25443]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1078.869519][T25443]  netlink_rcv_skb+0x159/0x420
[ 1078.869536][T25443]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1078.869555][T25443]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1078.869580][T25443]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1078.869598][T25443]  genl_rcv+0x28/0x40
[ 1078.869613][T25443]  netlink_unicast+0x5aa/0x870
[ 1078.869633][T25443]  ? __pfx_netlink_unicast+0x10/0x10
[ 1078.869648][T25443]  ? __pfx___might_resched+0x10/0x10
[ 1078.869670][T25443]  ? __lock_acquire+0x4a5/0x2630
[ 1078.869694][T25443]  netlink_sendmsg+0x8b0/0xda0
[ 1078.869714][T25443]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1078.869729][T25443]  ? __import_iovec+0x1d2/0x640
[ 1078.869761][T25443]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1078.869781][T25443]  ____sys_sendmsg+0x9e1/0xb70
[ 1078.869800][T25443]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1078.869818][T25443]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1078.869842][T25443]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1078.869868][T25443]  ___sys_sendmsg+0x190/0x1e0
[ 1078.869889][T25443]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1078.869932][T25443]  __sys_sendmsg+0x170/0x220
[ 1078.869948][T25443]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1078.869962][T25443]  ? __x64_sys_futex+0x34f/0x4d0
[ 1078.869993][T25443]  do_syscall_64+0x106/0xf80
[ 1078.870010][T25443]  ? clear_bhb_loop+0x40/0x90
[ 1078.870029][T25443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1078.870045][T25443] RIP: 0033:0x7f90cc19c819
[ 1078.870060][T25443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1078.870075][T25443] RSP: 002b:00007f90cd083028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1078.870090][T25443] RAX: ffffffffffffffda RBX: 00007f90cc415fa0 RCX: 00007f90cc19c819
[ 1078.870101][T25443] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1078.870111][T25443] RBP: 00007f90cc232c91 R08: 0000000000000000 R09: 0000000000000000
[ 1078.870121][T25443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1078.870130][T25443] R13: 00007f90cc416038 R14: 00007f90cc415fa0 R15: 00007ffdec58fb98
[ 1078.870151][T25443]  </TASK>
[ 1081.606499][T25475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4712'.
[ 1081.680878][T25337] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1081.791192][T25337] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1081.881430][T25337] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1081.901792][T25477] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[ 1081.933589][T25337] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1081.963423][T25477] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1082.016231][T25477] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1082.066022][T25477] page_type: f5(slab)
[ 1082.093101][T25477] raw: 00fff00000000040 ffff88813fe3b140 dead000000000100 dead000000000122
[ 1082.147016][T25477] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 1082.214050][T25477] head: 00fff00000000040 ffff88813fe3b140 dead000000000100 dead000000000122
[ 1082.290683][T25477] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 1082.362883][T25477] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[ 1082.427696][T25477] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1082.489710][T25477] page dumped because: unmovable page
[ 1082.537139][T25477] page_owner tracks the page as allocated
[ 1082.566096][T25477] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8086, tgid 8086 (kworker/u8:17), ts 533458641063, free_ts 524450743130
[ 1082.644523][T25337] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1082.693106][T25477]  post_alloc_hook+0x153/0x170
[ 1082.727107][T25494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4715'.
[ 1082.758883][T25477]  get_page_from_freelist+0x111d/0x3140
[ 1082.772785][T25337] 8021q: adding VLAN 0 to HW filter on device team0
[ 1082.791575][T25477]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[ 1082.816767][T25477]  new_slab+0xa6/0x6b0
[ 1082.825445][ T8099] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1082.832659][ T8099] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1082.852549][T25477]  refill_objects+0x26b/0x400
[ 1082.875453][T25477]  __pcs_replace_empty_main+0x1ab/0x660
[ 1082.903076][T25477]  __kmalloc_node_track_caller_noprof+0x694/0x850
[ 1082.914274][ T8099] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1082.921526][ T8099] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1082.969837][T25477]  kmalloc_reserve+0xe8/0x350
[ 1082.974605][T25477]  __alloc_skb+0x185/0x710
[ 1083.003170][T25477]  nsim_dev_trap_report_work+0x2af/0xd10
[ 1083.035886][T25477]  process_one_work+0xa23/0x19a0
[ 1083.072962][T25477]  worker_thread+0x5ef/0xe50
[ 1083.109674][T25477]  kthread+0x370/0x450
[ 1083.125291][T25477]  ret_from_fork+0x754/0xd80
[ 1083.164633][T25477]  ret_from_fork_asm+0x1a/0x30
[ 1083.189251][T25477] page last free pid 5811 tgid 5811 stack trace:
[ 1083.236997][T25477]  __free_frozen_pages+0x7e1/0x10d0
[ 1083.242305][T25477]  __folio_put+0x3b4/0x540
[ 1083.287540][T25477]  skb_release_data+0x667/0x9d0
[ 1083.292466][T25477]  __kfree_skb+0x4f/0x70
[ 1083.336439][T25477]  tcp_ack+0x2072/0x74f0
[ 1083.340770][T25477]  tcp_rcv_established+0x1175/0x3980
[ 1083.346169][T25477]  tcp_v4_do_rcv+0xc87/0x10d0
[ 1083.417045][T25477]  __release_sock+0x35a/0x440
[ 1083.421893][T25477]  release_sock+0x5a/0x220
[ 1083.478156][T25477]  tcp_sendmsg+0x38/0x50
[ 1083.482566][T25477]  inet_sendmsg+0xb9/0x140
[ 1083.519105][T25477]  sock_write_iter+0x4ea/0x5a0
[ 1083.523952][T25477]  vfs_write+0x6ac/0x1070
[ 1083.566606][T25477]  ksys_write+0x1f8/0x250
[ 1083.592470][T25477]  do_syscall_64+0x106/0xf80
[ 1083.618846][T25477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1083.968329][T25337] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1084.019452][T25500] sysfs: cannot create duplicate filename '/class/ieee80211/!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]'
[ 1084.098396][T25500] CPU: 0 UID: 0 PID: 25500 Comm: syz.3.4716 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1084.098425][T25500] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1084.098432][T25500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1084.098442][T25500] Call Trace:
[ 1084.098448][T25500]  <TASK>
[ 1084.098455][T25500]  dump_stack_lvl+0x100/0x190
[ 1084.098483][T25500]  sysfs_warn_dup.cold+0x1c/0x28
[ 1084.098505][T25500]  sysfs_do_create_link_sd+0x113/0x140
[ 1084.098531][T25500]  sysfs_create_link+0x61/0xc0
[ 1084.098553][T25500]  device_add+0x675/0x1950
[ 1084.098575][T25500]  ? __pfx_device_add+0x10/0x10
[ 1084.098594][T25500]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1084.098612][T25500]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[ 1084.098641][T25500]  wiphy_register+0x1e5b/0x2d30
[ 1084.098659][T25500]  ? __rtnl_unlock+0xb9/0xf0
[ 1084.098675][T25500]  ? netdev_run_todo+0x840/0x12c0
[ 1084.098695][T25500]  ? __pfx_wiphy_register+0x10/0x10
[ 1084.098714][T25500]  ? __asan_memset+0x23/0x50
[ 1084.098736][T25500]  ? minstrel_ht_alloc+0x5e6/0x7f0
[ 1084.098761][T25500]  ieee80211_register_hw+0x2cfd/0x4140
[ 1084.098790][T25500]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1084.098807][T25500]  ? __pfx___debug_object_init+0x10/0x10
[ 1084.098828][T25500]  ? find_held_lock+0x2b/0x80
[ 1084.098856][T25500]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1084.098874][T25500]  ? __hrtimer_setup+0x178/0x280
[ 1084.098897][T25500]  mac80211_hwsim_new_radio+0x2847/0x57d0
[ 1084.098928][T25500]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1084.098952][T25500]  hwsim_new_radio_nl+0xc1f/0x1340
[ 1084.098971][T25500]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1084.098994][T25500]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[ 1084.099017][T25500]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[ 1084.099041][T25500]  genl_family_rcv_msg_doit+0x214/0x300
[ 1084.099062][T25500]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1084.099080][T25500]  ? genl_get_cmd+0x3ef/0x720
[ 1084.099103][T25500]  ? bpf_lsm_capable+0x9/0x10
[ 1084.099121][T25500]  ? security_capable+0x80/0x260
[ 1084.099137][T25500]  ? ns_capable+0xd2/0xf0
[ 1084.099154][T25500]  genl_rcv_msg+0x560/0x800
[ 1084.099175][T25500]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1084.099194][T25500]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1084.099218][T25500]  netlink_rcv_skb+0x159/0x420
[ 1084.099234][T25500]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1084.099253][T25500]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1084.099278][T25500]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1084.099296][T25500]  genl_rcv+0x28/0x40
[ 1084.099312][T25500]  netlink_unicast+0x5aa/0x870
[ 1084.099331][T25500]  ? __pfx_netlink_unicast+0x10/0x10
[ 1084.099347][T25500]  ? __pfx___might_resched+0x10/0x10
[ 1084.099368][T25500]  ? __lock_acquire+0x4a5/0x2630
[ 1084.099393][T25500]  netlink_sendmsg+0x8b0/0xda0
[ 1084.099413][T25500]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1084.099428][T25500]  ? __import_iovec+0x1d2/0x640
[ 1084.099450][T25500]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1084.099469][T25500]  ____sys_sendmsg+0x9e1/0xb70
[ 1084.099487][T25500]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1084.099505][T25500]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1084.099527][T25500]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1084.099554][T25500]  ___sys_sendmsg+0x190/0x1e0
[ 1084.099574][T25500]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1084.099618][T25500]  __sys_sendmsg+0x170/0x220
[ 1084.099634][T25500]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1084.099648][T25500]  ? __x64_sys_futex+0x34f/0x4d0
[ 1084.099679][T25500]  do_syscall_64+0x106/0xf80
[ 1084.099695][T25500]  ? clear_bhb_loop+0x40/0x90
[ 1084.099714][T25500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1084.099730][T25500] RIP: 0033:0x7fc78879c819
[ 1084.099744][T25500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1084.099760][T25500] RSP: 002b:00007fc7896e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1084.099776][T25500] RAX: ffffffffffffffda RBX: 00007fc788a15fa0 RCX: 00007fc78879c819
[ 1084.099786][T25500] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1084.099796][T25500] RBP: 00007fc788832c91 R08: 0000000000000000 R09: 0000000000000000
[ 1084.099805][T25500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1084.099814][T25500] R13: 00007fc788a16038 R14: 00007fc788a15fa0 R15: 00007fffc2d679a8
[ 1084.099835][T25500]  </TASK>
[ 1085.515294][T25508] zswap: compressor û not available
[ 1086.074046][T25337] veth0_vlan: entered promiscuous mode
[ 1086.191795][T25337] veth1_vlan: entered promiscuous mode
[ 1086.365522][T25337] veth0_macvtap: entered promiscuous mode
[ 1086.436583][T25337] veth1_macvtap: entered promiscuous mode
[ 1086.542772][T25523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4722'.
[ 1086.556110][T25337] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1086.671992][T25337] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1086.876089][T22509] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.950250][T22509] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.998071][T22509] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1087.114696][ T8091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1087.275070][T25533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4725'.
[ 1087.616236][T22522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1087.662440][T22522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1087.787634][T22522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1087.836152][T22522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1087.853372][T25540] sysfs: cannot create duplicate filename '/class/ieee80211/!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]'
[ 1087.922527][T25540] CPU: 0 UID: 0 PID: 25540 Comm: syz.3.4728 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1087.922559][T25540] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1087.922572][T25540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1087.922584][T25540] Call Trace:
[ 1087.922589][T25540]  <TASK>
[ 1087.922598][T25540]  dump_stack_lvl+0x100/0x190
[ 1087.922627][T25540]  sysfs_warn_dup.cold+0x1c/0x28
[ 1087.922650][T25540]  sysfs_do_create_link_sd+0x113/0x140
[ 1087.922679][T25540]  sysfs_create_link+0x61/0xc0
[ 1087.922702][T25540]  device_add+0x675/0x1950
[ 1087.922726][T25540]  ? __pfx_device_add+0x10/0x10
[ 1087.922747][T25540]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1087.922767][T25540]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[ 1087.922797][T25540]  wiphy_register+0x1e5b/0x2d30
[ 1087.922815][T25540]  ? __rtnl_unlock+0xb9/0xf0
[ 1087.922834][T25540]  ? netdev_run_todo+0x840/0x12c0
[ 1087.922855][T25540]  ? __pfx_wiphy_register+0x10/0x10
[ 1087.922877][T25540]  ? __asan_memset+0x23/0x50
[ 1087.922899][T25540]  ? minstrel_ht_alloc+0x5e6/0x7f0
[ 1087.922927][T25540]  ieee80211_register_hw+0x2cfd/0x4140
[ 1087.922956][T25540]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1087.922975][T25540]  ? __pfx___debug_object_init+0x10/0x10
[ 1087.922997][T25540]  ? find_held_lock+0x2b/0x80
[ 1087.923026][T25540]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1087.923045][T25540]  ? __hrtimer_setup+0x178/0x280
[ 1087.923069][T25540]  mac80211_hwsim_new_radio+0x2847/0x57d0
[ 1087.923101][T25540]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1087.923126][T25540]  hwsim_new_radio_nl+0xc1f/0x1340
[ 1087.923146][T25540]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1087.923171][T25540]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[ 1087.923196][T25540]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[ 1087.923222][T25540]  genl_family_rcv_msg_doit+0x214/0x300
[ 1087.923245][T25540]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1087.923264][T25540]  ? genl_get_cmd+0x3ef/0x720
[ 1087.923287][T25540]  ? bpf_lsm_capable+0x9/0x10
[ 1087.923305][T25540]  ? security_capable+0x80/0x260
[ 1087.923322][T25540]  ? ns_capable+0xd2/0xf0
[ 1087.923340][T25540]  genl_rcv_msg+0x560/0x800
[ 1087.923362][T25540]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1087.923382][T25540]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1087.923407][T25540]  netlink_rcv_skb+0x159/0x420
[ 1087.923424][T25540]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1087.923445][T25540]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1087.923471][T25540]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1087.923499][T25540]  genl_rcv+0x28/0x40
[ 1087.923518][T25540]  netlink_unicast+0x5aa/0x870
[ 1087.923541][T25540]  ? __pfx_netlink_unicast+0x10/0x10
[ 1087.923558][T25540]  ? __pfx___might_resched+0x10/0x10
[ 1087.923581][T25540]  ? __lock_acquire+0x4a5/0x2630
[ 1087.923613][T25540]  netlink_sendmsg+0x8b0/0xda0
[ 1087.923636][T25540]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1087.923653][T25540]  ? __import_iovec+0x1d2/0x640
[ 1087.923677][T25540]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1087.923698][T25540]  ____sys_sendmsg+0x9e1/0xb70
[ 1087.923717][T25540]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1087.923736][T25540]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1087.923759][T25540]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1087.923787][T25540]  ___sys_sendmsg+0x190/0x1e0
[ 1087.923810][T25540]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1087.923854][T25540]  __sys_sendmsg+0x170/0x220
[ 1087.923870][T25540]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1087.923885][T25540]  ? __x64_sys_futex+0x34f/0x4d0
[ 1087.923918][T25540]  do_syscall_64+0x106/0xf80
[ 1087.923934][T25540]  ? clear_bhb_loop+0x40/0x90
[ 1087.923955][T25540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1087.923970][T25540] RIP: 0033:0x7fc78879c819
[ 1087.923985][T25540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1087.923999][T25540] RSP: 002b:00007fc7896e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1087.924014][T25540] RAX: ffffffffffffffda RBX: 00007fc788a15fa0 RCX: 00007fc78879c819
[ 1087.924024][T25540] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000006
[ 1087.924033][T25540] RBP: 00007fc788832c91 R08: 0000000000000000 R09: 0000000000000000
[ 1087.924042][T25540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1087.924051][T25540] R13: 00007fc788a16038 R14: 00007fc788a15fa0 R15: 00007fffc2d679a8
[ 1087.924072][T25540]  </TASK>
[ 1088.879184][ T5827] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260
[ 1088.879211][ T5827] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260
[ 1088.904914][ T5827] Bluetooth: hci3: Malformed LE Event: 0x1b
[ 1089.013549][T25550] sysfs: cannot create duplicate filename '/class/ieee80211/!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]'
[ 1089.071458][T25550] CPU: 0 UID: 0 PID: 25550 Comm: syz.2.4730 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1089.071489][T25550] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1089.071494][T25550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1089.071503][T25550] Call Trace:
[ 1089.071509][T25550]  <TASK>
[ 1089.071515][T25550]  dump_stack_lvl+0x100/0x190
[ 1089.071543][T25550]  sysfs_warn_dup.cold+0x1c/0x28
[ 1089.071563][T25550]  sysfs_do_create_link_sd+0x113/0x140
[ 1089.071586][T25550]  sysfs_create_link+0x61/0xc0
[ 1089.071607][T25550]  device_add+0x675/0x1950
[ 1089.071629][T25550]  ? __pfx_device_add+0x10/0x10
[ 1089.071647][T25550]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1089.071664][T25550]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[ 1089.071691][T25550]  wiphy_register+0x1e5b/0x2d30
[ 1089.071708][T25550]  ? __rtnl_unlock+0xb9/0xf0
[ 1089.071724][T25550]  ? netdev_run_todo+0x840/0x12c0
[ 1089.071743][T25550]  ? __pfx_wiphy_register+0x10/0x10
[ 1089.071761][T25550]  ? __asan_memset+0x23/0x50
[ 1089.071781][T25550]  ? minstrel_ht_alloc+0x5e6/0x7f0
[ 1089.071807][T25550]  ieee80211_register_hw+0x2cfd/0x4140
[ 1089.071834][T25550]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1089.071852][T25550]  ? __pfx___debug_object_init+0x10/0x10
[ 1089.071872][T25550]  ? find_held_lock+0x2b/0x80
[ 1089.071888][T25550]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1089.071903][T25550]  ? __hrtimer_setup+0x178/0x280
[ 1089.071925][T25550]  mac80211_hwsim_new_radio+0x2847/0x57d0
[ 1089.071955][T25550]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1089.071977][T25550]  hwsim_new_radio_nl+0xc1f/0x1340
[ 1089.071996][T25550]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1089.072018][T25550]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[ 1089.072037][T25550]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[ 1089.072059][T25550]  genl_family_rcv_msg_doit+0x214/0x300
[ 1089.072078][T25550]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1089.072095][T25550]  ? genl_get_cmd+0x3ef/0x720
[ 1089.072116][T25550]  ? bpf_lsm_capable+0x9/0x10
[ 1089.072131][T25550]  ? security_capable+0x80/0x260
[ 1089.072147][T25550]  ? ns_capable+0xd2/0xf0
[ 1089.072163][T25550]  genl_rcv_msg+0x560/0x800
[ 1089.072183][T25550]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1089.072201][T25550]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1089.072224][T25550]  netlink_rcv_skb+0x159/0x420
[ 1089.072239][T25550]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1089.072257][T25550]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1089.072281][T25550]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1089.072298][T25550]  genl_rcv+0x28/0x40
[ 1089.072313][T25550]  netlink_unicast+0x5aa/0x870
[ 1089.072331][T25550]  ? __pfx_netlink_unicast+0x10/0x10
[ 1089.072346][T25550]  ? __pfx___might_resched+0x10/0x10
[ 1089.072367][T25550]  ? __lock_acquire+0x4a5/0x2630
[ 1089.072396][T25550]  netlink_sendmsg+0x8b0/0xda0
[ 1089.072415][T25550]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1089.072429][T25550]  ? __import_iovec+0x1d2/0x640
[ 1089.072449][T25550]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1089.072468][T25550]  ____sys_sendmsg+0x9e1/0xb70
[ 1089.072484][T25550]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1089.072501][T25550]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1089.072521][T25550]  ? try_to_wake_up+0x644/0x1a80
[ 1089.072540][T25550]  ___sys_sendmsg+0x190/0x1e0
[ 1089.072560][T25550]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1089.072578][T25550]  ? futex_private_hash_put+0x107/0x1c0
[ 1089.072618][T25550]  __sys_sendmsg+0x170/0x220
[ 1089.072634][T25550]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1089.072648][T25550]  ? __x64_sys_futex+0x34f/0x4d0
[ 1089.072678][T25550]  do_syscall_64+0x106/0xf80
[ 1089.072693][T25550]  ? clear_bhb_loop+0x40/0x90
[ 1089.072711][T25550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1089.072725][T25550] RIP: 0033:0x7f90cc19c819
[ 1089.072739][T25550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1089.072753][T25550] RSP: 002b:00007f90cd083028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1089.072768][T25550] RAX: ffffffffffffffda RBX: 00007f90cc415fa0 RCX: 00007f90cc19c819
[ 1089.072778][T25550] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1089.072787][T25550] RBP: 00007f90cc232c91 R08: 0000000000000000 R09: 0000000000000000
[ 1089.072796][T25550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1089.072804][T25550] R13: 00007f90cc416038 R14: 00007f90cc415fa0 R15: 00007ffdec58fb98
[ 1089.072824][T25550]  </TASK>
[ 1089.517024][T25556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4731'.
[ 1089.951516][T25557] FAULT_INJECTION: forcing a failure.
[ 1089.951516][T25557] name failslab, interval 1, probability 0, space 0, times 0
[ 1090.001393][T25557] CPU: 0 UID: 0 PID: 25557 Comm: syz.2.4730 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1090.001423][T25557] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1090.001429][T25557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1090.001438][T25557] Call Trace:
[ 1090.001444][T25557]  <TASK>
[ 1090.001450][T25557]  dump_stack_lvl+0x100/0x190
[ 1090.001477][T25557]  should_fail_ex.cold+0x5/0xa
[ 1090.001495][T25557]  should_failslab+0xc2/0x120
[ 1090.001512][T25557]  __kvmalloc_node_noprof+0xfa/0xa00
[ 1090.001526][T25557]  ? seq_read_iter+0x819/0x1270
[ 1090.001552][T25557]  seq_read_iter+0x819/0x1270
[ 1090.001575][T25557]  ? aa_file_perm+0x7f3/0x14d0
[ 1090.001601][T25557]  seq_read+0x33b/0x4c0
[ 1090.001622][T25557]  ? __pfx_seq_read+0x10/0x10
[ 1090.001656][T25557]  full_proxy_read+0x135/0x1a0
[ 1090.001678][T25557]  ? __pfx_full_proxy_read+0x10/0x10
[ 1090.001705][T25557]  vfs_read+0x1e4/0xb30
[ 1090.001722][T25557]  ? __pfx_vfs_read+0x10/0x10
[ 1090.001735][T25557]  ? __fget_files+0x215/0x3d0
[ 1090.001754][T25557]  ? __fget_files+0x21f/0x3d0
[ 1090.001773][T25557]  ksys_read+0x12a/0x250
[ 1090.001787][T25557]  ? __pfx_ksys_read+0x10/0x10
[ 1090.001806][T25557]  do_syscall_64+0x106/0xf80
[ 1090.001822][T25557]  ? clear_bhb_loop+0x40/0x90
[ 1090.001840][T25557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1090.001855][T25557] RIP: 0033:0x7f90cc19c819
[ 1090.001867][T25557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1090.001882][T25557] RSP: 002b:00007f90cd041028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1090.001897][T25557] RAX: ffffffffffffffda RBX: 00007f90cc416180 RCX: 00007f90cc19c819
[ 1090.001906][T25557] RDX: 000000000000004e RSI: 0000200000000100 RDI: 0000000000000006
[ 1090.001915][T25557] RBP: 00007f90cd041090 R08: 0000000000000000 R09: 0000000000000000
[ 1090.001924][T25557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1090.001932][T25557] R13: 00007f90cc416218 R14: 00007f90cc416180 R15: 00007ffdec58fb98
[ 1090.001952][T25557]  </TASK>
[ 1091.026191][T25559] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[ 1091.051042][T25559] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1091.115779][T25559] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1091.175400][T25562] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4732'.
[ 1091.184677][T25559] page_type: f5(slab)
[ 1091.213870][T25559] raw: 00fff00000000040 ffff88813fe3b140 dead000000000100 dead000000000122
[ 1091.258570][T25562] sysfs: cannot create duplicate filename '/class/ieee80211/!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]'
[ 1091.285280][T25559] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 1091.330387][T25559] head: 00fff00000000040 ffff88813fe3b140 dead000000000100 dead000000000122
[ 1091.413321][T25559] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 1091.454398][T25559] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[ 1091.465810][T25562] CPU: 0 UID: 0 PID: 25562 Comm: syz.3.4732 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1091.465838][T25562] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1091.465845][T25562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1091.465855][T25562] Call Trace:
[ 1091.465861][T25562]  <TASK>
[ 1091.465868][T25562]  dump_stack_lvl+0x100/0x190
[ 1091.465896][T25562]  sysfs_warn_dup.cold+0x1c/0x28
[ 1091.465918][T25562]  sysfs_do_create_link_sd+0x113/0x140
[ 1091.465942][T25562]  sysfs_create_link+0x61/0xc0
[ 1091.465964][T25562]  device_add+0x675/0x1950
[ 1091.465987][T25562]  ? __pfx_device_add+0x10/0x10
[ 1091.466006][T25562]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1091.466024][T25562]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[ 1091.466054][T25562]  wiphy_register+0x1e5b/0x2d30
[ 1091.466072][T25562]  ? __rtnl_unlock+0xb9/0xf0
[ 1091.466089][T25562]  ? netdev_run_todo+0x840/0x12c0
[ 1091.466109][T25562]  ? __pfx_wiphy_register+0x10/0x10
[ 1091.466127][T25562]  ? __asan_memset+0x23/0x50
[ 1091.466150][T25562]  ? minstrel_ht_alloc+0x5e6/0x7f0
[ 1091.466184][T25562]  ieee80211_register_hw+0x2cfd/0x4140
[ 1091.466214][T25562]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1091.466232][T25562]  ? __pfx___debug_object_init+0x10/0x10
[ 1091.466253][T25562]  ? find_held_lock+0x2b/0x80
[ 1091.466269][T25562]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1091.466286][T25562]  ? __hrtimer_setup+0x178/0x280
[ 1091.466308][T25562]  mac80211_hwsim_new_radio+0x2847/0x57d0
[ 1091.466339][T25562]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1091.466358][T25562]  ? __asan_memcpy+0x3c/0x60
[ 1091.466381][T25562]  hwsim_new_radio_nl+0xc1f/0x1340
[ 1091.466400][T25562]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1091.466423][T25562]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[ 1091.466443][T25562]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[ 1091.466466][T25562]  genl_family_rcv_msg_doit+0x214/0x300
[ 1091.466487][T25562]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1091.466506][T25562]  ? genl_get_cmd+0x3ef/0x720
[ 1091.466527][T25562]  ? bpf_lsm_capable+0x9/0x10
[ 1091.466544][T25562]  ? security_capable+0x80/0x260
[ 1091.466560][T25562]  ? ns_capable+0xd2/0xf0
[ 1091.466577][T25562]  genl_rcv_msg+0x560/0x800
[ 1091.466598][T25562]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1091.466617][T25562]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1091.466641][T25562]  netlink_rcv_skb+0x159/0x420
[ 1091.466658][T25562]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1091.466680][T25562]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1091.466705][T25562]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1091.466724][T25562]  genl_rcv+0x28/0x40
[ 1091.466740][T25562]  netlink_unicast+0x5aa/0x870
[ 1091.466759][T25562]  ? __pfx_netlink_unicast+0x10/0x10
[ 1091.466774][T25562]  ? __pfx___might_resched+0x10/0x10
[ 1091.466797][T25562]  ? __lock_acquire+0x4a5/0x2630
[ 1091.466822][T25562]  netlink_sendmsg+0x8b0/0xda0
[ 1091.466842][T25562]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1091.466857][T25562]  ? __import_iovec+0x1d2/0x640
[ 1091.466878][T25562]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1091.466898][T25562]  ____sys_sendmsg+0x9e1/0xb70
[ 1091.466915][T25562]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1091.466933][T25562]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1091.466955][T25562]  ? try_to_wake_up+0x644/0x1a80
[ 1091.466975][T25562]  ___sys_sendmsg+0x190/0x1e0
[ 1091.466996][T25562]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1091.467015][T25562]  ? futex_private_hash_put+0x107/0x1c0
[ 1091.467057][T25562]  __sys_sendmsg+0x170/0x220
[ 1091.467072][T25562]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1091.467087][T25562]  ? __x64_sys_futex+0x34f/0x4d0
[ 1091.467118][T25562]  do_syscall_64+0x106/0xf80
[ 1091.467135][T25562]  ? clear_bhb_loop+0x40/0x90
[ 1091.467161][T25562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1091.467176][T25562] RIP: 0033:0x7fc78879c819
[ 1091.467191][T25562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1091.467205][T25562] RSP: 002b:00007fc7896c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1091.467221][T25562] RAX: ffffffffffffffda RBX: 00007fc788a16090 RCX: 00007fc78879c819
[ 1091.467232][T25562] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000006
[ 1091.467241][T25562] RBP: 00007fc788832c91 R08: 0000000000000000 R09: 0000000000000000
[ 1091.467251][T25562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1091.467260][T25562] R13: 00007fc788a16128 R14: 00007fc788a16090 R15: 00007fffc2d679a8
[ 1091.467282][T25562]  </TASK>
[ 1091.935891][T25559] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1091.944704][T25559] page dumped because: unmovable page
[ 1091.950192][T25559] page_owner tracks the page as allocated
[ 1091.955974][T25559] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8086, tgid 8086 (kworker/u8:17), ts 533458641063, free_ts 524450743130
[ 1091.978497][T25559]  post_alloc_hook+0x153/0x170
[ 1091.984158][T25559]  get_page_from_freelist+0x111d/0x3140
[ 1091.989901][T25559]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[ 1091.995888][T25559]  new_slab+0xa6/0x6b0
[ 1092.000049][T25559]  refill_objects+0x26b/0x400
[ 1092.004839][T25559]  __pcs_replace_empty_main+0x1ab/0x660
[ 1092.010505][T25559]  __kmalloc_node_track_caller_noprof+0x694/0x850
[ 1092.017029][T25559]  kmalloc_reserve+0xe8/0x350
[ 1092.021832][T25559]  __alloc_skb+0x185/0x710
[ 1092.026722][T25559]  nsim_dev_trap_report_work+0x2af/0xd10
[ 1092.032532][T25559]  process_one_work+0xa23/0x19a0
[ 1092.037533][T25559]  worker_thread+0x5ef/0xe50
[ 1092.042286][T25559]  kthread+0x370/0x450
[ 1092.046467][T25559]  ret_from_fork+0x754/0xd80
[ 1092.051140][T25559]  ret_from_fork_asm+0x1a/0x30
[ 1092.055933][T25559] page last free pid 5811 tgid 5811 stack trace:
[ 1092.063404][T25559]  __free_frozen_pages+0x7e1/0x10d0
[ 1092.068667][T25559]  __folio_put+0x3b4/0x540
[ 1092.073177][T25559]  skb_release_data+0x667/0x9d0
[ 1092.078210][T25559]  __kfree_skb+0x4f/0x70
[ 1092.082548][T25559]  tcp_ack+0x2072/0x74f0
[ 1092.086821][T25559]  tcp_rcv_established+0x1175/0x3980
[ 1092.092259][T25559]  tcp_v4_do_rcv+0xc87/0x10d0
[ 1092.097098][T25559]  __release_sock+0x35a/0x440
[ 1092.101848][T25559]  release_sock+0x5a/0x220
[ 1092.106363][T25559]  tcp_sendmsg+0x38/0x50
[ 1092.110747][T25559]  inet_sendmsg+0xb9/0x140
[ 1092.115186][T25559]  sock_write_iter+0x4ea/0x5a0
[ 1092.120050][T25559]  vfs_write+0x6ac/0x1070
[ 1092.124463][T25559]  ksys_write+0x1f8/0x250
[ 1092.129269][T25559]  do_syscall_64+0x106/0xf80
[ 1092.134580][T25559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1092.399260][T25576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4735'.
[ 1092.441187][T25576] ipvlan1: entered promiscuous mode
[ 1092.446481][T25576] ipvlan1: entered allmulticast mode
[ 1092.473699][T25576] veth0_vlan: entered allmulticast mode
[ 1092.746356][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1092.760467][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1092.769644][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1092.781995][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1092.789616][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1092.814080][T25590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4740'.
[ 1093.029757][T18472] bridge_slave_1: left allmulticast mode
[ 1093.091913][T18472] bridge_slave_1: left promiscuous mode
[ 1093.097674][T18472] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1093.177367][T18472] bridge_slave_0: left allmulticast mode
[ 1093.251370][T18472] bridge_slave_0: left promiscuous mode
[ 1093.308839][T18472] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1093.426069][T25609] FAULT_INJECTION: forcing a failure.
[ 1093.426069][T25609] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1093.453096][T25609] CPU: 0 UID: 0 PID: 25609 Comm: syz.0.4743 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1093.453124][T25609] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1093.453130][T25609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1093.453139][T25609] Call Trace:
[ 1093.453145][T25609]  <TASK>
[ 1093.453151][T25609]  dump_stack_lvl+0x100/0x190
[ 1093.453179][T25609]  should_fail_ex.cold+0x5/0xa
[ 1093.453197][T25609]  _copy_to_iter+0x5a4/0x1720
[ 1093.453219][T25609]  ? __pfx__copy_to_iter+0x10/0x10
[ 1093.453236][T25609]  ? __kasan_kmalloc+0xaa/0xb0
[ 1093.453251][T25609]  ? __kvmalloc_node_noprof+0x37b/0xa00
[ 1093.453265][T25609]  ? seq_printf+0x1ea/0x250
[ 1093.453290][T25609]  seq_read_iter+0xdab/0x1270
[ 1093.453319][T25609]  seq_read+0x33b/0x4c0
[ 1093.453340][T25609]  ? __pfx_seq_read+0x10/0x10
[ 1093.453376][T25609]  full_proxy_read+0x135/0x1a0
[ 1093.453397][T25609]  ? __pfx_full_proxy_read+0x10/0x10
[ 1093.453419][T25609]  vfs_read+0x1e4/0xb30
[ 1093.453435][T25609]  ? __pfx_vfs_read+0x10/0x10
[ 1093.453449][T25609]  ? __fget_files+0x215/0x3d0
[ 1093.453467][T25609]  ? __fget_files+0x21f/0x3d0
[ 1093.453487][T25609]  ksys_read+0x12a/0x250
[ 1093.453500][T25609]  ? __pfx_ksys_read+0x10/0x10
[ 1093.453520][T25609]  do_syscall_64+0x106/0xf80
[ 1093.453536][T25609]  ? clear_bhb_loop+0x40/0x90
[ 1093.453553][T25609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1093.453568][T25609] RIP: 0033:0x7fae3859c819
[ 1093.453581][T25609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1093.453595][T25609] RSP: 002b:00007fae394a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1093.453609][T25609] RAX: ffffffffffffffda RBX: 00007fae38816180 RCX: 00007fae3859c819
[ 1093.453619][T25609] RDX: 000000000000004e RSI: 0000200000000100 RDI: 0000000000000006
[ 1093.453628][T25609] RBP: 00007fae394a6090 R08: 0000000000000000 R09: 0000000000000000
[ 1093.453637][T25609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1093.453646][T25609] R13: 00007fae38816218 R14: 00007fae38816180 R15: 00007ffef5289318
[ 1093.453665][T25609]  </TASK>
[ 1094.844478][ T5827] Bluetooth: hci2: command tx timeout
[ 1094.957281][T18472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1095.001796][T18472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1095.049629][T18472] bond0 (unregistering): Released all slaves
[ 1095.098785][T25592] sysfs: cannot create duplicate filename '/class/ieee80211/!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]'
[ 1095.130437][T25592] CPU: 0 UID: 0 PID: 25592 Comm: syz.1.4741 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1095.130470][T25592] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1095.130477][T25592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1095.130488][T25592] Call Trace:
[ 1095.130494][T25592]  <TASK>
[ 1095.130500][T25592]  dump_stack_lvl+0x100/0x190
[ 1095.130534][T25592]  sysfs_warn_dup.cold+0x1c/0x28
[ 1095.130557][T25592]  sysfs_do_create_link_sd+0x113/0x140
[ 1095.130581][T25592]  sysfs_create_link+0x61/0xc0
[ 1095.130604][T25592]  device_add+0x675/0x1950
[ 1095.130628][T25592]  ? __pfx_device_add+0x10/0x10
[ 1095.130648][T25592]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1095.130667][T25592]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[ 1095.130696][T25592]  wiphy_register+0x1e5b/0x2d30
[ 1095.130714][T25592]  ? __rtnl_unlock+0xb9/0xf0
[ 1095.130737][T25592]  ? netdev_run_todo+0x840/0x12c0
[ 1095.130757][T25592]  ? __pfx_wiphy_register+0x10/0x10
[ 1095.130777][T25592]  ? __asan_memset+0x23/0x50
[ 1095.130799][T25592]  ? minstrel_ht_alloc+0x5e6/0x7f0
[ 1095.130826][T25592]  ieee80211_register_hw+0x2cfd/0x4140
[ 1095.130864][T25592]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1095.130885][T25592]  ? __pfx___debug_object_init+0x10/0x10
[ 1095.130908][T25592]  ? find_held_lock+0x2b/0x80
[ 1095.130925][T25592]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1095.130943][T25592]  ? __hrtimer_setup+0x178/0x280
[ 1095.130967][T25592]  mac80211_hwsim_new_radio+0x2847/0x57d0
[ 1095.130999][T25592]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1095.131023][T25592]  hwsim_new_radio_nl+0xc1f/0x1340
[ 1095.131044][T25592]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1095.131068][T25592]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[ 1095.131089][T25592]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[ 1095.131113][T25592]  genl_family_rcv_msg_doit+0x214/0x300
[ 1095.131135][T25592]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1095.131155][T25592]  ? genl_get_cmd+0x3ef/0x720
[ 1095.131177][T25592]  ? bpf_lsm_capable+0x9/0x10
[ 1095.131197][T25592]  ? security_capable+0x80/0x260
[ 1095.131214][T25592]  ? ns_capable+0xd2/0xf0
[ 1095.131232][T25592]  genl_rcv_msg+0x560/0x800
[ 1095.131254][T25592]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1095.131275][T25592]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1095.131299][T25592]  netlink_rcv_skb+0x159/0x420
[ 1095.131317][T25592]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1095.131337][T25592]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1095.131362][T25592]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1095.131382][T25592]  genl_rcv+0x28/0x40
[ 1095.131398][T25592]  netlink_unicast+0x5aa/0x870
[ 1095.131423][T25592]  ? __pfx_netlink_unicast+0x10/0x10
[ 1095.131440][T25592]  ? __pfx___might_resched+0x10/0x10
[ 1095.131463][T25592]  ? __lock_acquire+0x4a5/0x2630
[ 1095.131489][T25592]  netlink_sendmsg+0x8b0/0xda0
[ 1095.131509][T25592]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1095.131526][T25592]  ? __import_iovec+0x1d2/0x640
[ 1095.131548][T25592]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1095.131569][T25592]  ____sys_sendmsg+0x9e1/0xb70
[ 1095.131587][T25592]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1095.131606][T25592]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1095.131630][T25592]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1095.131658][T25592]  ___sys_sendmsg+0x190/0x1e0
[ 1095.131679][T25592]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1095.131724][T25592]  __sys_sendmsg+0x170/0x220
[ 1095.131741][T25592]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1095.131756][T25592]  ? __x64_sys_futex+0x34f/0x4d0
[ 1095.131789][T25592]  do_syscall_64+0x106/0xf80
[ 1095.131806][T25592]  ? clear_bhb_loop+0x40/0x90
[ 1095.131827][T25592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1095.131843][T25592] RIP: 0033:0x7f526079c819
[ 1095.131864][T25592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1095.131879][T25592] RSP: 002b:00007f52616ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1095.131895][T25592] RAX: ffffffffffffffda RBX: 00007f5260a15fa0 RCX: 00007f526079c819
[ 1095.131904][T25592] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1095.131914][T25592] RBP: 00007f5260832c91 R08: 0000000000000000 R09: 0000000000000000
[ 1095.131923][T25592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1095.131932][T25592] R13: 00007f5260a16038 R14: 00007f5260a15fa0 R15: 00007ffcc2443548
[ 1095.131952][T25592]  </TASK>
[ 1096.254942][T25633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4748'.
[ 1096.350832][T25582] chnl_net:caif_netlink_parms(): no params data found
[ 1096.755037][T25582] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1096.762207][T25582] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1096.856871][T25582] bridge_slave_0: entered allmulticast mode
[ 1096.900188][T25582] bridge_slave_0: entered promiscuous mode
[ 1096.925313][ T5827] Bluetooth: hci2: command tx timeout
[ 1097.008029][T25582] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1097.055512][T25582] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1097.102099][T25582] bridge_slave_1: entered allmulticast mode
[ 1097.149740][T25582] bridge_slave_1: entered promiscuous mode
[ 1097.197762][T25645] sysfs: cannot create duplicate filename '/class/ieee80211/!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]'
[ 1097.253368][T25645] CPU: 0 UID: 0 PID: 25645 Comm: syz.1.4752 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1097.253397][T25645] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1097.253404][T25645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1097.253414][T25645] Call Trace:
[ 1097.253421][T25645]  <TASK>
[ 1097.253427][T25645]  dump_stack_lvl+0x100/0x190
[ 1097.253456][T25645]  sysfs_warn_dup.cold+0x1c/0x28
[ 1097.253478][T25645]  sysfs_do_create_link_sd+0x113/0x140
[ 1097.253502][T25645]  sysfs_create_link+0x61/0xc0
[ 1097.253524][T25645]  device_add+0x675/0x1950
[ 1097.253547][T25645]  ? __pfx_device_add+0x10/0x10
[ 1097.253568][T25645]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1097.253587][T25645]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[ 1097.253616][T25645]  wiphy_register+0x1e5b/0x2d30
[ 1097.253634][T25645]  ? __rtnl_unlock+0xb9/0xf0
[ 1097.253651][T25645]  ? netdev_run_todo+0x840/0x12c0
[ 1097.253678][T25645]  ? __pfx_wiphy_register+0x10/0x10
[ 1097.253697][T25645]  ? __asan_memset+0x23/0x50
[ 1097.253721][T25645]  ? minstrel_ht_alloc+0x5e6/0x7f0
[ 1097.253746][T25645]  ieee80211_register_hw+0x2cfd/0x4140
[ 1097.253775][T25645]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1097.253792][T25645]  ? __pfx___debug_object_init+0x10/0x10
[ 1097.253813][T25645]  ? find_held_lock+0x2b/0x80
[ 1097.253837][T25645]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1097.253854][T25645]  ? __hrtimer_setup+0x178/0x280
[ 1097.253879][T25645]  mac80211_hwsim_new_radio+0x2847/0x57d0
[ 1097.253910][T25645]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1097.253933][T25645]  hwsim_new_radio_nl+0xc1f/0x1340
[ 1097.253952][T25645]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1097.253976][T25645]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[ 1097.253995][T25645]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[ 1097.254019][T25645]  genl_family_rcv_msg_doit+0x214/0x300
[ 1097.254040][T25645]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1097.254059][T25645]  ? genl_get_cmd+0x3ef/0x720
[ 1097.254081][T25645]  ? bpf_lsm_capable+0x9/0x10
[ 1097.254105][T25645]  ? security_capable+0x80/0x260
[ 1097.254123][T25645]  ? ns_capable+0xd2/0xf0
[ 1097.254140][T25645]  genl_rcv_msg+0x560/0x800
[ 1097.254161][T25645]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1097.254180][T25645]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1097.254204][T25645]  netlink_rcv_skb+0x159/0x420
[ 1097.254222][T25645]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1097.254241][T25645]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1097.254265][T25645]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1097.254284][T25645]  genl_rcv+0x28/0x40
[ 1097.254300][T25645]  netlink_unicast+0x5aa/0x870
[ 1097.254319][T25645]  ? __pfx_netlink_unicast+0x10/0x10
[ 1097.254335][T25645]  ? __pfx___might_resched+0x10/0x10
[ 1097.254356][T25645]  ? __lock_acquire+0x4a5/0x2630
[ 1097.254380][T25645]  netlink_sendmsg+0x8b0/0xda0
[ 1097.254400][T25645]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1097.254415][T25645]  ? __import_iovec+0x1d2/0x640
[ 1097.254436][T25645]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1097.254456][T25645]  ____sys_sendmsg+0x9e1/0xb70
[ 1097.254473][T25645]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1097.254492][T25645]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1097.254514][T25645]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1097.254540][T25645]  ___sys_sendmsg+0x190/0x1e0
[ 1097.254561][T25645]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1097.254605][T25645]  __sys_sendmsg+0x170/0x220
[ 1097.254620][T25645]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1097.254635][T25645]  ? __x64_sys_futex+0x34f/0x4d0
[ 1097.254666][T25645]  do_syscall_64+0x106/0xf80
[ 1097.254689][T25645]  ? clear_bhb_loop+0x40/0x90
[ 1097.254708][T25645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1097.254724][T25645] RIP: 0033:0x7f526079c819
[ 1097.254739][T25645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1097.254754][T25645] RSP: 002b:00007f52616ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1097.254770][T25645] RAX: ffffffffffffffda RBX: 00007f5260a15fa0 RCX: 00007f526079c819
[ 1097.254781][T25645] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1097.254791][T25645] RBP: 00007f5260832c91 R08: 0000000000000000 R09: 0000000000000000
[ 1097.254801][T25645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1097.254810][T25645] R13: 00007f5260a16038 R14: 00007f5260a15fa0 R15: 00007ffcc2443548
[ 1097.254831][T25645]  </TASK>
[ 1097.711521][T25582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1097.722750][T25582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1097.748451][T25582] team0: Port device team_slave_0 added
[ 1097.755928][T25582] team0: Port device team_slave_1 added
[ 1097.777887][T25582] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1097.784960][T25582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1097.812273][T25582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1097.824348][T25582] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1097.831333][T25582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1097.857566][T25582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1097.894422][T25582] hsr_slave_0: entered promiscuous mode
[ 1097.900757][T25582] hsr_slave_1: entered promiscuous mode
[ 1097.908198][T25582] debugfs: 'hsr0' already exists in 'hsr'
[ 1097.914021][T25582] Cannot create hsr debugfs directory
[ 1098.264950][T25650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4751'.
[ 1098.735129][T25664] FAULT_INJECTION: forcing a failure.
[ 1098.735129][T25664] name failslab, interval 1, probability 0, space 0, times 0
[ 1098.756056][T25665] FAULT_INJECTION: forcing a failure.
[ 1098.756056][T25665] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1098.772373][T25666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4757'.
[ 1098.814168][T25664] CPU: 0 UID: 0 PID: 25664 Comm: syz.0.4756 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1098.814198][T25664] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1098.814204][T25664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1098.814214][T25664] Call Trace:
[ 1098.814220][T25664]  <TASK>
[ 1098.814227][T25664]  dump_stack_lvl+0x100/0x190
[ 1098.814256][T25664]  should_fail_ex.cold+0x5/0xa
[ 1098.814275][T25664]  ? tomoyo_encode2+0xfb/0x3c0
[ 1098.814295][T25664]  should_failslab+0xc2/0x120
[ 1098.814313][T25664]  __kmalloc_noprof+0xe0/0x850
[ 1098.814335][T25664]  ? d_absolute_path+0x136/0x1b0
[ 1098.814363][T25664]  tomoyo_encode2+0xfb/0x3c0
[ 1098.814387][T25664]  tomoyo_encode+0x29/0x50
[ 1098.814407][T25664]  tomoyo_realpath_from_path+0x18c/0x690
[ 1098.814432][T25664]  tomoyo_check_open_permission+0x2af/0x3c0
[ 1098.814452][T25664]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 1098.814496][T25664]  ? do_raw_spin_lock+0x128/0x260
[ 1098.814521][T25664]  ? path_get+0x61/0x80
[ 1098.814541][T25664]  tomoyo_file_open+0x6b/0x90
[ 1098.814557][T25664]  security_file_open+0xb5/0x1e0
[ 1098.814579][T25664]  do_dentry_open+0x5aa/0x1660
[ 1098.814596][T25664]  ? security_inode_permission+0xbf/0x250
[ 1098.814618][T25664]  vfs_open+0x82/0x3f0
[ 1098.814639][T25664]  path_openat+0x208c/0x31a0
[ 1098.814662][T25664]  ? __pfx_path_openat+0x10/0x10
[ 1098.814686][T25664]  do_file_open+0x20e/0x430
[ 1098.814703][T25664]  ? __pfx_do_file_open+0x10/0x10
[ 1098.814734][T25664]  ? alloc_fd+0x476/0x790
[ 1098.814751][T25664]  ? do_getname+0x191/0x390
[ 1098.814772][T25664]  do_sys_openat2+0x10d/0x1e0
[ 1098.814792][T25664]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1098.814819][T25664]  __x64_sys_openat+0x12d/0x210
[ 1098.814840][T25664]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1098.814867][T25664]  do_syscall_64+0x106/0xf80
[ 1098.814883][T25664]  ? clear_bhb_loop+0x40/0x90
[ 1098.814902][T25664]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1098.814918][T25664] RIP: 0033:0x7fae3859c819
[ 1098.814932][T25664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1098.814947][T25664] RSP: 002b:00007fae394e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1098.814963][T25664] RAX: ffffffffffffffda RBX: 00007fae38815fa0 RCX: 00007fae3859c819
[ 1098.814973][T25664] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 1098.814982][T25664] RBP: 00007fae38632c91 R08: 0000000000000000 R09: 0000000000000000
[ 1098.814992][T25664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1098.815002][T25664] R13: 00007fae38816038 R14: 00007fae38815fa0 R15: 00007ffef5289318
[ 1098.815023][T25664]  </TASK>
[ 1098.815485][T25664] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1099.156172][T25665] CPU: 0 UID: 0 PID: 25665 Comm: syz.3.4755 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1099.156201][T25665] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1099.156207][T25665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1099.156215][T25665] Call Trace:
[ 1099.156221][T25665]  <TASK>
[ 1099.156227][T25665]  dump_stack_lvl+0x100/0x190
[ 1099.156253][T25665]  should_fail_ex.cold+0x5/0xa
[ 1099.156271][T25665]  _copy_to_user+0x32/0xd0
[ 1099.156291][T25665]  simple_read_from_buffer+0xcb/0x170
[ 1099.156315][T25665]  proc_fail_nth_read+0x1af/0x230
[ 1099.156334][T25665]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1099.156353][T25665]  ? rw_verify_area+0xce/0x6d0
[ 1099.156373][T25665]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1099.156391][T25665]  vfs_read+0x1e4/0xb30
[ 1099.156408][T25665]  ? __pfx_vfs_read+0x10/0x10
[ 1099.156440][T25665]  ? __fget_files+0x215/0x3d0
[ 1099.156465][T25665]  ? __fget_files+0x21f/0x3d0
[ 1099.156484][T25665]  ksys_read+0x12a/0x250
[ 1099.156498][T25665]  ? __pfx_ksys_read+0x10/0x10
[ 1099.156520][T25665]  do_syscall_64+0x106/0xf80
[ 1099.156535][T25665]  ? clear_bhb_loop+0x40/0x90
[ 1099.156553][T25665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1099.156568][T25665] RIP: 0033:0x7fc78875d04e
[ 1099.156581][T25665] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1099.156595][T25665] RSP: 002b:00007fc7896a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1099.156609][T25665] RAX: ffffffffffffffda RBX: 00007fc7896a66c0 RCX: 00007fc78875d04e
[ 1099.156619][T25665] RDX: 000000000000000f RSI: 00007fc7896a60a0 RDI: 0000000000000007
[ 1099.156627][T25665] RBP: 00007fc7896a6090 R08: 0000000000000000 R09: 0000000000000000
[ 1099.156636][T25665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1099.156645][T25665] R13: 00007fc788a16218 R14: 00007fc788a16180 R15: 00007fffc2d679a8
[ 1099.156664][T25665]  </TASK>
[ 1099.588545][ T5827] Bluetooth: hci2: command tx timeout
[ 1100.153239][T25656] sysfs: cannot create duplicate filename '/class/ieee80211/!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]'
[ 1100.247522][T25656] CPU: 0 UID: 0 PID: 25656 Comm: syz.3.4755 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1100.247550][T25656] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1100.247556][T25656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1100.247565][T25656] Call Trace:
[ 1100.247570][T25656]  <TASK>
[ 1100.247576][T25656]  dump_stack_lvl+0x100/0x190
[ 1100.247603][T25656]  sysfs_warn_dup.cold+0x1c/0x28
[ 1100.247624][T25656]  sysfs_do_create_link_sd+0x113/0x140
[ 1100.247647][T25656]  sysfs_create_link+0x61/0xc0
[ 1100.247668][T25656]  device_add+0x675/0x1950
[ 1100.247689][T25656]  ? __pfx_device_add+0x10/0x10
[ 1100.247707][T25656]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1100.247724][T25656]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[ 1100.247751][T25656]  wiphy_register+0x1e5b/0x2d30
[ 1100.247767][T25656]  ? __rtnl_unlock+0xb9/0xf0
[ 1100.247783][T25656]  ? netdev_run_todo+0x840/0x12c0
[ 1100.247802][T25656]  ? __pfx_wiphy_register+0x10/0x10
[ 1100.247819][T25656]  ? __asan_memset+0x23/0x50
[ 1100.247840][T25656]  ? minstrel_ht_alloc+0x5e6/0x7f0
[ 1100.247865][T25656]  ieee80211_register_hw+0x2cfd/0x4140
[ 1100.247893][T25656]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1100.247910][T25656]  ? __pfx___debug_object_init+0x10/0x10
[ 1100.247930][T25656]  ? find_held_lock+0x2b/0x80
[ 1100.247946][T25656]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1100.247962][T25656]  ? __hrtimer_setup+0x178/0x280
[ 1100.247984][T25656]  mac80211_hwsim_new_radio+0x2847/0x57d0
[ 1100.248015][T25656]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1100.248037][T25656]  hwsim_new_radio_nl+0xc1f/0x1340
[ 1100.248055][T25656]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1100.248081][T25656]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[ 1100.248100][T25656]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[ 1100.248122][T25656]  genl_family_rcv_msg_doit+0x214/0x300
[ 1100.248142][T25656]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1100.248160][T25656]  ? genl_get_cmd+0x3ef/0x720
[ 1100.248181][T25656]  ? bpf_lsm_capable+0x9/0x10
[ 1100.248196][T25656]  ? security_capable+0x80/0x260
[ 1100.248212][T25656]  ? ns_capable+0xd2/0xf0
[ 1100.248230][T25656]  genl_rcv_msg+0x560/0x800
[ 1100.248250][T25656]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1100.248268][T25656]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1100.248291][T25656]  netlink_rcv_skb+0x159/0x420
[ 1100.248307][T25656]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1100.248325][T25656]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1100.248349][T25656]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1100.248366][T25656]  genl_rcv+0x28/0x40
[ 1100.248388][T25656]  netlink_unicast+0x5aa/0x870
[ 1100.248407][T25656]  ? __pfx_netlink_unicast+0x10/0x10
[ 1100.248422][T25656]  ? __pfx___might_resched+0x10/0x10
[ 1100.248443][T25656]  ? __lock_acquire+0x4a5/0x2630
[ 1100.248466][T25656]  netlink_sendmsg+0x8b0/0xda0
[ 1100.248485][T25656]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1100.248500][T25656]  ? __import_iovec+0x1d2/0x640
[ 1100.248520][T25656]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1100.248539][T25656]  ____sys_sendmsg+0x9e1/0xb70
[ 1100.248555][T25656]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1100.248573][T25656]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1100.248593][T25656]  ? try_to_wake_up+0x644/0x1a80
[ 1100.248613][T25656]  ___sys_sendmsg+0x190/0x1e0
[ 1100.248633][T25656]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1100.248651][T25656]  ? futex_private_hash_put+0x107/0x1c0
[ 1100.248691][T25656]  __sys_sendmsg+0x170/0x220
[ 1100.248707][T25656]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1100.248720][T25656]  ? __x64_sys_futex+0x34f/0x4d0
[ 1100.248750][T25656]  do_syscall_64+0x106/0xf80
[ 1100.248766][T25656]  ? clear_bhb_loop+0x40/0x90
[ 1100.248784][T25656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1100.248799][T25656] RIP: 0033:0x7fc78879c819
[ 1100.248812][T25656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1100.248826][T25656] RSP: 002b:00007fc7896e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1100.248840][T25656] RAX: ffffffffffffffda RBX: 00007fc788a15fa0 RCX: 00007fc78879c819
[ 1100.248850][T25656] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1100.248859][T25656] RBP: 00007fc788832c91 R08: 0000000000000000 R09: 0000000000000000
[ 1100.248868][T25656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1100.248877][T25656] R13: 00007fc788a16038 R14: 00007fc788a15fa0 R15: 00007fffc2d679a8
[ 1100.248896][T25656]  </TASK>
[ 1101.773025][ T5827] Bluetooth: hci2: command tx timeout
[ 1102.944951][T25582] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1103.031324][T25582] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1103.208805][T25582] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1103.285635][T25582] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1103.549396][T25696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4765'.
[ 1103.617982][T18472] hsr_slave_0: left promiscuous mode
[ 1103.653488][T18472] hsr_slave_1: left promiscuous mode
[ 1103.674602][T25688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4764'.
[ 1103.700468][T18472] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1103.728159][T18472] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1103.768811][T18472] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1103.791436][T18472] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1103.831765][T18472] veth1_vlan: left promiscuous mode
[ 1103.860314][T18472] veth0_vlan: left promiscuous mode
[ 1104.406233][T18472] team0 (unregistering): Port device team_slave_1 removed
[ 1104.502156][T18472] team0 (unregistering): Port device team_slave_0 removed
[ 1105.282655][T25582] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1105.402030][T25582] 8021q: adding VLAN 0 to HW filter on device team0
[ 1105.462932][ T8091] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1105.470150][ T8091] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1105.661211][T10128] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1105.668414][T10128] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1105.833093][T25582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1105.917864][T25582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1106.000056][T25728] sysfs: cannot create duplicate filename '/class/ieee80211/!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]'
[ 1106.096574][T25728] CPU: 0 UID: 0 PID: 25728 Comm: syz.3.4773 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1106.096604][T25728] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1106.096610][T25728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1106.096620][T25728] Call Trace:
[ 1106.096626][T25728]  <TASK>
[ 1106.096632][T25728]  dump_stack_lvl+0x100/0x190
[ 1106.096666][T25728]  sysfs_warn_dup.cold+0x1c/0x28
[ 1106.096688][T25728]  sysfs_do_create_link_sd+0x113/0x140
[ 1106.096711][T25728]  sysfs_create_link+0x61/0xc0
[ 1106.096733][T25728]  device_add+0x675/0x1950
[ 1106.096756][T25728]  ? __pfx_device_add+0x10/0x10
[ 1106.096775][T25728]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1106.096793][T25728]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[ 1106.096822][T25728]  wiphy_register+0x1e5b/0x2d30
[ 1106.096839][T25728]  ? __rtnl_unlock+0xb9/0xf0
[ 1106.096857][T25728]  ? netdev_run_todo+0x840/0x12c0
[ 1106.096882][T25728]  ? __pfx_wiphy_register+0x10/0x10
[ 1106.096901][T25728]  ? __asan_memset+0x23/0x50
[ 1106.096924][T25728]  ? minstrel_ht_alloc+0x5e6/0x7f0
[ 1106.096952][T25728]  ieee80211_register_hw+0x2cfd/0x4140
[ 1106.096980][T25728]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1106.097001][T25728]  ? __pfx___debug_object_init+0x10/0x10
[ 1106.097022][T25728]  ? find_held_lock+0x2b/0x80
[ 1106.097039][T25728]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1106.097056][T25728]  ? __hrtimer_setup+0x178/0x280
[ 1106.097078][T25728]  mac80211_hwsim_new_radio+0x2847/0x57d0
[ 1106.097110][T25728]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1106.097133][T25728]  hwsim_new_radio_nl+0xc1f/0x1340
[ 1106.097152][T25728]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1106.097176][T25728]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[ 1106.097196][T25728]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[ 1106.097219][T25728]  genl_family_rcv_msg_doit+0x214/0x300
[ 1106.097241][T25728]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1106.097259][T25728]  ? genl_get_cmd+0x3ef/0x720
[ 1106.097284][T25728]  ? bpf_lsm_capable+0x9/0x10
[ 1106.097301][T25728]  ? security_capable+0x80/0x260
[ 1106.097317][T25728]  ? ns_capable+0xd2/0xf0
[ 1106.097334][T25728]  genl_rcv_msg+0x560/0x800
[ 1106.097355][T25728]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1106.097374][T25728]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1106.097398][T25728]  netlink_rcv_skb+0x159/0x420
[ 1106.097414][T25728]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1106.097433][T25728]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1106.097458][T25728]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1106.097476][T25728]  genl_rcv+0x28/0x40
[ 1106.097492][T25728]  netlink_unicast+0x5aa/0x870
[ 1106.097511][T25728]  ? __pfx_netlink_unicast+0x10/0x10
[ 1106.097527][T25728]  ? __pfx___might_resched+0x10/0x10
[ 1106.097548][T25728]  ? __lock_acquire+0x4a5/0x2630
[ 1106.097573][T25728]  netlink_sendmsg+0x8b0/0xda0
[ 1106.097593][T25728]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1106.097608][T25728]  ? __import_iovec+0x1d2/0x640
[ 1106.097629][T25728]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1106.097649][T25728]  ____sys_sendmsg+0x9e1/0xb70
[ 1106.097666][T25728]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1106.097684][T25728]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1106.097707][T25728]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1106.097733][T25728]  ___sys_sendmsg+0x190/0x1e0
[ 1106.097753][T25728]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1106.097797][T25728]  __sys_sendmsg+0x170/0x220
[ 1106.097813][T25728]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1106.097827][T25728]  ? __x64_sys_futex+0x34f/0x4d0
[ 1106.097859][T25728]  do_syscall_64+0x106/0xf80
[ 1106.097921][T25728]  ? clear_bhb_loop+0x40/0x90
[ 1106.097942][T25728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1106.097958][T25728] RIP: 0033:0x7fc78879c819
[ 1106.097973][T25728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1106.097994][T25728] RSP: 002b:00007fc7896e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1106.098010][T25728] RAX: ffffffffffffffda RBX: 00007fc788a15fa0 RCX: 00007fc78879c819
[ 1106.098020][T25728] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1106.098030][T25728] RBP: 00007fc788832c91 R08: 0000000000000000 R09: 0000000000000000
[ 1106.098041][T25728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1106.098050][T25728] R13: 00007fc788a16038 R14: 00007fc788a15fa0 R15: 00007fffc2d679a8
[ 1106.098071][T25728]  </TASK>
[ 1107.409134][T25732] zswap: compressor  not available
[ 1108.401526][T25744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4775'.
[ 1108.887341][T25747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4776'.
[ 1108.949602][T25582] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1109.208522][T25582] veth0_vlan: entered promiscuous mode
[ 1109.284228][T25582] veth1_vlan: entered promiscuous mode
[ 1109.301984][ T5827] Bluetooth: hci0: unexpected event for opcode 0x7c89
[ 1109.450594][T25582] veth0_macvtap: entered promiscuous mode
[ 1109.505975][T25582] veth1_macvtap: entered promiscuous mode
[ 1109.611285][T25582] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1109.702761][T25582] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1109.779821][ T8091] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.820563][ T8091] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.896142][ T8091] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.946522][ T8091] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1110.031235][T25781] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4785'.
[ 1110.153867][T25781] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4785'.
[ 1110.212832][T25786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4786'.
[ 1110.368573][T10128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1110.437141][T10128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1110.579256][ T8099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1110.632046][ T8099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1111.104909][T25793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4788'.
[ 1111.951446][T25829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4796'.
[ 1112.430379][T25836] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4798'.
[ 1113.521037][T25853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4801'.
[ 1114.328913][T25873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4806'.
[ 1115.020242][T25880] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1115.105345][T25338] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1115.119729][T25338] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1115.128299][T25338] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1115.136770][T25338] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1115.152562][T25338] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1115.173552][T25885] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1115.933204][T25887] bridge0: port 3(bond0) entered blocking state
[ 1116.003900][T25887] bridge0: port 3(bond0) entered disabled state
[ 1116.068680][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.075090][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.151725][T25887] bond0: entered allmulticast mode
[ 1116.206276][T25887] bond_slave_0: entered allmulticast mode
[ 1116.394568][T25887] bond_slave_1: entered allmulticast mode
[ 1116.554696][T25887] bond0: entered promiscuous mode
[ 1116.559891][T25887] bond_slave_0: entered promiscuous mode
[ 1116.719395][T25887] bond_slave_1: entered promiscuous mode
[ 1116.824405][T25887] bridge0: port 3(bond0) entered blocking state
[ 1116.830801][T25887] bridge0: port 3(bond0) entered forwarding state
[ 1117.227721][T25904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4812'.
[ 1117.253913][T25338] Bluetooth: hci4: command tx timeout
[ 1117.554290][T10128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1117.732465][T10128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1117.778705][T25916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4815'.
[ 1117.889227][T10128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1118.132991][T10128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1118.216711][T25883] chnl_net:caif_netlink_parms(): no params data found
[ 1118.556936][T25883] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1118.602605][T25883] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1118.641764][T25883] bridge_slave_0: entered allmulticast mode
[ 1118.672253][T25883] bridge_slave_0: entered promiscuous mode
[ 1118.729447][T25883] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1118.775906][T25883] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1118.783166][T25883] bridge_slave_1: entered allmulticast mode
[ 1118.848531][T25883] bridge_slave_1: entered promiscuous mode
[ 1119.118577][T25883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1119.205018][T25883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1119.334544][T25338] Bluetooth: hci4: command tx timeout
[ 1119.552141][T10128] bridge_slave_1: left allmulticast mode
[ 1119.580951][T10128] bridge_slave_1: left promiscuous mode
[ 1119.606872][T10128] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1119.876334][T10128] bridge_slave_0: left allmulticast mode
[ 1119.933415][T10128] bridge_slave_0: left promiscuous mode
[ 1119.975198][T10128] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1120.919053][T25883] team0: Port device team_slave_0 added
[ 1120.975065][T25883] team0: Port device team_slave_1 added
[ 1121.065716][T25883] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1121.083257][T25883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1121.143496][T25974] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1121.168867][T25883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1121.220267][T25883] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1121.237230][T25883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1121.320177][T25883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1121.417697][T25338] Bluetooth: hci4: command tx timeout
[ 1122.065180][T25883] hsr_slave_0: entered promiscuous mode
[ 1122.136674][T25883] hsr_slave_1: entered promiscuous mode
[ 1122.142829][T25883] debugfs: 'hsr0' already exists in 'hsr'
[ 1122.199364][T25883] Cannot create hsr debugfs directory
[ 1122.464733][T25998] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1122.499493][T25998] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[ 1122.717211][T10128] hsr_slave_0: left promiscuous mode
[ 1122.758086][T10128] hsr_slave_1: left promiscuous mode
[ 1122.955236][T10128] veth1_vlan: left promiscuous mode
[ 1122.984536][T10128] veth0_vlan: left promiscuous mode
[ 1123.496473][T25338] Bluetooth: hci4: command tx timeout
[ 1123.761287][T26018] vhci_hcd vhci_hcd.1: invalid port number 16
[ 1123.776964][T10128] team0 (unregistering): Port device team_slave_1 removed
[ 1123.809275][T26018] vhci_hcd vhci_hcd.1: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[ 1123.962723][T10128] team0 (unregistering): Port device team_slave_0 removed
[ 1124.289188][T10128] smc: removing net device dummy0 with user defined pnetid DUMMY0
[ 1124.954683][T26033] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1124.990769][T26033] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[ 1125.152685][T26039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4837'.
[ 1125.896864][T26055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4839'.
[ 1126.049695][T25883] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1126.161699][T25883] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1126.205587][T25883] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1126.294566][T25883] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1126.386302][T26061] debugfs: '!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211'
[ 1126.632616][T26067] warning: `syz.0.4843' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 1127.074772][T25883] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1127.164205][T25883] 8021q: adding VLAN 0 to HW filter on device team0
[ 1127.278727][T10128] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1127.285904][T10128] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1127.345497][T10128] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1127.352819][T10128] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1127.576165][T26093] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1127.668628][T26093] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[ 1127.745467][T26099] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4849'.
[ 1128.184913][T25883] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1128.342648][T25883] veth0_vlan: entered promiscuous mode
[ 1128.359941][T26112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4850'.
[ 1128.410494][T25883] veth1_vlan: entered promiscuous mode
[ 1128.501439][T25883] veth0_macvtap: entered promiscuous mode
[ 1128.523040][T25883] veth1_macvtap: entered promiscuous mode
[ 1128.531039][T26120] FAULT_INJECTION: forcing a failure.
[ 1128.531039][T26120] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1128.573802][T26120] CPU: 0 UID: 0 PID: 26120 Comm: syz.0.4852 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1128.573828][T26120] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1128.573834][T26120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1128.573843][T26120] Call Trace:
[ 1128.573849][T26120]  <TASK>
[ 1128.573855][T26120]  dump_stack_lvl+0x100/0x190
[ 1128.573882][T26120]  should_fail_ex.cold+0x5/0xa
[ 1128.573901][T26120]  _copy_to_user+0x32/0xd0
[ 1128.573922][T26120]  simple_read_from_buffer+0xcb/0x170
[ 1128.573946][T26120]  proc_fail_nth_read+0x1af/0x230
[ 1128.573965][T26120]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1128.573984][T26120]  ? rw_verify_area+0xce/0x6d0
[ 1128.574005][T26120]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1128.574022][T26120]  vfs_read+0x1e4/0xb30
[ 1128.574039][T26120]  ? __pfx_vfs_read+0x10/0x10
[ 1128.574052][T26120]  ? __fget_files+0x215/0x3d0
[ 1128.574076][T26120]  ? __fget_files+0x21f/0x3d0
[ 1128.574096][T26120]  ksys_read+0x12a/0x250
[ 1128.574109][T26120]  ? __pfx_ksys_read+0x10/0x10
[ 1128.574128][T26120]  do_syscall_64+0x106/0xf80
[ 1128.574144][T26120]  ? clear_bhb_loop+0x40/0x90
[ 1128.574161][T26120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1128.574176][T26120] RIP: 0033:0x7fae3855d04e
[ 1128.574189][T26120] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1128.574203][T26120] RSP: 002b:00007fae394c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1128.574221][T26120] RAX: ffffffffffffffda RBX: 00007fae394c76c0 RCX: 00007fae3855d04e
[ 1128.574231][T26120] RDX: 000000000000000f RSI: 00007fae394c70a0 RDI: 0000000000000004
[ 1128.574239][T26120] RBP: 00007fae394c7090 R08: 0000000000000000 R09: 0000000000000000
[ 1128.574248][T26120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1128.574257][T26120] R13: 00007fae38816128 R14: 00007fae38816090 R15: 00007ffef5289318
[ 1128.574276][T26120]  </TASK>
[ 1128.788900][T25883] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1128.799063][T25883] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1129.312565][T26139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4856'.
[ 1129.442493][T22510] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.452224][T22510] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.464649][T26143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4858'.
[ 1129.596181][T22510] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.681688][T22510] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.839055][T26145] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1129.881995][T26145] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[ 1130.239535][ T8099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1130.306371][ T8099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1130.388486][T26154] debugfs: '!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211'
[ 1130.413551][T22510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1130.447228][T22510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1130.804112][T26167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4807'.
[ 1131.213305][T26175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4863'.
[ 1131.690031][T26195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4867'.
[ 1131.731118][T26197] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1131.773940][T26197] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[ 1132.374711][T26219] sysfs: cannot create duplicate filename '/class/ieee80211/!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]'
[ 1132.440430][T26219] CPU: 0 UID: 0 PID: 26219 Comm: syz.3.4873 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1132.440468][T26219] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1132.440474][T26219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1132.440484][T26219] Call Trace:
[ 1132.440490][T26219]  <TASK>
[ 1132.440496][T26219]  dump_stack_lvl+0x100/0x190
[ 1132.440526][T26219]  sysfs_warn_dup.cold+0x1c/0x28
[ 1132.440548][T26219]  sysfs_do_create_link_sd+0x113/0x140
[ 1132.440573][T26219]  sysfs_create_link+0x61/0xc0
[ 1132.440596][T26219]  device_add+0x675/0x1950
[ 1132.440619][T26219]  ? __pfx_device_add+0x10/0x10
[ 1132.440638][T26219]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1132.440656][T26219]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[ 1132.440684][T26219]  wiphy_register+0x1e5b/0x2d30
[ 1132.440702][T26219]  ? __rtnl_unlock+0xb9/0xf0
[ 1132.440720][T26219]  ? netdev_run_todo+0x840/0x12c0
[ 1132.440739][T26219]  ? __pfx_wiphy_register+0x10/0x10
[ 1132.440758][T26219]  ? __asan_memset+0x23/0x50
[ 1132.440780][T26219]  ? minstrel_ht_alloc+0x5e6/0x7f0
[ 1132.440808][T26219]  ieee80211_register_hw+0x2cfd/0x4140
[ 1132.440837][T26219]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1132.440855][T26219]  ? __pfx___debug_object_init+0x10/0x10
[ 1132.440876][T26219]  ? find_held_lock+0x2b/0x80
[ 1132.440892][T26219]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1132.440909][T26219]  ? __hrtimer_setup+0x178/0x280
[ 1132.440932][T26219]  mac80211_hwsim_new_radio+0x2847/0x57d0
[ 1132.440963][T26219]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1132.440987][T26219]  hwsim_new_radio_nl+0xc1f/0x1340
[ 1132.441006][T26219]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1132.441030][T26219]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[ 1132.441049][T26219]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[ 1132.441073][T26219]  genl_family_rcv_msg_doit+0x214/0x300
[ 1132.441093][T26219]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1132.441111][T26219]  ? genl_get_cmd+0x3ef/0x720
[ 1132.441133][T26219]  ? bpf_lsm_capable+0x9/0x10
[ 1132.441149][T26219]  ? security_capable+0x80/0x260
[ 1132.441165][T26219]  ? ns_capable+0xd2/0xf0
[ 1132.441182][T26219]  genl_rcv_msg+0x560/0x800
[ 1132.441209][T26219]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1132.441229][T26219]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1132.441255][T26219]  netlink_rcv_skb+0x159/0x420
[ 1132.441272][T26219]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1132.441303][T26219]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1132.441328][T26219]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1132.441346][T26219]  genl_rcv+0x28/0x40
[ 1132.441362][T26219]  netlink_unicast+0x5aa/0x870
[ 1132.441381][T26219]  ? __pfx_netlink_unicast+0x10/0x10
[ 1132.441397][T26219]  ? __pfx___might_resched+0x10/0x10
[ 1132.441418][T26219]  ? __lock_acquire+0x4a5/0x2630
[ 1132.441443][T26219]  netlink_sendmsg+0x8b0/0xda0
[ 1132.441469][T26219]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1132.441485][T26219]  ? __import_iovec+0x1d2/0x640
[ 1132.441507][T26219]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1132.441527][T26219]  ____sys_sendmsg+0x9e1/0xb70
[ 1132.441545][T26219]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1132.441563][T26219]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1132.441584][T26219]  ? try_to_wake_up+0x644/0x1a80
[ 1132.441604][T26219]  ___sys_sendmsg+0x190/0x1e0
[ 1132.441625][T26219]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1132.441644][T26219]  ? futex_private_hash_put+0x107/0x1c0
[ 1132.441686][T26219]  __sys_sendmsg+0x170/0x220
[ 1132.441701][T26219]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1132.441716][T26219]  ? __x64_sys_futex+0x34f/0x4d0
[ 1132.441747][T26219]  do_syscall_64+0x106/0xf80
[ 1132.441764][T26219]  ? clear_bhb_loop+0x40/0x90
[ 1132.441784][T26219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1132.441800][T26219] RIP: 0033:0x7fc78879c819
[ 1132.441815][T26219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1132.441831][T26219] RSP: 002b:00007fc7896e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1132.441848][T26219] RAX: ffffffffffffffda RBX: 00007fc788a15fa0 RCX: 00007fc78879c819
[ 1132.441858][T26219] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000006
[ 1132.441868][T26219] RBP: 00007fc788832c91 R08: 0000000000000000 R09: 0000000000000000
[ 1132.441878][T26219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1132.441887][T26219] R13: 00007fc788a16038 R14: 00007fc788a15fa0 R15: 00007fffc2d679a8
[ 1132.441908][T26219]  </TASK>
[ 1133.584352][T26245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4878'.
[ 1133.622099][T26250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4879'.
[ 1133.831233][T26255] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1133.889088][T26255] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[ 1134.688209][T26279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4889'.
[ 1135.181141][T26286] sysfs: cannot create duplicate filename '/class/ieee80211/!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]'
[ 1135.256828][T26290] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1135.275614][T26286] CPU: 0 UID: 0 PID: 26286 Comm: syz.3.4891 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1135.275644][T26286] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1135.275650][T26286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1135.275659][T26286] Call Trace:
[ 1135.275666][T26286]  <TASK>
[ 1135.275673][T26286]  dump_stack_lvl+0x100/0x190
[ 1135.275701][T26286]  sysfs_warn_dup.cold+0x1c/0x28
[ 1135.275723][T26286]  sysfs_do_create_link_sd+0x113/0x140
[ 1135.275747][T26286]  sysfs_create_link+0x61/0xc0
[ 1135.275770][T26286]  device_add+0x675/0x1950
[ 1135.275792][T26286]  ? __pfx_device_add+0x10/0x10
[ 1135.275812][T26286]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1135.275830][T26286]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[ 1135.275858][T26286]  wiphy_register+0x1e5b/0x2d30
[ 1135.275875][T26286]  ? __rtnl_unlock+0xb9/0xf0
[ 1135.275892][T26286]  ? netdev_run_todo+0x840/0x12c0
[ 1135.275911][T26286]  ? __pfx_wiphy_register+0x10/0x10
[ 1135.275930][T26286]  ? __asan_memset+0x23/0x50
[ 1135.275952][T26286]  ? minstrel_ht_alloc+0x5e6/0x7f0
[ 1135.275978][T26286]  ieee80211_register_hw+0x2cfd/0x4140
[ 1135.276006][T26286]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1135.276024][T26286]  ? __pfx___debug_object_init+0x10/0x10
[ 1135.276044][T26286]  ? find_held_lock+0x2b/0x80
[ 1135.276061][T26286]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1135.276078][T26286]  ? __hrtimer_setup+0x178/0x280
[ 1135.276100][T26286]  mac80211_hwsim_new_radio+0x2847/0x57d0
[ 1135.276130][T26286]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1135.276154][T26286]  hwsim_new_radio_nl+0xc1f/0x1340
[ 1135.276173][T26286]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1135.276207][T26286]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[ 1135.276228][T26286]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[ 1135.276252][T26286]  genl_family_rcv_msg_doit+0x214/0x300
[ 1135.276274][T26286]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1135.276293][T26286]  ? genl_get_cmd+0x3ef/0x720
[ 1135.276315][T26286]  ? bpf_lsm_capable+0x9/0x10
[ 1135.276331][T26286]  ? security_capable+0x80/0x260
[ 1135.276347][T26286]  ? ns_capable+0xd2/0xf0
[ 1135.276365][T26286]  genl_rcv_msg+0x560/0x800
[ 1135.276385][T26286]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1135.276404][T26286]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1135.276428][T26286]  netlink_rcv_skb+0x159/0x420
[ 1135.276451][T26286]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1135.276471][T26286]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1135.276496][T26286]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1135.276516][T26286]  genl_rcv+0x28/0x40
[ 1135.276532][T26286]  netlink_unicast+0x5aa/0x870
[ 1135.276552][T26286]  ? __pfx_netlink_unicast+0x10/0x10
[ 1135.276571][T26286]  ? __pfx___might_resched+0x10/0x10
[ 1135.276592][T26286]  ? __lock_acquire+0x4a5/0x2630
[ 1135.276617][T26286]  netlink_sendmsg+0x8b0/0xda0
[ 1135.276637][T26286]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1135.276653][T26286]  ? __import_iovec+0x1d2/0x640
[ 1135.276674][T26286]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1135.276694][T26286]  ____sys_sendmsg+0x9e1/0xb70
[ 1135.276711][T26286]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1135.276729][T26286]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1135.276751][T26286]  ? try_to_wake_up+0x644/0x1a80
[ 1135.276771][T26286]  ___sys_sendmsg+0x190/0x1e0
[ 1135.276791][T26286]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1135.276811][T26286]  ? futex_private_hash_put+0x107/0x1c0
[ 1135.276853][T26286]  __sys_sendmsg+0x170/0x220
[ 1135.276869][T26286]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1135.276883][T26286]  ? __x64_sys_futex+0x34f/0x4d0
[ 1135.276914][T26286]  do_syscall_64+0x106/0xf80
[ 1135.276930][T26286]  ? clear_bhb_loop+0x40/0x90
[ 1135.276949][T26286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1135.276964][T26286] RIP: 0033:0x7fc78879c819
[ 1135.276979][T26286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1135.276994][T26286] RSP: 002b:00007fc7896e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1135.277009][T26286] RAX: ffffffffffffffda RBX: 00007fc788a15fa0 RCX: 00007fc78879c819
[ 1135.277019][T26286] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1135.277028][T26286] RBP: 00007fc788832c91 R08: 0000000000000000 R09: 0000000000000000
[ 1135.277038][T26286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1135.277048][T26286] R13: 00007fc788a16038 R14: 00007fc788a15fa0 R15: 00007fffc2d679a8
[ 1135.277070][T26286]  </TASK>
[ 1135.727077][T26290] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[ 1136.347498][T26309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4895'.
[ 1136.433198][T26309] ipvlan1: entered promiscuous mode
[ 1136.438615][T26309] ipvlan1: entered allmulticast mode
[ 1136.454033][T26309] veth0_vlan: entered allmulticast mode
[ 1136.465197][T26312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4899'.
[ 1137.078685][T26331] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off
[ 1137.165277][T26331] pci 0000:00:01.3: PCI INT A: no GSI
[ 1137.304648][T26343] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1137.339672][T26343] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[ 1137.779723][T26347] debugfs: '!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211'
[ 1137.839723][T26351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4911'.
[ 1138.440426][T26365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4914'.
[ 1138.476617][T26371] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1138.476648][T26371] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[ 1138.681653][T26372] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1139.243966][T26388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4924'.
[ 1139.418790][T26390] sysfs: cannot create duplicate filename '/class/ieee80211/!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]'
[ 1139.464623][T26390] CPU: 0 UID: 0 PID: 26390 Comm: syz.3.4925 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1139.464654][T26390] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1139.464661][T26390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1139.464671][T26390] Call Trace:
[ 1139.464677][T26390]  <TASK>
[ 1139.464684][T26390]  dump_stack_lvl+0x100/0x190
[ 1139.464714][T26390]  sysfs_warn_dup.cold+0x1c/0x28
[ 1139.464736][T26390]  sysfs_do_create_link_sd+0x113/0x140
[ 1139.464760][T26390]  sysfs_create_link+0x61/0xc0
[ 1139.464781][T26390]  device_add+0x675/0x1950
[ 1139.464814][T26390]  ? __pfx_device_add+0x10/0x10
[ 1139.464834][T26390]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1139.464852][T26390]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[ 1139.464882][T26390]  wiphy_register+0x1e5b/0x2d30
[ 1139.464899][T26390]  ? __rtnl_unlock+0xb9/0xf0
[ 1139.464916][T26390]  ? netdev_run_todo+0x840/0x12c0
[ 1139.464936][T26390]  ? __pfx_wiphy_register+0x10/0x10
[ 1139.464954][T26390]  ? __asan_memset+0x23/0x50
[ 1139.464976][T26390]  ? minstrel_ht_alloc+0x5e6/0x7f0
[ 1139.465002][T26390]  ieee80211_register_hw+0x2cfd/0x4140
[ 1139.465030][T26390]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1139.465048][T26390]  ? __pfx___debug_object_init+0x10/0x10
[ 1139.465069][T26390]  ? find_held_lock+0x2b/0x80
[ 1139.465086][T26390]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1139.465103][T26390]  ? __hrtimer_setup+0x178/0x280
[ 1139.465125][T26390]  mac80211_hwsim_new_radio+0x2847/0x57d0
[ 1139.465156][T26390]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1139.465180][T26390]  hwsim_new_radio_nl+0xc1f/0x1340
[ 1139.465199][T26390]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1139.465222][T26390]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[ 1139.465242][T26390]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[ 1139.465266][T26390]  genl_family_rcv_msg_doit+0x214/0x300
[ 1139.465286][T26390]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1139.465305][T26390]  ? genl_get_cmd+0x3ef/0x720
[ 1139.465327][T26390]  ? bpf_lsm_capable+0x9/0x10
[ 1139.465343][T26390]  ? security_capable+0x80/0x260
[ 1139.465359][T26390]  ? ns_capable+0xd2/0xf0
[ 1139.465376][T26390]  genl_rcv_msg+0x560/0x800
[ 1139.465397][T26390]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1139.465416][T26390]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1139.465440][T26390]  netlink_rcv_skb+0x159/0x420
[ 1139.465456][T26390]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1139.465475][T26390]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1139.465500][T26390]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1139.465519][T26390]  genl_rcv+0x28/0x40
[ 1139.465535][T26390]  netlink_unicast+0x5aa/0x870
[ 1139.465554][T26390]  ? __pfx_netlink_unicast+0x10/0x10
[ 1139.465570][T26390]  ? __pfx___might_resched+0x10/0x10
[ 1139.465591][T26390]  ? __lock_acquire+0x4a5/0x2630
[ 1139.465615][T26390]  netlink_sendmsg+0x8b0/0xda0
[ 1139.465635][T26390]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1139.465650][T26390]  ? __import_iovec+0x1d2/0x640
[ 1139.465671][T26390]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1139.465691][T26390]  ____sys_sendmsg+0x9e1/0xb70
[ 1139.465708][T26390]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1139.465726][T26390]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1139.465749][T26390]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1139.465775][T26390]  ___sys_sendmsg+0x190/0x1e0
[ 1139.465795][T26390]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1139.465846][T26390]  __sys_sendmsg+0x170/0x220
[ 1139.465863][T26390]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1139.465877][T26390]  ? __x64_sys_futex+0x34f/0x4d0
[ 1139.465910][T26390]  do_syscall_64+0x106/0xf80
[ 1139.465926][T26390]  ? clear_bhb_loop+0x40/0x90
[ 1139.465946][T26390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1139.465962][T26390] RIP: 0033:0x7fc78879c819
[ 1139.465976][T26390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1139.465991][T26390] RSP: 002b:00007fc7896e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1139.466008][T26390] RAX: ffffffffffffffda RBX: 00007fc788a15fa0 RCX: 00007fc78879c819
[ 1139.466018][T26390] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000007
[ 1139.466027][T26390] RBP: 00007fc788832c91 R08: 0000000000000000 R09: 0000000000000000
[ 1139.466037][T26390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1139.466046][T26390] R13: 00007fc788a16038 R14: 00007fc788a15fa0 R15: 00007fffc2d679a8
[ 1139.466068][T26390]  </TASK>
[ 1139.999145][T26397] netlink: 318 bytes leftover after parsing attributes in process `syz.2.4927'.
[ 1140.013280][T26404] netlink: 318 bytes leftover after parsing attributes in process `syz.2.4927'.
[ 1140.598738][T26416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4932'.
[ 1140.641134][T26422] vivid-007: =================  START STATUS  =================
[ 1140.652894][T26424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4935'.
[ 1140.662522][T26422] vivid-007: Generate PTS: true
[ 1140.673321][T26422] vivid-007: Generate SCR: true
[ 1140.702235][T26422] tpg source WxH: 320x240 (Y'CbCr)
[ 1140.723643][T26422] tpg field: 1
[ 1140.743354][T26422] tpg crop: (0,0)/320x240
[ 1140.774008][T26422] tpg compose: (0,0)/320x240
[ 1140.793343][T26422] tpg colorspace: 8
[ 1140.807413][T26422] tpg transfer function: 0/0
[ 1140.816629][T26422] tpg Y'CbCr encoding: 0/0
[ 1140.821194][T26422] tpg quantization: 0/0
[ 1140.871473][T26422] tpg RGB range: 0/2
[ 1140.889262][T26422] vivid-007: ==================  END STATUS  ==================
[ 1141.323481][T26435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4938'.
[ 1141.648091][T26450] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1141.676342][T26450] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[ 1141.942832][T26455] __nla_validate_parse: 1 callbacks suppressed
[ 1141.942849][T26455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4945'.
[ 1142.371172][T26466] FAULT_INJECTION: forcing a failure.
[ 1142.371172][T26466] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1142.436740][T26466] CPU: 0 UID: 0 PID: 26466 Comm: syz.3.4949 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1142.436769][T26466] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1142.436776][T26466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1142.436786][T26466] Call Trace:
[ 1142.436792][T26466]  <TASK>
[ 1142.436798][T26466]  dump_stack_lvl+0x100/0x190
[ 1142.436827][T26466]  should_fail_ex.cold+0x5/0xa
[ 1142.436846][T26466]  get_futex_key+0x1d2/0x1620
[ 1142.436867][T26466]  ? __pfx_get_futex_key+0x10/0x10
[ 1142.436892][T26466]  futex_wait_setup+0x83/0x510
[ 1142.436919][T26466]  __futex_wait+0x19f/0x300
[ 1142.436943][T26466]  ? __pfx___futex_wait+0x10/0x10
[ 1142.436969][T26466]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1142.436995][T26466]  ? find_held_lock+0x2b/0x80
[ 1142.437010][T26466]  ? futex_wake+0x456/0x530
[ 1142.437035][T26466]  futex_wait+0xed/0x380
[ 1142.437058][T26466]  ? __pfx_futex_wait+0x10/0x10
[ 1142.437090][T26466]  do_futex+0x1ef/0x350
[ 1142.437109][T26466]  ? __pfx_do_futex+0x10/0x10
[ 1142.437129][T26466]  ? __pfx___might_resched+0x10/0x10
[ 1142.437155][T26466]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[ 1142.437182][T26466]  __x64_sys_futex+0x34f/0x4d0
[ 1142.437205][T26466]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1142.437233][T26466]  do_syscall_64+0x106/0xf80
[ 1142.437250][T26466]  ? clear_bhb_loop+0x40/0x90
[ 1142.437267][T26466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1142.437283][T26466] RIP: 0033:0x7fc78879c819
[ 1142.437296][T26466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1142.437311][T26466] RSP: 002b:00007fc7896e80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1142.437326][T26466] RAX: ffffffffffffffda RBX: 00007fc788a15fa8 RCX: 00007fc78879c819
[ 1142.437336][T26466] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc788a15fa8
[ 1142.437346][T26466] RBP: 00007fc788a15fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1142.437355][T26466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1142.437364][T26466] R13: 00007fc788a16038 R14: 00007fffc2d678c0 R15: 00007fffc2d679a8
[ 1142.437383][T26466]  </TASK>
[ 1142.904200][T26480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4951'.
[ 1143.035286][T26482] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1143.043052][T26482] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[ 1143.446899][T26490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4957'.
[ 1143.868824][T26509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4962'.
[ 1143.960991][T26509] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1144.110573][T26509] bridge_slave_1 (unregistering): left allmulticast mode
[ 1144.125324][T26519] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1144.154097][T26519] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[ 1144.199104][T26509] bridge_slave_1 (unregistering): left promiscuous mode
[ 1144.226593][T26509] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1144.362771][T26522] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4965'.
[ 1144.419033][T26522] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4965'.
[ 1144.763242][T26537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4968'.
[ 1144.981882][T26539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4969'.
[ 1145.001929][T26539] ipvlan1: entered promiscuous mode
[ 1145.015144][T26539] ipvlan1: entered allmulticast mode
[ 1145.029398][T26539] veth0_vlan: entered allmulticast mode
[ 1145.507261][T26555] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1145.536689][T26555] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[ 1145.662533][T26558] netlink: 206 bytes leftover after parsing attributes in process `syz.2.4976'.
[ 1145.693480][T26558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4976'.
[ 1145.851682][T26560] FAULT_INJECTION: forcing a failure.
[ 1145.851682][T26560] name failslab, interval 1, probability 0, space 0, times 0
[ 1145.886353][T26560] CPU: 0 UID: 0 PID: 26560 Comm: syz.1.4977 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1145.886380][T26560] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1145.886386][T26560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1145.886394][T26560] Call Trace:
[ 1145.886400][T26560]  <TASK>
[ 1145.886406][T26560]  dump_stack_lvl+0x100/0x190
[ 1145.886431][T26560]  should_fail_ex.cold+0x5/0xa
[ 1145.886449][T26560]  should_failslab+0xc2/0x120
[ 1145.886466][T26560]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1145.886488][T26560]  ? taskstats_exit+0x650/0xbd0
[ 1145.886510][T26560]  taskstats_exit+0x650/0xbd0
[ 1145.886524][T26560]  ? __pfx_acct_update_integrals+0x10/0x10
[ 1145.886539][T26560]  ? __pfx_taskstats_exit+0x10/0x10
[ 1145.886554][T26560]  ? rcu_read_lock_any_held+0x6a/0xa0
[ 1145.886569][T26560]  ? exit_signals+0x395/0xaf0
[ 1145.886587][T26560]  do_exit+0x659/0x2b60
[ 1145.886609][T26560]  ? __pfx_do_exit+0x10/0x10
[ 1145.886627][T26560]  ? do_raw_spin_lock+0x128/0x260
[ 1145.886647][T26560]  ? find_held_lock+0x2b/0x80
[ 1145.886661][T26560]  ? get_signal+0x7e0/0x21e0
[ 1145.886677][T26560]  do_group_exit+0xd5/0x2a0
[ 1145.886697][T26560]  get_signal+0x1ec7/0x21e0
[ 1145.886719][T26560]  ? __pfx_get_signal+0x10/0x10
[ 1145.886735][T26560]  ? do_futex+0x192/0x350
[ 1145.886755][T26560]  arch_do_signal_or_restart+0x91/0x770
[ 1145.886774][T26560]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1145.886797][T26560]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1145.886820][T26560]  exit_to_user_mode_loop+0x86/0x4a0
[ 1145.886840][T26560]  do_syscall_64+0x668/0xf80
[ 1145.886856][T26560]  ? clear_bhb_loop+0x40/0x90
[ 1145.886877][T26560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1145.886892][T26560] RIP: 0033:0x7f94bcd9c819
[ 1145.886905][T26560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1145.886919][T26560] RSP: 002b:00007f94bdb8c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1145.886934][T26560] RAX: fffffffffffffe00 RBX: 00007f94bd015fa8 RCX: 00007f94bcd9c819
[ 1145.886944][T26560] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f94bd015fa8
[ 1145.886953][T26560] RBP: 00007f94bd015fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1145.886961][T26560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1145.886970][T26560] R13: 00007f94bd016038 R14: 00007ffdc39ac430 R15: 00007ffdc39ac518
[ 1145.886989][T26560]  </TASK>
[ 1146.302795][T26569] sysfs: cannot create duplicate filename '/class/ieee80211/!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]'
[ 1146.317606][T26569] CPU: 0 UID: 0 PID: 26569 Comm: syz.0.4983 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1146.317636][T26569] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1146.317642][T26569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1146.317653][T26569] Call Trace:
[ 1146.317659][T26569]  <TASK>
[ 1146.317666][T26569]  dump_stack_lvl+0x100/0x190
[ 1146.317694][T26569]  sysfs_warn_dup.cold+0x1c/0x28
[ 1146.317716][T26569]  sysfs_do_create_link_sd+0x113/0x140
[ 1146.317744][T26569]  sysfs_create_link+0x61/0xc0
[ 1146.317765][T26569]  device_add+0x675/0x1950
[ 1146.317789][T26569]  ? __pfx_device_add+0x10/0x10
[ 1146.317809][T26569]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1146.317827][T26569]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[ 1146.317856][T26569]  wiphy_register+0x1e5b/0x2d30
[ 1146.317874][T26569]  ? __rtnl_unlock+0xb9/0xf0
[ 1146.317891][T26569]  ? netdev_run_todo+0x840/0x12c0
[ 1146.317911][T26569]  ? __pfx_wiphy_register+0x10/0x10
[ 1146.317929][T26569]  ? __asan_memset+0x23/0x50
[ 1146.317951][T26569]  ? minstrel_ht_alloc+0x5e6/0x7f0
[ 1146.317976][T26569]  ieee80211_register_hw+0x2cfd/0x4140
[ 1146.318004][T26569]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1146.318022][T26569]  ? __pfx___debug_object_init+0x10/0x10
[ 1146.318043][T26569]  ? find_held_lock+0x2b/0x80
[ 1146.318060][T26569]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1146.318076][T26569]  ? __hrtimer_setup+0x178/0x280
[ 1146.318099][T26569]  mac80211_hwsim_new_radio+0x2847/0x57d0
[ 1146.318129][T26569]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1146.318161][T26569]  hwsim_new_radio_nl+0xc1f/0x1340
[ 1146.318181][T26569]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1146.318206][T26569]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[ 1146.318226][T26569]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[ 1146.318251][T26569]  genl_family_rcv_msg_doit+0x214/0x300
[ 1146.318272][T26569]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1146.318291][T26569]  ? genl_get_cmd+0x3ef/0x720
[ 1146.318312][T26569]  ? bpf_lsm_capable+0x9/0x10
[ 1146.318329][T26569]  ? security_capable+0x80/0x260
[ 1146.318345][T26569]  ? ns_capable+0xd2/0xf0
[ 1146.318362][T26569]  genl_rcv_msg+0x560/0x800
[ 1146.318383][T26569]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1146.318402][T26569]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1146.318426][T26569]  netlink_rcv_skb+0x159/0x420
[ 1146.318443][T26569]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1146.318462][T26569]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1146.318486][T26569]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1146.318505][T26569]  genl_rcv+0x28/0x40
[ 1146.318521][T26569]  netlink_unicast+0x5aa/0x870
[ 1146.318540][T26569]  ? __pfx_netlink_unicast+0x10/0x10
[ 1146.318555][T26569]  ? __pfx___might_resched+0x10/0x10
[ 1146.318576][T26569]  ? __lock_acquire+0x4a5/0x2630
[ 1146.318601][T26569]  netlink_sendmsg+0x8b0/0xda0
[ 1146.318621][T26569]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1146.318636][T26569]  ? __import_iovec+0x1d2/0x640
[ 1146.318657][T26569]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1146.318677][T26569]  ____sys_sendmsg+0x9e1/0xb70
[ 1146.318694][T26569]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1146.318712][T26569]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1146.318735][T26569]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1146.318761][T26569]  ___sys_sendmsg+0x190/0x1e0
[ 1146.318782][T26569]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1146.318826][T26569]  __sys_sendmsg+0x170/0x220
[ 1146.318841][T26569]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1146.318856][T26569]  ? __x64_sys_futex+0x34f/0x4d0
[ 1146.318887][T26569]  do_syscall_64+0x106/0xf80
[ 1146.318903][T26569]  ? clear_bhb_loop+0x40/0x90
[ 1146.318922][T26569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1146.318938][T26569] RIP: 0033:0x7fae3859c819
[ 1146.318952][T26569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1146.318967][T26569] RSP: 002b:00007fae394e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1146.318983][T26569] RAX: ffffffffffffffda RBX: 00007fae38815fa0 RCX: 00007fae3859c819
[ 1146.318993][T26569] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1146.319003][T26569] RBP: 00007fae38632c91 R08: 0000000000000000 R09: 0000000000000000
[ 1146.319013][T26569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1146.319022][T26569] R13: 00007fae38816038 R14: 00007fae38815fa0 R15: 00007ffef5289318
[ 1146.319044][T26569]  </TASK>
[ 1146.987310][T26588] __nla_validate_parse: 2 callbacks suppressed
[ 1146.987325][T26588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4985'.
[ 1147.202844][T26595] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1147.210787][T26595] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[ 1147.476039][T26602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4989'.
[ 1148.139347][T26622] ------------[ cut here ]------------
[ 1148.145076][T26622] !reader
[ 1148.145087][T26622] WARNING: kernel/trace/ring_buffer.c:7407 at ring_buffer_map_get_reader+0x659/0x880, CPU#0: syz.2.4994/26622
[ 1148.159715][T26622] Modules linked in:
[ 1148.163878][T26622] CPU: 0 UID: 0 PID: 26622 Comm: syz.2.4994 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1148.174808][T26622] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1148.179984][T26622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1148.190037][T26622] RIP: 0010:ring_buffer_map_get_reader+0x659/0x880
[ 1148.196543][T26622] Code: ff e8 5b d5 fb ff 48 8d 3d 54 75 d1 0e 4c 89 fe 67 48 0f b9 3a e9 e0 fc ff ff 4c 8b 7c 24 58 4c 8b 74 24 60 e8 38 d5 fb ff 90 <0f> 0b 90 e8 2f d5 fb ff 48 89 df 31 db e8 25 10 fe ff 48 8b 74 24
[ 1148.216506][T26622] RSP: 0018:ffffc90004c5fd90 EFLAGS: 00010087
[ 1148.222562][T26622] RAX: 0000000000000787 RBX: ffff88813fea5000 RCX: ffffc90015f19000
[ 1148.230532][T26622] RDX: 0000000000080000 RSI: ffffffff820c6f68 RDI: ffff8880275c9e80
[ 1148.238503][T26622] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 1148.246466][T26622] R10: 0000000000000000 R11: ffff88813fea50b0 R12: ffff88813fea50b0
[ 1148.254425][T26622] R13: dffffc0000000000 R14: ffff88813fea5190 R15: ffff88813fea5018
[ 1148.262383][T26622] FS:  00007f7897fd56c0(0000) GS:ffff888124340000(0000) knlGS:0000000000000000
[ 1148.271319][T26622] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1148.277893][T26622] CR2: 0000001b336feff8 CR3: 000000008f236000 CR4: 00000000003526f0
[ 1148.285851][T26622] Call Trace:
[ 1148.289118][T26622]  <TASK>
[ 1148.292042][T26622]  ? __pfx_ring_buffer_map_get_reader+0x10/0x10
[ 1148.298279][T26622]  ? __fget_files+0x21f/0x3d0
[ 1148.302962][T26622]  tracing_buffers_ioctl+0x30d/0x400
[ 1148.308251][T26622]  ? __pfx_tracing_buffers_ioctl+0x10/0x10
[ 1148.314051][T26622]  __x64_sys_ioctl+0x18e/0x210
[ 1148.318812][T26622]  do_syscall_64+0x106/0xf80
[ 1148.323409][T26622]  ? clear_bhb_loop+0x40/0x90
[ 1148.328077][T26622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1148.333959][T26622] RIP: 0033:0x7f7899d9c819
[ 1148.338452][T26622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1148.358142][T26622] RSP: 002b:00007f7897fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1148.366632][T26622] RAX: ffffffffffffffda RBX: 00007f789a016090 RCX: 00007f7899d9c819
[ 1148.374596][T26622] RDX: 0000000000000000 RSI: 0000000000005220 RDI: 0000000000000005
[ 1148.382551][T26622] RBP: 00007f7899e32c91 R08: 0000000000000000 R09: 0000000000000000
[ 1148.390503][T26622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1148.398458][T26622] R13: 00007f789a016128 R14: 00007f789a016090 R15: 00007ffc5b2bf3f8
[ 1148.406430][T26622]  </TASK>
[ 1148.409443][T26622] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1148.416725][T26622] CPU: 0 UID: 0 PID: 26622 Comm: syz.2.4994 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1148.427647][T26622] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1148.432863][T26622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1148.442923][T26622] Call Trace:
[ 1148.446197][T26622]  <TASK>
[ 1148.449118][T26622]  dump_stack_lvl+0x100/0x190
[ 1148.453794][T26622]  vpanic+0x552/0x970
[ 1148.457762][T26622]  ? __pfx_vpanic+0x10/0x10
[ 1148.462258][T26622]  panic+0xd1/0xe0
[ 1148.465965][T26622]  ? __pfx_panic+0x10/0x10
[ 1148.470375][T26622]  check_panic_on_warn.cold+0x19/0x34
[ 1148.475734][T26622]  ? ring_buffer_map_get_reader+0x659/0x880
[ 1148.481613][T26622]  __warn.cold+0x191/0x348
[ 1148.486012][T26622]  __report_bug+0x296/0x3d0
[ 1148.490501][T26622]  ? ring_buffer_map_get_reader+0x659/0x880
[ 1148.496389][T26622]  ? __pfx___report_bug+0x10/0x10
[ 1148.501416][T26622]  ? add_lock_to_list+0x99/0x110
[ 1148.506360][T26622]  ? lockdep_unlock+0x5a/0xc0
[ 1148.511036][T26622]  ? rb_set_head_page+0x1e6/0x2f0
[ 1148.516055][T26622]  ? ring_buffer_map_get_reader+0x659/0x880
[ 1148.521940][T26622]  report_bug+0xb2/0x220
[ 1148.526267][T26622]  ? ring_buffer_map_get_reader+0x659/0x880
[ 1148.532156][T26622]  handle_bug+0x16a/0x2a0
[ 1148.536499][T26622]  exc_invalid_op+0x17/0x50
[ 1148.540997][T26622]  asm_exc_invalid_op+0x1a/0x20
[ 1148.545835][T26622] RIP: 0010:ring_buffer_map_get_reader+0x659/0x880
[ 1148.552347][T26622] Code: ff e8 5b d5 fb ff 48 8d 3d 54 75 d1 0e 4c 89 fe 67 48 0f b9 3a e9 e0 fc ff ff 4c 8b 7c 24 58 4c 8b 74 24 60 e8 38 d5 fb ff 90 <0f> 0b 90 e8 2f d5 fb ff 48 89 df 31 db e8 25 10 fe ff 48 8b 74 24
[ 1148.571961][T26622] RSP: 0018:ffffc90004c5fd90 EFLAGS: 00010087
[ 1148.578046][T26622] RAX: 0000000000000787 RBX: ffff88813fea5000 RCX: ffffc90015f19000
[ 1148.586120][T26622] RDX: 0000000000080000 RSI: ffffffff820c6f68 RDI: ffff8880275c9e80
[ 1148.594089][T26622] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 1148.602054][T26622] R10: 0000000000000000 R11: ffff88813fea50b0 R12: ffff88813fea50b0
[ 1148.610025][T26622] R13: dffffc0000000000 R14: ffff88813fea5190 R15: ffff88813fea5018
[ 1148.618009][T26622]  ? ring_buffer_map_get_reader+0x658/0x880
[ 1148.623929][T26622]  ? __pfx_ring_buffer_map_get_reader+0x10/0x10
[ 1148.630163][T26622]  ? __fget_files+0x21f/0x3d0
[ 1148.634831][T26622]  tracing_buffers_ioctl+0x30d/0x400
[ 1148.640217][T26622]  ? __pfx_tracing_buffers_ioctl+0x10/0x10
[ 1148.646120][T26622]  __x64_sys_ioctl+0x18e/0x210
[ 1148.650878][T26622]  do_syscall_64+0x106/0xf80
[ 1148.655468][T26622]  ? clear_bhb_loop+0x40/0x90
[ 1148.660132][T26622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1148.666007][T26622] RIP: 0033:0x7f7899d9c819
[ 1148.670412][T26622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1148.690100][T26622] RSP: 002b:00007f7897fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1148.698503][T26622] RAX: ffffffffffffffda RBX: 00007f789a016090 RCX: 00007f7899d9c819
[ 1148.706458][T26622] RDX: 0000000000000000 RSI: 0000000000005220 RDI: 0000000000000005
[ 1148.714415][T26622] RBP: 00007f7899e32c91 R08: 0000000000000000 R09: 0000000000000000
[ 1148.722376][T26622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1148.730340][T26622] R13: 00007f789a016128 R14: 00007f789a016090 R15: 00007ffc5b2bf3f8
[ 1148.738501][T26622]  </TASK>
[ 1148.741600][T26622] Kernel Offset: disabled
[ 1148.745924][T26622] Rebooting in 86400 seconds..