last executing test programs: 18.013908678s ago: executing program 0 (id=2041): mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x7ff, 0x5, 0x7, 0x4, 0x6, 0x8, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8003, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r1, 0x0, 0x1ff) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) setsockopt$auto_SO_TIMESTAMPNS_OLD(0xffffffffffffffff, 0x3, 0x23, 0x0, 0x7fff) io_setup$auto(0x207ffc, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0xc0205649, r4) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r5, &(0x7f0000000580)="7fd0a917413f68eb6b28d5eea7d1553f6595c094f1f855eb8d8776e6bd8f81c440da3fe3433f8243402fc2752caac5da7a03bbb5adf685740635a6bc231c6cf093b7cf0e4dd07f10b2dc12791aa3ebded3cfe2e4befc0e02d2e064b1db3adc8b2ec1c0378efff268086d6cb998b8dedfb7f20d06b7b091e974de1c1a4ce3d378d91b7639d914ba86b1f18337bb06e3619af99e68dfac380ab153fc75a2159d8efbbf7436752c964490346cf1558249979fc61ee71509560d14bdd0922e50904f3a4b2ae1bfc4f6bb9e08f16afd6baa53cf87077be5bcca2829dd4133da071a6fd072ed5568670a5d171e3deee5576bf571a016c162ca369182f202dbe49839df8d4c438dacdd6cdd67c21e2ed9be20baeff5e5019313d5e6e5a0e93eab61be5dec2c7e144cf9d73fd945c25ff11d5d5aa26bf8ab2e06098b8aeb05c1f29c1a30d268d82768b3350c3efcdac39334de0f6406a1aed635e0c55412ff73b0222d67be6bdd185478d502b492c41696ce6f88609795409aa0841dbc7cb222f0cb239b19d9499fdc45988f0290af0666c37b93f047d45b17cbe7c9332c63ad46c6aa871e4b351efa4fbfb88cfa0281f465d1a970939c2d6c45c50ade06f0bb98ed66623b887de325c0f42ab530b649ea29757af9464c18dea186a0bbc62ce209a3be8e86e8f710323cb899d806caf575cb73a419c0804afd4c8a329a2afaebb87291e9fdfd2ca0edebfc4fb7b1e281fa3e6ac387aebfc92107f4251aa8c96a4c6d7599933c2c489a7696e8e42d88b572fa46bead2c96f619030ab70026f14f91bbf0a4c1b3ed74c564d6ae3eefeef94d37e19701513ff7713a52ebfd8f251dc303455de00d1ee3ed3e204bed2901a644056193fc7e00ce10aa6463892a7881a51893af629f7bd8801ce4c44c7ff2decdb6a69d9ed48ff79661ba9ec4a84dd222d3b40e4abf56222b97db9aa646a67e5031a57d570030f41b09529298f1acddbcd1f0ff6a30cb2a2d5eaecd774bbf897477cc1e55488f3493b6aa6908d24b032cbda24f956f7f262d992838923efde7e8ed0558872451d7bd6a4769ecd47c6d0a125a6e638df6f67793901a67071c506d010930b01ce541aa43f9110d874311d18a8ea50fb1907e8d17c3932e0c12c7d6f7c145209ab81105649fc0c5266063bd8c6a16319a82ff5d236122d53e15d6a7fcb16245d7754f3ffbf659a141cbd29286176fe445deebd5dd18baae1bbdfedbe4bd3453c50fb2f6c22505ecd768ad0703624ebf7b924dc7e8e93ea94c8a6a9f0372351b5a4aaadf89a86faf5241e47be7e6790676fbf8abcc6ef89b9f6ce10600e21815ec6d2c580b5c30ada6b956a07d9964e93419856df00b06245d0743ac2b595097007165cbb17c6a492a6eb0559712e5f89ee86b7a2c46acf9b8d8b2c7a85092966aca97f114635c64f6eb44ad927423a3bc434b267c23d364ee5671d3dcbcca02ffbb633b3c9e6f2058c3b43dd46344b92e000a029e6daf42c4d12e3a470487eb5cca6e2014b87e5a5aee1c6b9485472d18aaea4ebefe77c6901cd52e303083d6b2e47f4be756fb4dd02acd4938e6ae5f7178623b3b4bad0a83c2c511fd4a9e1da40efff3ca03326278860a6c507e50717f0ea9288daa0a33748cdaa74ec20f7b5671ab50d2a0ea649b9c1b258fa833e808ce0f0fb537e75e9e4c8e1b5c7fe8ca456e6c32fdb86b88c0bc30e44c5ec22634cf5b6b78574a5aae4cfd5b011095e2ea022a2fd15495319ddfad5b3fdabcf012d8f182af76c9ea3b083b66fb34b0ba87957fcd34cb0a55478bfb857bb79b52ec8cf52fcdaf09a20b743b765310cb24d4b05e55790ebbc410cc1342c3dc27facd2ae8c2ea0916bbe0e1372c09f2b98d486294c1ad0776828ec7feebdd969af66b82f708494c4abd5841d70a71ed0c6c7eef68559527ea4c43fe26e8889f9410cda85b13dc02bd03692198ce526997cb45b322a6354d58344e94944f9fa25950ae239c17b75d313f75405c012d959eeb2991130ec84e703193d749671264f3aafd55cfcfb2f5762979724318d6f1ed0b5e570d0b050ed9282a71de1533cb642ea831444a4bb7668745bf9814a180b18835e7c61d907e4321c25b5400be50d0117537ca13190ffde1bb077eb0cd74f6163abcb87a2b1e261b2c2084224d743b27b67f404b3b2d66a9c12892fb6894cd87c018e4018cfe5cb05b6114b90fb7faff3e591e4f60803318cc54783f9c1473276b33f59a3e545340299036ce3eefeb5775b4ddc00759012e5a408ea73b702c05c102740c6ba5b140a89cef6a7e9591c9afca16e478698cd9a3b4d103a553a194cc30e498b14c2315c61e5e6c329722c5cb50b6c114e4901c067ccfdb54268eb51b1d43b0cf36b78c2e91abf18675c3b69614e0d10c3f15014d69067a97953ba58e7da1b625ae43465346bb7cff85515f83c1934956b2195cebef82db5fd2e9083da8240e4d7d1ade0d4f2be992f2f23197df1054c89bb1b7ad9c03a3c3cecb278221889cb30374987dd72d0d58015dfee54acb6db2127dc467ba3ce0a2353e809622b23d03a6b52666f10cde5a2abb02571b845d58d6590afc59bd16caa59ae4026888efa3f6b1d0f879afb71a580486005db5a411073f8f4964f73103efa972ecf481118b12ae48ba55c50a5fd7c31991b73242bb7448bcb4e412427a4ab9657a0e1f8ff3332e9da5b6f695dfcc4e6fbeb5f2cea1c70703f7fe4b685feb246b27601163c98a661ee30467ac71ee1df93812258dfd19f30fcd059c1cde93e142a6fe6976f9f78b580073528e1a2ca6084eea907db9e3b1ac68eb150ee596519613a667c897afe767f17f3f227db922972bd9bfdc6b7ebd8f1e6a51587e31dd1bc3abeed8a338cc458ff7031507b678c97d51f03b92292ded0ac1f004fe460cbc56f355d17c8b3aa73645d06fac0664e6b2da6dfdf56a2efbe5fe06ae5f0bb3f1e91e3914dc9cf71b66515a7b669bb60f1ccc7ca1ffa1d76dd8762a7d2c106f3f42b8d7e1c337236bafcd8744a53f175ff22d3fbc3ff2bb70714c512d9e2c5f833276b8be411724a41dc99e21fa744af8be985d800f274cfbf11df693aa52f4b9a2b3503123f50830942dcd8a574b439a1f052019bdcab9c15e72aba31d9ef3dffcad1e9033ae5a9babbc6f1ab1705c910dbce3e1e086d02e0cd276f7e2bbc07239328242c9dcf978cbc65848a5075b1de6ca677bad27cbede3c05a93480b6f3eb46f8a8e12230aeb21ca5cd7ce42e8732fa37dfb17b83a19af95729bab425c07461e0816e9d5708034c63def894fa6907de93dac8395e82597b9213041950ea18ed7e8ba7b0f493b4b11e798a0513d4ad1f97301af8d53a5b86af41d4932c23830a5682fa5743955450683827e8a0e558a0e268af340fc8a26ecae297ae3c0ad82a46b4363f51822627d2aab585a2fb69fb6d411949a2221fddadf68c694594c6147880176c1f84474a0d510ebafd8f41658586139628551948b5ed07901bd308ea017ac2b6c137417247c0a7ae0b785962ef0d9057b6b0f80beffea656bd5d69f2d4bd6150e2375e5036756c4302a7e282c00240ad1dff076162eb833ca72837df82d31061346aff14b6dcb826605a850d9fc87a80632d8f1bde73b6baf858e71981976f2a3113a8d01248cc8514aaaf1d79cc1f99a81d86c4ad42286dae6ba36e4b2d45b6afcd9a5d6db9fe9642d3a7a4eb35439389f68a69c6a66ca7d6d00f5c0d1163a7cd3e39dbc7ffcd4c2fb3f8921e0fb59d3624417360a82c98a466548e0dfa2152ee833d0f65b5b2fdeca7287efa260ad91f0fe21682b8ab70c4b19d5d9cbb0ad8cb68973585646047da47518dde987a24e2fd0bb9e1d02215bee1bacee391b995cce351f1ccf04109160b05dce5d569ee7dc84c068521b37", 0xace) renameat2$auto(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000140)='./file0\x00', 0x9) io_setup$auto(0x7, &(0x7f0000000080)=0x5) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) io_setup$auto(0x7, 0x0) unshare$auto(0x40000080) socket(0x2c, 0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0x3, 0x0, 0x8) 15.174840155s ago: executing program 0 (id=2048): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r3, &(0x7f00000020c0)=""/4093, 0xffd) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) 13.883753041s ago: executing program 2 (id=2051): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) io_uring_setup$auto(0x89, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r0, 0x0, 0x20000000001, 0x7fff) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0xe27c, 0x8) r1 = socket(0x2b, 0x1, 0x1) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x2, 0x20009, 0xffffffffffff7f1a, 0x4d982c9e, r1, 0x108000) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(0xffffffffffffffff, 0x80044dfe, 0x0) mmap$auto(0x0, 0xb926, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0x10) 12.119268552s ago: executing program 0 (id=2053): openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x2100, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x121480, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, 0x0, 0x200800, 0x0) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="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", 0x163) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'xfrm0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4040044}, 0x40000) sendmmsg$auto(r1, 0x0, 0x7, 0x4008) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) preadv2$auto(r3, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) unshare$auto(0x40000080) 12.109407862s ago: executing program 3 (id=2055): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x70, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x2c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x214, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x3}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0xfd}, @THERMAL_GENL_ATTR_TZ_TRIP={0x1e8, 0x4, 0x0, 0x1, [@nested={0x1ce, 0x145, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @u32=0x4}, @generic="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", @nested={0x4, 0x16}, @typed={0xa7, 0xfa, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc'}, @generic="495a0d7a6e1cb0d1ea3c6d262f", @nested={0x4, 0xcd}, @typed={0x8, 0x121, 0x0, 0x0, @u32=0x350c}]}, @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@empty}]}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x6}]}, 0x214}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r2, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/037/001\x00', 0x2c2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) 11.839444977s ago: executing program 2 (id=2056): mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x7ff, 0x5, 0x7, 0x4, 0x6, 0x8, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8003, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r1, 0x0, 0x1ff) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) setsockopt$auto_SO_TIMESTAMPNS_OLD(0xffffffffffffffff, 0x3, 0x23, 0x0, 0x7fff) io_setup$auto(0x207ffc, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0xc0205649, r4) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r5, &(0x7f0000000580)="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", 0xace) renameat2$auto(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000140)='./file0\x00', 0x9) io_setup$auto(0x7, &(0x7f0000000080)=0x5) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) io_setup$auto(0x7, 0x0) unshare$auto(0x40000080) socket(0x2c, 0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0x3, 0x0, 0x8) 9.302259432s ago: executing program 3 (id=2057): r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x48402, 0x0) r1 = socket(0x2, 0x5, 0x0) getsockname$auto(r1, &(0x7f0000000000)=@ethernet={0x1, @broadcast}, &(0x7f00000000c0)=0x5) semtimedop$auto(0xfffffffa, &(0x7f0000001000)={0x8000, 0x2, 0x1}, 0x4, &(0x7f0000001080)={0xd, 0x6}) read$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pci/drivers/pata_sch/new_id\x00', 0x2, 0x0) r2 = socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c081}, 0x80) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r4 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r4, 0x0, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0xfb3) prctl$auto(0x5, 0x6, 0x0, 0xb117, 0x9) mmap$auto(0x200000000000, 0x810004, 0x40000000000ffb, 0x8000000008011, 0x3, 0x8000) 9.214631519s ago: executing program 0 (id=2058): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r3, &(0x7f00000020c0)=""/4093, 0xffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8401, 0x0) 9.214441829s ago: executing program 2 (id=2059): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000180)={0x7}) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYRES8=r1], 0x3c}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/sctp/eps\x00', 0x121000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000e80)=""/215, 0xd7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/vbi30/power/control\x00', 0x102, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f00000002c0)={0x0, 0x10001, 0x0, &(0x7f0000000280)=0x2}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r5, 0x0, 0x20) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0x7, 0x1, 0xfffffffb, 0x480008, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b0755015e48d00", @raw=0xfffffffe}, 0x2, 0x5, 0x4, @inferred, @integer64={0x8, 0x0, 0xf}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x200000, 0x0) 8.22358558s ago: executing program 1 (id=2061): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r3, &(0x7f00000020c0)=""/4093, 0xffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) 7.315801334s ago: executing program 3 (id=2062): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) 6.808544057s ago: executing program 2 (id=2063): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8401, 0x0) 6.082114873s ago: executing program 1 (id=2064): mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x7ff, 0x5, 0x7, 0x4, 0x6, 0x8, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8003, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r1, 0x0, 0x1ff) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x400a844) setsockopt$auto_SO_TIMESTAMPNS_OLD(0xffffffffffffffff, 0x3, 0x23, 0x0, 0x7fff) io_setup$auto(0x207ffc, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0xc0205649, r3) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r4, &(0x7f0000000580)="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", 0xace) renameat2$auto(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00', 0x9) io_setup$auto(0x7, &(0x7f0000000080)=0x5) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) io_setup$auto(0x7, 0x0) unshare$auto(0x40000080) socket(0x2c, 0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0x3, 0x0, 0x8) 5.400080712s ago: executing program 0 (id=2065): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) mmap$auto(0x200000000, 0x5, 0x9, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$auto_PR_SET_MM(0x23, 0xb, r0, 0x9, 0x7ffffffffffffffc) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) adjtimex$auto(0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x201, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D2\x00', 0x101100, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) mmap$auto(0x10, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5e, 0x80000001, 0x7, 0x2, 0x93, 0x400000001, 0x2]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x4, &(0x7f0000000280)={@siginfo_0_0={0x1fd, 0x0, 0x6, @_sigchld={0x0, 0x0, 0xfffff001, 0x3ff, 0x5}}}, 0xffffffff, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x70c, 0x2}, 0x4000000000b, 0x9, 0xffe, 0xd11f, 0xb871, 0x6, 0x1, 0x81, 0x4, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0x1000000000000b}) madvise$auto(0x0, 0x2003f2, 0x15) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da) close_range$auto(0x0, 0xfffffffffffff001, 0x2000002) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) 5.101965841s ago: executing program 3 (id=2066): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/current_tracer\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/kernel/pid_max\x00', 0x0, 0x0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x100382, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/dummy_hcd.6/usb7/bNumConfigurations\x00', 0x80000, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x3a) inotify_init1$auto(0x3000000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r0) 5.03447389s ago: executing program 1 (id=2067): mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mmap$auto(0xffffffffffffffff, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000029, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x2201, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04#\x01\n2\x7f\x88\x83\xa9\xd7\xbea\xcd\x00\x00\x00\xef\xabJY\xee,\xf6\x80\xecP\x9f\x00\x00\x00\x00\x00\x00\x00\x80\xe0Z\x1bsZ\xac\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7jUA\x11\xf9\xb4U\xc5\x92\xf1', 0x82) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x216641, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x100000a, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x4005, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0]}, 0x1fe, 0x200c) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='H'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x7}, 0x3, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') socket(0x10, 0x2, 0x0) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) socket(0x18, 0x80000, 0x2) 4.518458457s ago: executing program 3 (id=2068): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x70, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x2c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x214, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x3}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0xfd}, @THERMAL_GENL_ATTR_TZ_TRIP={0x1e8, 0x4, 0x0, 0x1, [@nested={0x1ce, 0x145, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @u32=0x4}, @generic="45977c8c39b253ade7b8717f9f6b0181d13715a2ebd5d7bbaa3a15b646fce0a7bac662a3b1782b36c2ceb58af8dce5999cd670e6e62a1a143fb12e84a2268c37e1ca55ff2ed100f1cf537c48a735d4721be79277a6d1baa3f93656b347455c36728642f7a6a8de4f4e6d2c01c827122397244c59756dce6505d1ad492e7a0ba37a242944ec4731da56e5b5afb3e45a560bc9a7fbbc4cf811666c305fffc1d0b1adf8674c49a6a513141f5f4880b7146152583d838e1a88ce72316b3294f9f2c2759a78f91d60928419b4f5bee26644cb7821cd8735bf2c13898d36d51ec28a234e72bc5379b95cfd74d37444e8f87275d1a26c92ed2489d39cd219a1ea", @nested={0x4, 0x16}, @typed={0xa7, 0xfa, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc'}, @generic="495a0d7a6e1cb0d1ea3c6d262f", @nested={0x4, 0xcd}, @typed={0x8, 0x121, 0x0, 0x0, @u32=0x350c}]}, @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@empty}]}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x6}]}, 0x214}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r2, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/037/001\x00', 0x2c2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) 3.551539002s ago: executing program 2 (id=2069): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x70, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x2c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x214, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x3}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0xfd}, @THERMAL_GENL_ATTR_TZ_TRIP={0x1e8, 0x4, 0x0, 0x1, [@nested={0x1ce, 0x145, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @u32=0x4}, @generic="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", @nested={0x4, 0x16}, @typed={0xa7, 0xfa, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc'}, @generic="495a0d7a6e1cb0d1ea3c6d262f", @nested={0x4, 0xcd}, @typed={0x8, 0x121, 0x0, 0x0, @u32=0x350c}]}, @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@empty}]}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x6}]}, 0x214}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r2, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/037/001\x00', 0x2c2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) 2.168956643s ago: executing program 1 (id=2070): mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) socket(0x1d, 0x3, 0x1) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) r0 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322df4) r1 = open_by_handle_at$auto(r0, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r1, r0, 0x0, 0x2) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x804, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r3, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{0x40000006, 0x2, 0x6}]}) ioctl$auto_UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0x80, 0x80000000, 0x9}) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.11/usb31/31-0:1.0/ep_81/bEndpointAddress\x00', 0x100, 0x0) write$auto(r5, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000300), 0x2200, 0x0) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x2000019) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), r6) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x800) 1.055232876s ago: executing program 1 (id=2071): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7fffffffffffffff, 0x4) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r0, 0x40000000029, 0x43, 0xfffffffffffffffe, 0x0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x20008000) sysfs$auto(0x2, 0x23, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/self/syscall\x00', 0x80, 0x0) keyctl$auto(0x11, 0xfffffffd, 0x8, 0x4, 0x9) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xfffffffffffffffc, 0x84020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x1df, 0x9b72, 0xffffffffffffffff, 0x8000) 626.139117ms ago: executing program 1 (id=2072): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8401, 0x0) 114.707234ms ago: executing program 2 (id=2073): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x11, 0x80000, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x10000, 0x4080000000db, 0xeb1, 0x2, 0x8000) open(0x0, 0x161342, 0x130) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x101, 0x103) read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2ab42, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES16, @ANYRES64=r2, @ANYRES16], 0xb4}}, 0x20000054) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) write$auto(r2, 0x0, 0x98c7) madvise$auto(0x0, 0x8, 0x15) unshare$auto(0x40000080) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000001bc0)="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", 0x930) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 71.248895ms ago: executing program 3 (id=2074): execveat$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000031, 0x0) r0 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) lsm_list_modules$auto(&(0x7f0000000080)=0x6244, &(0x7f0000000100)=0x2, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) dup3$auto(r0, r1, 0x2) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) shutdown$auto(0x200000003, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory5/power/autosuspend_delay_ms\x00', 0x1, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1e2102, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r5, &(0x7f0000000000)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, 0x0, 0x8, 0x200}, 0x5}, 0x3b8b, 0x800) recvmmsg$auto(0x3, 0x0, 0x10000, 0xffe, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x4}, 0x8) mmap$auto(0x80000001, 0x8000128009, 0x2, 0xeb1, 0x401, 0x8000) r6 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r4, r6, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ptyx9/power/runtime_suspended_time\x00', 0x3, 0x0) read$auto(r7, 0x0, 0x800) io_uring_register$auto_IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f00000001c0)="d3bdaf93f182739b8717d1093c7e7668d097f6fdee7c42700773", 0xd) 0s ago: executing program 0 (id=2075): openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x2100, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x121480, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, 0x0, 0x200800, 0x0) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="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", 0x163) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'xfrm0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4040044}, 0x40000) sendmmsg$auto(r1, 0x0, 0x7, 0x4008) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) preadv2$auto(r3, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) unshare$auto(0x40000080) kernel console output (not intermixed with test programs): 965] Tainted: [L]=SOFTLOCKUP [ 765.433098][T14965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 765.433114][T14965] Call Trace: [ 765.433121][T14965] [ 765.433130][T14965] dump_stack_lvl+0x16c/0x1f0 [ 765.433172][T14965] should_fail_ex+0x512/0x640 [ 765.433199][T14965] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 765.433240][T14965] should_failslab+0xc2/0x120 [ 765.433279][T14965] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 765.433317][T14965] ? vidtv_psi_network_name_desc_init+0x183/0x310 [ 765.433362][T14965] ? kstrdup+0x53/0x100 [ 765.433389][T14965] kstrdup+0x53/0x100 [ 765.433418][T14965] vidtv_psi_network_name_desc_init+0x183/0x310 [ 765.433458][T14965] vidtv_psi_nit_table_init+0x291/0x5f0 [ 765.433481][T14965] ? kasan_save_track+0x14/0x30 [ 765.433517][T14965] vidtv_channel_si_init+0xe19/0x1a50 [ 765.433560][T14965] vidtv_mux_init+0x526/0xbe0 [ 765.433590][T14965] vidtv_start_feed+0x33e/0x4d0 [ 765.433624][T14965] ? __pfx_vidtv_start_feed+0x10/0x10 [ 765.433659][T14965] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 765.433700][T14965] ? mark_held_locks+0x49/0x80 [ 765.433728][T14965] ? __pfx_vidtv_start_feed+0x10/0x10 [ 765.433761][T14965] dmx_ts_feed_start_filtering+0xf6/0x220 [ 765.433795][T14965] dvb_dmxdev_start_feed+0x273/0x3f0 [ 765.433823][T14965] dvb_dmxdev_filter_start+0x1b6/0xe10 [ 765.433853][T14965] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 765.433881][T14965] dvb_demux_do_ioctl+0x9de/0x12f0 [ 765.433916][T14965] dvb_usercopy+0x167/0x340 [ 765.433954][T14965] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 765.433982][T14965] ? __pfx_dvb_usercopy+0x10/0x10 [ 765.434033][T14965] ? __fget_files+0x20e/0x3c0 [ 765.434075][T14965] dvb_demux_ioctl+0x29/0x40 [ 765.434096][T14965] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 765.434119][T14965] __x64_sys_ioctl+0x18e/0x210 [ 765.434153][T14965] do_syscall_64+0xcd/0xf80 [ 765.434192][T14965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.434217][T14965] RIP: 0033:0x7f8d5cb8f7c9 [ 765.434236][T14965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.434260][T14965] RSP: 002b:00007f8d5d9c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 765.434282][T14965] RAX: ffffffffffffffda RBX: 00007f8d5cde5fa0 RCX: 00007f8d5cb8f7c9 [ 765.434298][T14965] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 765.434313][T14965] RBP: 00007f8d5cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 765.434328][T14965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.434342][T14965] R13: 00007f8d5cde6038 R14: 00007f8d5cde5fa0 R15: 00007ffd1816d578 [ 765.434374][T14965] [ 766.978284][T14992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1753'. [ 768.936411][T15016] random: crng reseeded on system resumption [ 768.968122][T15015] FAULT_INJECTION: forcing a failure. [ 768.968122][T15015] name fail_futex, interval 1, probability 0, space 0, times 0 [ 769.044040][T15015] CPU: 0 UID: 0 PID: 15015 Comm: syz.2.1760 Tainted: G L syzkaller #0 PREEMPT(full) [ 769.044079][T15015] Tainted: [L]=SOFTLOCKUP [ 769.044088][T15015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 769.044103][T15015] Call Trace: [ 769.044111][T15015] [ 769.044119][T15015] dump_stack_lvl+0x16c/0x1f0 [ 769.044162][T15015] should_fail_ex+0x512/0x640 [ 769.044189][T15015] ? rcu_is_watching+0x12/0xc0 [ 769.044227][T15015] get_futex_key+0x1d0/0x15f0 [ 769.044264][T15015] ? __pfx_get_futex_key+0x10/0x10 [ 769.044293][T15015] ? __pfx____sys_sendmsg+0x10/0x10 [ 769.044330][T15015] futex_wake+0xea/0x530 [ 769.044366][T15015] ? __pfx_futex_wake+0x10/0x10 [ 769.044412][T15015] do_futex+0x1e3/0x350 [ 769.044440][T15015] ? __pfx_do_futex+0x10/0x10 [ 769.044468][T15015] ? fput+0x70/0xf0 [ 769.044491][T15015] ? __sys_sendmsg+0x18c/0x220 [ 769.044524][T15015] __x64_sys_futex+0x1e0/0x4c0 [ 769.044556][T15015] ? __pfx___x64_sys_futex+0x10/0x10 [ 769.044596][T15015] do_syscall_64+0xcd/0xf80 [ 769.044636][T15015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.044661][T15015] RIP: 0033:0x7fe38698f7c9 [ 769.044679][T15015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.044703][T15015] RSP: 002b:00007fe3878510e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 769.044726][T15015] RAX: ffffffffffffffda RBX: 00007fe386be5fa8 RCX: 00007fe38698f7c9 [ 769.044742][T15015] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe386be5fac [ 769.044757][T15015] RBP: 00007fe386be5fa0 R08: 00007fe387852000 R09: 0000000000000000 [ 769.044772][T15015] R10: 0000000000000294 R11: 0000000000000246 R12: 0000000000000000 [ 769.044787][T15015] R13: 00007fe386be6038 R14: 00007fff2d405a00 R15: 00007fff2d405ae8 [ 769.044817][T15015] [ 770.655412][T15041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1766'. [ 771.078353][T15045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1767'. [ 771.231998][T15047] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 771.329637][T15047] CPU: 0 UID: 0 PID: 15047 Comm: syz.3.1768 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.329676][T15047] Tainted: [L]=SOFTLOCKUP [ 771.329684][T15047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 771.329699][T15047] Call Trace: [ 771.329707][T15047] [ 771.329716][T15047] dump_stack_lvl+0x16c/0x1f0 [ 771.329758][T15047] sysfs_warn_dup+0x7f/0xa0 [ 771.329787][T15047] sysfs_do_create_link_sd+0x124/0x140 [ 771.329817][T15047] sysfs_create_link+0x61/0xc0 [ 771.329845][T15047] device_add+0x652/0x1980 [ 771.329882][T15047] ? __pfx_device_add+0x10/0x10 [ 771.329915][T15047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 771.329955][T15047] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 771.329998][T15047] wiphy_register+0x1ea1/0x2cc0 [ 771.330059][T15047] ? __rtnl_unlock+0x68/0xf0 [ 771.330097][T15047] ? napi_enable_locked+0x190/0xa00 [ 771.330133][T15047] ? __pfx_wiphy_register+0x10/0x10 [ 771.330156][T15047] ? __asan_memset+0x23/0x50 [ 771.330196][T15047] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 771.330240][T15047] ieee80211_register_hw+0x2bb2/0x4160 [ 771.330276][T15047] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 771.330299][T15047] ? __pfx___debug_object_init+0x10/0x10 [ 771.330343][T15047] ? find_held_lock+0x2b/0x80 [ 771.330376][T15047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 771.330414][T15047] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 771.330451][T15047] ? __hrtimer_setup+0x176/0x280 [ 771.330485][T15047] mac80211_hwsim_new_radio+0x3323/0x5150 [ 771.330530][T15047] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 771.330568][T15047] hwsim_new_radio_nl+0xba2/0x1330 [ 771.330601][T15047] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 771.330639][T15047] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 771.330682][T15047] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 771.330731][T15047] genl_family_rcv_msg_doit+0x209/0x2f0 [ 771.330774][T15047] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 771.330816][T15047] ? genl_get_cmd+0x194/0x580 [ 771.330860][T15047] ? bpf_lsm_capable+0x9/0x10 [ 771.330892][T15047] ? security_capable+0x7e/0x260 [ 771.330933][T15047] ? ns_capable+0xd7/0x110 [ 771.330967][T15047] genl_rcv_msg+0x55c/0x800 [ 771.330993][T15047] ? __pfx_genl_rcv_msg+0x10/0x10 [ 771.331021][T15047] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 771.331059][T15047] netlink_rcv_skb+0x158/0x420 [ 771.331096][T15047] ? __pfx_genl_rcv_msg+0x10/0x10 [ 771.331120][T15047] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 771.331169][T15047] ? netlink_deliver_tap+0x1ae/0xd30 [ 771.331208][T15047] genl_rcv+0x28/0x40 [ 771.331244][T15047] netlink_unicast+0x5aa/0x870 [ 771.331284][T15047] ? __pfx_netlink_unicast+0x10/0x10 [ 771.331320][T15047] ? __pfx___might_resched+0x10/0x10 [ 771.331354][T15047] ? __lock_acquire+0x436/0x2890 [ 771.331384][T15047] netlink_sendmsg+0x8c8/0xdd0 [ 771.331425][T15047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.331465][T15047] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 771.331511][T15047] ____sys_sendmsg+0xa5d/0xc30 [ 771.331552][T15047] ? copy_msghdr_from_user+0x10a/0x160 [ 771.331583][T15047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 771.331621][T15047] ? preempt_schedule_thunk+0x16/0x30 [ 771.331650][T15047] ? try_to_wake_up+0xa67/0x1860 [ 771.331688][T15047] ___sys_sendmsg+0x134/0x1d0 [ 771.331721][T15047] ? __pfx____sys_sendmsg+0x10/0x10 [ 771.331753][T15047] ? futex_private_hash_put+0x160/0x1b0 [ 771.331812][T15047] __sys_sendmsg+0x16d/0x220 [ 771.331844][T15047] ? __pfx___sys_sendmsg+0x10/0x10 [ 771.331875][T15047] ? __x64_sys_futex+0x1e0/0x4c0 [ 771.331921][T15047] do_syscall_64+0xcd/0xf80 [ 771.331961][T15047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.331986][T15047] RIP: 0033:0x7f121658f7c9 [ 771.332011][T15047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.332035][T15047] RSP: 002b:00007f1217495038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.332058][T15047] RAX: ffffffffffffffda RBX: 00007f12167e5fa0 RCX: 00007f121658f7c9 [ 771.332074][T15047] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 771.332089][T15047] RBP: 00007f1216613f91 R08: 0000000000000000 R09: 0000000000000000 [ 771.332104][T15047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.332118][T15047] R13: 00007f12167e6038 R14: 00007f12167e5fa0 R15: 00007ffe145177e8 [ 771.332150][T15047] [ 775.167606][T15085] FAULT_INJECTION: forcing a failure. [ 775.167606][T15085] name failslab, interval 1, probability 0, space 0, times 0 [ 775.269069][T15085] CPU: 0 UID: 0 PID: 15085 Comm: syz.0.1774 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.269108][T15085] Tainted: [L]=SOFTLOCKUP [ 775.269117][T15085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 775.269131][T15085] Call Trace: [ 775.269139][T15085] [ 775.269148][T15085] dump_stack_lvl+0x16c/0x1f0 [ 775.269189][T15085] should_fail_ex+0x512/0x640 [ 775.269217][T15085] ? fs_reclaim_acquire+0xae/0x150 [ 775.269258][T15085] should_failslab+0xc2/0x120 [ 775.269296][T15085] __kmalloc_cache_noprof+0x80/0x800 [ 775.269325][T15085] ? tomoyo_init_log+0x197/0x2140 [ 775.269358][T15085] ? format_decode+0x1a7/0xd00 [ 775.269389][T15085] ? tomoyo_init_log+0x197/0x2140 [ 775.269420][T15085] tomoyo_init_log+0x197/0x2140 [ 775.269455][T15085] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 775.269503][T15085] ? __pfx_tomoyo_init_log+0x10/0x10 [ 775.269536][T15085] ? tomoyo_profile+0x47/0x60 [ 775.269572][T15085] ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0 [ 775.269603][T15085] tomoyo_supervisor+0x302/0x13b0 [ 775.269664][T15085] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 775.269719][T15085] ? kfree+0x2f8/0x6e0 [ 775.269744][T15085] ? tomoyo_realpath_from_path+0x19f/0x6e0 [ 775.269778][T15085] ? tomoyo_check_path_acl+0xad/0x210 [ 775.269806][T15085] ? tomoyo_check_acl+0x1f7/0x410 [ 775.269835][T15085] tomoyo_path_permission+0x270/0x3b0 [ 775.269865][T15085] tomoyo_check_open_permission+0x37b/0x3c0 [ 775.269896][T15085] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 775.269954][T15085] ? do_raw_spin_lock+0x12c/0x2b0 [ 775.269990][T15085] tomoyo_file_open+0x6b/0x90 [ 775.270029][T15085] security_file_open+0x84/0x1e0 [ 775.270061][T15085] do_dentry_open+0x597/0x1590 [ 775.270100][T15085] ? security_inode_permission+0xbf/0x260 [ 775.270133][T15085] vfs_open+0x82/0x3f0 [ 775.270162][T15085] path_openat+0x2078/0x3140 [ 775.270208][T15085] ? __pfx_path_openat+0x10/0x10 [ 775.270257][T15085] do_filp_open+0x20b/0x470 [ 775.270294][T15085] ? __pfx_do_filp_open+0x10/0x10 [ 775.270342][T15085] ? __pfx_kfree_link+0x10/0x10 [ 775.270380][T15085] ? alloc_fd+0x471/0x7d0 [ 775.270424][T15085] do_sys_openat2+0x121/0x290 [ 775.270451][T15085] ? __pfx_do_sys_openat2+0x10/0x10 [ 775.270476][T15085] ? fput+0x70/0xf0 [ 775.270498][T15085] ? __sys_connect+0xe0/0x160 [ 775.270533][T15085] __x64_sys_openat+0x174/0x210 [ 775.270561][T15085] ? __pfx___x64_sys_openat+0x10/0x10 [ 775.270601][T15085] do_syscall_64+0xcd/0xf80 [ 775.270646][T15085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.270671][T15085] RIP: 0033:0x7f8d5cb8f7c9 [ 775.270691][T15085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.270715][T15085] RSP: 002b:00007f8d5d9c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 775.270738][T15085] RAX: ffffffffffffffda RBX: 00007f8d5cde5fa0 RCX: 00007f8d5cb8f7c9 [ 775.270754][T15085] RDX: 0000000000080000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 775.270771][T15085] RBP: 00007f8d5cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 775.270786][T15085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.270800][T15085] R13: 00007f8d5cde6038 R14: 00007f8d5cde5fa0 R15: 00007ffd1816d578 [ 775.270832][T15085] [ 780.613053][T15170] ovs_: entered promiscuous mode [ 781.713839][T15156] Process accounting paused [ 781.946183][T15197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1788'. [ 782.434407][T15204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 782.476021][T15204] netlink: 'syz.1.1790': attribute type 1 has an invalid length. [ 782.518616][T15204] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1790'. [ 782.936682][T15209] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 783.004169][T15209] CPU: 0 UID: 0 PID: 15209 Comm: syz.3.1791 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.004208][T15209] Tainted: [L]=SOFTLOCKUP [ 783.004217][T15209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 783.004231][T15209] Call Trace: [ 783.004239][T15209] [ 783.004247][T15209] dump_stack_lvl+0x16c/0x1f0 [ 783.004289][T15209] sysfs_warn_dup+0x7f/0xa0 [ 783.004317][T15209] sysfs_do_create_link_sd+0x124/0x140 [ 783.004348][T15209] sysfs_create_link+0x61/0xc0 [ 783.004379][T15209] device_add+0x652/0x1980 [ 783.004416][T15209] ? __pfx_device_add+0x10/0x10 [ 783.004448][T15209] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 783.004487][T15209] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 783.004530][T15209] wiphy_register+0x1ea1/0x2cc0 [ 783.004553][T15209] ? __rtnl_unlock+0x68/0xf0 [ 783.004590][T15209] ? napi_enable_locked+0x190/0xa00 [ 783.004626][T15209] ? __pfx_wiphy_register+0x10/0x10 [ 783.004650][T15209] ? __asan_memset+0x23/0x50 [ 783.004688][T15209] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 783.004732][T15209] ieee80211_register_hw+0x2bb2/0x4160 [ 783.004768][T15209] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 783.004792][T15209] ? __pfx___debug_object_init+0x10/0x10 [ 783.004835][T15209] ? find_held_lock+0x2b/0x80 [ 783.004868][T15209] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 783.004906][T15209] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 783.004942][T15209] ? __hrtimer_setup+0x176/0x280 [ 783.004975][T15209] mac80211_hwsim_new_radio+0x3323/0x5150 [ 783.005020][T15209] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 783.005057][T15209] hwsim_new_radio_nl+0xba2/0x1330 [ 783.005088][T15209] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 783.005125][T15209] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 783.005174][T15209] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 783.005224][T15209] genl_family_rcv_msg_doit+0x209/0x2f0 [ 783.005269][T15209] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 783.005311][T15209] ? genl_get_cmd+0x194/0x580 [ 783.005355][T15209] ? bpf_lsm_capable+0x9/0x10 [ 783.005388][T15209] ? security_capable+0x7e/0x260 [ 783.005429][T15209] ? ns_capable+0xd7/0x110 [ 783.005462][T15209] genl_rcv_msg+0x55c/0x800 [ 783.005488][T15209] ? __pfx_genl_rcv_msg+0x10/0x10 [ 783.005512][T15209] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 783.005550][T15209] netlink_rcv_skb+0x158/0x420 [ 783.005586][T15209] ? __pfx_genl_rcv_msg+0x10/0x10 [ 783.005610][T15209] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 783.005659][T15209] ? netlink_deliver_tap+0x1ae/0xd30 [ 783.005697][T15209] genl_rcv+0x28/0x40 [ 783.005734][T15209] netlink_unicast+0x5aa/0x870 [ 783.005774][T15209] ? __pfx_netlink_unicast+0x10/0x10 [ 783.005809][T15209] ? __pfx___might_resched+0x10/0x10 [ 783.005844][T15209] ? __lock_acquire+0x436/0x2890 [ 783.005874][T15209] netlink_sendmsg+0x8c8/0xdd0 [ 783.005915][T15209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.005955][T15209] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 783.006002][T15209] ____sys_sendmsg+0xa5d/0xc30 [ 783.006043][T15209] ? copy_msghdr_from_user+0x10a/0x160 [ 783.006075][T15209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 783.006112][T15209] ? preempt_schedule_thunk+0x16/0x30 [ 783.006141][T15209] ? try_to_wake_up+0xa67/0x1860 [ 783.006184][T15209] ___sys_sendmsg+0x134/0x1d0 [ 783.006218][T15209] ? __pfx____sys_sendmsg+0x10/0x10 [ 783.006250][T15209] ? futex_private_hash_put+0x160/0x1b0 [ 783.006310][T15209] __sys_sendmsg+0x16d/0x220 [ 783.006342][T15209] ? __pfx___sys_sendmsg+0x10/0x10 [ 783.006373][T15209] ? __x64_sys_futex+0x1e0/0x4c0 [ 783.006419][T15209] do_syscall_64+0xcd/0xf80 [ 783.006459][T15209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.006484][T15209] RIP: 0033:0x7f121658f7c9 [ 783.006504][T15209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.006529][T15209] RSP: 002b:00007f1217495038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.006552][T15209] RAX: ffffffffffffffda RBX: 00007f12167e5fa0 RCX: 00007f121658f7c9 [ 783.006568][T15209] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 783.006583][T15209] RBP: 00007f1216613f91 R08: 0000000000000000 R09: 0000000000000000 [ 783.006599][T15209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.006614][T15209] R13: 00007f12167e6038 R14: 00007f12167e5fa0 R15: 00007ffe145177e8 [ 783.006646][T15209] [ 783.436941][T15202] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 783.443108][T15202] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 783.449338][T15202] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 783.456220][T15202] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 784.477816][T14320] Bluetooth: hci2: command 0x0c1a tx timeout [ 785.316034][T15227] ovs_: entered promiscuous mode [ 785.918547][T15214] Bluetooth: hci0: command 0x0c1a tx timeout [ 785.924625][T15214] Bluetooth: hci1: command 0x0c1a tx timeout [ 785.932021][T14320] Bluetooth: hci3: command 0x0c1a tx timeout [ 786.354487][T15233] zswap: compressor not available [ 786.694299][T14295] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 787.878147][T15255] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 787.965014][T15255] CPU: 0 UID: 0 PID: 15255 Comm: syz.0.1800 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.965054][T15255] Tainted: [L]=SOFTLOCKUP [ 787.965062][T15255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 787.965077][T15255] Call Trace: [ 787.965085][T15255] [ 787.965093][T15255] dump_stack_lvl+0x16c/0x1f0 [ 787.965136][T15255] sysfs_warn_dup+0x7f/0xa0 [ 787.965167][T15255] sysfs_do_create_link_sd+0x124/0x140 [ 787.965198][T15255] sysfs_create_link+0x61/0xc0 [ 787.965225][T15255] device_add+0x652/0x1980 [ 787.965264][T15255] ? __pfx_device_add+0x10/0x10 [ 787.965297][T15255] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 787.965337][T15255] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 787.965380][T15255] wiphy_register+0x1ea1/0x2cc0 [ 787.965403][T15255] ? __rtnl_unlock+0x68/0xf0 [ 787.965441][T15255] ? napi_enable_locked+0x190/0xa00 [ 787.965477][T15255] ? __pfx_wiphy_register+0x10/0x10 [ 787.965501][T15255] ? __asan_memset+0x23/0x50 [ 787.965539][T15255] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 787.965591][T15255] ieee80211_register_hw+0x2bb2/0x4160 [ 787.965627][T15255] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 787.965652][T15255] ? __pfx___debug_object_init+0x10/0x10 [ 787.965697][T15255] ? find_held_lock+0x2b/0x80 [ 787.965730][T15255] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 787.965769][T15255] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 787.965806][T15255] ? __hrtimer_setup+0x176/0x280 [ 787.965839][T15255] mac80211_hwsim_new_radio+0x3323/0x5150 [ 787.965885][T15255] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 787.965922][T15255] hwsim_new_radio_nl+0xba2/0x1330 [ 787.965956][T15255] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 787.965994][T15255] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 787.966038][T15255] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 787.966088][T15255] genl_family_rcv_msg_doit+0x209/0x2f0 [ 787.966132][T15255] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 787.966174][T15255] ? genl_get_cmd+0x194/0x580 [ 787.966218][T15255] ? bpf_lsm_capable+0x9/0x10 [ 787.966251][T15255] ? security_capable+0x7e/0x260 [ 787.966291][T15255] ? ns_capable+0xd7/0x110 [ 787.966325][T15255] genl_rcv_msg+0x55c/0x800 [ 787.966351][T15255] ? __pfx_genl_rcv_msg+0x10/0x10 [ 787.966374][T15255] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 787.966413][T15255] netlink_rcv_skb+0x158/0x420 [ 787.966449][T15255] ? __pfx_genl_rcv_msg+0x10/0x10 [ 787.966473][T15255] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 787.966522][T15255] ? netlink_deliver_tap+0x1ae/0xd30 [ 787.966566][T15255] genl_rcv+0x28/0x40 [ 787.966602][T15255] netlink_unicast+0x5aa/0x870 [ 787.966642][T15255] ? __pfx_netlink_unicast+0x10/0x10 [ 787.966678][T15255] ? __pfx___might_resched+0x10/0x10 [ 787.966712][T15255] ? __lock_acquire+0x436/0x2890 [ 787.966743][T15255] netlink_sendmsg+0x8c8/0xdd0 [ 787.966785][T15255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 787.966826][T15255] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 787.966873][T15255] ____sys_sendmsg+0xa5d/0xc30 [ 787.966914][T15255] ? copy_msghdr_from_user+0x10a/0x160 [ 787.966945][T15255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 787.966992][T15255] ? __pfx_futex_wake_mark+0x10/0x10 [ 787.967030][T15255] ___sys_sendmsg+0x134/0x1d0 [ 787.967063][T15255] ? __pfx____sys_sendmsg+0x10/0x10 [ 787.967095][T15255] ? futex_private_hash_put+0x160/0x1b0 [ 787.967155][T15255] __sys_sendmsg+0x16d/0x220 [ 787.967187][T15255] ? __pfx___sys_sendmsg+0x10/0x10 [ 787.967218][T15255] ? __x64_sys_futex+0x1e0/0x4c0 [ 787.967264][T15255] do_syscall_64+0xcd/0xf80 [ 787.967304][T15255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.967329][T15255] RIP: 0033:0x7f8d5cb8f7c9 [ 787.967348][T15255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.967372][T15255] RSP: 002b:00007f8d5d9c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.967395][T15255] RAX: ffffffffffffffda RBX: 00007f8d5cde5fa0 RCX: 00007f8d5cb8f7c9 [ 787.967412][T15255] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 787.967427][T15255] RBP: 00007f8d5cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 787.967443][T15255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.967457][T15255] R13: 00007f8d5cde6038 R14: 00007f8d5cde5fa0 R15: 00007ffd1816d578 [ 787.967490][T15255] [ 789.744696][T15285] Invalid ELF header magic: != ELF [ 790.736270][T15293] serio: Serial port pty6 [ 792.356268][ T31] audit: type=1804 audit(1766884554.532:28): pid=15310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1807" name="/newroot/449/file0" dev="tmpfs" ino=2367 res=1 errno=0 [ 792.481284][ T31] audit: type=1804 audit(1766884554.572:29): pid=15311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1807" name="/newroot/449/file0" dev="tmpfs" ino=2367 res=1 errno=0 [ 796.778784][T15326] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 796.859591][T15358] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input28 [ 796.911074][T15358] FAULT_INJECTION: forcing a failure. [ 796.911074][T15358] name failslab, interval 1, probability 0, space 0, times 0 [ 796.983401][T15358] CPU: 0 UID: 0 PID: 15358 Comm: syz.2.1813 Tainted: G L syzkaller #0 PREEMPT(full) [ 796.983441][T15358] Tainted: [L]=SOFTLOCKUP [ 796.983450][T15358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 796.983465][T15358] Call Trace: [ 796.983474][T15358] [ 796.983484][T15358] dump_stack_lvl+0x16c/0x1f0 [ 796.983527][T15358] should_fail_ex+0x512/0x640 [ 796.983553][T15358] ? kmem_cache_alloc_noprof+0x62/0x770 [ 796.983586][T15358] should_failslab+0xc2/0x120 [ 796.983625][T15358] kmem_cache_alloc_noprof+0x83/0x770 [ 796.983663][T15358] ? __kernfs_new_node+0xd2/0x9b0 [ 796.983697][T15358] ? __kernfs_new_node+0xd2/0x9b0 [ 796.983724][T15358] __kernfs_new_node+0xd2/0x9b0 [ 796.983757][T15358] ? __pfx___kernfs_new_node+0x10/0x10 [ 796.983793][T15358] ? find_held_lock+0x2b/0x80 [ 796.983827][T15358] ? kernfs_root+0xee/0x2a0 [ 796.983861][T15358] kernfs_new_node+0x13c/0x1e0 [ 796.983901][T15358] __kernfs_create_file+0x53/0x350 [ 796.983944][T15358] sysfs_add_file_mode_ns+0x207/0x3c0 [ 796.983978][T15358] sysfs_merge_group+0x1aa/0x340 [ 796.984010][T15358] ? __pfx_sysfs_merge_group+0x10/0x10 [ 796.984054][T15358] ? __pfx_dev_add_physical_location+0x10/0x10 [ 796.984090][T15358] ? bus_to_subsys+0x131/0x160 [ 796.984131][T15358] dpm_sysfs_add+0x237/0x280 [ 796.984166][T15358] device_add+0x9cc/0x1980 [ 796.984203][T15358] ? __pfx_device_add+0x10/0x10 [ 796.984236][T15358] ? __pfx_exact_lock+0x10/0x10 [ 796.984279][T15358] ? kobject_get+0xbb/0x150 [ 796.984320][T15358] cdev_device_add+0x12b/0x270 [ 796.984360][T15358] evdev_connect+0x3a4/0x4c0 [ 796.984402][T15358] input_attach_handler.isra.0+0x176/0x250 [ 796.984438][T15358] input_register_device+0xab9/0x11b0 [ 796.984470][T15358] ? input_ff_create+0x191/0x350 [ 796.984494][T15358] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 796.984521][T15358] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 796.984550][T15358] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 796.984583][T15358] ? find_held_lock+0x2b/0x80 [ 796.984629][T15358] ? __pfx_uinput_ioctl+0x10/0x10 [ 796.984697][T15358] __x64_sys_ioctl+0x18e/0x210 [ 796.984730][T15358] do_syscall_64+0xcd/0xf80 [ 796.984770][T15358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.984795][T15358] RIP: 0033:0x7fe38698f7c9 [ 796.984814][T15358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.984838][T15358] RSP: 002b:00007fe387851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 796.984861][T15358] RAX: ffffffffffffffda RBX: 00007fe386be5fa0 RCX: 00007fe38698f7c9 [ 796.984877][T15358] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 796.984892][T15358] RBP: 00007fe386a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 796.984909][T15358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.984924][T15358] R13: 00007fe386be6038 R14: 00007fe386be5fa0 R15: 00007fff2d405ae8 [ 796.984955][T15358] [ 797.638828][T15365] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1814'. [ 797.653762][T15365] : renamed from ip6tnl0 (while UP) [ 797.671501][T15358] input: failed to attach handler evdev to device input28, error: -12 [ 798.698189][T15381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1816'. [ 801.779850][T15419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1825'. [ 801.958826][T15421] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 802.033120][T15421] CPU: 0 UID: 0 PID: 15421 Comm: syz.0.1826 Tainted: G L syzkaller #0 PREEMPT(full) [ 802.033159][T15421] Tainted: [L]=SOFTLOCKUP [ 802.033167][T15421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 802.033181][T15421] Call Trace: [ 802.033190][T15421] [ 802.033217][T15421] dump_stack_lvl+0x16c/0x1f0 [ 802.033265][T15421] sysfs_warn_dup+0x7f/0xa0 [ 802.033292][T15421] sysfs_do_create_link_sd+0x124/0x140 [ 802.033323][T15421] sysfs_create_link+0x61/0xc0 [ 802.033351][T15421] device_add+0x652/0x1980 [ 802.033389][T15421] ? __pfx_device_add+0x10/0x10 [ 802.033421][T15421] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 802.033461][T15421] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 802.033504][T15421] wiphy_register+0x1ea1/0x2cc0 [ 802.033527][T15421] ? __rtnl_unlock+0x68/0xf0 [ 802.033564][T15421] ? napi_enable_locked+0x190/0xa00 [ 802.033600][T15421] ? __pfx_wiphy_register+0x10/0x10 [ 802.033625][T15421] ? __asan_memset+0x23/0x50 [ 802.033664][T15421] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 802.033709][T15421] ieee80211_register_hw+0x2bb2/0x4160 [ 802.033744][T15421] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 802.033768][T15421] ? __pfx___debug_object_init+0x10/0x10 [ 802.033812][T15421] ? find_held_lock+0x2b/0x80 [ 802.033846][T15421] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 802.033884][T15421] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 802.033921][T15421] ? __hrtimer_setup+0x176/0x280 [ 802.033954][T15421] mac80211_hwsim_new_radio+0x3323/0x5150 [ 802.033999][T15421] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 802.034042][T15421] hwsim_new_radio_nl+0xba2/0x1330 [ 802.034073][T15421] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 802.034110][T15421] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 802.034154][T15421] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 802.034204][T15421] genl_family_rcv_msg_doit+0x209/0x2f0 [ 802.034252][T15421] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 802.034294][T15421] ? genl_get_cmd+0x194/0x580 [ 802.034339][T15421] ? bpf_lsm_capable+0x9/0x10 [ 802.034373][T15421] ? security_capable+0x7e/0x260 [ 802.034414][T15421] ? ns_capable+0xd7/0x110 [ 802.034447][T15421] genl_rcv_msg+0x55c/0x800 [ 802.034473][T15421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 802.034497][T15421] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 802.034536][T15421] netlink_rcv_skb+0x158/0x420 [ 802.034573][T15421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 802.034596][T15421] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 802.034645][T15421] ? netlink_deliver_tap+0x1ae/0xd30 [ 802.034684][T15421] genl_rcv+0x28/0x40 [ 802.034720][T15421] netlink_unicast+0x5aa/0x870 [ 802.034760][T15421] ? __pfx_netlink_unicast+0x10/0x10 [ 802.034795][T15421] ? __pfx___might_resched+0x10/0x10 [ 802.034829][T15421] ? __lock_acquire+0x436/0x2890 [ 802.034860][T15421] netlink_sendmsg+0x8c8/0xdd0 [ 802.034901][T15421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.034941][T15421] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 802.034988][T15421] ____sys_sendmsg+0xa5d/0xc30 [ 802.035029][T15421] ? copy_msghdr_from_user+0x10a/0x160 [ 802.035072][T15421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 802.035109][T15421] ? preempt_schedule_thunk+0x16/0x30 [ 802.035139][T15421] ? try_to_wake_up+0xa67/0x1860 [ 802.035181][T15421] ___sys_sendmsg+0x134/0x1d0 [ 802.035214][T15421] ? __pfx____sys_sendmsg+0x10/0x10 [ 802.035254][T15421] ? futex_private_hash_put+0x160/0x1b0 [ 802.035315][T15421] __sys_sendmsg+0x16d/0x220 [ 802.035347][T15421] ? __pfx___sys_sendmsg+0x10/0x10 [ 802.035378][T15421] ? __x64_sys_futex+0x1e0/0x4c0 [ 802.035424][T15421] do_syscall_64+0xcd/0xf80 [ 802.035465][T15421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.035490][T15421] RIP: 0033:0x7f8d5cb8f7c9 [ 802.035510][T15421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 802.035534][T15421] RSP: 002b:00007f8d5d9c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 802.035557][T15421] RAX: ffffffffffffffda RBX: 00007f8d5cde5fa0 RCX: 00007f8d5cb8f7c9 [ 802.035573][T15421] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 802.035589][T15421] RBP: 00007f8d5cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 802.035604][T15421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 802.035618][T15421] R13: 00007f8d5cde6038 R14: 00007f8d5cde5fa0 R15: 00007ffd1816d578 [ 802.035651][T15421] [ 803.266277][T15439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1830'. [ 804.556933][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1839'. [ 804.656996][T15460] netlink: 'syz.2.1839': attribute type 1 has an invalid length. [ 804.657025][T15460] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1839'. [ 804.809978][T15458] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 804.810027][T15458] CPU: 0 UID: 0 PID: 15458 Comm: syz.1.1832 Tainted: G L syzkaller #0 PREEMPT(full) [ 804.810063][T15458] Tainted: [L]=SOFTLOCKUP [ 804.810071][T15458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 804.810086][T15458] Call Trace: [ 804.810093][T15458] [ 804.810102][T15458] dump_stack_lvl+0x16c/0x1f0 [ 804.810144][T15458] sysfs_warn_dup+0x7f/0xa0 [ 804.810171][T15458] sysfs_do_create_link_sd+0x124/0x140 [ 804.810202][T15458] sysfs_create_link+0x61/0xc0 [ 804.810229][T15458] device_add+0x652/0x1980 [ 804.810267][T15458] ? __pfx_device_add+0x10/0x10 [ 804.810299][T15458] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 804.810339][T15458] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 804.810385][T15458] wiphy_register+0x1ea1/0x2cc0 [ 804.810408][T15458] ? __rtnl_unlock+0x68/0xf0 [ 804.810446][T15458] ? napi_enable_locked+0x190/0xa00 [ 804.810482][T15458] ? __pfx_wiphy_register+0x10/0x10 [ 804.810506][T15458] ? __asan_memset+0x23/0x50 [ 804.810544][T15458] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 804.810589][T15458] ieee80211_register_hw+0x2bb2/0x4160 [ 804.810623][T15458] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 804.810647][T15458] ? __pfx___debug_object_init+0x10/0x10 [ 804.810692][T15458] ? find_held_lock+0x2b/0x80 [ 804.810725][T15458] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 804.810763][T15458] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 804.810799][T15458] ? __hrtimer_setup+0x176/0x280 [ 804.810833][T15458] mac80211_hwsim_new_radio+0x3323/0x5150 [ 804.810878][T15458] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 804.810915][T15458] hwsim_new_radio_nl+0xba2/0x1330 [ 804.810946][T15458] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 804.810983][T15458] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 804.811034][T15458] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 804.811085][T15458] genl_family_rcv_msg_doit+0x209/0x2f0 [ 804.811128][T15458] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 804.811170][T15458] ? genl_get_cmd+0x194/0x580 [ 804.811215][T15458] ? bpf_lsm_capable+0x9/0x10 [ 804.811247][T15458] ? security_capable+0x7e/0x260 [ 804.811289][T15458] ? ns_capable+0xd7/0x110 [ 804.811322][T15458] genl_rcv_msg+0x55c/0x800 [ 804.811348][T15458] ? __pfx_genl_rcv_msg+0x10/0x10 [ 804.811371][T15458] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 804.811410][T15458] netlink_rcv_skb+0x158/0x420 [ 804.811446][T15458] ? __pfx_genl_rcv_msg+0x10/0x10 [ 804.811470][T15458] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 804.811519][T15458] ? netlink_deliver_tap+0x1ae/0xd30 [ 804.811557][T15458] genl_rcv+0x28/0x40 [ 804.811593][T15458] netlink_unicast+0x5aa/0x870 [ 804.811633][T15458] ? __pfx_netlink_unicast+0x10/0x10 [ 804.811668][T15458] ? __pfx___might_resched+0x10/0x10 [ 804.811702][T15458] ? __lock_acquire+0x436/0x2890 [ 804.811732][T15458] netlink_sendmsg+0x8c8/0xdd0 [ 804.811773][T15458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 804.811813][T15458] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 804.811859][T15458] ____sys_sendmsg+0xa5d/0xc30 [ 804.811900][T15458] ? copy_msghdr_from_user+0x10a/0x160 [ 804.811931][T15458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 804.811969][T15458] ? preempt_schedule_thunk+0x16/0x30 [ 804.811998][T15458] ? try_to_wake_up+0xa67/0x1860 [ 804.812049][T15458] ___sys_sendmsg+0x134/0x1d0 [ 804.812082][T15458] ? __pfx____sys_sendmsg+0x10/0x10 [ 804.812114][T15458] ? futex_private_hash_put+0x160/0x1b0 [ 804.812175][T15458] __sys_sendmsg+0x16d/0x220 [ 804.812207][T15458] ? __pfx___sys_sendmsg+0x10/0x10 [ 804.812238][T15458] ? __x64_sys_futex+0x1e0/0x4c0 [ 804.812284][T15458] do_syscall_64+0xcd/0xf80 [ 804.812324][T15458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.812349][T15458] RIP: 0033:0x7fac1f78f7c9 [ 804.812369][T15458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.812394][T15458] RSP: 002b:00007fac206a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 804.812417][T15458] RAX: ffffffffffffffda RBX: 00007fac1f9e6180 RCX: 00007fac1f78f7c9 [ 804.812433][T15458] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 804.812449][T15458] RBP: 00007fac1f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 804.812464][T15458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.812479][T15458] R13: 00007fac1f9e6218 R14: 00007fac1f9e6180 R15: 00007ffce728bb28 [ 804.812511][T15458] [ 810.251200][T15512] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 810.338155][T15512] CPU: 0 UID: 0 PID: 15512 Comm: syz.3.1843 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.338194][T15512] Tainted: [L]=SOFTLOCKUP [ 810.338202][T15512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 810.338217][T15512] Call Trace: [ 810.338224][T15512] [ 810.338234][T15512] dump_stack_lvl+0x16c/0x1f0 [ 810.338275][T15512] sysfs_warn_dup+0x7f/0xa0 [ 810.338303][T15512] sysfs_do_create_link_sd+0x124/0x140 [ 810.338334][T15512] sysfs_create_link+0x61/0xc0 [ 810.338361][T15512] device_add+0x652/0x1980 [ 810.338399][T15512] ? __pfx_device_add+0x10/0x10 [ 810.338432][T15512] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 810.338472][T15512] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 810.338527][T15512] wiphy_register+0x1ea1/0x2cc0 [ 810.338551][T15512] ? __rtnl_unlock+0x68/0xf0 [ 810.338589][T15512] ? napi_enable_locked+0x190/0xa00 [ 810.338625][T15512] ? __pfx_wiphy_register+0x10/0x10 [ 810.338648][T15512] ? __asan_memset+0x23/0x50 [ 810.338687][T15512] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 810.338732][T15512] ieee80211_register_hw+0x2bb2/0x4160 [ 810.338768][T15512] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 810.338792][T15512] ? __pfx___debug_object_init+0x10/0x10 [ 810.338836][T15512] ? find_held_lock+0x2b/0x80 [ 810.338869][T15512] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 810.338908][T15512] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 810.338945][T15512] ? __hrtimer_setup+0x176/0x280 [ 810.338978][T15512] mac80211_hwsim_new_radio+0x3323/0x5150 [ 810.339023][T15512] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 810.339061][T15512] hwsim_new_radio_nl+0xba2/0x1330 [ 810.339092][T15512] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 810.339129][T15512] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 810.339174][T15512] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 810.339224][T15512] genl_family_rcv_msg_doit+0x209/0x2f0 [ 810.339267][T15512] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 810.339309][T15512] ? genl_get_cmd+0x194/0x580 [ 810.339354][T15512] ? bpf_lsm_capable+0x9/0x10 [ 810.339387][T15512] ? security_capable+0x7e/0x260 [ 810.339428][T15512] ? ns_capable+0xd7/0x110 [ 810.339462][T15512] genl_rcv_msg+0x55c/0x800 [ 810.339488][T15512] ? __pfx_genl_rcv_msg+0x10/0x10 [ 810.339516][T15512] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 810.339555][T15512] netlink_rcv_skb+0x158/0x420 [ 810.339592][T15512] ? __pfx_genl_rcv_msg+0x10/0x10 [ 810.339616][T15512] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 810.339665][T15512] ? netlink_deliver_tap+0x1ae/0xd30 [ 810.339704][T15512] genl_rcv+0x28/0x40 [ 810.339741][T15512] netlink_unicast+0x5aa/0x870 [ 810.339781][T15512] ? __pfx_netlink_unicast+0x10/0x10 [ 810.339817][T15512] ? __pfx___might_resched+0x10/0x10 [ 810.339851][T15512] ? __lock_acquire+0x436/0x2890 [ 810.339881][T15512] netlink_sendmsg+0x8c8/0xdd0 [ 810.339922][T15512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.339961][T15512] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 810.340009][T15512] ____sys_sendmsg+0xa5d/0xc30 [ 810.340049][T15512] ? copy_msghdr_from_user+0x10a/0x160 [ 810.340081][T15512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.340118][T15512] ? preempt_schedule_thunk+0x16/0x30 [ 810.340147][T15512] ? try_to_wake_up+0xa67/0x1860 [ 810.340191][T15512] ___sys_sendmsg+0x134/0x1d0 [ 810.340224][T15512] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.340256][T15512] ? futex_private_hash_put+0x160/0x1b0 [ 810.340315][T15512] __sys_sendmsg+0x16d/0x220 [ 810.340347][T15512] ? __pfx___sys_sendmsg+0x10/0x10 [ 810.340378][T15512] ? __x64_sys_futex+0x1e0/0x4c0 [ 810.340425][T15512] do_syscall_64+0xcd/0xf80 [ 810.340465][T15512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.340490][T15512] RIP: 0033:0x7f121658f7c9 [ 810.340514][T15512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.340538][T15512] RSP: 002b:00007f1217495038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.340561][T15512] RAX: ffffffffffffffda RBX: 00007f12167e5fa0 RCX: 00007f121658f7c9 [ 810.340577][T15512] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 810.340593][T15512] RBP: 00007f1216613f91 R08: 0000000000000000 R09: 0000000000000000 [ 810.340607][T15512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.340622][T15512] R13: 00007f12167e6038 R14: 00007f12167e5fa0 R15: 00007ffe145177e8 [ 810.340654][T15512] [ 812.396975][T15537] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 812.477231][T15537] CPU: 0 UID: 0 PID: 15537 Comm: syz.3.1848 Tainted: G L syzkaller #0 PREEMPT(full) [ 812.477278][T15537] Tainted: [L]=SOFTLOCKUP [ 812.477286][T15537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 812.477301][T15537] Call Trace: [ 812.477309][T15537] [ 812.477318][T15537] dump_stack_lvl+0x16c/0x1f0 [ 812.477369][T15537] sysfs_warn_dup+0x7f/0xa0 [ 812.477396][T15537] sysfs_do_create_link_sd+0x124/0x140 [ 812.477427][T15537] sysfs_create_link+0x61/0xc0 [ 812.477454][T15537] device_add+0x652/0x1980 [ 812.477492][T15537] ? __pfx_device_add+0x10/0x10 [ 812.477524][T15537] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 812.477564][T15537] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 812.477606][T15537] wiphy_register+0x1ea1/0x2cc0 [ 812.477629][T15537] ? __rtnl_unlock+0x68/0xf0 [ 812.477666][T15537] ? napi_enable_locked+0x190/0xa00 [ 812.477702][T15537] ? __pfx_wiphy_register+0x10/0x10 [ 812.477726][T15537] ? __asan_memset+0x23/0x50 [ 812.477764][T15537] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 812.477808][T15537] ieee80211_register_hw+0x2bb2/0x4160 [ 812.477844][T15537] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 812.477867][T15537] ? __pfx___debug_object_init+0x10/0x10 [ 812.477911][T15537] ? find_held_lock+0x2b/0x80 [ 812.477944][T15537] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 812.477981][T15537] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 812.478017][T15537] ? __hrtimer_setup+0x176/0x280 [ 812.478050][T15537] mac80211_hwsim_new_radio+0x3323/0x5150 [ 812.478095][T15537] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 812.478133][T15537] hwsim_new_radio_nl+0xba2/0x1330 [ 812.478163][T15537] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 812.478200][T15537] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 812.478244][T15537] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 812.478292][T15537] genl_family_rcv_msg_doit+0x209/0x2f0 [ 812.478343][T15537] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 812.478385][T15537] ? genl_get_cmd+0x194/0x580 [ 812.478429][T15537] ? bpf_lsm_capable+0x9/0x10 [ 812.478462][T15537] ? security_capable+0x7e/0x260 [ 812.478502][T15537] ? ns_capable+0xd7/0x110 [ 812.478536][T15537] genl_rcv_msg+0x55c/0x800 [ 812.478562][T15537] ? __pfx_genl_rcv_msg+0x10/0x10 [ 812.478586][T15537] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 812.478624][T15537] netlink_rcv_skb+0x158/0x420 [ 812.478659][T15537] ? __pfx_genl_rcv_msg+0x10/0x10 [ 812.478683][T15537] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 812.478732][T15537] ? netlink_deliver_tap+0x1ae/0xd30 [ 812.478770][T15537] genl_rcv+0x28/0x40 [ 812.478805][T15537] netlink_unicast+0x5aa/0x870 [ 812.478845][T15537] ? __pfx_netlink_unicast+0x10/0x10 [ 812.478880][T15537] ? __pfx___might_resched+0x10/0x10 [ 812.478914][T15537] ? __lock_acquire+0x436/0x2890 [ 812.478944][T15537] netlink_sendmsg+0x8c8/0xdd0 [ 812.478990][T15537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.479030][T15537] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 812.479076][T15537] ____sys_sendmsg+0xa5d/0xc30 [ 812.479116][T15537] ? copy_msghdr_from_user+0x10a/0x160 [ 812.479148][T15537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 812.479185][T15537] ? preempt_schedule_thunk+0x16/0x30 [ 812.479214][T15537] ? try_to_wake_up+0xa67/0x1860 [ 812.479251][T15537] ___sys_sendmsg+0x134/0x1d0 [ 812.479284][T15537] ? __pfx____sys_sendmsg+0x10/0x10 [ 812.479315][T15537] ? futex_private_hash_put+0x160/0x1b0 [ 812.479379][T15537] __sys_sendmsg+0x16d/0x220 [ 812.479411][T15537] ? __pfx___sys_sendmsg+0x10/0x10 [ 812.479442][T15537] ? __x64_sys_futex+0x1e0/0x4c0 [ 812.479487][T15537] do_syscall_64+0xcd/0xf80 [ 812.479529][T15537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.479553][T15537] RIP: 0033:0x7f121658f7c9 [ 812.479573][T15537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.479597][T15537] RSP: 002b:00007f1217495038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.479619][T15537] RAX: ffffffffffffffda RBX: 00007f12167e5fa0 RCX: 00007f121658f7c9 [ 812.479636][T15537] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 812.479652][T15537] RBP: 00007f1216613f91 R08: 0000000000000000 R09: 0000000000000000 [ 812.479666][T15537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.479682][T15537] R13: 00007f12167e6038 R14: 00007f12167e5fa0 R15: 00007ffe145177e8 [ 812.479714][T15537] [ 812.996252][T15520] Process accounting resumed [ 815.255530][T14374] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 816.016062][T15571] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1853'. [ 816.112900][T15563] zswap: compressor not available [ 819.128207][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.137821][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.927255][T15643] usb usb36: usbfs: process 15643 (syz.0.1867) did not claim interface 0 before use [ 821.411680][T15647] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 821.487386][T15647] CPU: 0 UID: 0 PID: 15647 Comm: syz.2.1868 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.487427][T15647] Tainted: [L]=SOFTLOCKUP [ 821.487435][T15647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 821.487449][T15647] Call Trace: [ 821.487465][T15647] [ 821.487474][T15647] dump_stack_lvl+0x16c/0x1f0 [ 821.487524][T15647] sysfs_warn_dup+0x7f/0xa0 [ 821.487552][T15647] sysfs_do_create_link_sd+0x124/0x140 [ 821.487584][T15647] sysfs_create_link+0x61/0xc0 [ 821.487611][T15647] device_add+0x652/0x1980 [ 821.487649][T15647] ? __pfx_device_add+0x10/0x10 [ 821.487685][T15647] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 821.487725][T15647] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 821.487771][T15647] wiphy_register+0x1ea1/0x2cc0 [ 821.487793][T15647] ? __rtnl_unlock+0x68/0xf0 [ 821.487831][T15647] ? napi_enable_locked+0x190/0xa00 [ 821.487867][T15647] ? __pfx_wiphy_register+0x10/0x10 [ 821.487891][T15647] ? __asan_memset+0x23/0x50 [ 821.487931][T15647] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 821.487976][T15647] ieee80211_register_hw+0x2bb2/0x4160 [ 821.488012][T15647] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 821.488036][T15647] ? __pfx___debug_object_init+0x10/0x10 [ 821.488108][T15647] ? find_held_lock+0x2b/0x80 [ 821.488142][T15647] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 821.488181][T15647] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 821.488227][T15647] ? __hrtimer_setup+0x176/0x280 [ 821.488262][T15647] mac80211_hwsim_new_radio+0x3323/0x5150 [ 821.488307][T15647] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 821.488345][T15647] hwsim_new_radio_nl+0xba2/0x1330 [ 821.488376][T15647] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 821.488413][T15647] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 821.488468][T15647] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 821.488524][T15647] genl_family_rcv_msg_doit+0x209/0x2f0 [ 821.488568][T15647] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 821.488610][T15647] ? genl_get_cmd+0x194/0x580 [ 821.488655][T15647] ? bpf_lsm_capable+0x9/0x10 [ 821.488688][T15647] ? security_capable+0x7e/0x260 [ 821.488739][T15647] ? ns_capable+0xd7/0x110 [ 821.488774][T15647] genl_rcv_msg+0x55c/0x800 [ 821.488800][T15647] ? __pfx_genl_rcv_msg+0x10/0x10 [ 821.488825][T15647] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 821.488863][T15647] netlink_rcv_skb+0x158/0x420 [ 821.488901][T15647] ? __pfx_genl_rcv_msg+0x10/0x10 [ 821.488925][T15647] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 821.488974][T15647] ? netlink_deliver_tap+0x1ae/0xd30 [ 821.489013][T15647] genl_rcv+0x28/0x40 [ 821.489049][T15647] netlink_unicast+0x5aa/0x870 [ 821.489090][T15647] ? __pfx_netlink_unicast+0x10/0x10 [ 821.489126][T15647] ? __pfx___might_resched+0x10/0x10 [ 821.489162][T15647] ? __lock_acquire+0x436/0x2890 [ 821.489192][T15647] netlink_sendmsg+0x8c8/0xdd0 [ 821.489233][T15647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.489274][T15647] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 821.489322][T15647] ____sys_sendmsg+0xa5d/0xc30 [ 821.489363][T15647] ? copy_msghdr_from_user+0x10a/0x160 [ 821.489395][T15647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 821.489433][T15647] ? preempt_schedule_thunk+0x16/0x30 [ 821.489462][T15647] ? try_to_wake_up+0xa67/0x1860 [ 821.489508][T15647] ___sys_sendmsg+0x134/0x1d0 [ 821.489541][T15647] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.489574][T15647] ? futex_private_hash_put+0x160/0x1b0 [ 821.489635][T15647] __sys_sendmsg+0x16d/0x220 [ 821.489666][T15647] ? __pfx___sys_sendmsg+0x10/0x10 [ 821.489698][T15647] ? __x64_sys_futex+0x1e0/0x4c0 [ 821.489747][T15647] do_syscall_64+0xcd/0xf80 [ 821.489787][T15647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.489812][T15647] RIP: 0033:0x7fe38698f7c9 [ 821.489834][T15647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.489857][T15647] RSP: 002b:00007fe387851038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.489880][T15647] RAX: ffffffffffffffda RBX: 00007fe386be5fa0 RCX: 00007fe38698f7c9 [ 821.489896][T15647] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 821.489912][T15647] RBP: 00007fe386a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 821.489926][T15647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.489941][T15647] R13: 00007fe386be6038 R14: 00007fe386be5fa0 R15: 00007fff2d405ae8 [ 821.489973][T15647] [ 824.374295][T14374] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 825.866040][T15702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1877'. [ 825.995030][T15699] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 826.089122][T15699] CPU: 0 UID: 0 PID: 15699 Comm: syz.3.1876 Tainted: G L syzkaller #0 PREEMPT(full) [ 826.089162][T15699] Tainted: [L]=SOFTLOCKUP [ 826.089171][T15699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 826.089185][T15699] Call Trace: [ 826.089193][T15699] [ 826.089202][T15699] dump_stack_lvl+0x16c/0x1f0 [ 826.089244][T15699] sysfs_warn_dup+0x7f/0xa0 [ 826.089272][T15699] sysfs_do_create_link_sd+0x124/0x140 [ 826.089303][T15699] sysfs_create_link+0x61/0xc0 [ 826.089330][T15699] device_add+0x652/0x1980 [ 826.089368][T15699] ? __pfx_device_add+0x10/0x10 [ 826.089401][T15699] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 826.089441][T15699] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 826.089484][T15699] wiphy_register+0x1ea1/0x2cc0 [ 826.089506][T15699] ? __rtnl_unlock+0x68/0xf0 [ 826.089544][T15699] ? napi_enable_locked+0x190/0xa00 [ 826.089580][T15699] ? __pfx_wiphy_register+0x10/0x10 [ 826.089604][T15699] ? __asan_memset+0x23/0x50 [ 826.089643][T15699] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 826.089688][T15699] ieee80211_register_hw+0x2bb2/0x4160 [ 826.089723][T15699] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 826.089747][T15699] ? __pfx___debug_object_init+0x10/0x10 [ 826.089792][T15699] ? find_held_lock+0x2b/0x80 [ 826.089825][T15699] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 826.089864][T15699] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 826.089900][T15699] ? __hrtimer_setup+0x176/0x280 [ 826.089934][T15699] mac80211_hwsim_new_radio+0x3323/0x5150 [ 826.089979][T15699] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 826.090017][T15699] hwsim_new_radio_nl+0xba2/0x1330 [ 826.090048][T15699] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 826.090092][T15699] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 826.090138][T15699] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 826.090188][T15699] genl_family_rcv_msg_doit+0x209/0x2f0 [ 826.090232][T15699] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 826.090274][T15699] ? genl_get_cmd+0x194/0x580 [ 826.090318][T15699] ? bpf_lsm_capable+0x9/0x10 [ 826.090351][T15699] ? security_capable+0x7e/0x260 [ 826.090392][T15699] ? ns_capable+0xd7/0x110 [ 826.090425][T15699] genl_rcv_msg+0x55c/0x800 [ 826.090451][T15699] ? __pfx_genl_rcv_msg+0x10/0x10 [ 826.090475][T15699] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 826.090513][T15699] netlink_rcv_skb+0x158/0x420 [ 826.090550][T15699] ? __pfx_genl_rcv_msg+0x10/0x10 [ 826.090574][T15699] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 826.090630][T15699] genl_rcv+0x28/0x40 [ 826.090666][T15699] netlink_unicast+0x5aa/0x870 [ 826.090706][T15699] ? __pfx_netlink_unicast+0x10/0x10 [ 826.090741][T15699] ? __pfx___might_resched+0x10/0x10 [ 826.090775][T15699] ? __lock_acquire+0x436/0x2890 [ 826.090805][T15699] netlink_sendmsg+0x8c8/0xdd0 [ 826.090847][T15699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 826.090886][T15699] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 826.090933][T15699] ____sys_sendmsg+0xa5d/0xc30 [ 826.090974][T15699] ? copy_msghdr_from_user+0x10a/0x160 [ 826.091006][T15699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 826.091043][T15699] ? preempt_schedule_thunk+0x16/0x30 [ 826.091094][T15699] ? try_to_wake_up+0xa67/0x1860 [ 826.091132][T15699] ___sys_sendmsg+0x134/0x1d0 [ 826.091165][T15699] ? __pfx____sys_sendmsg+0x10/0x10 [ 826.091196][T15699] ? futex_private_hash_put+0x160/0x1b0 [ 826.091255][T15699] __sys_sendmsg+0x16d/0x220 [ 826.091287][T15699] ? __pfx___sys_sendmsg+0x10/0x10 [ 826.091318][T15699] ? __x64_sys_futex+0x1e0/0x4c0 [ 826.091364][T15699] do_syscall_64+0xcd/0xf80 [ 826.091404][T15699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.091429][T15699] RIP: 0033:0x7f121658f7c9 [ 826.091448][T15699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.091472][T15699] RSP: 002b:00007f1217495038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.091494][T15699] RAX: ffffffffffffffda RBX: 00007f12167e5fa0 RCX: 00007f121658f7c9 [ 826.091510][T15699] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 826.091525][T15699] RBP: 00007f1216613f91 R08: 0000000000000000 R09: 0000000000000000 [ 826.091539][T15699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.091554][T15699] R13: 00007f12167e6038 R14: 00007f12167e5fa0 R15: 00007ffe145177e8 [ 826.091585][T15699] [ 827.144241][T15710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1878'. [ 829.271488][T15741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1884'. [ 831.152750][T15763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1888'. [ 831.638496][T15769] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 831.709102][T15769] CPU: 0 UID: 0 PID: 15769 Comm: syz.0.1890 Tainted: G L syzkaller #0 PREEMPT(full) [ 831.709142][T15769] Tainted: [L]=SOFTLOCKUP [ 831.709150][T15769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 831.709164][T15769] Call Trace: [ 831.709171][T15769] [ 831.709180][T15769] dump_stack_lvl+0x16c/0x1f0 [ 831.709227][T15769] sysfs_warn_dup+0x7f/0xa0 [ 831.709255][T15769] sysfs_do_create_link_sd+0x124/0x140 [ 831.709285][T15769] sysfs_create_link+0x61/0xc0 [ 831.709312][T15769] device_add+0x652/0x1980 [ 831.709349][T15769] ? __pfx_device_add+0x10/0x10 [ 831.709382][T15769] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 831.709421][T15769] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 831.709463][T15769] wiphy_register+0x1ea1/0x2cc0 [ 831.709486][T15769] ? __rtnl_unlock+0x68/0xf0 [ 831.709523][T15769] ? napi_enable_locked+0x190/0xa00 [ 831.709559][T15769] ? __pfx_wiphy_register+0x10/0x10 [ 831.709582][T15769] ? __asan_memset+0x23/0x50 [ 831.709620][T15769] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 831.709664][T15769] ieee80211_register_hw+0x2bb2/0x4160 [ 831.709699][T15769] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 831.709722][T15769] ? __pfx___debug_object_init+0x10/0x10 [ 831.709766][T15769] ? find_held_lock+0x2b/0x80 [ 831.709799][T15769] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 831.709843][T15769] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 831.709880][T15769] ? __hrtimer_setup+0x176/0x280 [ 831.709913][T15769] mac80211_hwsim_new_radio+0x3323/0x5150 [ 831.709959][T15769] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 831.709996][T15769] hwsim_new_radio_nl+0xba2/0x1330 [ 831.710027][T15769] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 831.710064][T15769] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 831.710107][T15769] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 831.710156][T15769] genl_family_rcv_msg_doit+0x209/0x2f0 [ 831.710199][T15769] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 831.710240][T15769] ? genl_get_cmd+0x194/0x580 [ 831.710283][T15769] ? bpf_lsm_capable+0x9/0x10 [ 831.710315][T15769] ? security_capable+0x7e/0x260 [ 831.710355][T15769] ? ns_capable+0xd7/0x110 [ 831.710389][T15769] genl_rcv_msg+0x55c/0x800 [ 831.710415][T15769] ? __pfx_genl_rcv_msg+0x10/0x10 [ 831.710439][T15769] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 831.710477][T15769] netlink_rcv_skb+0x158/0x420 [ 831.710512][T15769] ? __pfx_genl_rcv_msg+0x10/0x10 [ 831.710536][T15769] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 831.710606][T15769] ? netlink_deliver_tap+0x1ae/0xd30 [ 831.710648][T15769] genl_rcv+0x28/0x40 [ 831.710683][T15769] netlink_unicast+0x5aa/0x870 [ 831.710724][T15769] ? __pfx_netlink_unicast+0x10/0x10 [ 831.710760][T15769] ? __pfx___might_resched+0x10/0x10 [ 831.710794][T15769] ? __lock_acquire+0x436/0x2890 [ 831.710824][T15769] netlink_sendmsg+0x8c8/0xdd0 [ 831.710870][T15769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.710910][T15769] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 831.710958][T15769] ____sys_sendmsg+0xa5d/0xc30 [ 831.711000][T15769] ? copy_msghdr_from_user+0x10a/0x160 [ 831.711032][T15769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.711078][T15769] ? __pfx_futex_wake_mark+0x10/0x10 [ 831.711116][T15769] ___sys_sendmsg+0x134/0x1d0 [ 831.711150][T15769] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.711181][T15769] ? futex_private_hash_put+0x160/0x1b0 [ 831.711240][T15769] __sys_sendmsg+0x16d/0x220 [ 831.711273][T15769] ? __pfx___sys_sendmsg+0x10/0x10 [ 831.711304][T15769] ? __x64_sys_futex+0x1e0/0x4c0 [ 831.711350][T15769] do_syscall_64+0xcd/0xf80 [ 831.711390][T15769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.711414][T15769] RIP: 0033:0x7f8d5cb8f7c9 [ 831.711434][T15769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.711459][T15769] RSP: 002b:00007f8d5d9c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.711481][T15769] RAX: ffffffffffffffda RBX: 00007f8d5cde5fa0 RCX: 00007f8d5cb8f7c9 [ 831.711498][T15769] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 831.711513][T15769] RBP: 00007f8d5cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 831.711528][T15769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.711542][T15769] R13: 00007f8d5cde6038 R14: 00007f8d5cde5fa0 R15: 00007ffd1816d578 [ 831.711574][T15769] [ 832.324054][T15779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1892'. [ 835.666174][T15828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1900'. [ 837.447386][T15849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1904'. [ 837.598328][T15852] FAULT_INJECTION: forcing a failure. [ 837.598328][T15852] name failslab, interval 1, probability 0, space 0, times 0 [ 837.717903][T15852] CPU: 0 UID: 0 PID: 15852 Comm: syz.3.1905 Tainted: G L syzkaller #0 PREEMPT(full) [ 837.717943][T15852] Tainted: [L]=SOFTLOCKUP [ 837.717951][T15852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 837.717966][T15852] Call Trace: [ 837.717974][T15852] [ 837.717984][T15852] dump_stack_lvl+0x16c/0x1f0 [ 837.718027][T15852] should_fail_ex+0x512/0x640 [ 837.718060][T15852] ? __kmalloc_cache_noprof+0x5f/0x800 [ 837.718091][T15852] should_failslab+0xc2/0x120 [ 837.718129][T15852] __kmalloc_cache_noprof+0x80/0x800 [ 837.718158][T15852] ? genl_start+0x1e8/0x980 [ 837.718201][T15852] ? genl_start+0x1e8/0x980 [ 837.718238][T15852] genl_start+0x1e8/0x980 [ 837.718281][T15852] __netlink_dump_start+0x60e/0x990 [ 837.718320][T15852] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 837.718346][T15852] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 837.718370][T15852] ? genl_op_from_small+0x25/0x440 [ 837.718414][T15852] ? __pfx_genl_get_cmd+0x10/0x10 [ 837.718450][T15852] ? __pfx_genl_start+0x10/0x10 [ 837.718487][T15852] ? __pfx_genl_dumpit+0x10/0x10 [ 837.718506][T15852] ? __pfx_genl_done+0x10/0x10 [ 837.718531][T15852] ? __radix_tree_lookup+0x21f/0x2c0 [ 837.718569][T15852] genl_rcv_msg+0x46e/0x800 [ 837.718595][T15852] ? __pfx_genl_rcv_msg+0x10/0x10 [ 837.718618][T15852] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 837.718661][T15852] netlink_rcv_skb+0x158/0x420 [ 837.718697][T15852] ? __pfx_genl_rcv_msg+0x10/0x10 [ 837.718721][T15852] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 837.718769][T15852] ? netlink_deliver_tap+0x1ae/0xd30 [ 837.718807][T15852] genl_rcv+0x28/0x40 [ 837.718843][T15852] netlink_unicast+0x5aa/0x870 [ 837.718884][T15852] ? __pfx_netlink_unicast+0x10/0x10 [ 837.718931][T15852] netlink_sendmsg+0x8c8/0xdd0 [ 837.718972][T15852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 837.719012][T15852] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 837.719065][T15852] ____sys_sendmsg+0xa5d/0xc30 [ 837.719105][T15852] ? copy_msghdr_from_user+0x10a/0x160 [ 837.719137][T15852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 837.719184][T15852] ? __pfx_futex_wake_mark+0x10/0x10 [ 837.719226][T15852] ___sys_sendmsg+0x134/0x1d0 [ 837.719259][T15852] ? __pfx____sys_sendmsg+0x10/0x10 [ 837.719291][T15852] ? futex_private_hash_put+0x160/0x1b0 [ 837.719349][T15852] __sys_sendmsg+0x16d/0x220 [ 837.719381][T15852] ? __pfx___sys_sendmsg+0x10/0x10 [ 837.719413][T15852] ? __x64_sys_futex+0x1e0/0x4c0 [ 837.719459][T15852] do_syscall_64+0xcd/0xf80 [ 837.719498][T15852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.719523][T15852] RIP: 0033:0x7f121658f7c9 [ 837.719543][T15852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.719567][T15852] RSP: 002b:00007f1217474038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.719590][T15852] RAX: ffffffffffffffda RBX: 00007f12167e6090 RCX: 00007f121658f7c9 [ 837.719606][T15852] RDX: 0000000004000084 RSI: 0000200000000240 RDI: 0000000000000002 [ 837.719621][T15852] RBP: 00007f1216613f91 R08: 0000000000000000 R09: 0000000000000000 [ 837.719636][T15852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.719650][T15852] R13: 00007f12167e6128 R14: 00007f12167e6090 R15: 00007ffe145177e8 [ 837.719682][T15852] [ 839.894031][T14381] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:9: bg 1: bad block bitmap checksum [ 840.031779][T14381] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1296 with max blocks 47 with error 74 [ 840.129350][T15894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1911'. [ 840.148009][T14381] EXT4-fs (sda1): This should not happen!! Data will be lost [ 840.148009][T14381] [ 841.588315][T15907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1913'. [ 842.077543][T15918] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 842.510426][T15928] input: jJǸ-9%vJ86 as /devices/virtual/input/input29 [ 843.104488][T15940] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 843.155411][T15940] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 844.001455][T15932] Process accounting paused [ 844.605337][T15958] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 844.692957][T15958] CPU: 0 UID: 0 PID: 15958 Comm: syz.2.1924 Tainted: G L syzkaller #0 PREEMPT(full) [ 844.692996][T15958] Tainted: [L]=SOFTLOCKUP [ 844.693005][T15958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 844.693021][T15958] Call Trace: [ 844.693029][T15958] [ 844.693038][T15958] dump_stack_lvl+0x16c/0x1f0 [ 844.693081][T15958] sysfs_warn_dup+0x7f/0xa0 [ 844.693109][T15958] sysfs_do_create_link_sd+0x124/0x140 [ 844.693140][T15958] sysfs_create_link+0x61/0xc0 [ 844.693168][T15958] device_add+0x652/0x1980 [ 844.693206][T15958] ? __pfx_device_add+0x10/0x10 [ 844.693239][T15958] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 844.693279][T15958] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 844.693322][T15958] wiphy_register+0x1ea1/0x2cc0 [ 844.693345][T15958] ? __rtnl_unlock+0x68/0xf0 [ 844.693382][T15958] ? napi_enable_locked+0x190/0xa00 [ 844.693418][T15958] ? __pfx_wiphy_register+0x10/0x10 [ 844.693442][T15958] ? __asan_memset+0x23/0x50 [ 844.693481][T15958] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 844.693526][T15958] ieee80211_register_hw+0x2bb2/0x4160 [ 844.693561][T15958] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 844.693585][T15958] ? __pfx___debug_object_init+0x10/0x10 [ 844.693630][T15958] ? find_held_lock+0x2b/0x80 [ 844.693663][T15958] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 844.693707][T15958] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 844.693744][T15958] ? __hrtimer_setup+0x176/0x280 [ 844.693779][T15958] mac80211_hwsim_new_radio+0x3323/0x5150 [ 844.693824][T15958] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 844.693862][T15958] hwsim_new_radio_nl+0xba2/0x1330 [ 844.693893][T15958] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 844.693931][T15958] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 844.693979][T15958] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 844.694029][T15958] genl_family_rcv_msg_doit+0x209/0x2f0 [ 844.694092][T15958] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 844.694134][T15958] ? genl_get_cmd+0x194/0x580 [ 844.694179][T15958] ? bpf_lsm_capable+0x9/0x10 [ 844.694212][T15958] ? security_capable+0x7e/0x260 [ 844.694253][T15958] ? ns_capable+0xd7/0x110 [ 844.694288][T15958] genl_rcv_msg+0x55c/0x800 [ 844.694313][T15958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 844.694337][T15958] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 844.694376][T15958] netlink_rcv_skb+0x158/0x420 [ 844.694412][T15958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 844.694436][T15958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 844.694485][T15958] ? netlink_deliver_tap+0x1ae/0xd30 [ 844.694524][T15958] genl_rcv+0x28/0x40 [ 844.694560][T15958] netlink_unicast+0x5aa/0x870 [ 844.694600][T15958] ? __pfx_netlink_unicast+0x10/0x10 [ 844.694636][T15958] ? __pfx___might_resched+0x10/0x10 [ 844.694670][T15958] ? __lock_acquire+0x436/0x2890 [ 844.694708][T15958] netlink_sendmsg+0x8c8/0xdd0 [ 844.694749][T15958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.694790][T15958] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 844.694838][T15958] ____sys_sendmsg+0xa5d/0xc30 [ 844.694880][T15958] ? copy_msghdr_from_user+0x10a/0x160 [ 844.694912][T15958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 844.694949][T15958] ? preempt_schedule_thunk+0x16/0x30 [ 844.694979][T15958] ? try_to_wake_up+0xa67/0x1860 [ 844.695017][T15958] ___sys_sendmsg+0x134/0x1d0 [ 844.695050][T15958] ? __pfx____sys_sendmsg+0x10/0x10 [ 844.695082][T15958] ? futex_private_hash_put+0x160/0x1b0 [ 844.695141][T15958] __sys_sendmsg+0x16d/0x220 [ 844.695176][T15958] ? __pfx___sys_sendmsg+0x10/0x10 [ 844.695207][T15958] ? __x64_sys_futex+0x1e0/0x4c0 [ 844.695253][T15958] do_syscall_64+0xcd/0xf80 [ 844.695293][T15958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.695317][T15958] RIP: 0033:0x7fe38698f7c9 [ 844.695337][T15958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 844.695361][T15958] RSP: 002b:00007fe387851038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.695383][T15958] RAX: ffffffffffffffda RBX: 00007fe386be5fa0 RCX: 00007fe38698f7c9 [ 844.695400][T15958] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 844.695415][T15958] RBP: 00007fe386a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 844.695430][T15958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.695445][T15958] R13: 00007fe386be6038 R14: 00007fe386be5fa0 R15: 00007fff2d405ae8 [ 844.695477][T15958] [ 845.938486][T15978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1928'. [ 847.509786][T16003] input: jJǸ-9%vJ86 as /devices/virtual/input/input30 [ 848.094451][T16012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1934'. [ 848.851160][T16018] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 848.887611][T16018] CPU: 0 UID: 0 PID: 16018 Comm: syz.3.1935 Tainted: G L syzkaller #0 PREEMPT(full) [ 848.887650][T16018] Tainted: [L]=SOFTLOCKUP [ 848.887658][T16018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 848.887678][T16018] Call Trace: [ 848.887685][T16018] [ 848.887694][T16018] dump_stack_lvl+0x16c/0x1f0 [ 848.887737][T16018] sysfs_warn_dup+0x7f/0xa0 [ 848.887764][T16018] sysfs_do_create_link_sd+0x124/0x140 [ 848.887795][T16018] sysfs_create_link+0x61/0xc0 [ 848.887822][T16018] device_add+0x652/0x1980 [ 848.887859][T16018] ? __pfx_device_add+0x10/0x10 [ 848.887892][T16018] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 848.887931][T16018] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 848.887974][T16018] wiphy_register+0x1ea1/0x2cc0 [ 848.887996][T16018] ? __rtnl_unlock+0x68/0xf0 [ 848.888034][T16018] ? napi_enable_locked+0x190/0xa00 [ 848.888077][T16018] ? __pfx_wiphy_register+0x10/0x10 [ 848.888101][T16018] ? __asan_memset+0x23/0x50 [ 848.888141][T16018] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 848.888186][T16018] ieee80211_register_hw+0x2bb2/0x4160 [ 848.888222][T16018] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 848.888246][T16018] ? __pfx___debug_object_init+0x10/0x10 [ 848.888290][T16018] ? find_held_lock+0x2b/0x80 [ 848.888323][T16018] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 848.888362][T16018] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 848.888398][T16018] ? __hrtimer_setup+0x176/0x280 [ 848.888432][T16018] mac80211_hwsim_new_radio+0x3323/0x5150 [ 848.888477][T16018] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 848.888514][T16018] hwsim_new_radio_nl+0xba2/0x1330 [ 848.888545][T16018] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 848.888583][T16018] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 848.888627][T16018] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 848.888677][T16018] genl_family_rcv_msg_doit+0x209/0x2f0 [ 848.888721][T16018] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 848.888762][T16018] ? genl_get_cmd+0x194/0x580 [ 848.888807][T16018] ? bpf_lsm_capable+0x9/0x10 [ 848.888840][T16018] ? security_capable+0x7e/0x260 [ 848.888880][T16018] ? ns_capable+0xd7/0x110 [ 848.888914][T16018] genl_rcv_msg+0x55c/0x800 [ 848.888941][T16018] ? __pfx_genl_rcv_msg+0x10/0x10 [ 848.888964][T16018] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 848.889002][T16018] netlink_rcv_skb+0x158/0x420 [ 848.889062][T16018] ? __pfx_genl_rcv_msg+0x10/0x10 [ 848.889087][T16018] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 848.889137][T16018] ? netlink_deliver_tap+0x1ae/0xd30 [ 848.889176][T16018] genl_rcv+0x28/0x40 [ 848.889212][T16018] netlink_unicast+0x5aa/0x870 [ 848.889253][T16018] ? __pfx_netlink_unicast+0x10/0x10 [ 848.889289][T16018] ? __pfx___might_resched+0x10/0x10 [ 848.889323][T16018] ? __lock_acquire+0x436/0x2890 [ 848.889354][T16018] netlink_sendmsg+0x8c8/0xdd0 [ 848.889395][T16018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 848.889435][T16018] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 848.889482][T16018] ____sys_sendmsg+0xa5d/0xc30 [ 848.889523][T16018] ? copy_msghdr_from_user+0x10a/0x160 [ 848.889554][T16018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 848.889601][T16018] ? __pfx_futex_wake_mark+0x10/0x10 [ 848.889639][T16018] ___sys_sendmsg+0x134/0x1d0 [ 848.889673][T16018] ? __pfx____sys_sendmsg+0x10/0x10 [ 848.889704][T16018] ? futex_private_hash_put+0x160/0x1b0 [ 848.889763][T16018] __sys_sendmsg+0x16d/0x220 [ 848.889795][T16018] ? __pfx___sys_sendmsg+0x10/0x10 [ 848.889826][T16018] ? __x64_sys_futex+0x1e0/0x4c0 [ 848.889872][T16018] do_syscall_64+0xcd/0xf80 [ 848.889912][T16018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.889937][T16018] RIP: 0033:0x7f121658f7c9 [ 848.889957][T16018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 848.889981][T16018] RSP: 002b:00007f1217495038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.890004][T16018] RAX: ffffffffffffffda RBX: 00007f12167e5fa0 RCX: 00007f121658f7c9 [ 848.890020][T16018] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 848.890035][T16018] RBP: 00007f1216613f91 R08: 0000000000000000 R09: 0000000000000000 [ 848.890056][T16018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.890070][T16018] R13: 00007f12167e6038 R14: 00007f12167e5fa0 R15: 00007ffe145177e8 [ 848.890101][T16018] [ 851.101025][T16037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1939'. [ 851.586265][T14371] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 852.234221][T16048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1943'. [ 852.245970][T16049] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 852.335239][T16049] CPU: 0 UID: 0 PID: 16049 Comm: syz.1.1942 Tainted: G L syzkaller #0 PREEMPT(full) [ 852.335279][T16049] Tainted: [L]=SOFTLOCKUP [ 852.335287][T16049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 852.335301][T16049] Call Trace: [ 852.335309][T16049] [ 852.335318][T16049] dump_stack_lvl+0x16c/0x1f0 [ 852.335360][T16049] sysfs_warn_dup+0x7f/0xa0 [ 852.335388][T16049] sysfs_do_create_link_sd+0x124/0x140 [ 852.335418][T16049] sysfs_create_link+0x61/0xc0 [ 852.335446][T16049] device_add+0x652/0x1980 [ 852.335484][T16049] ? __pfx_device_add+0x10/0x10 [ 852.335517][T16049] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 852.335557][T16049] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 852.335600][T16049] wiphy_register+0x1ea1/0x2cc0 [ 852.335622][T16049] ? __rtnl_unlock+0x68/0xf0 [ 852.335660][T16049] ? napi_enable_locked+0x190/0xa00 [ 852.335696][T16049] ? __pfx_wiphy_register+0x10/0x10 [ 852.335720][T16049] ? __asan_memset+0x23/0x50 [ 852.335758][T16049] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 852.335809][T16049] ieee80211_register_hw+0x2bb2/0x4160 [ 852.335845][T16049] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 852.335869][T16049] ? __pfx___debug_object_init+0x10/0x10 [ 852.335914][T16049] ? find_held_lock+0x2b/0x80 [ 852.335946][T16049] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 852.335984][T16049] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 852.336022][T16049] ? __hrtimer_setup+0x176/0x280 [ 852.336055][T16049] mac80211_hwsim_new_radio+0x3323/0x5150 [ 852.336099][T16049] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 852.336137][T16049] hwsim_new_radio_nl+0xba2/0x1330 [ 852.336168][T16049] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 852.336206][T16049] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 852.336249][T16049] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 852.336299][T16049] genl_family_rcv_msg_doit+0x209/0x2f0 [ 852.336343][T16049] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 852.336385][T16049] ? genl_get_cmd+0x194/0x580 [ 852.336429][T16049] ? bpf_lsm_capable+0x9/0x10 [ 852.336462][T16049] ? security_capable+0x7e/0x260 [ 852.336503][T16049] ? ns_capable+0xd7/0x110 [ 852.336536][T16049] genl_rcv_msg+0x55c/0x800 [ 852.336562][T16049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 852.336586][T16049] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 852.336624][T16049] netlink_rcv_skb+0x158/0x420 [ 852.336660][T16049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 852.336684][T16049] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 852.336733][T16049] ? netlink_deliver_tap+0x1ae/0xd30 [ 852.336777][T16049] genl_rcv+0x28/0x40 [ 852.336813][T16049] netlink_unicast+0x5aa/0x870 [ 852.336853][T16049] ? __pfx_netlink_unicast+0x10/0x10 [ 852.336889][T16049] ? __pfx___might_resched+0x10/0x10 [ 852.336923][T16049] ? __lock_acquire+0x436/0x2890 [ 852.336953][T16049] netlink_sendmsg+0x8c8/0xdd0 [ 852.336994][T16049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.337034][T16049] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 852.337080][T16049] ____sys_sendmsg+0xa5d/0xc30 [ 852.337121][T16049] ? copy_msghdr_from_user+0x10a/0x160 [ 852.337153][T16049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 852.337199][T16049] ? __pfx_futex_wake_mark+0x10/0x10 [ 852.337241][T16049] ___sys_sendmsg+0x134/0x1d0 [ 852.337274][T16049] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.337305][T16049] ? futex_private_hash_put+0x160/0x1b0 [ 852.337365][T16049] __sys_sendmsg+0x16d/0x220 [ 852.337397][T16049] ? __pfx___sys_sendmsg+0x10/0x10 [ 852.337429][T16049] ? __x64_sys_futex+0x1e0/0x4c0 [ 852.337475][T16049] do_syscall_64+0xcd/0xf80 [ 852.337515][T16049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.337540][T16049] RIP: 0033:0x7fac1f78f7c9 [ 852.337561][T16049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 852.337585][T16049] RSP: 002b:00007fac206e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.337608][T16049] RAX: ffffffffffffffda RBX: 00007fac1f9e5fa0 RCX: 00007fac1f78f7c9 [ 852.337624][T16049] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 852.337640][T16049] RBP: 00007fac1f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 852.337655][T16049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.337670][T16049] R13: 00007fac1f9e6038 R14: 00007fac1f9e5fa0 R15: 00007ffce728bb28 [ 852.337702][T16049] [ 854.928167][T16069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1946'. [ 857.025437][T16098] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1950'. [ 857.740009][T16109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1952'. [ 857.822037][T16110] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 857.897303][T16110] CPU: 0 UID: 0 PID: 16110 Comm: syz.3.1953 Tainted: G L syzkaller #0 PREEMPT(full) [ 857.897343][T16110] Tainted: [L]=SOFTLOCKUP [ 857.897352][T16110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 857.897367][T16110] Call Trace: [ 857.897375][T16110] [ 857.897383][T16110] dump_stack_lvl+0x16c/0x1f0 [ 857.897424][T16110] sysfs_warn_dup+0x7f/0xa0 [ 857.897452][T16110] sysfs_do_create_link_sd+0x124/0x140 [ 857.897482][T16110] sysfs_create_link+0x61/0xc0 [ 857.897509][T16110] device_add+0x652/0x1980 [ 857.897546][T16110] ? __pfx_device_add+0x10/0x10 [ 857.897578][T16110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 857.897618][T16110] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 857.897664][T16110] wiphy_register+0x1ea1/0x2cc0 [ 857.897686][T16110] ? __rtnl_unlock+0x68/0xf0 [ 857.897724][T16110] ? napi_enable_locked+0x190/0xa00 [ 857.897759][T16110] ? __pfx_wiphy_register+0x10/0x10 [ 857.897784][T16110] ? __asan_memset+0x23/0x50 [ 857.897822][T16110] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 857.897866][T16110] ieee80211_register_hw+0x2bb2/0x4160 [ 857.897901][T16110] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 857.897925][T16110] ? __pfx___debug_object_init+0x10/0x10 [ 857.897968][T16110] ? find_held_lock+0x2b/0x80 [ 857.898001][T16110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 857.898038][T16110] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 857.898074][T16110] ? __hrtimer_setup+0x176/0x280 [ 857.898108][T16110] mac80211_hwsim_new_radio+0x3323/0x5150 [ 857.898152][T16110] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 857.898190][T16110] hwsim_new_radio_nl+0xba2/0x1330 [ 857.898220][T16110] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 857.898257][T16110] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 857.898312][T16110] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 857.898362][T16110] genl_family_rcv_msg_doit+0x209/0x2f0 [ 857.898406][T16110] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 857.898448][T16110] ? genl_get_cmd+0x194/0x580 [ 857.898492][T16110] ? bpf_lsm_capable+0x9/0x10 [ 857.898525][T16110] ? security_capable+0x7e/0x260 [ 857.898565][T16110] ? ns_capable+0xd7/0x110 [ 857.898599][T16110] genl_rcv_msg+0x55c/0x800 [ 857.898625][T16110] ? __pfx_genl_rcv_msg+0x10/0x10 [ 857.898649][T16110] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 857.898687][T16110] netlink_rcv_skb+0x158/0x420 [ 857.898723][T16110] ? __pfx_genl_rcv_msg+0x10/0x10 [ 857.898747][T16110] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 857.898796][T16110] ? netlink_deliver_tap+0x1ae/0xd30 [ 857.898834][T16110] genl_rcv+0x28/0x40 [ 857.898869][T16110] netlink_unicast+0x5aa/0x870 [ 857.898909][T16110] ? __pfx_netlink_unicast+0x10/0x10 [ 857.898945][T16110] ? __pfx___might_resched+0x10/0x10 [ 857.898979][T16110] ? __lock_acquire+0x436/0x2890 [ 857.899009][T16110] netlink_sendmsg+0x8c8/0xdd0 [ 857.899050][T16110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 857.899090][T16110] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 857.899137][T16110] ____sys_sendmsg+0xa5d/0xc30 [ 857.899177][T16110] ? copy_msghdr_from_user+0x10a/0x160 [ 857.899208][T16110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 857.899245][T16110] ? preempt_schedule_thunk+0x16/0x30 [ 857.899275][T16110] ? try_to_wake_up+0xa67/0x1860 [ 857.899319][T16110] ___sys_sendmsg+0x134/0x1d0 [ 857.899352][T16110] ? __pfx____sys_sendmsg+0x10/0x10 [ 857.899383][T16110] ? futex_private_hash_put+0x160/0x1b0 [ 857.899444][T16110] __sys_sendmsg+0x16d/0x220 [ 857.899475][T16110] ? __pfx___sys_sendmsg+0x10/0x10 [ 857.899506][T16110] ? __x64_sys_futex+0x1e0/0x4c0 [ 857.899552][T16110] do_syscall_64+0xcd/0xf80 [ 857.899592][T16110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.899617][T16110] RIP: 0033:0x7f121658f7c9 [ 857.899637][T16110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.899663][T16110] RSP: 002b:00007f1217495038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 857.899686][T16110] RAX: ffffffffffffffda RBX: 00007f12167e5fa0 RCX: 00007f121658f7c9 [ 857.899703][T16110] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 857.899718][T16110] RBP: 00007f1216613f91 R08: 0000000000000000 R09: 0000000000000000 [ 857.899732][T16110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.899747][T16110] R13: 00007f12167e6038 R14: 00007f12167e5fa0 R15: 00007ffe145177e8 [ 857.899779][T16110] [ 858.862254][T16118] input: jJǸ-9%vJ86 as /devices/virtual/input/input31 [ 860.525766][T14325] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 862.317578][T16133] FAULT_INJECTION: forcing a failure. [ 862.317578][T16133] name failslab, interval 1, probability 0, space 0, times 0 [ 862.408167][T16133] CPU: 0 UID: 0 PID: 16133 Comm: syz.2.1956 Tainted: G L syzkaller #0 PREEMPT(full) [ 862.408207][T16133] Tainted: [L]=SOFTLOCKUP [ 862.408216][T16133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 862.408230][T16133] Call Trace: [ 862.408238][T16133] [ 862.408247][T16133] dump_stack_lvl+0x16c/0x1f0 [ 862.408288][T16133] should_fail_ex+0x512/0x640 [ 862.408315][T16133] ? kmem_cache_alloc_noprof+0x62/0x770 [ 862.408347][T16133] should_failslab+0xc2/0x120 [ 862.408385][T16133] kmem_cache_alloc_noprof+0x83/0x770 [ 862.408416][T16133] ? ptlock_alloc+0x1f/0x70 [ 862.408446][T16133] ? ptlock_alloc+0x1f/0x70 [ 862.408470][T16133] ptlock_alloc+0x1f/0x70 [ 862.408494][T16133] pte_alloc_one+0x84/0x3d0 [ 862.408529][T16133] __pte_alloc+0x6d/0x3f0 [ 862.408563][T16133] ? __pfx___pte_alloc+0x10/0x10 [ 862.408596][T16133] ? __pfx___might_resched+0x10/0x10 [ 862.408631][T16133] ? copy_page_range+0x22fb/0x6780 [ 862.408660][T16133] copy_page_range+0x3f3e/0x6780 [ 862.408719][T16133] ? __pfx_copy_page_range+0x10/0x10 [ 862.408753][T16133] ? __pfx___might_resched+0x10/0x10 [ 862.408786][T16133] ? __pfx_mas_store+0x10/0x10 [ 862.408814][T16133] ? dup_mmap+0xba4/0x20e0 [ 862.408842][T16133] ? down_write+0x14d/0x200 [ 862.408868][T16133] ? up_write+0x282/0x4e0 [ 862.408899][T16133] dup_mmap+0xbea/0x20e0 [ 862.408931][T16133] ? __pfx_dup_mmap+0x10/0x10 [ 862.408989][T16133] copy_process+0x3b9f/0x7430 [ 862.409030][T16133] ? __pfx___futex_wait+0x10/0x10 [ 862.409076][T16133] ? __pfx_copy_process+0x10/0x10 [ 862.409119][T16133] ? futex_private_hash_put+0x160/0x1b0 [ 862.409151][T16133] kernel_clone+0xfc/0x910 [ 862.409190][T16133] ? __pfx_kernel_clone+0x10/0x10 [ 862.409270][T16133] __do_sys_clone+0xce/0x120 [ 862.409308][T16133] ? __pfx___do_sys_clone+0x10/0x10 [ 862.409359][T16133] ? xfd_validate_state+0x61/0x180 [ 862.409380][T16133] ? __pfx_do_writev+0x10/0x10 [ 862.409422][T16133] do_syscall_64+0xcd/0xf80 [ 862.409462][T16133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.409487][T16133] RIP: 0033:0x7fe38698f7c9 [ 862.409506][T16133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.409530][T16133] RSP: 002b:00007fe38782ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 862.409553][T16133] RAX: ffffffffffffffda RBX: 00007fe386be6090 RCX: 00007fe38698f7c9 [ 862.409569][T16133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 862.409584][T16133] RBP: 00007fe386a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 862.409600][T16133] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 862.409615][T16133] R13: 00007fe386be6128 R14: 00007fe386be6090 R15: 00007fff2d405ae8 [ 862.409646][T16133] [ 863.057078][T16151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1960'. [ 864.714368][T16171] FAULT_INJECTION: forcing a failure. [ 864.714368][T16171] name failslab, interval 1, probability 0, space 0, times 0 [ 864.798477][T16171] CPU: 0 UID: 0 PID: 16171 Comm: syz.2.1963 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.798515][T16171] Tainted: [L]=SOFTLOCKUP [ 864.798524][T16171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 864.798538][T16171] Call Trace: [ 864.798546][T16171] [ 864.798555][T16171] dump_stack_lvl+0x16c/0x1f0 [ 864.798597][T16171] should_fail_ex+0x512/0x640 [ 864.798624][T16171] ? __kmalloc_noprof+0xca/0x910 [ 864.798662][T16171] should_failslab+0xc2/0x120 [ 864.798702][T16171] __kmalloc_noprof+0xeb/0x910 [ 864.798729][T16171] ? __register_sysctl_table+0xb3/0x1900 [ 864.798770][T16171] ? __register_sysctl_table+0xb3/0x1900 [ 864.798803][T16171] __register_sysctl_table+0xb3/0x1900 [ 864.798837][T16171] ? is_module_address+0x5f/0xf0 [ 864.798870][T16171] ? __pfx___register_sysctl_table+0x10/0x10 [ 864.798903][T16171] ? is_module_address+0x69/0xf0 [ 864.798930][T16171] ? register_net_sysctl_sz+0x222/0x450 [ 864.798958][T16171] ? nr_free_zone_pages+0xcf/0x210 [ 864.798996][T16171] ip_vs_control_net_init+0x1506/0x1d20 [ 864.799031][T16171] __ip_vs_init+0x217/0x520 [ 864.799063][T16171] ? __pfx___ip_vs_init+0x10/0x10 [ 864.799093][T16171] ops_init+0x1e2/0x5f0 [ 864.799130][T16171] setup_net+0x11d/0x3a0 [ 864.799164][T16171] ? __pfx_setup_net+0x10/0x10 [ 864.799196][T16171] ? lockdep_init_map_type+0x5c/0x270 [ 864.799222][T16171] ? mutex_init_lockep+0x110/0x150 [ 864.799251][T16171] copy_net_ns+0x351/0x7c0 [ 864.799290][T16171] create_new_namespaces+0x3ea/0xab0 [ 864.799330][T16171] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 864.799368][T16171] ksys_unshare+0x45b/0xa40 [ 864.799411][T16171] ? __pfx_ksys_unshare+0x10/0x10 [ 864.799452][T16171] ? xfd_validate_state+0x61/0x180 [ 864.799483][T16171] __x64_sys_unshare+0x31/0x40 [ 864.799504][T16171] do_syscall_64+0xcd/0xf80 [ 864.799543][T16171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.799568][T16171] RIP: 0033:0x7fe38698f7c9 [ 864.799587][T16171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.799611][T16171] RSP: 002b:00007fe387830038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 864.799634][T16171] RAX: ffffffffffffffda RBX: 00007fe386be6090 RCX: 00007fe38698f7c9 [ 864.799650][T16171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 864.799678][T16171] RBP: 00007fe386a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 864.799693][T16171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 864.799708][T16171] R13: 00007fe386be6128 R14: 00007fe386be6090 R15: 00007fff2d405ae8 [ 864.799739][T16171] [ 865.603186][T16183] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1965'. [ 867.895618][T16210] serio: Serial port ttyS2 [ 869.474265][T16215] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 869.566499][T16215] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 869.612233][T16215] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 869.688495][T16215] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 870.318731][T14295] Bluetooth: hci2: command 0x0c1a tx timeout [ 871.440674][T16268] FAULT_INJECTION: forcing a failure. [ 871.440674][T16268] name failslab, interval 1, probability 0, space 0, times 0 [ 871.515542][T16268] CPU: 0 UID: 0 PID: 16268 Comm: syz.0.1978 Tainted: G L syzkaller #0 PREEMPT(full) [ 871.515582][T16268] Tainted: [L]=SOFTLOCKUP [ 871.515590][T16268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 871.515604][T16268] Call Trace: [ 871.515612][T16268] [ 871.515621][T16268] dump_stack_lvl+0x16c/0x1f0 [ 871.515662][T16268] should_fail_ex+0x512/0x640 [ 871.515690][T16268] ? __kmalloc_cache_noprof+0x5f/0x800 [ 871.515720][T16268] should_failslab+0xc2/0x120 [ 871.515758][T16268] __kmalloc_cache_noprof+0x80/0x800 [ 871.515784][T16268] ? __lock_acquire+0x436/0x2890 [ 871.515807][T16268] ? tty_open+0x13e/0xf90 [ 871.515848][T16268] ? tty_open+0x13e/0xf90 [ 871.515882][T16268] ? __pfx_tty_open+0x10/0x10 [ 871.515917][T16268] tty_open+0x13e/0xf90 [ 871.515959][T16268] ? __pfx_tty_open+0x10/0x10 [ 871.515997][T16268] ? chrdev_open+0x10b/0x6a0 [ 871.516038][T16268] ? __pfx_tty_open+0x10/0x10 [ 871.516084][T16268] chrdev_open+0x234/0x6a0 [ 871.516121][T16268] ? __pfx_apparmor_file_open+0x10/0x10 [ 871.516147][T16268] ? __pfx_chrdev_open+0x10/0x10 [ 871.516188][T16268] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 871.516234][T16268] do_dentry_open+0x748/0x1590 [ 871.516269][T16268] ? __pfx_chrdev_open+0x10/0x10 [ 871.516315][T16268] vfs_open+0x82/0x3f0 [ 871.516344][T16268] path_openat+0x2078/0x3140 [ 871.516390][T16268] ? __pfx_path_openat+0x10/0x10 [ 871.516438][T16268] do_filp_open+0x20b/0x470 [ 871.516477][T16268] ? __pfx_do_filp_open+0x10/0x10 [ 871.516535][T16268] ? alloc_fd+0x471/0x7d0 [ 871.516578][T16268] do_sys_openat2+0x121/0x290 [ 871.516605][T16268] ? __pfx_do_sys_openat2+0x10/0x10 [ 871.516644][T16268] __x64_sys_openat+0x174/0x210 [ 871.516672][T16268] ? __pfx___x64_sys_openat+0x10/0x10 [ 871.516712][T16268] do_syscall_64+0xcd/0xf80 [ 871.516751][T16268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.516776][T16268] RIP: 0033:0x7f8d5cb8f7c9 [ 871.516795][T16268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 871.516819][T16268] RSP: 002b:00007f8d5d9a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 871.516843][T16268] RAX: ffffffffffffffda RBX: 00007f8d5cde6090 RCX: 00007f8d5cb8f7c9 [ 871.516859][T16268] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 871.516875][T16268] RBP: 00007f8d5cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 871.516890][T16268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.516905][T16268] R13: 00007f8d5cde6128 R14: 00007f8d5cde6090 R15: 00007ffd1816d578 [ 871.516936][T16268] [ 871.963119][T14295] Bluetooth: hci1: command 0x0c1a tx timeout [ 871.969848][T14295] Bluetooth: hci3: command 0x0c1a tx timeout [ 872.080903][T16275] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 872.106802][T15236] Bluetooth: hci0: command 0x0c1a tx timeout [ 872.129844][T16275] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 872.290428][T16274] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 872.469969][T16281] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 872.513591][T16281] CPU: 0 UID: 0 PID: 16281 Comm: syz.0.1981 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.513630][T16281] Tainted: [L]=SOFTLOCKUP [ 872.513638][T16281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 872.513653][T16281] Call Trace: [ 872.513665][T16281] [ 872.513675][T16281] dump_stack_lvl+0x16c/0x1f0 [ 872.513717][T16281] sysfs_warn_dup+0x7f/0xa0 [ 872.513745][T16281] sysfs_do_create_link_sd+0x124/0x140 [ 872.513776][T16281] sysfs_create_link+0x61/0xc0 [ 872.513803][T16281] device_add+0x652/0x1980 [ 872.513841][T16281] ? __pfx_device_add+0x10/0x10 [ 872.513873][T16281] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 872.513913][T16281] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 872.513955][T16281] wiphy_register+0x1ea1/0x2cc0 [ 872.513986][T16281] ? __rtnl_unlock+0x68/0xf0 [ 872.514023][T16281] ? napi_enable_locked+0x190/0xa00 [ 872.514059][T16281] ? __pfx_wiphy_register+0x10/0x10 [ 872.514083][T16281] ? __asan_memset+0x23/0x50 [ 872.514121][T16281] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 872.514166][T16281] ieee80211_register_hw+0x2bb2/0x4160 [ 872.514200][T16281] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 872.514224][T16281] ? __pfx___debug_object_init+0x10/0x10 [ 872.514268][T16281] ? find_held_lock+0x2b/0x80 [ 872.514300][T16281] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 872.514338][T16281] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 872.514375][T16281] ? __hrtimer_setup+0x176/0x280 [ 872.514408][T16281] mac80211_hwsim_new_radio+0x3323/0x5150 [ 872.514452][T16281] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 872.514490][T16281] hwsim_new_radio_nl+0xba2/0x1330 [ 872.514521][T16281] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 872.514558][T16281] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 872.514602][T16281] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 872.514650][T16281] genl_family_rcv_msg_doit+0x209/0x2f0 [ 872.514693][T16281] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 872.514735][T16281] ? genl_get_cmd+0x194/0x580 [ 872.514778][T16281] ? bpf_lsm_capable+0x9/0x10 [ 872.514811][T16281] ? security_capable+0x7e/0x260 [ 872.514851][T16281] ? ns_capable+0xd7/0x110 [ 872.514885][T16281] genl_rcv_msg+0x55c/0x800 [ 872.514910][T16281] ? __pfx_genl_rcv_msg+0x10/0x10 [ 872.514934][T16281] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 872.514978][T16281] netlink_rcv_skb+0x158/0x420 [ 872.515014][T16281] ? __pfx_genl_rcv_msg+0x10/0x10 [ 872.515038][T16281] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 872.515086][T16281] ? netlink_deliver_tap+0x1ae/0xd30 [ 872.515125][T16281] genl_rcv+0x28/0x40 [ 872.515161][T16281] netlink_unicast+0x5aa/0x870 [ 872.515204][T16281] ? __pfx_netlink_unicast+0x10/0x10 [ 872.515239][T16281] ? __pfx___might_resched+0x10/0x10 [ 872.515273][T16281] ? __lock_acquire+0x436/0x2890 [ 872.515303][T16281] netlink_sendmsg+0x8c8/0xdd0 [ 872.515344][T16281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.515383][T16281] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 872.515430][T16281] ____sys_sendmsg+0xa5d/0xc30 [ 872.515470][T16281] ? copy_msghdr_from_user+0x10a/0x160 [ 872.515501][T16281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 872.515547][T16281] ? __pfx_futex_wake_mark+0x10/0x10 [ 872.515584][T16281] ___sys_sendmsg+0x134/0x1d0 [ 872.515617][T16281] ? __pfx____sys_sendmsg+0x10/0x10 [ 872.515648][T16281] ? futex_private_hash_put+0x160/0x1b0 [ 872.515708][T16281] __sys_sendmsg+0x16d/0x220 [ 872.515740][T16281] ? __pfx___sys_sendmsg+0x10/0x10 [ 872.515771][T16281] ? __x64_sys_futex+0x1e0/0x4c0 [ 872.515816][T16281] do_syscall_64+0xcd/0xf80 [ 872.515856][T16281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.515880][T16281] RIP: 0033:0x7f8d5cb8f7c9 [ 872.515901][T16281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 872.515925][T16281] RSP: 002b:00007f8d5d9c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.515948][T16281] RAX: ffffffffffffffda RBX: 00007f8d5cde5fa0 RCX: 00007f8d5cb8f7c9 [ 872.515969][T16281] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 872.515985][T16281] RBP: 00007f8d5cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 872.516000][T16281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.516014][T16281] R13: 00007f8d5cde6038 R14: 00007f8d5cde5fa0 R15: 00007ffd1816d578 [ 872.516047][T16281] [ 875.491194][T16280] Process accounting resumed [ 875.811377][T16318] netlink: 'syz.0.1987': attribute type 2 has an invalid length. [ 880.566305][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.597806][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.803576][T16378] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1995'. [ 880.865017][ T31] audit: type=1800 audit(1766884643.042:30): pid=16381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1996" name="discovery_nqn" dev="configfs" ino=78554 res=0 errno=0 [ 881.658386][T16371] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 881.704655][T16371] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 881.769500][T16371] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 881.825738][T16371] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 882.637940][T15236] Bluetooth: hci2: command 0x0c1a tx timeout [ 883.404090][T16421] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2003'. [ 883.758062][T14320] Bluetooth: hci1: command 0x0c1a tx timeout [ 883.838833][T14320] Bluetooth: hci0: command 0x0c1a tx timeout [ 883.844936][T15236] Bluetooth: hci3: command 0x0c1a tx timeout [ 888.522399][T16466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2009'. [ 889.373932][T16462] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 889.430531][T16462] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 889.532574][T16462] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 889.604816][T16462] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 890.477765][T15236] Bluetooth: hci2: command 0x0c1a tx timeout [ 890.558319][T16495] netlink: 'syz.2.2013': attribute type 2 has an invalid length. [ 891.437909][T15236] Bluetooth: hci1: command 0x0c1a tx timeout [ 891.597733][T15236] Bluetooth: hci0: command 0x0c1a tx timeout [ 891.677749][T15236] Bluetooth: hci3: command 0x0c1a tx timeout [ 892.776091][T16518] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2015'. [ 893.100856][T16523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2018'. [ 893.176813][T16525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2019'. [ 894.173459][T16531] FAULT_INJECTION: forcing a failure. [ 894.173459][T16531] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 894.205229][T16531] CPU: 0 UID: 0 PID: 16531 Comm: syz.0.2021 Tainted: G L syzkaller #0 PREEMPT(full) [ 894.205269][T16531] Tainted: [L]=SOFTLOCKUP [ 894.205278][T16531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 894.205292][T16531] Call Trace: [ 894.205300][T16531] [ 894.205309][T16531] dump_stack_lvl+0x16c/0x1f0 [ 894.205352][T16531] should_fail_ex+0x512/0x640 [ 894.205384][T16531] should_fail_alloc_page+0xe7/0x130 [ 894.205424][T16531] prepare_alloc_pages+0x401/0x670 [ 894.205463][T16531] ? stack_depot_save_flags+0x29/0x9b0 [ 894.205490][T16531] ? rcu_is_watching+0x12/0xc0 [ 894.205528][T16531] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 894.205559][T16531] ? kasan_save_stack+0x42/0x60 [ 894.205592][T16531] ? kasan_save_track+0x14/0x30 [ 894.205624][T16531] ? __kasan_slab_alloc+0x89/0x90 [ 894.205658][T16531] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 894.205686][T16531] ? ptlock_alloc+0x1f/0x70 [ 894.205708][T16531] ? pte_alloc_one+0x84/0x3d0 [ 894.205741][T16531] ? copy_huge_pmd+0x19a/0x1c40 [ 894.205766][T16531] ? copy_page_range+0xe88/0x6780 [ 894.205788][T16531] ? dup_mmap+0xbea/0x20e0 [ 894.205807][T16531] ? copy_process+0x3b9f/0x7430 [ 894.205843][T16531] ? kernel_clone+0xfc/0x910 [ 894.205886][T16531] ? __do_sys_clone+0xce/0x120 [ 894.205921][T16531] ? do_syscall_64+0xcd/0xf80 [ 894.205957][T16531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.205994][T16531] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 894.206039][T16531] ? lock_acquire+0x179/0x330 [ 894.206063][T16531] ? find_held_lock+0x2b/0x80 [ 894.206093][T16531] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 894.206133][T16531] ? policy_nodemask+0xea/0x4e0 [ 894.206173][T16531] alloc_pages_mpol+0x1fb/0x550 [ 894.206212][T16531] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 894.206250][T16531] ? __page_table_check_pmds_set+0x295/0x550 [ 894.206301][T16531] alloc_pages_noprof+0x131/0x390 [ 894.206341][T16531] pte_alloc_one+0x1e/0x3d0 [ 894.206375][T16531] copy_huge_pmd+0x19a/0x1c40 [ 894.206409][T16531] ? __pfx_copy_huge_pmd+0x10/0x10 [ 894.206438][T16531] ? __pfx___might_resched+0x10/0x10 [ 894.206472][T16531] ? copy_page_range+0x22fb/0x6780 [ 894.206500][T16531] copy_page_range+0xe88/0x6780 [ 894.206559][T16531] ? __pfx_copy_page_range+0x10/0x10 [ 894.206593][T16531] ? mas_store+0xb4b/0x12f0 [ 894.206618][T16531] ? __vma_enter_locked+0x1dc/0x770 [ 894.206664][T16531] dup_mmap+0xbea/0x20e0 [ 894.206695][T16531] ? __pfx_dup_mmap+0x10/0x10 [ 894.206754][T16531] copy_process+0x3b9f/0x7430 [ 894.206790][T16531] ? preempt_schedule_thunk+0x16/0x30 [ 894.206833][T16531] ? __pfx_copy_process+0x10/0x10 [ 894.206870][T16531] ? find_held_lock+0x2b/0x80 [ 894.206906][T16531] ? futex_private_hash_put+0x160/0x1b0 [ 894.206938][T16531] kernel_clone+0xfc/0x910 [ 894.206975][T16531] ? __pfx_futex_wake+0x10/0x10 [ 894.207014][T16531] ? __pfx_kernel_clone+0x10/0x10 [ 894.207049][T16531] ? __pfx_snd_rawmidi_ioctl_status32+0x10/0x10 [ 894.207093][T16531] __do_sys_clone+0xce/0x120 [ 894.207130][T16531] ? __pfx___do_sys_clone+0x10/0x10 [ 894.207181][T16531] ? xfd_validate_state+0x61/0x180 [ 894.207220][T16531] do_syscall_64+0xcd/0xf80 [ 894.207260][T16531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.207285][T16531] RIP: 0033:0x7f8d5cb8f7c9 [ 894.207304][T16531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.207329][T16531] RSP: 002b:00007f8d5d9c0fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 894.207351][T16531] RAX: ffffffffffffffda RBX: 00007f8d5cde5fa0 RCX: 00007f8d5cb8f7c9 [ 894.207368][T16531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 894.207383][T16531] RBP: 00007f8d5cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 894.207398][T16531] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 894.207413][T16531] R13: 00007f8d5cde6038 R14: 00007f8d5cde5fa0 R15: 00007ffd1816d578 [ 894.207445][T16531] [ 897.139351][T16567] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 897.139351][T16567] program syz.0.2026 not setting count and/or reply_len properly [ 897.350719][T16571] FAULT_INJECTION: forcing a failure. [ 897.350719][T16571] name failslab, interval 1, probability 0, space 0, times 0 [ 897.528248][T16571] CPU: 0 UID: 0 PID: 16571 Comm: syz.0.2026 Tainted: G L syzkaller #0 PREEMPT(full) [ 897.528287][T16571] Tainted: [L]=SOFTLOCKUP [ 897.528296][T16571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 897.528311][T16571] Call Trace: [ 897.528320][T16571] [ 897.528329][T16571] dump_stack_lvl+0x16c/0x1f0 [ 897.528373][T16571] should_fail_ex+0x512/0x640 [ 897.528400][T16571] ? __kmalloc_cache_noprof+0x5f/0x800 [ 897.528432][T16571] should_failslab+0xc2/0x120 [ 897.528471][T16571] __kmalloc_cache_noprof+0x80/0x800 [ 897.528499][T16571] ? alloc_tty_struct+0x96/0x8c0 [ 897.528542][T16571] ? alloc_tty_struct+0x96/0x8c0 [ 897.528580][T16571] alloc_tty_struct+0x96/0x8c0 [ 897.528619][T16571] ? __pfx_alloc_tty_struct+0x10/0x10 [ 897.528666][T16571] pty_common_install+0x1c7/0xb30 [ 897.528709][T16571] ? __pfx_pty_unix98_install+0x10/0x10 [ 897.528741][T16571] tty_init_dev.part.0+0x9c/0x500 [ 897.528782][T16571] tty_init_dev+0x60/0x80 [ 897.528821][T16571] ptmx_open+0x15e/0x3c0 [ 897.528850][T16571] ? __pfx_ptmx_open+0x10/0x10 [ 897.528879][T16571] chrdev_open+0x234/0x6a0 [ 897.528918][T16571] ? __pfx_apparmor_file_open+0x10/0x10 [ 897.528944][T16571] ? __pfx_chrdev_open+0x10/0x10 [ 897.528985][T16571] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 897.529035][T16571] do_dentry_open+0x748/0x1590 [ 897.529072][T16571] ? __pfx_chrdev_open+0x10/0x10 [ 897.529118][T16571] vfs_open+0x82/0x3f0 [ 897.529149][T16571] path_openat+0x2078/0x3140 [ 897.529196][T16571] ? __pfx_path_openat+0x10/0x10 [ 897.529245][T16571] do_filp_open+0x20b/0x470 [ 897.529284][T16571] ? __pfx_do_filp_open+0x10/0x10 [ 897.529343][T16571] ? alloc_fd+0x471/0x7d0 [ 897.529388][T16571] do_sys_openat2+0x121/0x290 [ 897.529415][T16571] ? __pfx_do_sys_openat2+0x10/0x10 [ 897.529445][T16571] ? find_held_lock+0x2b/0x80 [ 897.529485][T16571] __x64_sys_openat+0x174/0x210 [ 897.529514][T16571] ? __pfx___x64_sys_openat+0x10/0x10 [ 897.529555][T16571] do_syscall_64+0xcd/0xf80 [ 897.529595][T16571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.529621][T16571] RIP: 0033:0x7f8d5cb8f7c9 [ 897.529640][T16571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.529664][T16571] RSP: 002b:00007f8d5d95e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 897.529692][T16571] RAX: ffffffffffffffda RBX: 00007f8d5cde6270 RCX: 00007f8d5cb8f7c9 [ 897.529709][T16571] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 897.529725][T16571] RBP: 00007f8d5cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 897.529741][T16571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.529756][T16571] R13: 00007f8d5cde6308 R14: 00007f8d5cde6270 R15: 00007ffd1816d578 [ 897.529789][T16571] [ 898.961257][T16585] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 899.048279][T16585] CPU: 0 UID: 0 PID: 16585 Comm: syz.1.2029 Tainted: G L syzkaller #0 PREEMPT(full) [ 899.048318][T16585] Tainted: [L]=SOFTLOCKUP [ 899.048327][T16585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 899.048342][T16585] Call Trace: [ 899.048350][T16585] [ 899.048359][T16585] dump_stack_lvl+0x16c/0x1f0 [ 899.048400][T16585] sysfs_warn_dup+0x7f/0xa0 [ 899.048432][T16585] sysfs_do_create_link_sd+0x124/0x140 [ 899.048463][T16585] sysfs_create_link+0x61/0xc0 [ 899.048491][T16585] device_add+0x652/0x1980 [ 899.048529][T16585] ? __pfx_device_add+0x10/0x10 [ 899.048562][T16585] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 899.048601][T16585] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 899.048650][T16585] wiphy_register+0x1ea1/0x2cc0 [ 899.048673][T16585] ? __rtnl_unlock+0x68/0xf0 [ 899.048710][T16585] ? napi_enable_locked+0x190/0xa00 [ 899.048745][T16585] ? __pfx_wiphy_register+0x10/0x10 [ 899.048769][T16585] ? __asan_memset+0x23/0x50 [ 899.048807][T16585] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 899.048851][T16585] ieee80211_register_hw+0x2bb2/0x4160 [ 899.048886][T16585] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 899.048909][T16585] ? __pfx___debug_object_init+0x10/0x10 [ 899.048953][T16585] ? find_held_lock+0x2b/0x80 [ 899.048985][T16585] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 899.049023][T16585] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 899.049060][T16585] ? __hrtimer_setup+0x176/0x280 [ 899.049092][T16585] mac80211_hwsim_new_radio+0x3323/0x5150 [ 899.049136][T16585] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 899.049174][T16585] hwsim_new_radio_nl+0xba2/0x1330 [ 899.049204][T16585] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 899.049240][T16585] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 899.049283][T16585] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 899.049332][T16585] genl_family_rcv_msg_doit+0x209/0x2f0 [ 899.049374][T16585] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 899.049415][T16585] ? genl_get_cmd+0x194/0x580 [ 899.049458][T16585] ? bpf_lsm_capable+0x9/0x10 [ 899.049491][T16585] ? security_capable+0x7e/0x260 [ 899.049531][T16585] ? ns_capable+0xd7/0x110 [ 899.049565][T16585] genl_rcv_msg+0x55c/0x800 [ 899.049591][T16585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 899.049614][T16585] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 899.049661][T16585] netlink_rcv_skb+0x158/0x420 [ 899.049696][T16585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 899.049721][T16585] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 899.049769][T16585] ? netlink_deliver_tap+0x1ae/0xd30 [ 899.049807][T16585] genl_rcv+0x28/0x40 [ 899.049843][T16585] netlink_unicast+0x5aa/0x870 [ 899.049882][T16585] ? __pfx_netlink_unicast+0x10/0x10 [ 899.049918][T16585] ? __pfx___might_resched+0x10/0x10 [ 899.049971][T16585] ? __lock_acquire+0x436/0x2890 [ 899.050002][T16585] netlink_sendmsg+0x8c8/0xdd0 [ 899.050044][T16585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 899.050086][T16585] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 899.050134][T16585] ____sys_sendmsg+0xa5d/0xc30 [ 899.050176][T16585] ? copy_msghdr_from_user+0x10a/0x160 [ 899.050208][T16585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 899.050246][T16585] ? preempt_schedule_thunk+0x16/0x30 [ 899.050276][T16585] ? try_to_wake_up+0xa67/0x1860 [ 899.050315][T16585] ___sys_sendmsg+0x134/0x1d0 [ 899.050349][T16585] ? __pfx____sys_sendmsg+0x10/0x10 [ 899.050382][T16585] ? futex_private_hash_put+0x160/0x1b0 [ 899.050443][T16585] __sys_sendmsg+0x16d/0x220 [ 899.050475][T16585] ? __pfx___sys_sendmsg+0x10/0x10 [ 899.050507][T16585] ? __x64_sys_futex+0x1e0/0x4c0 [ 899.050774][T16585] do_syscall_64+0xcd/0xf80 [ 899.050832][T16585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.050866][T16585] RIP: 0033:0x7fac1f78f7c9 [ 899.050887][T16585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 899.050913][T16585] RSP: 002b:00007fac206e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 899.050936][T16585] RAX: ffffffffffffffda RBX: 00007fac1f9e5fa0 RCX: 00007fac1f78f7c9 [ 899.050952][T16585] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 899.050968][T16585] RBP: 00007fac1f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 899.050984][T16585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.051000][T16585] R13: 00007fac1f9e6038 R14: 00007fac1f9e5fa0 R15: 00007ffce728bb28 [ 899.051032][T16585] [ 901.008599][T16591] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 901.014676][T16591] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 901.072414][T16591] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 901.082184][T16591] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 901.152616][T16605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2032'. [ 901.957412][T16618] QAT: Stopping all acceleration devices. [ 902.121383][T15236] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 902.121420][T15236] Bluetooth: hci0: unexpected subevent 0x0a length: 725 > 30 [ 902.638118][T15236] Bluetooth: hci2: command 0x0c1a tx timeout [ 903.038007][T15236] Bluetooth: hci1: command 0x0c1a tx timeout [ 903.118797][T14320] Bluetooth: hci3: command 0x0c1a tx timeout [ 903.124930][T15236] Bluetooth: hci0: command 0x0c1a tx timeout [ 904.129005][T16643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2039'. [ 906.068614][T16658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2041'. [ 908.404068][T16655] Process accounting paused [ 910.904222][T16727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2052'. [ 912.031830][T16738] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 912.127125][T16738] CPU: 0 UID: 0 PID: 16738 Comm: syz.3.2055 Tainted: G L syzkaller #0 PREEMPT(full) [ 912.127165][T16738] Tainted: [L]=SOFTLOCKUP [ 912.127174][T16738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 912.127189][T16738] Call Trace: [ 912.127197][T16738] [ 912.127208][T16738] dump_stack_lvl+0x16c/0x1f0 [ 912.127250][T16738] sysfs_warn_dup+0x7f/0xa0 [ 912.127278][T16738] sysfs_do_create_link_sd+0x124/0x140 [ 912.127310][T16738] sysfs_create_link+0x61/0xc0 [ 912.127342][T16738] device_add+0x652/0x1980 [ 912.127382][T16738] ? __pfx_device_add+0x10/0x10 [ 912.127421][T16738] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 912.127461][T16738] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 912.127505][T16738] wiphy_register+0x1ea1/0x2cc0 [ 912.127529][T16738] ? __rtnl_unlock+0x68/0xf0 [ 912.127567][T16738] ? napi_enable_locked+0x190/0xa00 [ 912.127604][T16738] ? __pfx_wiphy_register+0x10/0x10 [ 912.127629][T16738] ? __asan_memset+0x23/0x50 [ 912.127668][T16738] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 912.127714][T16738] ieee80211_register_hw+0x2bb2/0x4160 [ 912.127750][T16738] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 912.127775][T16738] ? __pfx___debug_object_init+0x10/0x10 [ 912.127820][T16738] ? find_held_lock+0x2b/0x80 [ 912.127854][T16738] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 912.127893][T16738] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 912.127930][T16738] ? __hrtimer_setup+0x176/0x280 [ 912.127964][T16738] mac80211_hwsim_new_radio+0x3323/0x5150 [ 912.128010][T16738] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 912.128049][T16738] hwsim_new_radio_nl+0xba2/0x1330 [ 912.128080][T16738] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 912.128117][T16738] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 912.128162][T16738] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 912.128212][T16738] genl_family_rcv_msg_doit+0x209/0x2f0 [ 912.128257][T16738] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 912.128300][T16738] ? genl_get_cmd+0x194/0x580 [ 912.128344][T16738] ? bpf_lsm_capable+0x9/0x10 [ 912.128378][T16738] ? security_capable+0x7e/0x260 [ 912.128424][T16738] ? ns_capable+0xd7/0x110 [ 912.128459][T16738] genl_rcv_msg+0x55c/0x800 [ 912.128486][T16738] ? __pfx_genl_rcv_msg+0x10/0x10 [ 912.128510][T16738] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 912.128549][T16738] netlink_rcv_skb+0x158/0x420 [ 912.128586][T16738] ? __pfx_genl_rcv_msg+0x10/0x10 [ 912.128611][T16738] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 912.128661][T16738] ? netlink_deliver_tap+0x1ae/0xd30 [ 912.128700][T16738] genl_rcv+0x28/0x40 [ 912.128736][T16738] netlink_unicast+0x5aa/0x870 [ 912.128777][T16738] ? __pfx_netlink_unicast+0x10/0x10 [ 912.128813][T16738] ? __pfx___might_resched+0x10/0x10 [ 912.128848][T16738] ? __lock_acquire+0x436/0x2890 [ 912.128879][T16738] netlink_sendmsg+0x8c8/0xdd0 [ 912.128920][T16738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.128962][T16738] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 912.129010][T16738] ____sys_sendmsg+0xa5d/0xc30 [ 912.129051][T16738] ? copy_msghdr_from_user+0x10a/0x160 [ 912.129084][T16738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 912.129131][T16738] ? __pfx_futex_wake_mark+0x10/0x10 [ 912.129170][T16738] ___sys_sendmsg+0x134/0x1d0 [ 912.129204][T16738] ? __pfx____sys_sendmsg+0x10/0x10 [ 912.129236][T16738] ? futex_private_hash_put+0x160/0x1b0 [ 912.129296][T16738] __sys_sendmsg+0x16d/0x220 [ 912.129329][T16738] ? __pfx___sys_sendmsg+0x10/0x10 [ 912.129362][T16738] ? __x64_sys_futex+0x1e0/0x4c0 [ 912.129415][T16738] do_syscall_64+0xcd/0xf80 [ 912.129456][T16738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.129483][T16738] RIP: 0033:0x7f121658f7c9 [ 912.129504][T16738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.129529][T16738] RSP: 002b:00007f1217495038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 912.129553][T16738] RAX: ffffffffffffffda RBX: 00007f12167e5fa0 RCX: 00007f121658f7c9 [ 912.129570][T16738] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 912.129586][T16738] RBP: 00007f1216613f91 R08: 0000000000000000 R09: 0000000000000000 [ 912.129601][T16738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.129617][T16738] R13: 00007f12167e6038 R14: 00007f12167e5fa0 R15: 00007ffe145177e8 [ 912.129649][T16738] [ 912.579800][T16743] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2056'. [ 916.294647][T16758] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 916.334113][T16758] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 916.364703][T16758] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 916.398550][T16758] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 916.958096][T14320] Bluetooth: hci2: command 0x0c1a tx timeout [ 918.005607][T16809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2064'. [ 918.397766][T15236] Bluetooth: hci1: command 0x0c1a tx timeout [ 918.403885][T14320] Bluetooth: hci0: command 0x0c1a tx timeout [ 918.477795][T14320] Bluetooth: hci3: command 0x0c1a tx timeout [ 919.089771][T14320] Bluetooth: hci3: unexpected event 0x23 length: 127 > 13 [ 919.210291][T16821] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 919.263050][T16823] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2067'. [ 921.679066][T16826] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 921.833037][T16826] CPU: 0 UID: 0 PID: 16826 Comm: syz.3.2068 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.833077][T16826] Tainted: [L]=SOFTLOCKUP [ 921.833087][T16826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 921.833102][T16826] Call Trace: [ 921.833111][T16826] [ 921.833121][T16826] dump_stack_lvl+0x16c/0x1f0 [ 921.833164][T16826] sysfs_warn_dup+0x7f/0xa0 [ 921.833192][T16826] sysfs_do_create_link_sd+0x124/0x140 [ 921.833224][T16826] sysfs_create_link+0x61/0xc0 [ 921.833252][T16826] device_add+0x652/0x1980 [ 921.833290][T16826] ? __pfx_device_add+0x10/0x10 [ 921.833323][T16826] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 921.833365][T16826] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 921.833408][T16826] wiphy_register+0x1ea1/0x2cc0 [ 921.833431][T16826] ? __rtnl_unlock+0x68/0xf0 [ 921.833470][T16826] ? napi_enable_locked+0x190/0xa00 [ 921.833506][T16826] ? __pfx_wiphy_register+0x10/0x10 [ 921.833530][T16826] ? __asan_memset+0x23/0x50 [ 921.833570][T16826] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 921.833624][T16826] ieee80211_register_hw+0x2bb2/0x4160 [ 921.833661][T16826] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 921.833686][T16826] ? __pfx___debug_object_init+0x10/0x10 [ 921.833733][T16826] ? find_held_lock+0x2b/0x80 [ 921.833766][T16826] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 921.833805][T16826] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 921.833843][T16826] ? __hrtimer_setup+0x176/0x280 [ 921.833877][T16826] mac80211_hwsim_new_radio+0x3323/0x5150 [ 921.833923][T16826] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 921.833961][T16826] hwsim_new_radio_nl+0xba2/0x1330 [ 921.833993][T16826] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 921.834031][T16826] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 921.834076][T16826] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 921.834126][T16826] genl_family_rcv_msg_doit+0x209/0x2f0 [ 921.834171][T16826] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 921.834213][T16826] ? genl_get_cmd+0x194/0x580 [ 921.834258][T16826] ? bpf_lsm_capable+0x9/0x10 [ 921.834291][T16826] ? security_capable+0x7e/0x260 [ 921.834333][T16826] ? ns_capable+0xd7/0x110 [ 921.834367][T16826] genl_rcv_msg+0x55c/0x800 [ 921.834394][T16826] ? __pfx_genl_rcv_msg+0x10/0x10 [ 921.834419][T16826] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 921.834459][T16826] netlink_rcv_skb+0x158/0x420 [ 921.834496][T16826] ? __pfx_genl_rcv_msg+0x10/0x10 [ 921.834521][T16826] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 921.834570][T16826] ? netlink_deliver_tap+0x1ae/0xd30 [ 921.834615][T16826] genl_rcv+0x28/0x40 [ 921.834653][T16826] netlink_unicast+0x5aa/0x870 [ 921.834694][T16826] ? __pfx_netlink_unicast+0x10/0x10 [ 921.834731][T16826] ? __pfx___might_resched+0x10/0x10 [ 921.834767][T16826] ? __lock_acquire+0x436/0x2890 [ 921.834801][T16826] netlink_sendmsg+0x8c8/0xdd0 [ 921.834843][T16826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.834884][T16826] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 921.834933][T16826] ____sys_sendmsg+0xa5d/0xc30 [ 921.834974][T16826] ? copy_msghdr_from_user+0x10a/0x160 [ 921.835007][T16826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 921.835054][T16826] ? __pfx_futex_wake_mark+0x10/0x10 [ 921.835093][T16826] ___sys_sendmsg+0x134/0x1d0 [ 921.835128][T16826] ? __pfx____sys_sendmsg+0x10/0x10 [ 921.835160][T16826] ? futex_private_hash_put+0x160/0x1b0 [ 921.835223][T16826] __sys_sendmsg+0x16d/0x220 [ 921.835256][T16826] ? __pfx___sys_sendmsg+0x10/0x10 [ 921.835288][T16826] ? __x64_sys_futex+0x1e0/0x4c0 [ 921.835335][T16826] do_syscall_64+0xcd/0xf80 [ 921.835376][T16826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.835402][T16826] RIP: 0033:0x7f121658f7c9 [ 921.835422][T16826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.835447][T16826] RSP: 002b:00007f1217495038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.835470][T16826] RAX: ffffffffffffffda RBX: 00007f12167e5fa0 RCX: 00007f121658f7c9 [ 921.835486][T16826] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 921.835502][T16826] RBP: 00007f1216613f91 R08: 0000000000000000 R09: 0000000000000000 [ 921.835519][T16826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.835534][T16826] R13: 00007f12167e6038 R14: 00007f12167e5fa0 R15: 00007ffe145177e8 [ 921.835567][T16826] [ 924.128854][T16862] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 924.155648][T16862] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 924.189181][T16862] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 924.209339][T16862] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 924.310683][T16865] ================================================================== [ 924.310700][T16865] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 924.310744][T16865] Write of size 8 at addr ffffc90003a990a0 by task syz.2.2073/16865 [ 924.310765][T16865] [ 924.310779][T16865] CPU: 0 UID: 0 PID: 16865 Comm: syz.2.2073 Tainted: G L syzkaller #0 PREEMPT(full) [ 924.310814][T16865] Tainted: [L]=SOFTLOCKUP [ 924.310823][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 924.310839][T16865] Call Trace: [ 924.310848][T16865] [ 924.310858][T16865] dump_stack_lvl+0x116/0x1f0 [ 924.310896][T16865] print_report+0xcd/0x630 [ 924.310935][T16865] ? __virt_addr_valid+0x81/0x610 [ 924.310977][T16865] ? sys_imageblit+0x1a6f/0x1e60 [ 924.311013][T16865] kasan_report+0xe0/0x110 [ 924.311054][T16865] ? sys_imageblit+0x1a6f/0x1e60 [ 924.311094][T16865] sys_imageblit+0x1a6f/0x1e60 [ 924.311135][T16865] ? __pfx_sys_imageblit+0x10/0x10 [ 924.311172][T16865] ? find_held_lock+0x2b/0x80 [ 924.311205][T16865] ? up+0xcb/0x140 [ 924.311226][T16865] ? do_raw_spin_unlock+0x172/0x230 [ 924.311256][T16865] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 924.311294][T16865] ? prb_read_valid+0x78/0xa0 [ 924.311320][T16865] ? __pfx_prb_read_valid+0x10/0x10 [ 924.311350][T16865] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 924.311399][T16865] soft_cursor+0x524/0xa10 [ 924.311431][T16865] ? fb_get_color_depth+0x120/0x250 [ 924.311460][T16865] bit_cursor+0xe8c/0x17e0 [ 924.311493][T16865] ? __pfx_bit_cursor+0x10/0x10 [ 924.311522][T16865] ? __lock_acquire+0x436/0x2890 [ 924.311549][T16865] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 924.311588][T16865] ? get_color+0x1da/0x450 [ 924.311611][T16865] ? __pfx_bit_cursor+0x10/0x10 [ 924.311639][T16865] fbcon_cursor+0x437/0x5d0 [ 924.311664][T16865] ? add_softcursor+0x31/0x290 [ 924.311696][T16865] set_cursor+0x1db/0x250 [ 924.311726][T16865] con_write+0x89/0xb0 [ 924.311762][T16865] n_tty_write+0x434/0x1280 [ 924.311793][T16865] ? __pfx_n_tty_write+0x10/0x10 [ 924.311818][T16865] ? __pfx_woken_wake_function+0x10/0x10 [ 924.311849][T16865] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 924.311888][T16865] ? __pfx_n_tty_write+0x10/0x10 [ 924.311913][T16865] file_tty_write.constprop.0+0x503/0x9b0 [ 924.311954][T16865] redirected_tty_write+0xd4/0x120 [ 924.311990][T16865] vfs_write+0x7d3/0x11d0 [ 924.312026][T16865] ? __pfx_redirected_tty_write+0x10/0x10 [ 924.312064][T16865] ? __pfx_vfs_write+0x10/0x10 [ 924.312098][T16865] ? find_held_lock+0x2b/0x80 [ 924.312139][T16865] ksys_write+0x12a/0x250 [ 924.312174][T16865] ? __pfx_ksys_write+0x10/0x10 [ 924.312214][T16865] do_syscall_64+0xcd/0xf80 [ 924.312253][T16865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.312279][T16865] RIP: 0033:0x7fe38698f7c9 [ 924.312299][T16865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.312325][T16865] RSP: 002b:00007fe387830038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 924.312348][T16865] RAX: ffffffffffffffda RBX: 00007fe386be6090 RCX: 00007fe38698f7c9 [ 924.312371][T16865] RDX: 0000000000000930 RSI: 0000200000001bc0 RDI: 0000000000000009 [ 924.312386][T16865] RBP: 00007fe386a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 924.312402][T16865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.312418][T16865] R13: 00007fe386be6128 R14: 00007fe386be6090 R15: 00007fff2d405ae8 [ 924.312443][T16865] [ 924.312452][T16865] [ 924.312459][T16865] The buggy address belongs to a vmalloc virtual mapping [ 924.312477][T16865] Memory state around the buggy address: [ 924.312490][T16865] ffffc90003a98f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 924.312508][T16865] ffffc90003a99000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 924.312526][T16865] >ffffc90003a99080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 924.312540][T16865] ^ [ 924.312554][T16865] ffffc90003a99100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 924.312572][T16865] ffffc90003a99180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 924.312586][T16865] ================================================================== [ 924.326228][T16865] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 924.326252][T16865] CPU: 0 UID: 0 PID: 16865 Comm: syz.2.2073 Tainted: G L syzkaller #0 PREEMPT(full) [ 924.326289][T16865] Tainted: [L]=SOFTLOCKUP [ 924.326299][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 924.326315][T16865] Call Trace: [ 924.326324][T16865] [ 924.326333][T16865] dump_stack_lvl+0x3d/0x1f0 [ 924.326382][T16865] vpanic+0x640/0x6f0 [ 924.326410][T16865] panic+0xca/0xd0 [ 924.326433][T16865] ? __pfx_panic+0x10/0x10 [ 924.326461][T16865] ? sys_imageblit+0x1a6f/0x1e60 [ 924.326498][T16865] ? preempt_schedule_common+0x44/0xc0 [ 924.326536][T16865] ? preempt_schedule_thunk+0x16/0x30 [ 924.326563][T16865] check_panic_on_warn+0xab/0xb0 [ 924.326591][T16865] end_report+0x107/0x160 [ 924.326628][T16865] kasan_report+0xee/0x110 [ 924.326667][T16865] ? sys_imageblit+0x1a6f/0x1e60 [ 924.326707][T16865] sys_imageblit+0x1a6f/0x1e60 [ 924.326748][T16865] ? __pfx_sys_imageblit+0x10/0x10 [ 924.326785][T16865] ? find_held_lock+0x2b/0x80 [ 924.326818][T16865] ? up+0xcb/0x140 [ 924.326839][T16865] ? do_raw_spin_unlock+0x172/0x230 [ 924.326869][T16865] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 924.326908][T16865] ? prb_read_valid+0x78/0xa0 [ 924.326934][T16865] ? __pfx_prb_read_valid+0x10/0x10 [ 924.326964][T16865] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 924.327005][T16865] soft_cursor+0x524/0xa10 [ 924.327037][T16865] ? fb_get_color_depth+0x120/0x250 [ 924.327066][T16865] bit_cursor+0xe8c/0x17e0 [ 924.327100][T16865] ? __pfx_bit_cursor+0x10/0x10 [ 924.327129][T16865] ? __lock_acquire+0x436/0x2890 [ 924.327155][T16865] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 924.327194][T16865] ? get_color+0x1da/0x450 [ 924.327218][T16865] ? __pfx_bit_cursor+0x10/0x10 [ 924.327246][T16865] fbcon_cursor+0x437/0x5d0 [ 924.327272][T16865] ? add_softcursor+0x31/0x290 [ 924.327304][T16865] set_cursor+0x1db/0x250 [ 924.327334][T16865] con_write+0x89/0xb0 [ 924.327374][T16865] n_tty_write+0x434/0x1280 [ 924.327406][T16865] ? __pfx_n_tty_write+0x10/0x10 [ 924.327432][T16865] ? __pfx_woken_wake_function+0x10/0x10 [ 924.327463][T16865] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 924.327503][T16865] ? __pfx_n_tty_write+0x10/0x10 [ 924.327528][T16865] file_tty_write.constprop.0+0x503/0x9b0 [ 924.327569][T16865] redirected_tty_write+0xd4/0x120 [ 924.327605][T16865] vfs_write+0x7d3/0x11d0 [ 924.327641][T16865] ? __pfx_redirected_tty_write+0x10/0x10 [ 924.327679][T16865] ? __pfx_vfs_write+0x10/0x10 [ 924.327714][T16865] ? find_held_lock+0x2b/0x80 [ 924.327755][T16865] ksys_write+0x12a/0x250 [ 924.327791][T16865] ? __pfx_ksys_write+0x10/0x10 [ 924.327831][T16865] do_syscall_64+0xcd/0xf80 [ 924.327870][T16865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.327896][T16865] RIP: 0033:0x7fe38698f7c9 [ 924.327917][T16865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.327942][T16865] RSP: 002b:00007fe387830038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 924.327965][T16865] RAX: ffffffffffffffda RBX: 00007fe386be6090 RCX: 00007fe38698f7c9 [ 924.327983][T16865] RDX: 0000000000000930 RSI: 0000200000001bc0 RDI: 0000000000000009 [ 924.328000][T16865] RBP: 00007fe386a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 924.328016][T16865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.328032][T16865] R13: 00007fe386be6128 R14: 00007fe386be6090 R15: 00007fff2d405ae8 [ 924.328058][T16865] [ 924.328130][T16865] Kernel Offset: disabled