last executing test programs: 8.794437777s ago: executing program 0 (id=6019): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd4\x00', 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) 8.739873235s ago: executing program 1 (id=6021): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) utimensat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x700, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3c", 0xfdef) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) 7.686208724s ago: executing program 1 (id=6022): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) utimensat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsconfig$auto_FSCONFIG_SET_PATH(r0, 0x3, 0x0, 0x0, 0x0) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x0, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/scsi_mod/parameters/default_dev_flags\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/bond0/bonding/ad_actor_sys_prio\x00', 0x942, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x801, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd11/queue/stable_writes\x00', 0x1a1842, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r2 = socketpair$auto(0x20, 0x40006, 0xfffffff9, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ioctl$auto(r1, 0x541c, r2) 6.73329052s ago: executing program 1 (id=6024): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2) madvise$auto(0x0, 0x8000000000000000, 0x15) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000280), r0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000800) 6.695395964s ago: executing program 2 (id=6025): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) utimensat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x700, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3c", 0xfdef) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 5.974913032s ago: executing program 3 (id=6026): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2) madvise$auto(0x0, 0x8000000000000000, 0x15) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000280), r0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000800) 5.530446756s ago: executing program 2 (id=6027): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) utimensat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsconfig$auto_FSCONFIG_SET_PATH(r0, 0x3, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/scsi_mod/parameters/default_dev_flags\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/bond0/bonding/ad_actor_sys_prio\x00', 0x942, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x801, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyqc\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd11/queue/stable_writes\x00', 0x1a1842, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r2 = socketpair$auto(0x20, 0x40006, 0xfffffff9, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ioctl$auto(r1, 0x541c, r2) 4.949963998s ago: executing program 0 (id=6028): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) utimensat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x700, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3c", 0xfdef) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 4.556357492s ago: executing program 2 (id=6029): getcwd$auto(0x0, 0x7) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) read$auto(r0, 0x0, 0x6) 4.209528434s ago: executing program 3 (id=6030): mmap$auto(0x0, 0x7f, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="361b1000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) setgroups$auto(0x8, &(0x7f0000000000)=0x5) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f33", 0x7f) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) read$auto(r4, 0x0, 0x7) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') socket(0x10, 0x2, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x80000002, 0x85fc, 0x21010004}) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r5, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) 3.603765628s ago: executing program 0 (id=6031): mmap$auto(0x0, 0x7f, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="361b1000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) setgroups$auto(0x8, &(0x7f0000000000)=0x5) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f33", 0x7f) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) read$auto(r4, 0x0, 0x7) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') socket(0x10, 0x2, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x80000002, 0x85fc, 0x21010004}) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r5, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) 3.119558698s ago: executing program 3 (id=6032): mmap$auto(0x0, 0x7f, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="361b1000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) setgroups$auto(0x8, &(0x7f0000000000)=0x5) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b9", 0x8f) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) read$auto(r4, 0x0, 0x7) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') socket(0x10, 0x2, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x80000002, 0x85fc, 0x21010004}) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r5, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) 3.001543444s ago: executing program 2 (id=6033): getcwd$auto(0x0, 0x7) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) read$auto(r1, 0x0, 0x6) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x400c040}, 0x10000040) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r0) 2.995239319s ago: executing program 1 (id=6034): mmap$auto(0x0, 0x7f, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="361b1000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) setgroups$auto(0x8, &(0x7f0000000000)=0x5) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b911", 0x90) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) read$auto(r4, 0x0, 0x7) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') socket(0x10, 0x2, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x80000002, 0x85fc, 0x21010004}) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r5, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) 2.724038965s ago: executing program 0 (id=6035): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) utimensat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x700, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3c", 0xfdef) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 1.980767517s ago: executing program 3 (id=6036): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) utimensat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x700, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3c", 0xfdef) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 1.912732359s ago: executing program 1 (id=6037): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) utimensat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsconfig$auto_FSCONFIG_SET_PATH(r0, 0x3, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/scsi_mod/parameters/default_dev_flags\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/bond0/bonding/ad_actor_sys_prio\x00', 0x942, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x801, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyqc\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd11/queue/stable_writes\x00', 0x1a1842, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r2 = socketpair$auto(0x20, 0x40006, 0xfffffff9, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ioctl$auto(r1, 0x541c, r2) 1.691604433s ago: executing program 2 (id=6038): getcwd$auto(0x0, 0x7) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) read$auto(r0, 0x0, 0x6) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 988.418585ms ago: executing program 0 (id=6039): mmap$auto(0x0, 0x7f, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="361b1000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) setgroups$auto(0x8, &(0x7f0000000000)=0x5) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b9", 0x8f) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) read$auto(r4, 0x0, 0x7) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') socket(0x10, 0x2, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x80000002, 0x85fc, 0x21010004}) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r5, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) 940.312331ms ago: executing program 1 (id=6040): getcwd$auto(0x0, 0x7) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) read$auto(r1, 0x0, 0x6) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x400c040}, 0x10000040) io_uring_setup$auto(0x6, 0x0) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r0) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TT_VID={0x6, 0x14, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_DAT_CACHE_HWADDRESS={0xa, 0x24, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 726.258247ms ago: executing program 3 (id=6041): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) read$auto(r0, 0x0, 0x6) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 580.986422ms ago: executing program 3 (id=6042): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) utimensat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x700, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3c", 0xfdef) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 112.979324ms ago: executing program 2 (id=6043): mmap$auto(0x0, 0x7f, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="361b1000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) setgroups$auto(0x8, &(0x7f0000000000)=0x5) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b91123", 0x91) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) read$auto(r4, 0x0, 0x7) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') socket(0x10, 0x2, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x80000002, 0x85fc, 0x21010004}) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r5, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) 0s ago: executing program 0 (id=6044): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0x5) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(r1, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) kernel console output (not intermixed with test programs): __pfx_event_pid_write.isra.0+0x10/0x10 [ 1727.504322][T29541] vfs_write+0x2aa/0x1070 [ 1727.504341][T29541] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1727.504359][T29541] ? __pfx_vfs_write+0x10/0x10 [ 1727.504374][T29541] ? find_held_lock+0x2b/0x80 [ 1727.504392][T29541] ? __fget_files+0x215/0x3d0 [ 1727.504412][T29541] ? __fget_files+0x21f/0x3d0 [ 1727.504435][T29541] ksys_write+0x12a/0x250 [ 1727.504452][T29541] ? __pfx_ksys_write+0x10/0x10 [ 1727.504475][T29541] do_syscall_64+0xc9/0xf80 [ 1727.504493][T29541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.504509][T29541] RIP: 0033:0x7f98c559bf79 [ 1727.504523][T29541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1727.504538][T29541] RSP: 002b:00007f98c650c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1727.504553][T29541] RAX: ffffffffffffffda RBX: 00007f98c5815fa0 RCX: 00007f98c559bf79 [ 1727.504567][T29541] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1727.504576][T29541] RBP: 00007f98c56327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1727.504585][T29541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1727.504594][T29541] R13: 00007f98c5816038 R14: 00007f98c5815fa0 R15: 00007ffc54b6cd38 [ 1727.504614][T29541] [ 1733.091709][T29610] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3771'. [ 1733.583216][T29615] FAULT_INJECTION: forcing a failure. [ 1733.583216][T29615] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.598903][T29615] CPU: 0 UID: 0 PID: 29615 Comm: syz.0.3773 Not tainted syzkaller #0 PREEMPT(full) [ 1733.598928][T29615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1733.598938][T29615] Call Trace: [ 1733.598944][T29615] [ 1733.598952][T29615] dump_stack_lvl+0x100/0x190 [ 1733.598978][T29615] should_fail_ex.cold+0x5/0xa [ 1733.599006][T29615] should_failslab+0xc2/0x120 [ 1733.599028][T29615] __kmalloc_cache_noprof+0x80/0x810 [ 1733.599046][T29615] ? trace_pid_list_alloc+0x232/0x480 [ 1733.599064][T29615] ? trace_pid_list_alloc+0x232/0x480 [ 1733.599078][T29615] trace_pid_list_alloc+0x232/0x480 [ 1733.599096][T29615] trace_pid_write+0x110/0x480 [ 1733.599117][T29615] ? __pfx_trace_pid_write+0x10/0x10 [ 1733.599137][T29615] ? update_last_data+0xaa/0x510 [ 1733.599166][T29615] event_pid_write.isra.0+0x1e4/0x7f0 [ 1733.599184][T29615] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1733.599206][T29615] vfs_write+0x2aa/0x1070 [ 1733.599224][T29615] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1733.599242][T29615] ? __pfx_vfs_write+0x10/0x10 [ 1733.599261][T29615] ? find_held_lock+0x2b/0x80 [ 1733.599279][T29615] ? __fget_files+0x215/0x3d0 [ 1733.599300][T29615] ? __fget_files+0x21f/0x3d0 [ 1733.599322][T29615] ksys_write+0x12a/0x250 [ 1733.599339][T29615] ? __pfx_ksys_write+0x10/0x10 [ 1733.599363][T29615] do_syscall_64+0xc9/0xf80 [ 1733.599381][T29615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.599396][T29615] RIP: 0033:0x7f937199bf79 [ 1733.599411][T29615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1733.599425][T29615] RSP: 002b:00007f9372790028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1733.599441][T29615] RAX: ffffffffffffffda RBX: 00007f9371c15fa0 RCX: 00007f937199bf79 [ 1733.599451][T29615] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1733.599460][T29615] RBP: 00007f9371a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1733.599469][T29615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1733.599478][T29615] R13: 00007f9371c16038 R14: 00007f9371c15fa0 R15: 00007ffe0ba6bdd8 [ 1733.599499][T29615] [ 1735.521782][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.528191][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1741.578727][T29714] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3786'. [ 1742.314122][T29720] FAULT_INJECTION: forcing a failure. [ 1742.314122][T29720] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.327957][T29720] CPU: 1 UID: 0 PID: 29720 Comm: syz.0.3788 Not tainted syzkaller #0 PREEMPT(full) [ 1742.327997][T29720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1742.328016][T29720] Call Trace: [ 1742.328028][T29720] [ 1742.328040][T29720] dump_stack_lvl+0x100/0x190 [ 1742.328086][T29720] should_fail_ex.cold+0x5/0xa [ 1742.328135][T29720] should_failslab+0xc2/0x120 [ 1742.328177][T29720] __kmalloc_cache_noprof+0x80/0x810 [ 1742.328211][T29720] ? trace_pid_list_alloc+0x2fe/0x480 [ 1742.328246][T29720] ? trace_pid_list_alloc+0x2fe/0x480 [ 1742.328272][T29720] trace_pid_list_alloc+0x2fe/0x480 [ 1742.328303][T29720] trace_pid_write+0x110/0x480 [ 1742.328337][T29720] ? __pfx_trace_pid_write+0x10/0x10 [ 1742.328360][T29720] ? update_last_data+0xaa/0x510 [ 1742.328388][T29720] event_pid_write.isra.0+0x1e4/0x7f0 [ 1742.328406][T29720] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1742.328439][T29720] vfs_write+0x2aa/0x1070 [ 1742.328460][T29720] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1742.328479][T29720] ? __pfx_vfs_write+0x10/0x10 [ 1742.328494][T29720] ? find_held_lock+0x2b/0x80 [ 1742.328512][T29720] ? __fget_files+0x215/0x3d0 [ 1742.328534][T29720] ? __fget_files+0x21f/0x3d0 [ 1742.328557][T29720] ksys_write+0x12a/0x250 [ 1742.328574][T29720] ? __pfx_ksys_write+0x10/0x10 [ 1742.328597][T29720] do_syscall_64+0xc9/0xf80 [ 1742.328616][T29720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.328632][T29720] RIP: 0033:0x7f937199bf79 [ 1742.328647][T29720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1742.328672][T29720] RSP: 002b:00007f9372790028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1742.328689][T29720] RAX: ffffffffffffffda RBX: 00007f9371c15fa0 RCX: 00007f937199bf79 [ 1742.328699][T29720] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1742.328709][T29720] RBP: 00007f9371a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1742.328719][T29720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1742.328729][T29720] R13: 00007f9371c16038 R14: 00007f9371c15fa0 R15: 00007ffe0ba6bdd8 [ 1742.328756][T29720] [ 1748.165711][T29774] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3795'. [ 1749.943425][T29788] FAULT_INJECTION: forcing a failure. [ 1749.943425][T29788] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.956241][T29788] CPU: 0 UID: 0 PID: 29788 Comm: syz.0.3798 Not tainted syzkaller #0 PREEMPT(full) [ 1749.956264][T29788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1749.956275][T29788] Call Trace: [ 1749.956282][T29788] [ 1749.956290][T29788] dump_stack_lvl+0x100/0x190 [ 1749.956315][T29788] should_fail_ex.cold+0x5/0xa [ 1749.956343][T29788] should_failslab+0xc2/0x120 [ 1749.956365][T29788] __kmalloc_cache_noprof+0x80/0x810 [ 1749.956383][T29788] ? trace_pid_list_alloc+0x2fe/0x480 [ 1749.956402][T29788] ? trace_pid_list_alloc+0x2fe/0x480 [ 1749.956415][T29788] trace_pid_list_alloc+0x2fe/0x480 [ 1749.956433][T29788] trace_pid_write+0x110/0x480 [ 1749.956453][T29788] ? __pfx_trace_pid_write+0x10/0x10 [ 1749.956474][T29788] ? update_last_data+0xaa/0x510 [ 1749.956503][T29788] event_pid_write.isra.0+0x1e4/0x7f0 [ 1749.956521][T29788] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1749.956543][T29788] vfs_write+0x2aa/0x1070 [ 1749.956562][T29788] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1749.956580][T29788] ? __pfx_vfs_write+0x10/0x10 [ 1749.956595][T29788] ? find_held_lock+0x2b/0x80 [ 1749.956613][T29788] ? __fget_files+0x215/0x3d0 [ 1749.956641][T29788] ? __fget_files+0x21f/0x3d0 [ 1749.956665][T29788] ksys_write+0x12a/0x250 [ 1749.956684][T29788] ? __pfx_ksys_write+0x10/0x10 [ 1749.956707][T29788] do_syscall_64+0xc9/0xf80 [ 1749.956726][T29788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.956742][T29788] RIP: 0033:0x7f937199bf79 [ 1749.956757][T29788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1749.956771][T29788] RSP: 002b:00007f9372790028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1749.956787][T29788] RAX: ffffffffffffffda RBX: 00007f9371c15fa0 RCX: 00007f937199bf79 [ 1749.956798][T29788] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1749.956808][T29788] RBP: 00007f9371a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1749.956817][T29788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1749.956827][T29788] R13: 00007f9371c16038 R14: 00007f9371c15fa0 R15: 00007ffe0ba6bdd8 [ 1749.956848][T29788] [ 1750.797409][T29795] FAULT_INJECTION: forcing a failure. [ 1750.797409][T29795] name failslab, interval 1, probability 0, space 0, times 0 [ 1750.810397][T29795] CPU: 1 UID: 0 PID: 29795 Comm: syz.2.3799 Not tainted syzkaller #0 PREEMPT(full) [ 1750.810420][T29795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1750.810430][T29795] Call Trace: [ 1750.810439][T29795] [ 1750.810446][T29795] dump_stack_lvl+0x100/0x190 [ 1750.810472][T29795] should_fail_ex.cold+0x5/0xa [ 1750.810508][T29795] should_failslab+0xc2/0x120 [ 1750.810530][T29795] ? trace_parser_get_init+0x30/0xc0 [ 1750.810549][T29795] __kmalloc_noprof+0xf6/0x9c0 [ 1750.810565][T29795] ? rcu_is_watching+0x12/0xc0 [ 1750.810586][T29795] ? trace_parser_get_init+0x30/0xc0 [ 1750.810603][T29795] trace_parser_get_init+0x30/0xc0 [ 1750.810623][T29795] trace_pid_write+0xf3/0x480 [ 1750.810642][T29795] ? __pfx_trace_pid_write+0x10/0x10 [ 1750.810662][T29795] ? update_last_data+0xaa/0x510 [ 1750.810690][T29795] event_pid_write.isra.0+0x1e4/0x7f0 [ 1750.810709][T29795] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1750.810731][T29795] vfs_write+0x2aa/0x1070 [ 1750.810749][T29795] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1750.810768][T29795] ? __pfx_vfs_write+0x10/0x10 [ 1750.810783][T29795] ? find_held_lock+0x2b/0x80 [ 1750.810800][T29795] ? __fget_files+0x215/0x3d0 [ 1750.810821][T29795] ? __fget_files+0x21f/0x3d0 [ 1750.810843][T29795] ksys_write+0x12a/0x250 [ 1750.810861][T29795] ? __pfx_ksys_write+0x10/0x10 [ 1750.810883][T29795] do_syscall_64+0xc9/0xf80 [ 1750.810902][T29795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.810919][T29795] RIP: 0033:0x7f869559bf79 [ 1750.810932][T29795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1750.810946][T29795] RSP: 002b:00007f8696439028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1750.810961][T29795] RAX: ffffffffffffffda RBX: 00007f8695815fa0 RCX: 00007f869559bf79 [ 1750.810972][T29795] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1750.810981][T29795] RBP: 00007f86956327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1750.810991][T29795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1750.811001][T29795] R13: 00007f8695816038 R14: 00007f8695815fa0 R15: 00007ffce84079f8 [ 1750.811021][T29795] [ 1753.529471][T29833] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3805'. [ 1757.382131][T29863] FAULT_INJECTION: forcing a failure. [ 1757.382131][T29863] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.427370][T29863] CPU: 0 UID: 0 PID: 29863 Comm: syz.0.3810 Not tainted syzkaller #0 PREEMPT(full) [ 1757.427394][T29863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1757.427404][T29863] Call Trace: [ 1757.427410][T29863] [ 1757.427417][T29863] dump_stack_lvl+0x100/0x190 [ 1757.427442][T29863] should_fail_ex.cold+0x5/0xa [ 1757.427470][T29863] should_failslab+0xc2/0x120 [ 1757.427492][T29863] __kmalloc_cache_noprof+0x80/0x810 [ 1757.427509][T29863] ? trace_pid_list_alloc+0x2fe/0x480 [ 1757.427527][T29863] ? trace_pid_list_alloc+0x2fe/0x480 [ 1757.427541][T29863] trace_pid_list_alloc+0x2fe/0x480 [ 1757.427558][T29863] trace_pid_write+0x110/0x480 [ 1757.427579][T29863] ? __pfx_trace_pid_write+0x10/0x10 [ 1757.427599][T29863] ? update_last_data+0xaa/0x510 [ 1757.427628][T29863] event_pid_write.isra.0+0x1e4/0x7f0 [ 1757.427646][T29863] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1757.427669][T29863] vfs_write+0x2aa/0x1070 [ 1757.427687][T29863] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1757.427705][T29863] ? __pfx_vfs_write+0x10/0x10 [ 1757.427721][T29863] ? find_held_lock+0x2b/0x80 [ 1757.427738][T29863] ? __fget_files+0x215/0x3d0 [ 1757.427759][T29863] ? __fget_files+0x21f/0x3d0 [ 1757.427781][T29863] ksys_write+0x12a/0x250 [ 1757.427799][T29863] ? __pfx_ksys_write+0x10/0x10 [ 1757.427822][T29863] do_syscall_64+0xc9/0xf80 [ 1757.427840][T29863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.427856][T29863] RIP: 0033:0x7f937199bf79 [ 1757.427869][T29863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1757.427893][T29863] RSP: 002b:00007f9372790028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1757.427909][T29863] RAX: ffffffffffffffda RBX: 00007f9371c15fa0 RCX: 00007f937199bf79 [ 1757.427920][T29863] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1757.427929][T29863] RBP: 00007f9371a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1757.427939][T29863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1757.427948][T29863] R13: 00007f9371c16038 R14: 00007f9371c15fa0 R15: 00007ffe0ba6bdd8 [ 1757.427969][T29863] [ 1758.145150][T29871] FAULT_INJECTION: forcing a failure. [ 1758.145150][T29871] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.158818][T29871] CPU: 0 UID: 0 PID: 29871 Comm: syz.0.3820 Not tainted syzkaller #0 PREEMPT(full) [ 1758.158860][T29871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1758.158878][T29871] Call Trace: [ 1758.158888][T29871] [ 1758.158899][T29871] dump_stack_lvl+0x100/0x190 [ 1758.158944][T29871] should_fail_ex.cold+0x5/0xa [ 1758.158993][T29871] should_failslab+0xc2/0x120 [ 1758.159023][T29871] __kmalloc_cache_noprof+0x80/0x810 [ 1758.159040][T29871] ? trace_pid_list_alloc+0x2fe/0x480 [ 1758.159059][T29871] ? trace_pid_list_alloc+0x2fe/0x480 [ 1758.159072][T29871] trace_pid_list_alloc+0x2fe/0x480 [ 1758.159089][T29871] trace_pid_write+0x110/0x480 [ 1758.159109][T29871] ? __pfx_trace_pid_write+0x10/0x10 [ 1758.159129][T29871] ? update_last_data+0xaa/0x510 [ 1758.159158][T29871] event_pid_write.isra.0+0x1e4/0x7f0 [ 1758.159177][T29871] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1758.159199][T29871] vfs_write+0x2aa/0x1070 [ 1758.159217][T29871] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1758.159235][T29871] ? __pfx_vfs_write+0x10/0x10 [ 1758.159251][T29871] ? find_held_lock+0x2b/0x80 [ 1758.159268][T29871] ? __fget_files+0x215/0x3d0 [ 1758.159290][T29871] ? __fget_files+0x21f/0x3d0 [ 1758.159313][T29871] ksys_write+0x12a/0x250 [ 1758.159330][T29871] ? __pfx_ksys_write+0x10/0x10 [ 1758.159353][T29871] do_syscall_64+0xc9/0xf80 [ 1758.159371][T29871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.159386][T29871] RIP: 0033:0x7f937199bf79 [ 1758.159400][T29871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1758.159415][T29871] RSP: 002b:00007f9372790028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1758.159431][T29871] RAX: ffffffffffffffda RBX: 00007f9371c15fa0 RCX: 00007f937199bf79 [ 1758.159441][T29871] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1758.159450][T29871] RBP: 00007f9371a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1758.159459][T29871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1758.159468][T29871] R13: 00007f9371c16038 R14: 00007f9371c15fa0 R15: 00007ffe0ba6bdd8 [ 1758.159488][T29871] [ 1762.710401][T29928] FAULT_INJECTION: forcing a failure. [ 1762.710401][T29928] name failslab, interval 1, probability 0, space 0, times 0 [ 1762.723321][T29928] CPU: 1 UID: 0 PID: 29928 Comm: syz.3.3822 Not tainted syzkaller #0 PREEMPT(full) [ 1762.723345][T29928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1762.723355][T29928] Call Trace: [ 1762.723361][T29928] [ 1762.723368][T29928] dump_stack_lvl+0x100/0x190 [ 1762.723394][T29928] should_fail_ex.cold+0x5/0xa [ 1762.723421][T29928] should_failslab+0xc2/0x120 [ 1762.723443][T29928] __kmalloc_cache_noprof+0x80/0x810 [ 1762.723460][T29928] ? trace_pid_list_alloc+0x2fe/0x480 [ 1762.723479][T29928] ? trace_pid_list_alloc+0x2fe/0x480 [ 1762.723493][T29928] trace_pid_list_alloc+0x2fe/0x480 [ 1762.723510][T29928] trace_pid_write+0x110/0x480 [ 1762.723529][T29928] ? __pfx_trace_pid_write+0x10/0x10 [ 1762.723549][T29928] ? update_last_data+0xaa/0x510 [ 1762.723577][T29928] event_pid_write.isra.0+0x1e4/0x7f0 [ 1762.723595][T29928] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1762.723625][T29928] vfs_write+0x2aa/0x1070 [ 1762.723645][T29928] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1762.723665][T29928] ? __pfx_vfs_write+0x10/0x10 [ 1762.723681][T29928] ? find_held_lock+0x2b/0x80 [ 1762.723700][T29928] ? __fget_files+0x215/0x3d0 [ 1762.723721][T29928] ? __fget_files+0x21f/0x3d0 [ 1762.723744][T29928] ksys_write+0x12a/0x250 [ 1762.723776][T29928] ? __pfx_ksys_write+0x10/0x10 [ 1762.723816][T29928] do_syscall_64+0xc9/0xf80 [ 1762.723850][T29928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.723877][T29928] RIP: 0033:0x7f45f539bf79 [ 1762.723891][T29928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1762.723906][T29928] RSP: 002b:00007f45f6234028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1762.723922][T29928] RAX: ffffffffffffffda RBX: 00007f45f5615fa0 RCX: 00007f45f539bf79 [ 1762.723934][T29928] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1762.723944][T29928] RBP: 00007f45f54327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1762.723953][T29928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1762.723963][T29928] R13: 00007f45f5616038 R14: 00007f45f5615fa0 R15: 00007fffd9db96c8 [ 1762.723984][T29928] [ 1770.090791][T30017] FAULT_INJECTION: forcing a failure. [ 1770.090791][T30017] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.150830][T30017] CPU: 0 UID: 0 PID: 30017 Comm: syz.2.3833 Not tainted syzkaller #0 PREEMPT(full) [ 1770.150855][T30017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1770.150868][T30017] Call Trace: [ 1770.150874][T30017] [ 1770.150881][T30017] dump_stack_lvl+0x100/0x190 [ 1770.150907][T30017] should_fail_ex.cold+0x5/0xa [ 1770.150934][T30017] should_failslab+0xc2/0x120 [ 1770.150956][T30017] __kmalloc_cache_noprof+0x80/0x810 [ 1770.150973][T30017] ? trace_pid_list_alloc+0x2fe/0x480 [ 1770.150992][T30017] ? trace_pid_list_alloc+0x2fe/0x480 [ 1770.151006][T30017] trace_pid_list_alloc+0x2fe/0x480 [ 1770.151023][T30017] trace_pid_write+0x110/0x480 [ 1770.151043][T30017] ? __pfx_trace_pid_write+0x10/0x10 [ 1770.151065][T30017] ? update_last_data+0xaa/0x510 [ 1770.151094][T30017] event_pid_write.isra.0+0x1e4/0x7f0 [ 1770.151112][T30017] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1770.151134][T30017] vfs_write+0x2aa/0x1070 [ 1770.151153][T30017] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1770.151172][T30017] ? __pfx_vfs_write+0x10/0x10 [ 1770.151188][T30017] ? find_held_lock+0x2b/0x80 [ 1770.151205][T30017] ? __fget_files+0x215/0x3d0 [ 1770.151226][T30017] ? __fget_files+0x21f/0x3d0 [ 1770.151249][T30017] ksys_write+0x12a/0x250 [ 1770.151266][T30017] ? __pfx_ksys_write+0x10/0x10 [ 1770.151289][T30017] do_syscall_64+0xc9/0xf80 [ 1770.151307][T30017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.151323][T30017] RIP: 0033:0x7f869559bf79 [ 1770.151337][T30017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1770.151352][T30017] RSP: 002b:00007f8696439028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1770.151368][T30017] RAX: ffffffffffffffda RBX: 00007f8695815fa0 RCX: 00007f869559bf79 [ 1770.151378][T30017] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1770.151387][T30017] RBP: 00007f86956327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.151397][T30017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1770.151405][T30017] R13: 00007f8695816038 R14: 00007f8695815fa0 R15: 00007ffce84079f8 [ 1770.151425][T30017] [ 1771.217067][T30026] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3835'. [ 1777.724500][T30085] FAULT_INJECTION: forcing a failure. [ 1777.724500][T30085] name failslab, interval 1, probability 0, space 0, times 0 [ 1777.956292][T30085] CPU: 0 UID: 0 PID: 30085 Comm: syz.1.3844 Not tainted syzkaller #0 PREEMPT(full) [ 1777.956332][T30085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1777.956350][T30085] Call Trace: [ 1777.956358][T30085] [ 1777.956372][T30085] dump_stack_lvl+0x100/0x190 [ 1777.956418][T30085] should_fail_ex.cold+0x5/0xa [ 1777.956470][T30085] should_failslab+0xc2/0x120 [ 1777.956514][T30085] __kmalloc_cache_noprof+0x80/0x810 [ 1777.956551][T30085] ? trace_pid_list_alloc+0x232/0x480 [ 1777.956587][T30085] ? trace_pid_list_alloc+0x232/0x480 [ 1777.956618][T30085] trace_pid_list_alloc+0x232/0x480 [ 1777.956651][T30085] trace_pid_write+0x110/0x480 [ 1777.956694][T30085] ? __pfx_trace_pid_write+0x10/0x10 [ 1777.956733][T30085] ? update_last_data+0xaa/0x510 [ 1777.956802][T30085] event_pid_write.isra.0+0x1e4/0x7f0 [ 1777.956842][T30085] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1777.956888][T30085] vfs_write+0x2aa/0x1070 [ 1777.956930][T30085] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1777.956966][T30085] ? __pfx_vfs_write+0x10/0x10 [ 1777.957005][T30085] ? find_held_lock+0x2b/0x80 [ 1777.957038][T30085] ? __fget_files+0x215/0x3d0 [ 1777.957081][T30085] ? __fget_files+0x21f/0x3d0 [ 1777.957127][T30085] ksys_write+0x12a/0x250 [ 1777.957163][T30085] ? __pfx_ksys_write+0x10/0x10 [ 1777.957210][T30085] do_syscall_64+0xc9/0xf80 [ 1777.957247][T30085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.957278][T30085] RIP: 0033:0x7f98c559bf79 [ 1777.957310][T30085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1777.957339][T30085] RSP: 002b:00007f98c650c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1777.957372][T30085] RAX: ffffffffffffffda RBX: 00007f98c5815fa0 RCX: 00007f98c559bf79 [ 1777.957392][T30085] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1777.957413][T30085] RBP: 00007f98c56327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1777.957433][T30085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1777.957452][T30085] R13: 00007f98c5816038 R14: 00007f98c5815fa0 R15: 00007ffc54b6cd38 [ 1777.957495][T30085] [ 1780.909867][T30121] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3848'. [ 1789.153680][T30217] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3862'. [ 1792.420817][T30259] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3868'. [ 1794.654395][T30292] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3872'. [ 1796.859213][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.872307][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1800.003722][T30356] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3882'. [ 1801.128951][T30377] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3885'. [ 1804.520573][T30425] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3891'. [ 1808.571024][T30480] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3899'. [ 1808.898422][T30488] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3900'. [ 1809.904467][T30499] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3901'. [ 1814.353576][T30536] FAULT_INJECTION: forcing a failure. [ 1814.353576][T30536] name failslab, interval 1, probability 0, space 0, times 0 [ 1814.366300][T30536] CPU: 1 UID: 0 PID: 30536 Comm: syz.2.3908 Not tainted syzkaller #0 PREEMPT(full) [ 1814.366324][T30536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1814.366334][T30536] Call Trace: [ 1814.366342][T30536] [ 1814.366349][T30536] dump_stack_lvl+0x100/0x190 [ 1814.366376][T30536] should_fail_ex.cold+0x5/0xa [ 1814.366404][T30536] should_failslab+0xc2/0x120 [ 1814.366425][T30536] ? trace_parser_get_init+0x30/0xc0 [ 1814.366443][T30536] __kmalloc_noprof+0xf6/0x9c0 [ 1814.366459][T30536] ? rcu_is_watching+0x12/0xc0 [ 1814.366480][T30536] ? trace_parser_get_init+0x30/0xc0 [ 1814.366496][T30536] trace_parser_get_init+0x30/0xc0 [ 1814.366515][T30536] trace_pid_write+0xf3/0x480 [ 1814.366535][T30536] ? __pfx_trace_pid_write+0x10/0x10 [ 1814.366555][T30536] ? update_last_data+0xaa/0x510 [ 1814.366583][T30536] event_pid_write.isra.0+0x1e4/0x7f0 [ 1814.366601][T30536] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1814.366623][T30536] vfs_write+0x2aa/0x1070 [ 1814.366642][T30536] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1814.366660][T30536] ? __pfx_vfs_write+0x10/0x10 [ 1814.366676][T30536] ? find_held_lock+0x2b/0x80 [ 1814.366693][T30536] ? __fget_files+0x215/0x3d0 [ 1814.366714][T30536] ? __fget_files+0x21f/0x3d0 [ 1814.366737][T30536] ksys_write+0x12a/0x250 [ 1814.366754][T30536] ? __pfx_ksys_write+0x10/0x10 [ 1814.366777][T30536] do_syscall_64+0xc9/0xf80 [ 1814.366796][T30536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1814.366812][T30536] RIP: 0033:0x7f869559bf79 [ 1814.366826][T30536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1814.366840][T30536] RSP: 002b:00007f8696439028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1814.366855][T30536] RAX: ffffffffffffffda RBX: 00007f8695815fa0 RCX: 00007f869559bf79 [ 1814.366866][T30536] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1814.366875][T30536] RBP: 00007f86956327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1814.366884][T30536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1814.366894][T30536] R13: 00007f8695816038 R14: 00007f8695815fa0 R15: 00007ffce84079f8 [ 1814.366915][T30536] [ 1815.038983][T30545] FAULT_INJECTION: forcing a failure. [ 1815.038983][T30545] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.051809][T30545] CPU: 0 UID: 0 PID: 30545 Comm: syz.3.3910 Not tainted syzkaller #0 PREEMPT(full) [ 1815.051832][T30545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1815.051842][T30545] Call Trace: [ 1815.051850][T30545] [ 1815.051858][T30545] dump_stack_lvl+0x100/0x190 [ 1815.051884][T30545] should_fail_ex.cold+0x5/0xa [ 1815.051912][T30545] should_failslab+0xc2/0x120 [ 1815.051934][T30545] __kmalloc_cache_noprof+0x80/0x810 [ 1815.051951][T30545] ? trace_pid_list_alloc+0x232/0x480 [ 1815.051970][T30545] ? trace_pid_list_alloc+0x232/0x480 [ 1815.051984][T30545] trace_pid_list_alloc+0x232/0x480 [ 1815.052003][T30545] trace_pid_write+0x110/0x480 [ 1815.052023][T30545] ? __pfx_trace_pid_write+0x10/0x10 [ 1815.052043][T30545] ? update_last_data+0xaa/0x510 [ 1815.052072][T30545] event_pid_write.isra.0+0x1e4/0x7f0 [ 1815.052091][T30545] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1815.052113][T30545] vfs_write+0x2aa/0x1070 [ 1815.052132][T30545] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1815.052150][T30545] ? __pfx_vfs_write+0x10/0x10 [ 1815.052166][T30545] ? find_held_lock+0x2b/0x80 [ 1815.052184][T30545] ? __fget_files+0x215/0x3d0 [ 1815.052205][T30545] ? __fget_files+0x21f/0x3d0 [ 1815.052227][T30545] ksys_write+0x12a/0x250 [ 1815.052245][T30545] ? __pfx_ksys_write+0x10/0x10 [ 1815.052268][T30545] do_syscall_64+0xc9/0xf80 [ 1815.052295][T30545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.052312][T30545] RIP: 0033:0x7f45f539bf79 [ 1815.052325][T30545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.052341][T30545] RSP: 002b:00007f45f6234028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1815.052356][T30545] RAX: ffffffffffffffda RBX: 00007f45f5615fa0 RCX: 00007f45f539bf79 [ 1815.052366][T30545] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1815.052375][T30545] RBP: 00007f45f54327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1815.052384][T30545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1815.052394][T30545] R13: 00007f45f5616038 R14: 00007f45f5615fa0 R15: 00007fffd9db96c8 [ 1815.052415][T30545] [ 1828.711736][T30712] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3932'. [ 1829.532012][T30727] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3934'. [ 1831.774598][T30751] FAULT_INJECTION: forcing a failure. [ 1831.774598][T30751] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.821556][T30751] CPU: 1 UID: 0 PID: 30751 Comm: syz.2.3938 Not tainted syzkaller #0 PREEMPT(full) [ 1831.821600][T30751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1831.821619][T30751] Call Trace: [ 1831.821630][T30751] [ 1831.821641][T30751] dump_stack_lvl+0x100/0x190 [ 1831.821687][T30751] should_fail_ex.cold+0x5/0xa [ 1831.821743][T30751] should_failslab+0xc2/0x120 [ 1831.821786][T30751] __kmalloc_cache_noprof+0x80/0x810 [ 1831.821821][T30751] ? trace_pid_list_alloc+0x2fe/0x480 [ 1831.821857][T30751] ? trace_pid_list_alloc+0x2fe/0x480 [ 1831.821889][T30751] trace_pid_list_alloc+0x2fe/0x480 [ 1831.821924][T30751] trace_pid_write+0x110/0x480 [ 1831.821965][T30751] ? __pfx_trace_pid_write+0x10/0x10 [ 1831.822005][T30751] ? update_last_data+0xaa/0x510 [ 1831.822060][T30751] event_pid_write.isra.0+0x1e4/0x7f0 [ 1831.822096][T30751] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1831.822139][T30751] vfs_write+0x2aa/0x1070 [ 1831.822175][T30751] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1831.822210][T30751] ? __pfx_vfs_write+0x10/0x10 [ 1831.822242][T30751] ? find_held_lock+0x2b/0x80 [ 1831.822276][T30751] ? __fget_files+0x215/0x3d0 [ 1831.822318][T30751] ? __fget_files+0x21f/0x3d0 [ 1831.822361][T30751] ksys_write+0x12a/0x250 [ 1831.822394][T30751] ? __pfx_ksys_write+0x10/0x10 [ 1831.822447][T30751] do_syscall_64+0xc9/0xf80 [ 1831.822490][T30751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.822520][T30751] RIP: 0033:0x7f869559bf79 [ 1831.822545][T30751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1831.822574][T30751] RSP: 002b:00007f8696439028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1831.822603][T30751] RAX: ffffffffffffffda RBX: 00007f8695815fa0 RCX: 00007f869559bf79 [ 1831.822627][T30751] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1831.822644][T30751] RBP: 00007f86956327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1831.822662][T30751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1831.822680][T30751] R13: 00007f8695816038 R14: 00007f8695815fa0 R15: 00007ffce84079f8 [ 1831.822720][T30751] [ 1837.977046][T30829] FAULT_INJECTION: forcing a failure. [ 1837.977046][T30829] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.108523][T30829] CPU: 0 UID: 0 PID: 30829 Comm: syz.2.3949 Not tainted syzkaller #0 PREEMPT(full) [ 1838.108548][T30829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1838.108558][T30829] Call Trace: [ 1838.108564][T30829] [ 1838.108571][T30829] dump_stack_lvl+0x100/0x190 [ 1838.108598][T30829] should_fail_ex.cold+0x5/0xa [ 1838.108625][T30829] should_failslab+0xc2/0x120 [ 1838.108647][T30829] __kmalloc_cache_noprof+0x80/0x810 [ 1838.108664][T30829] ? trace_pid_list_alloc+0x232/0x480 [ 1838.108683][T30829] ? trace_pid_list_alloc+0x232/0x480 [ 1838.108697][T30829] trace_pid_list_alloc+0x232/0x480 [ 1838.108714][T30829] trace_pid_write+0x110/0x480 [ 1838.108734][T30829] ? __pfx_trace_pid_write+0x10/0x10 [ 1838.108756][T30829] ? update_last_data+0xaa/0x510 [ 1838.108786][T30829] event_pid_write.isra.0+0x1e4/0x7f0 [ 1838.108804][T30829] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1838.108826][T30829] vfs_write+0x2aa/0x1070 [ 1838.108845][T30829] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1838.108882][T30829] ? __pfx_vfs_write+0x10/0x10 [ 1838.108899][T30829] ? find_held_lock+0x2b/0x80 [ 1838.108917][T30829] ? __fget_files+0x215/0x3d0 [ 1838.108939][T30829] ? __fget_files+0x21f/0x3d0 [ 1838.108963][T30829] ksys_write+0x12a/0x250 [ 1838.108980][T30829] ? __pfx_ksys_write+0x10/0x10 [ 1838.109004][T30829] do_syscall_64+0xc9/0xf80 [ 1838.109028][T30829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.109044][T30829] RIP: 0033:0x7f869559bf79 [ 1838.109058][T30829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1838.109074][T30829] RSP: 002b:00007f8696439028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1838.109091][T30829] RAX: ffffffffffffffda RBX: 00007f8695815fa0 RCX: 00007f869559bf79 [ 1838.109101][T30829] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1838.109110][T30829] RBP: 00007f86956327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.109119][T30829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1838.109129][T30829] R13: 00007f8695816038 R14: 00007f8695815fa0 R15: 00007ffce84079f8 [ 1838.109151][T30829] [ 1839.458881][T30840] FAULT_INJECTION: forcing a failure. [ 1839.458881][T30840] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.471754][T30840] CPU: 1 UID: 0 PID: 30840 Comm: syz.3.3952 Not tainted syzkaller #0 PREEMPT(full) [ 1839.471778][T30840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1839.471788][T30840] Call Trace: [ 1839.471797][T30840] [ 1839.471804][T30840] dump_stack_lvl+0x100/0x190 [ 1839.471830][T30840] should_fail_ex.cold+0x5/0xa [ 1839.471857][T30840] should_failslab+0xc2/0x120 [ 1839.471879][T30840] ? trace_parser_get_init+0x30/0xc0 [ 1839.471904][T30840] __kmalloc_noprof+0xf6/0x9c0 [ 1839.471920][T30840] ? rcu_is_watching+0x12/0xc0 [ 1839.471941][T30840] ? trace_parser_get_init+0x30/0xc0 [ 1839.471958][T30840] trace_parser_get_init+0x30/0xc0 [ 1839.471978][T30840] trace_pid_write+0xf3/0x480 [ 1839.471998][T30840] ? __pfx_trace_pid_write+0x10/0x10 [ 1839.472019][T30840] ? update_last_data+0xaa/0x510 [ 1839.472047][T30840] event_pid_write.isra.0+0x1e4/0x7f0 [ 1839.472065][T30840] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1839.472088][T30840] vfs_write+0x2aa/0x1070 [ 1839.472106][T30840] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1839.472125][T30840] ? __pfx_vfs_write+0x10/0x10 [ 1839.472140][T30840] ? find_held_lock+0x2b/0x80 [ 1839.472157][T30840] ? __fget_files+0x215/0x3d0 [ 1839.472178][T30840] ? __fget_files+0x21f/0x3d0 [ 1839.472202][T30840] ksys_write+0x12a/0x250 [ 1839.472219][T30840] ? __pfx_ksys_write+0x10/0x10 [ 1839.472242][T30840] do_syscall_64+0xc9/0xf80 [ 1839.472260][T30840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.472275][T30840] RIP: 0033:0x7f45f539bf79 [ 1839.472289][T30840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1839.472303][T30840] RSP: 002b:00007f45f6234028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1839.472319][T30840] RAX: ffffffffffffffda RBX: 00007f45f5615fa0 RCX: 00007f45f539bf79 [ 1839.472329][T30840] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1839.472338][T30840] RBP: 00007f45f54327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1839.472348][T30840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1839.472357][T30840] R13: 00007f45f5616038 R14: 00007f45f5615fa0 R15: 00007fffd9db96c8 [ 1839.472378][T30840] [ 1840.369303][T30853] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3953'. [ 1840.640649][T30859] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3955'. [ 1843.322497][T30890] FAULT_INJECTION: forcing a failure. [ 1843.322497][T30890] name failslab, interval 1, probability 0, space 0, times 0 [ 1843.357392][T30890] CPU: 1 UID: 0 PID: 30890 Comm: syz.2.3959 Not tainted syzkaller #0 PREEMPT(full) [ 1843.357433][T30890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1843.357450][T30890] Call Trace: [ 1843.357460][T30890] [ 1843.357469][T30890] dump_stack_lvl+0x100/0x190 [ 1843.357512][T30890] should_fail_ex.cold+0x5/0xa [ 1843.357559][T30890] should_failslab+0xc2/0x120 [ 1843.357600][T30890] __kmalloc_cache_noprof+0x80/0x810 [ 1843.357630][T30890] ? trace_pid_list_alloc+0x2fe/0x480 [ 1843.357662][T30890] ? trace_pid_list_alloc+0x2fe/0x480 [ 1843.357690][T30890] trace_pid_list_alloc+0x2fe/0x480 [ 1843.357720][T30890] trace_pid_write+0x110/0x480 [ 1843.357756][T30890] ? __pfx_trace_pid_write+0x10/0x10 [ 1843.357795][T30890] ? update_last_data+0xaa/0x510 [ 1843.357852][T30890] event_pid_write.isra.0+0x1e4/0x7f0 [ 1843.357888][T30890] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1843.357932][T30890] vfs_write+0x2aa/0x1070 [ 1843.357968][T30890] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1843.358002][T30890] ? __pfx_vfs_write+0x10/0x10 [ 1843.358031][T30890] ? find_held_lock+0x2b/0x80 [ 1843.358062][T30890] ? __fget_files+0x215/0x3d0 [ 1843.358104][T30890] ? __fget_files+0x21f/0x3d0 [ 1843.358151][T30890] ksys_write+0x12a/0x250 [ 1843.358183][T30890] ? __pfx_ksys_write+0x10/0x10 [ 1843.358228][T30890] do_syscall_64+0xc9/0xf80 [ 1843.358275][T30890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.358307][T30890] RIP: 0033:0x7f869559bf79 [ 1843.358333][T30890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1843.358365][T30890] RSP: 002b:00007f8696439028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1843.358394][T30890] RAX: ffffffffffffffda RBX: 00007f8695815fa0 RCX: 00007f869559bf79 [ 1843.358414][T30890] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1843.358431][T30890] RBP: 00007f86956327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1843.358450][T30890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1843.358468][T30890] R13: 00007f8695816038 R14: 00007f8695815fa0 R15: 00007ffce84079f8 [ 1843.358508][T30890] [ 1846.922320][T30940] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3965'. [ 1848.762478][T30973] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3977'. [ 1853.333939][T31015] FAULT_INJECTION: forcing a failure. [ 1853.333939][T31015] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.414980][T31015] CPU: 1 UID: 0 PID: 31015 Comm: syz.1.3974 Not tainted syzkaller #0 PREEMPT(full) [ 1853.415004][T31015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1853.415015][T31015] Call Trace: [ 1853.415020][T31015] [ 1853.415027][T31015] dump_stack_lvl+0x100/0x190 [ 1853.415053][T31015] should_fail_ex.cold+0x5/0xa [ 1853.415080][T31015] should_failslab+0xc2/0x120 [ 1853.415102][T31015] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 1853.415123][T31015] ? __alloc_skb+0x156/0x410 [ 1853.415145][T31015] ? __alloc_skb+0x156/0x410 [ 1853.415161][T31015] __alloc_skb+0x156/0x410 [ 1853.415177][T31015] ? __alloc_skb+0x35d/0x410 [ 1853.415194][T31015] ? __pfx___alloc_skb+0x10/0x10 [ 1853.415212][T31015] ? netlink_autobind.isra.0+0xc0/0x370 [ 1853.415238][T31015] netlink_alloc_large_skb+0x69/0x150 [ 1853.415260][T31015] netlink_sendmsg+0x680/0xda0 [ 1853.415284][T31015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1853.415307][T31015] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1853.415326][T31015] __sys_sendto+0x4aa/0x520 [ 1853.415346][T31015] ? __pfx___sys_sendto+0x10/0x10 [ 1853.415370][T31015] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1853.415406][T31015] __x64_sys_sendto+0xe0/0x1c0 [ 1853.415424][T31015] ? do_syscall_64+0x94/0xf80 [ 1853.415439][T31015] ? lockdep_hardirqs_on+0x78/0x100 [ 1853.415454][T31015] do_syscall_64+0xc9/0xf80 [ 1853.415471][T31015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.415486][T31015] RIP: 0033:0x7f98c555c84e [ 1853.415500][T31015] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1853.415514][T31015] RSP: 002b:00007f98c650ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1853.415530][T31015] RAX: ffffffffffffffda RBX: 00007f98c650c6c0 RCX: 00007f98c555c84e [ 1853.415550][T31015] RDX: 000000000000001c RSI: 00007f98c650b000 RDI: 0000000000000005 [ 1853.415559][T31015] RBP: 0000000000000000 R08: 00007f98c650af04 R09: 000000000000000c [ 1853.415569][T31015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1853.415579][T31015] R13: 00007f98c650af58 R14: 00007f98c650b000 R15: 0000000000000000 [ 1853.415600][T31015] [ 1858.299950][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.306311][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1886.190331][T31397] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4025'. [ 1895.294987][T31493] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1902.564571][T31586] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4050'. [ 1903.749312][T31593] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4051'. [ 1910.184928][T31677] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4063'. [ 1910.665854][T31686] FAULT_INJECTION: forcing a failure. [ 1910.665854][T31686] name failslab, interval 1, probability 0, space 0, times 0 [ 1910.704631][T31686] CPU: 1 UID: 0 PID: 31686 Comm: syz.3.4066 Not tainted syzkaller #0 PREEMPT(full) [ 1910.704671][T31686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1910.704689][T31686] Call Trace: [ 1910.704699][T31686] [ 1910.704710][T31686] dump_stack_lvl+0x100/0x190 [ 1910.704754][T31686] should_fail_ex.cold+0x5/0xa [ 1910.704806][T31686] should_failslab+0xc2/0x120 [ 1910.704851][T31686] ? trace_parser_get_init+0x30/0xc0 [ 1910.704885][T31686] __kmalloc_noprof+0xf6/0x9c0 [ 1910.704916][T31686] ? rcu_is_watching+0x12/0xc0 [ 1910.704954][T31686] ? trace_parser_get_init+0x30/0xc0 [ 1910.704986][T31686] trace_parser_get_init+0x30/0xc0 [ 1910.705021][T31686] trace_pid_write+0xf3/0x480 [ 1910.705059][T31686] ? __pfx_trace_pid_write+0x10/0x10 [ 1910.705099][T31686] ? update_last_data+0xaa/0x510 [ 1910.705155][T31686] event_pid_write.isra.0+0x1e4/0x7f0 [ 1910.705190][T31686] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1910.705233][T31686] vfs_write+0x2aa/0x1070 [ 1910.705267][T31686] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1910.705303][T31686] ? __pfx_vfs_write+0x10/0x10 [ 1910.705334][T31686] ? find_held_lock+0x2b/0x80 [ 1910.705369][T31686] ? __fget_files+0x215/0x3d0 [ 1910.705410][T31686] ? __fget_files+0x21f/0x3d0 [ 1910.705455][T31686] ksys_write+0x12a/0x250 [ 1910.705489][T31686] ? __pfx_ksys_write+0x10/0x10 [ 1910.705543][T31686] do_syscall_64+0xc9/0xf80 [ 1910.705579][T31686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.705609][T31686] RIP: 0033:0x7f45f539bf79 [ 1910.705633][T31686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1910.705662][T31686] RSP: 002b:00007f45f6234028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1910.705690][T31686] RAX: ffffffffffffffda RBX: 00007f45f5615fa0 RCX: 00007f45f539bf79 [ 1910.705712][T31686] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1910.705731][T31686] RBP: 00007f45f54327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1910.705749][T31686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1910.705766][T31686] R13: 00007f45f5616038 R14: 00007f45f5615fa0 R15: 00007fffd9db96c8 [ 1910.705807][T31686] [ 1919.145175][T31804] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4080'. [ 1919.744164][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.778354][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1924.723646][T31860] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4088'. [ 1926.066608][T31878] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4089'. [ 1926.359016][T31881] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4092'. [ 1930.928809][T31942] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4101'. [ 1931.684630][T31950] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4110'. [ 1939.044800][T32039] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4116'. [ 1940.171808][T32046] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4118'. [ 1945.584804][T32111] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4126'. [ 1947.629325][T32138] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4129'. [ 1953.501404][T32207] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4138'. [ 1954.887109][T32217] netlink: 322 bytes leftover after parsing attributes in process `syz.1.4140'. [ 1960.246779][T32286] netlink: 322 bytes leftover after parsing attributes in process `syz.0.4150'. [ 1961.078800][T32295] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4153'. [ 1965.766914][T32352] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4160'. [ 1967.740864][T32366] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4162'. [ 1970.576577][T32401] FAULT_INJECTION: forcing a failure. [ 1970.576577][T32401] name failslab, interval 1, probability 0, space 0, times 0 [ 1970.592820][T32401] CPU: 1 UID: 0 PID: 32401 Comm: syz.1.4167 Not tainted syzkaller #0 PREEMPT(full) [ 1970.592863][T32401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1970.592882][T32401] Call Trace: [ 1970.592892][T32401] [ 1970.592904][T32401] dump_stack_lvl+0x100/0x190 [ 1970.592953][T32401] should_fail_ex.cold+0x5/0xa [ 1970.593006][T32401] should_failslab+0xc2/0x120 [ 1970.593047][T32401] ? trace_parser_get_init+0x30/0xc0 [ 1970.593081][T32401] __kmalloc_noprof+0xf6/0x9c0 [ 1970.593111][T32401] ? rcu_is_watching+0x12/0xc0 [ 1970.593149][T32401] ? trace_parser_get_init+0x30/0xc0 [ 1970.593181][T32401] trace_parser_get_init+0x30/0xc0 [ 1970.593216][T32401] trace_pid_write+0xf3/0x480 [ 1970.593252][T32401] ? __pfx_trace_pid_write+0x10/0x10 [ 1970.593291][T32401] ? update_last_data+0xaa/0x510 [ 1970.593347][T32401] event_pid_write.isra.0+0x1e4/0x7f0 [ 1970.593383][T32401] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1970.593426][T32401] vfs_write+0x2aa/0x1070 [ 1970.593463][T32401] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1970.593509][T32401] ? __pfx_vfs_write+0x10/0x10 [ 1970.593540][T32401] ? find_held_lock+0x2b/0x80 [ 1970.593576][T32401] ? __fget_files+0x215/0x3d0 [ 1970.593618][T32401] ? __fget_files+0x21f/0x3d0 [ 1970.593664][T32401] ksys_write+0x12a/0x250 [ 1970.593694][T32401] ? __pfx_ksys_write+0x10/0x10 [ 1970.593734][T32401] do_syscall_64+0xc9/0xf80 [ 1970.593769][T32401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1970.593799][T32401] RIP: 0033:0x7f98c559bf79 [ 1970.593821][T32401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1970.593850][T32401] RSP: 002b:00007f98c650c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1970.593878][T32401] RAX: ffffffffffffffda RBX: 00007f98c5815fa0 RCX: 00007f98c559bf79 [ 1970.593898][T32401] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1970.593916][T32401] RBP: 00007f98c56327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1970.593934][T32401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1970.593951][T32401] R13: 00007f98c5816038 R14: 00007f98c5815fa0 R15: 00007ffc54b6cd38 [ 1970.593992][T32401] [ 1971.644170][T32423] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4171'. [ 1973.765889][T32448] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4176'. [ 1977.597046][T32497] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4181'. [ 1980.651449][T32535] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4186'. [ 1981.204009][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.224655][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2008.064237][ T384] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4228'. [ 2028.297964][ T621] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4259'. [ 2042.410673][ T791] FAULT_INJECTION: forcing a failure. [ 2042.410673][ T791] name failslab, interval 1, probability 0, space 0, times 0 [ 2042.464875][ T791] CPU: 0 UID: 0 PID: 791 Comm: syz.1.4284 Not tainted syzkaller #0 PREEMPT(full) [ 2042.464918][ T791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2042.464936][ T791] Call Trace: [ 2042.464946][ T791] [ 2042.464957][ T791] dump_stack_lvl+0x100/0x190 [ 2042.465001][ T791] should_fail_ex.cold+0x5/0xa [ 2042.465042][ T791] should_failslab+0xc2/0x120 [ 2042.465079][ T791] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 2042.465119][ T791] ? __alloc_skb+0x156/0x410 [ 2042.465159][ T791] ? __alloc_skb+0x156/0x410 [ 2042.465191][ T791] __alloc_skb+0x156/0x410 [ 2042.465222][ T791] ? __alloc_skb+0x35d/0x410 [ 2042.465254][ T791] ? __pfx___alloc_skb+0x10/0x10 [ 2042.465288][ T791] ? netlink_autobind.isra.0+0xc0/0x370 [ 2042.465339][ T791] netlink_alloc_large_skb+0x69/0x150 [ 2042.465394][ T791] netlink_sendmsg+0x680/0xda0 [ 2042.465434][ T791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2042.465475][ T791] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2042.465511][ T791] __sys_sendto+0x4aa/0x520 [ 2042.465550][ T791] ? __pfx___sys_sendto+0x10/0x10 [ 2042.465597][ T791] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 2042.465665][ T791] __x64_sys_sendto+0xe0/0x1c0 [ 2042.465699][ T791] ? do_syscall_64+0x94/0xf80 [ 2042.465729][ T791] ? lockdep_hardirqs_on+0x78/0x100 [ 2042.465758][ T791] do_syscall_64+0xc9/0xf80 [ 2042.465786][ T791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2042.465815][ T791] RIP: 0033:0x7f98c555c84e [ 2042.465847][ T791] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2042.465881][ T791] RSP: 002b:00007f98c650ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2042.465910][ T791] RAX: ffffffffffffffda RBX: 00007f98c650c6c0 RCX: 00007f98c555c84e [ 2042.465929][ T791] RDX: 000000000000001c RSI: 00007f98c650b000 RDI: 0000000000000005 [ 2042.465947][ T791] RBP: 0000000000000000 R08: 00007f98c650af04 R09: 000000000000000c [ 2042.465964][ T791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2042.465981][ T791] R13: 00007f98c650af58 R14: 00007f98c650b000 R15: 0000000000000000 [ 2042.466017][ T791] [ 2042.987404][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.998151][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2047.880353][ T865] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4291'. [ 2060.215318][ T1042] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4313'. [ 2061.408026][ T1062] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4315'. [ 2066.204522][ T1119] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4324'. [ 2070.835366][ T1185] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4333'. [ 2081.373931][ T1342] FAULT_INJECTION: forcing a failure. [ 2081.373931][ T1342] name failslab, interval 1, probability 0, space 0, times 0 [ 2081.401980][ T1342] CPU: 0 UID: 0 PID: 1342 Comm: syz.1.4353 Not tainted syzkaller #0 PREEMPT(full) [ 2081.402002][ T1342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2081.402012][ T1342] Call Trace: [ 2081.402019][ T1342] [ 2081.402026][ T1342] dump_stack_lvl+0x100/0x190 [ 2081.402052][ T1342] should_fail_ex.cold+0x5/0xa [ 2081.402079][ T1342] should_failslab+0xc2/0x120 [ 2081.402101][ T1342] ? trace_parser_get_init+0x30/0xc0 [ 2081.402118][ T1342] __kmalloc_noprof+0xf6/0x9c0 [ 2081.402134][ T1342] ? rcu_is_watching+0x12/0xc0 [ 2081.402155][ T1342] ? trace_parser_get_init+0x30/0xc0 [ 2081.402172][ T1342] trace_parser_get_init+0x30/0xc0 [ 2081.402191][ T1342] trace_pid_write+0xf3/0x480 [ 2081.402210][ T1342] ? __pfx_trace_pid_write+0x10/0x10 [ 2081.402230][ T1342] ? update_last_data+0xaa/0x510 [ 2081.402259][ T1342] event_pid_write.isra.0+0x1e4/0x7f0 [ 2081.402277][ T1342] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 2081.402300][ T1342] vfs_write+0x2aa/0x1070 [ 2081.402318][ T1342] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 2081.402336][ T1342] ? __pfx_vfs_write+0x10/0x10 [ 2081.402352][ T1342] ? find_held_lock+0x2b/0x80 [ 2081.402369][ T1342] ? __fget_files+0x215/0x3d0 [ 2081.402390][ T1342] ? __fget_files+0x21f/0x3d0 [ 2081.402412][ T1342] ksys_write+0x12a/0x250 [ 2081.402430][ T1342] ? __pfx_ksys_write+0x10/0x10 [ 2081.402453][ T1342] do_syscall_64+0xc9/0xf80 [ 2081.402471][ T1342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2081.402486][ T1342] RIP: 0033:0x7f98c559bf79 [ 2081.402499][ T1342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2081.402514][ T1342] RSP: 002b:00007f98c650c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2081.402529][ T1342] RAX: ffffffffffffffda RBX: 00007f98c5815fa0 RCX: 00007f98c559bf79 [ 2081.402540][ T1342] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 2081.402549][ T1342] RBP: 00007f98c56327e0 R08: 0000000000000000 R09: 0000000000000000 [ 2081.402558][ T1342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2081.402566][ T1342] R13: 00007f98c5816038 R14: 00007f98c5815fa0 R15: 00007ffc54b6cd38 [ 2081.402586][ T1342] [ 2094.021359][ T1493] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4374'. [ 2103.575273][ T1599] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4390'. [ 2104.069365][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.084430][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2106.271107][ T1637] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4396'. [ 2120.933264][ T1816] FAULT_INJECTION: forcing a failure. [ 2120.933264][ T1816] name failslab, interval 1, probability 0, space 0, times 0 [ 2120.995235][ T1816] CPU: 1 UID: 0 PID: 1816 Comm: syz.1.4421 Not tainted syzkaller #0 PREEMPT(full) [ 2120.995261][ T1816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2120.995273][ T1816] Call Trace: [ 2120.995278][ T1816] [ 2120.995285][ T1816] dump_stack_lvl+0x100/0x190 [ 2120.995321][ T1816] should_fail_ex.cold+0x5/0xa [ 2120.995349][ T1816] should_failslab+0xc2/0x120 [ 2120.995371][ T1816] ? trace_parser_get_init+0x30/0xc0 [ 2120.995388][ T1816] __kmalloc_noprof+0xf6/0x9c0 [ 2120.995405][ T1816] ? rcu_is_watching+0x12/0xc0 [ 2120.995426][ T1816] ? trace_parser_get_init+0x30/0xc0 [ 2120.995444][ T1816] trace_parser_get_init+0x30/0xc0 [ 2120.995468][ T1816] trace_pid_write+0xf3/0x480 [ 2120.995489][ T1816] ? __pfx_trace_pid_write+0x10/0x10 [ 2120.995510][ T1816] ? update_last_data+0xaa/0x510 [ 2120.995540][ T1816] event_pid_write.isra.0+0x1e4/0x7f0 [ 2120.995558][ T1816] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 2120.995581][ T1816] vfs_write+0x2aa/0x1070 [ 2120.995600][ T1816] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 2120.995618][ T1816] ? __pfx_vfs_write+0x10/0x10 [ 2120.995633][ T1816] ? find_held_lock+0x2b/0x80 [ 2120.995651][ T1816] ? __fget_files+0x215/0x3d0 [ 2120.995672][ T1816] ? __fget_files+0x21f/0x3d0 [ 2120.995694][ T1816] ksys_write+0x12a/0x250 [ 2120.995716][ T1816] ? __pfx_ksys_write+0x10/0x10 [ 2120.995739][ T1816] do_syscall_64+0xc9/0xf80 [ 2120.995758][ T1816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2120.995773][ T1816] RIP: 0033:0x7f98c559bf79 [ 2120.995791][ T1816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2120.995805][ T1816] RSP: 002b:00007f98c650c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2120.995822][ T1816] RAX: ffffffffffffffda RBX: 00007f98c5815fa0 RCX: 00007f98c559bf79 [ 2120.995832][ T1816] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 2120.995842][ T1816] RBP: 00007f98c56327e0 R08: 0000000000000000 R09: 0000000000000000 [ 2120.995851][ T1816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2120.995860][ T1816] R13: 00007f98c5816038 R14: 00007f98c5815fa0 R15: 00007ffc54b6cd38 [ 2120.995882][ T1816] [ 2121.828928][ T1822] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4422'. [ 2128.373318][ T1884] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4431'. [ 2129.528254][ T1896] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4432'. [ 2138.161657][ T1978] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4445'. [ 2145.637679][ T2078] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4461'. [ 2150.077340][ T2123] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4468'. [ 2150.661664][ T2132] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4469'. [ 2153.439281][ T2180] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4476'. [ 2163.525200][ T2274] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4488'. [ 2165.497199][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.503624][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2173.661888][ T2398] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4504'. [ 2182.792373][ T2528] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4522'. [ 2190.674424][ T2642] FAULT_INJECTION: forcing a failure. [ 2190.674424][ T2642] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.851180][ T2642] CPU: 0 UID: 0 PID: 2642 Comm: syz.0.4538 Not tainted syzkaller #0 PREEMPT(full) [ 2190.851223][ T2642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2190.851247][ T2642] Call Trace: [ 2190.851256][ T2642] [ 2190.851266][ T2642] dump_stack_lvl+0x100/0x190 [ 2190.851307][ T2642] should_fail_ex.cold+0x5/0xa [ 2190.851355][ T2642] should_failslab+0xc2/0x120 [ 2190.851393][ T2642] ? trace_parser_get_init+0x30/0xc0 [ 2190.851422][ T2642] __kmalloc_noprof+0xf6/0x9c0 [ 2190.851449][ T2642] ? rcu_is_watching+0x12/0xc0 [ 2190.851484][ T2642] ? trace_parser_get_init+0x30/0xc0 [ 2190.851521][ T2642] trace_parser_get_init+0x30/0xc0 [ 2190.851555][ T2642] trace_pid_write+0xf3/0x480 [ 2190.851590][ T2642] ? __pfx_trace_pid_write+0x10/0x10 [ 2190.851627][ T2642] ? update_last_data+0xaa/0x510 [ 2190.851680][ T2642] event_pid_write.isra.0+0x1e4/0x7f0 [ 2190.851711][ T2642] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 2190.851750][ T2642] vfs_write+0x2aa/0x1070 [ 2190.851782][ T2642] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 2190.851814][ T2642] ? __pfx_vfs_write+0x10/0x10 [ 2190.851842][ T2642] ? find_held_lock+0x2b/0x80 [ 2190.851873][ T2642] ? __fget_files+0x215/0x3d0 [ 2190.851909][ T2642] ? __fget_files+0x21f/0x3d0 [ 2190.851950][ T2642] ksys_write+0x12a/0x250 [ 2190.851979][ T2642] ? __pfx_ksys_write+0x10/0x10 [ 2190.852020][ T2642] do_syscall_64+0xc9/0xf80 [ 2190.852051][ T2642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2190.852077][ T2642] RIP: 0033:0x7f937199bf79 [ 2190.852099][ T2642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2190.852126][ T2642] RSP: 002b:00007f9372790028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2190.852156][ T2642] RAX: ffffffffffffffda RBX: 00007f9371c15fa0 RCX: 00007f937199bf79 [ 2190.852174][ T2642] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 2190.852192][ T2642] RBP: 00007f9371a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 2190.852208][ T2642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2190.852223][ T2642] R13: 00007f9371c16038 R14: 00007f9371c15fa0 R15: 00007ffe0ba6bdd8 [ 2190.852259][ T2642] [ 2201.869746][ T2790] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4553'. [ 2204.534686][ T2832] FAULT_INJECTION: forcing a failure. [ 2204.534686][ T2832] name failslab, interval 1, probability 0, space 0, times 0 [ 2204.557034][ T2832] CPU: 0 UID: 0 PID: 2832 Comm: syz.2.4566 Not tainted syzkaller #0 PREEMPT(full) [ 2204.557075][ T2832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2204.557095][ T2832] Call Trace: [ 2204.557106][ T2832] [ 2204.557117][ T2832] dump_stack_lvl+0x100/0x190 [ 2204.557161][ T2832] should_fail_ex.cold+0x5/0xa [ 2204.557204][ T2832] should_failslab+0xc2/0x120 [ 2204.557240][ T2832] ? trace_parser_get_init+0x30/0xc0 [ 2204.557271][ T2832] __kmalloc_noprof+0xf6/0x9c0 [ 2204.557299][ T2832] ? rcu_is_watching+0x12/0xc0 [ 2204.557347][ T2832] ? trace_parser_get_init+0x30/0xc0 [ 2204.557379][ T2832] trace_parser_get_init+0x30/0xc0 [ 2204.557413][ T2832] trace_pid_write+0xf3/0x480 [ 2204.557451][ T2832] ? __pfx_trace_pid_write+0x10/0x10 [ 2204.557490][ T2832] ? update_last_data+0xaa/0x510 [ 2204.557543][ T2832] event_pid_write.isra.0+0x1e4/0x7f0 [ 2204.557575][ T2832] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 2204.557617][ T2832] vfs_write+0x2aa/0x1070 [ 2204.557649][ T2832] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 2204.557686][ T2832] ? __pfx_vfs_write+0x10/0x10 [ 2204.557717][ T2832] ? find_held_lock+0x2b/0x80 [ 2204.557750][ T2832] ? __fget_files+0x215/0x3d0 [ 2204.557789][ T2832] ? __fget_files+0x21f/0x3d0 [ 2204.557830][ T2832] ksys_write+0x12a/0x250 [ 2204.557864][ T2832] ? __pfx_ksys_write+0x10/0x10 [ 2204.557910][ T2832] do_syscall_64+0xc9/0xf80 [ 2204.557942][ T2832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2204.557972][ T2832] RIP: 0033:0x7f869559bf79 [ 2204.557997][ T2832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2204.558027][ T2832] RSP: 002b:00007f8696439028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2204.558055][ T2832] RAX: ffffffffffffffda RBX: 00007f8695815fa0 RCX: 00007f869559bf79 [ 2204.558074][ T2832] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 2204.558090][ T2832] RBP: 00007f86956327e0 R08: 0000000000000000 R09: 0000000000000000 [ 2204.558106][ T2832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2204.558123][ T2832] R13: 00007f8695816038 R14: 00007f8695815fa0 R15: 00007ffce84079f8 [ 2204.558161][ T2832] [ 2208.464985][ T2892] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4567'. [ 2209.854306][ T2911] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4570'. [ 2226.462708][ T3116] FAULT_INJECTION: forcing a failure. [ 2226.462708][ T3116] name failslab, interval 1, probability 0, space 0, times 0 [ 2226.939346][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2226.945772][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.033732][ T3116] CPU: 0 UID: 0 PID: 3116 Comm: syz.3.4603 Not tainted syzkaller #0 PREEMPT(full) [ 2227.033773][ T3116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2227.033800][ T3116] Call Trace: [ 2227.033810][ T3116] [ 2227.033821][ T3116] dump_stack_lvl+0x100/0x190 [ 2227.033865][ T3116] should_fail_ex.cold+0x5/0xa [ 2227.033916][ T3116] should_failslab+0xc2/0x120 [ 2227.033957][ T3116] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 2227.034003][ T3116] ? __alloc_skb+0x156/0x410 [ 2227.034045][ T3116] ? __alloc_skb+0x156/0x410 [ 2227.034079][ T3116] __alloc_skb+0x156/0x410 [ 2227.034113][ T3116] ? __alloc_skb+0x35d/0x410 [ 2227.034147][ T3116] ? __pfx___alloc_skb+0x10/0x10 [ 2227.034180][ T3116] ? netlink_autobind.isra.0+0xc0/0x370 [ 2227.034232][ T3116] netlink_alloc_large_skb+0x69/0x150 [ 2227.034277][ T3116] netlink_sendmsg+0x680/0xda0 [ 2227.034321][ T3116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2227.034366][ T3116] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2227.034402][ T3116] __sys_sendto+0x4aa/0x520 [ 2227.034439][ T3116] ? __pfx___sys_sendto+0x10/0x10 [ 2227.034485][ T3116] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 2227.034552][ T3116] __x64_sys_sendto+0xe0/0x1c0 [ 2227.034587][ T3116] ? do_syscall_64+0x94/0xf80 [ 2227.034617][ T3116] ? lockdep_hardirqs_on+0x78/0x100 [ 2227.034644][ T3116] do_syscall_64+0xc9/0xf80 [ 2227.034675][ T3116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2227.034705][ T3116] RIP: 0033:0x7f45f535c84e [ 2227.034722][ T3116] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2227.034739][ T3116] RSP: 002b:00007f45f6232e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2227.034755][ T3116] RAX: ffffffffffffffda RBX: 00007f45f62346c0 RCX: 00007f45f535c84e [ 2227.034765][ T3116] RDX: 000000000000001c RSI: 00007f45f6233000 RDI: 0000000000000005 [ 2227.034776][ T3116] RBP: 0000000000000000 R08: 00007f45f6232f04 R09: 000000000000000c [ 2227.034786][ T3116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2227.034807][ T3116] R13: 00007f45f6232f58 R14: 00007f45f6233000 R15: 0000000000000000 [ 2227.034827][ T3116] [ 2288.401519][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.408334][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2294.528262][ T3942] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4725'. [ 2307.918354][ T4094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2307.953704][ T4094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2307.966440][ T4094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2307.985724][ T4094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2307.993449][ T4094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2308.637937][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2309.014220][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2309.248670][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2309.310809][ T4092] chnl_net:caif_netlink_parms(): no params data found [ 2309.743201][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2310.075364][ T4094] Bluetooth: hci2: command tx timeout [ 2310.100534][ T4092] bridge0: port 1(bridge_slave_0) entered blocking state [ 2310.142200][ T4092] bridge0: port 1(bridge_slave_0) entered disabled state [ 2310.179243][ T4092] bridge_slave_0: entered allmulticast mode [ 2310.227211][ T4092] bridge_slave_0: entered promiscuous mode [ 2310.338336][ T4092] bridge0: port 2(bridge_slave_1) entered blocking state [ 2310.373981][ T4092] bridge0: port 2(bridge_slave_1) entered disabled state [ 2310.383961][ T4092] bridge_slave_1: entered allmulticast mode [ 2310.416754][ T4092] bridge_slave_1: entered promiscuous mode [ 2310.553913][ T4092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2310.575518][ T4092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2310.779118][ T4092] team0: Port device team_slave_0 added [ 2310.815658][ T4092] team0: Port device team_slave_1 added [ 2310.994999][ T4092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2311.001971][ T4092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2311.110001][ T4092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2311.179809][ T36] bridge_slave_1: left allmulticast mode [ 2311.187537][ T36] bridge_slave_1: left promiscuous mode [ 2311.269941][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 2311.383619][ T36] bridge_slave_0: left allmulticast mode [ 2311.389319][ T36] bridge_slave_0: left promiscuous mode [ 2311.409442][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 2312.206210][ T4094] Bluetooth: hci2: command tx timeout [ 2314.187238][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2314.214283][ T4094] Bluetooth: hci2: command tx timeout [ 2314.270358][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2314.302545][ T36] bond0 (unregistering): Released all slaves [ 2314.351646][ T4092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2314.370709][ T4092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2314.463617][ T4092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2315.187634][ T4092] hsr_slave_0: entered promiscuous mode [ 2315.194061][ T4092] hsr_slave_1: entered promiscuous mode [ 2316.293774][ T4094] Bluetooth: hci2: command tx timeout [ 2316.347410][ T36] hsr_slave_0: left promiscuous mode [ 2316.353308][ T36] hsr_slave_1: left promiscuous mode [ 2316.359753][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2316.383670][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2316.406531][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2316.433656][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2316.526285][ T36] veth1_macvtap: left promiscuous mode [ 2316.531845][ T36] veth0_macvtap: left promiscuous mode [ 2316.584035][ T36] veth1_vlan: left promiscuous mode [ 2316.613788][ T36] veth0_vlan: left promiscuous mode [ 2322.284415][ T36] team0 (unregistering): Port device team_slave_1 removed [ 2322.395422][ T36] team0 (unregistering): Port device team_slave_0 removed [ 2326.719657][ T4092] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2326.992100][ T4092] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2327.170574][ T4092] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2327.262823][ T4092] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2330.187116][ T4092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2330.308710][ T4092] 8021q: adding VLAN 0 to HW filter on device team0 [ 2330.425341][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 2330.432512][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2330.479583][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 2330.486852][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2330.637792][ T4092] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2330.696145][ T4092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2331.727622][ T4400] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4775'. [ 2332.344445][ T4092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2332.797809][ T4092] veth0_vlan: entered promiscuous mode [ 2332.854682][ T4092] veth1_vlan: entered promiscuous mode [ 2333.350885][ T4092] veth0_macvtap: entered promiscuous mode [ 2333.428687][ T4092] veth1_macvtap: entered promiscuous mode [ 2333.602698][ T4092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2333.639087][ T4092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2333.846513][ T1156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.011494][ T1156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.049224][ T1156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.220765][ T1156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.467262][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2334.512368][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2334.667773][ T3454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2334.705696][ T3454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2336.683300][T19555] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2336.698422][T19555] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2336.706492][T19555] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2336.715047][T19555] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2336.722528][T19555] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2338.157685][ T4464] chnl_net:caif_netlink_parms(): no params data found [ 2338.789495][T19555] Bluetooth: hci4: command tx timeout [ 2338.839633][ T4464] bridge0: port 1(bridge_slave_0) entered blocking state [ 2338.893697][ T4464] bridge0: port 1(bridge_slave_0) entered disabled state [ 2338.902067][ T4464] bridge_slave_0: entered allmulticast mode [ 2338.953650][ T4464] bridge_slave_0: entered promiscuous mode [ 2338.961733][ T4464] bridge0: port 2(bridge_slave_1) entered blocking state [ 2338.973954][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state [ 2338.981212][ T4464] bridge_slave_1: entered allmulticast mode [ 2338.995177][ T4464] bridge_slave_1: entered promiscuous mode [ 2339.064180][ T4464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2339.107320][ T4464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2339.219923][ T4464] team0: Port device team_slave_0 added [ 2339.275633][ T4464] team0: Port device team_slave_1 added [ 2339.773096][ T4464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2339.793620][ T4464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2339.925179][ T4464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2340.178844][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.242228][ T4464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2340.253747][ T4464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2340.317143][ T4464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2340.684567][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.853777][T19555] Bluetooth: hci4: command tx timeout [ 2341.159476][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2341.227517][ T4464] hsr_slave_0: entered promiscuous mode [ 2341.245183][ T4464] hsr_slave_1: entered promiscuous mode [ 2341.343782][ T4464] debugfs: 'hsr0' already exists in 'hsr' [ 2341.363774][ T4464] Cannot create hsr debugfs directory [ 2341.464987][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2342.104694][ T36] bridge_slave_1: left allmulticast mode [ 2342.110505][ T36] bridge_slave_1: left promiscuous mode [ 2342.119677][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 2342.150570][ T36] bridge_slave_0: left allmulticast mode [ 2342.160988][ T36] bridge_slave_0: left promiscuous mode [ 2342.172994][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 2342.338631][ T4521] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4798'. [ 2342.996407][T19555] Bluetooth: hci4: command tx timeout [ 2344.894059][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2345.014409][T19555] Bluetooth: hci4: command tx timeout [ 2345.025428][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2345.170445][ T36] bond0 (unregistering): Released all slaves [ 2349.818438][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2349.824987][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2350.190833][ T36] hsr_slave_0: left promiscuous mode [ 2350.233680][ T36] hsr_slave_1: left promiscuous mode [ 2350.264560][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2350.271955][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2350.364235][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2350.372405][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2350.544632][ T36] veth1_macvtap: left promiscuous mode [ 2350.550248][ T36] veth0_macvtap: left promiscuous mode [ 2350.603843][ T36] veth1_vlan: left promiscuous mode [ 2350.609654][ T36] veth0_vlan: left promiscuous mode [ 2352.256166][ T36] team0 (unregistering): Port device team_slave_1 removed [ 2352.344582][ T36] team0 (unregistering): Port device team_slave_0 removed [ 2353.110007][ T4464] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2353.122843][ T4464] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2353.159066][ T4464] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2353.195463][ T4464] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2353.438512][ T4464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2353.489637][ T4464] 8021q: adding VLAN 0 to HW filter on device team0 [ 2353.510649][T28315] bridge0: port 1(bridge_slave_0) entered blocking state [ 2353.517969][T28315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2353.560873][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 2353.568057][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2353.757202][ T4645] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4803'. [ 2354.476087][ T4464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2354.582390][ T4464] veth0_vlan: entered promiscuous mode [ 2354.602090][ T4464] veth1_vlan: entered promiscuous mode [ 2354.682470][ T4464] veth0_macvtap: entered promiscuous mode [ 2354.700669][ T4464] veth1_macvtap: entered promiscuous mode [ 2354.727274][ T4464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2354.741926][ T4464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2354.757350][ T3490] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2354.787510][ T3490] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2354.797840][ T3490] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2354.821935][ T3490] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2354.984721][T28315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2354.992794][T28315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2355.155592][T28315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2355.187025][T28315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2356.824813][ T4094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2356.835174][ T4094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2356.845118][ T4094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2356.853257][ T4094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2356.885209][ T4094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2358.495439][ T3542] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2358.535057][ T4694] chnl_net:caif_netlink_parms(): no params data found [ 2358.764784][ T3542] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2358.943668][T19555] Bluetooth: hci0: command tx timeout [ 2359.078822][ T4694] bridge0: port 1(bridge_slave_0) entered blocking state [ 2359.104894][ T4694] bridge0: port 1(bridge_slave_0) entered disabled state [ 2359.112090][ T4694] bridge_slave_0: entered allmulticast mode [ 2359.154432][ T4694] bridge_slave_0: entered promiscuous mode [ 2359.166025][ T4694] bridge0: port 2(bridge_slave_1) entered blocking state [ 2359.226463][ T4694] bridge0: port 2(bridge_slave_1) entered disabled state [ 2359.263919][ T4694] bridge_slave_1: entered allmulticast mode [ 2359.284917][ T4694] bridge_slave_1: entered promiscuous mode [ 2359.827888][ T3542] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2360.304783][ T4694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2360.347389][ T4694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2360.496584][ T4694] team0: Port device team_slave_0 added [ 2360.516719][ T4694] team0: Port device team_slave_1 added [ 2360.805973][ T3542] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2361.013644][T19555] Bluetooth: hci0: command tx timeout [ 2361.054259][ T4694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2361.061224][ T4694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2361.093707][ T4694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2361.119678][ T4694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2361.129876][ T4694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2361.167083][ T4694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2361.393730][ T4694] hsr_slave_0: entered promiscuous mode [ 2361.420952][ T4694] hsr_slave_1: entered promiscuous mode [ 2361.434541][ T4694] debugfs: 'hsr0' already exists in 'hsr' [ 2361.493701][ T4694] Cannot create hsr debugfs directory [ 2362.662978][ T4771] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4820'. [ 2363.115194][T19555] Bluetooth: hci0: command tx timeout [ 2363.294005][ T3542] bridge_slave_1: left allmulticast mode [ 2363.299741][ T3542] bridge_slave_1: left promiscuous mode [ 2363.306036][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state [ 2363.544897][ T3542] bridge_slave_0: left allmulticast mode [ 2363.558265][ T3542] bridge_slave_0: left promiscuous mode [ 2363.604490][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state [ 2364.805787][ T4785] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2365.174195][T19555] Bluetooth: hci0: command tx timeout [ 2366.702319][ T3542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2366.736528][ T3542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2366.765908][ T3542] bond0 (unregistering): Released all slaves [ 2368.053257][ T3542] hsr_slave_0: left promiscuous mode [ 2368.187198][ T3542] hsr_slave_1: left promiscuous mode [ 2368.193187][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2368.233599][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2368.242176][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2368.250085][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2368.333656][ T3542] veth1_macvtap: left promiscuous mode [ 2368.343913][ T3542] veth0_macvtap: left promiscuous mode [ 2368.363785][ T3542] veth1_vlan: left promiscuous mode [ 2368.369097][ T3542] veth0_vlan: left promiscuous mode [ 2369.984873][ T3542] team0 (unregistering): Port device team_slave_1 removed [ 2370.131818][ T3542] team0 (unregistering): Port device team_slave_0 removed [ 2371.126224][ T4844] FAULT_INJECTION: forcing a failure. [ 2371.126224][ T4844] name failslab, interval 1, probability 0, space 0, times 0 [ 2371.155378][ T4844] CPU: 0 UID: 0 PID: 4844 Comm: syz.0.4835 Not tainted syzkaller #0 PREEMPT(full) [ 2371.155417][ T4844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2371.155436][ T4844] Call Trace: [ 2371.155445][ T4844] [ 2371.155456][ T4844] dump_stack_lvl+0x100/0x190 [ 2371.155502][ T4844] should_fail_ex.cold+0x5/0xa [ 2371.155555][ T4844] should_failslab+0xc2/0x120 [ 2371.155598][ T4844] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 2371.155646][ T4844] ? __alloc_skb+0x156/0x410 [ 2371.155688][ T4844] ? __alloc_skb+0x156/0x410 [ 2371.155721][ T4844] __alloc_skb+0x156/0x410 [ 2371.155755][ T4844] ? __alloc_skb+0x35d/0x410 [ 2371.155790][ T4844] ? __pfx___alloc_skb+0x10/0x10 [ 2371.155825][ T4844] ? netlink_autobind.isra.0+0xc0/0x370 [ 2371.155877][ T4844] netlink_alloc_large_skb+0x69/0x150 [ 2371.155919][ T4844] netlink_sendmsg+0x680/0xda0 [ 2371.155965][ T4844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2371.156015][ T4844] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2371.156052][ T4844] __sys_sendto+0x4aa/0x520 [ 2371.156088][ T4844] ? __pfx___sys_sendto+0x10/0x10 [ 2371.156135][ T4844] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 2371.156206][ T4844] __x64_sys_sendto+0xe0/0x1c0 [ 2371.156240][ T4844] ? do_syscall_64+0x94/0xf80 [ 2371.156266][ T4844] ? lockdep_hardirqs_on+0x78/0x100 [ 2371.156293][ T4844] do_syscall_64+0xc9/0xf80 [ 2371.156323][ T4844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2371.156350][ T4844] RIP: 0033:0x7fb12635c84e [ 2371.156371][ T4844] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2371.156398][ T4844] RSP: 002b:00007fb127170e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2371.156431][ T4844] RAX: ffffffffffffffda RBX: 00007fb1271726c0 RCX: 00007fb12635c84e [ 2371.156449][ T4844] RDX: 000000000000001c RSI: 00007fb127171000 RDI: 0000000000000005 [ 2371.156468][ T4844] RBP: 0000000000000000 R08: 00007fb127170f04 R09: 000000000000000c [ 2371.156487][ T4844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2371.156503][ T4844] R13: 00007fb127170f58 R14: 00007fb127171000 R15: 0000000000000000 [ 2371.156534][ T4844] [ 2371.650137][ T4694] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2371.798579][ T4694] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2371.824337][ T4694] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2371.884153][ T4694] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2372.469467][ T4694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2372.592881][ T4694] 8021q: adding VLAN 0 to HW filter on device team0 [ 2372.649021][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 2372.656212][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2372.871820][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 2372.878969][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2373.064439][ T4892] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4831'. [ 2373.906672][ T4694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2374.125081][ T4694] veth0_vlan: entered promiscuous mode [ 2374.195116][ T4694] veth1_vlan: entered promiscuous mode [ 2374.271722][ T4694] veth0_macvtap: entered promiscuous mode [ 2374.282024][ T4694] veth1_macvtap: entered promiscuous mode [ 2374.335125][ T4694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2374.394020][ T4694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2374.525396][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2374.541838][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2374.595296][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2374.631713][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2374.711336][ T4917] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2375.110945][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2375.193617][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2375.507351][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2375.523625][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2378.987948][ T4967] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2382.785288][ T5007] FAULT_INJECTION: forcing a failure. [ 2382.785288][ T5007] name failslab, interval 1, probability 0, space 0, times 0 [ 2382.979942][ T5007] CPU: 0 UID: 0 PID: 5007 Comm: syz.0.4848 Not tainted syzkaller #0 PREEMPT(full) [ 2382.979966][ T5007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2382.979976][ T5007] Call Trace: [ 2382.979983][ T5007] [ 2382.979989][ T5007] dump_stack_lvl+0x100/0x190 [ 2382.980015][ T5007] should_fail_ex.cold+0x5/0xa [ 2382.980043][ T5007] should_failslab+0xc2/0x120 [ 2382.980065][ T5007] ? trace_parser_get_init+0x30/0xc0 [ 2382.980082][ T5007] __kmalloc_noprof+0xf6/0x9c0 [ 2382.980098][ T5007] ? rcu_is_watching+0x12/0xc0 [ 2382.980118][ T5007] ? trace_parser_get_init+0x30/0xc0 [ 2382.980134][ T5007] trace_parser_get_init+0x30/0xc0 [ 2382.980152][ T5007] trace_pid_write+0xf3/0x480 [ 2382.980172][ T5007] ? __pfx_trace_pid_write+0x10/0x10 [ 2382.980195][ T5007] ? update_last_data+0xaa/0x510 [ 2382.980224][ T5007] event_pid_write.isra.0+0x1e4/0x7f0 [ 2382.980242][ T5007] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 2382.980264][ T5007] vfs_write+0x2aa/0x1070 [ 2382.980282][ T5007] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 2382.980300][ T5007] ? __pfx_vfs_write+0x10/0x10 [ 2382.980316][ T5007] ? find_held_lock+0x2b/0x80 [ 2382.980333][ T5007] ? __fget_files+0x215/0x3d0 [ 2382.980354][ T5007] ? __fget_files+0x21f/0x3d0 [ 2382.980377][ T5007] ksys_write+0x12a/0x250 [ 2382.980394][ T5007] ? __pfx_ksys_write+0x10/0x10 [ 2382.980417][ T5007] do_syscall_64+0xc9/0xf80 [ 2382.980442][ T5007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2382.980459][ T5007] RIP: 0033:0x7fb12639bf79 [ 2382.980473][ T5007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2382.980488][ T5007] RSP: 002b:00007fb127172028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2382.980504][ T5007] RAX: ffffffffffffffda RBX: 00007fb126615fa0 RCX: 00007fb12639bf79 [ 2382.980515][ T5007] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 2382.980524][ T5007] RBP: 00007fb1264327e0 R08: 0000000000000000 R09: 0000000000000000 [ 2382.980535][ T5007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2382.980545][ T5007] R13: 00007fb126616038 R14: 00007fb126615fa0 R15: 00007ffce9363298 [ 2382.980565][ T5007] [ 2383.794061][ T4094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2383.828476][ T4094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2383.838366][ T4094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2383.846539][ T4094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2383.855671][ T4094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2385.140981][ T5016] chnl_net:caif_netlink_parms(): no params data found [ 2385.562722][ T5016] bridge0: port 1(bridge_slave_0) entered blocking state [ 2385.594768][ T5016] bridge0: port 1(bridge_slave_0) entered disabled state [ 2385.631449][ T5016] bridge_slave_0: entered allmulticast mode [ 2385.660085][ T5016] bridge_slave_0: entered promiscuous mode [ 2385.800409][ T5040] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4853'. [ 2385.973652][ T4094] Bluetooth: hci1: command tx timeout [ 2386.567947][ T1156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2386.862213][ T5016] bridge0: port 2(bridge_slave_1) entered blocking state [ 2386.912779][ T5016] bridge0: port 2(bridge_slave_1) entered disabled state [ 2386.950664][ T5016] bridge_slave_1: entered allmulticast mode [ 2386.964435][ T5016] bridge_slave_1: entered promiscuous mode [ 2387.258517][ T1156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2387.294196][ T5016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2387.344736][ T5016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2388.056702][ T4094] Bluetooth: hci1: command tx timeout [ 2388.080750][ T1156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2388.231425][ T5016] team0: Port device team_slave_0 added [ 2388.484780][ T1156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2388.855896][ T5016] team0: Port device team_slave_1 added [ 2388.931260][ T5016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2389.005339][ T5016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2389.154399][ T5016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2389.182947][ T5016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2389.210540][ T5016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2389.256592][ T5016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2389.669834][ T5016] hsr_slave_0: entered promiscuous mode [ 2389.719456][ T5016] hsr_slave_1: entered promiscuous mode [ 2389.785599][ T5016] debugfs: 'hsr0' already exists in 'hsr' [ 2389.802125][ T5016] Cannot create hsr debugfs directory [ 2389.964864][ T1156] bridge_slave_1: left allmulticast mode [ 2389.977724][ T1156] bridge_slave_1: left promiscuous mode [ 2389.990963][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 2390.024276][ T1156] bridge_slave_0: left allmulticast mode [ 2390.029943][ T1156] bridge_slave_0: left promiscuous mode [ 2390.043768][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 2390.143747][ T4094] Bluetooth: hci1: command tx timeout [ 2390.505650][ T5097] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4861'. [ 2392.242446][ T4094] Bluetooth: hci1: command tx timeout [ 2392.893962][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2392.933957][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2393.048027][ T1156] bond0 (unregistering): Released all slaves [ 2393.135057][ T5125] FAULT_INJECTION: forcing a failure. [ 2393.135057][ T5125] name failslab, interval 1, probability 0, space 0, times 0 [ 2393.173529][ T5125] CPU: 0 UID: 0 PID: 5125 Comm: syz.1.4863 Not tainted syzkaller #0 PREEMPT(full) [ 2393.173569][ T5125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2393.173587][ T5125] Call Trace: [ 2393.173595][ T5125] [ 2393.173607][ T5125] dump_stack_lvl+0x100/0x190 [ 2393.173651][ T5125] should_fail_ex.cold+0x5/0xa [ 2393.173694][ T5125] should_failslab+0xc2/0x120 [ 2393.173730][ T5125] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 2393.173764][ T5125] ? __alloc_skb+0x156/0x410 [ 2393.173807][ T5125] ? __alloc_skb+0x156/0x410 [ 2393.173837][ T5125] __alloc_skb+0x156/0x410 [ 2393.173866][ T5125] ? __alloc_skb+0x35d/0x410 [ 2393.173900][ T5125] ? __pfx___alloc_skb+0x10/0x10 [ 2393.173936][ T5125] ? netlink_autobind.isra.0+0xc0/0x370 [ 2393.173985][ T5125] netlink_alloc_large_skb+0x69/0x150 [ 2393.174029][ T5125] netlink_sendmsg+0x680/0xda0 [ 2393.174077][ T5125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2393.174124][ T5125] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2393.174160][ T5125] __sys_sendto+0x4aa/0x520 [ 2393.174207][ T5125] ? __pfx___sys_sendto+0x10/0x10 [ 2393.174254][ T5125] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 2393.174319][ T5125] __x64_sys_sendto+0xe0/0x1c0 [ 2393.174354][ T5125] ? do_syscall_64+0x94/0xf80 [ 2393.174383][ T5125] ? lockdep_hardirqs_on+0x78/0x100 [ 2393.174412][ T5125] do_syscall_64+0xc9/0xf80 [ 2393.174445][ T5125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2393.174472][ T5125] RIP: 0033:0x7fd218f5c84e [ 2393.174497][ T5125] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2393.174525][ T5125] RSP: 002b:00007fd2171f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2393.174553][ T5125] RAX: ffffffffffffffda RBX: 00007fd2171f66c0 RCX: 00007fd218f5c84e [ 2393.174573][ T5125] RDX: 000000000000001c RSI: 00007fd2171f5000 RDI: 0000000000000005 [ 2393.174592][ T5125] RBP: 0000000000000000 R08: 00007fd2171f4f04 R09: 000000000000000c [ 2393.174611][ T5125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2393.174630][ T5125] R13: 00007fd2171f4f58 R14: 00007fd2171f5000 R15: 0000000000000000 [ 2393.174669][ T5125] [ 2396.673235][ T1156] hsr_slave_0: left promiscuous mode [ 2396.684087][ T1156] hsr_slave_1: left promiscuous mode [ 2396.690249][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2396.698174][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2396.708901][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2396.723626][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2396.744833][ T1156] veth1_macvtap: left promiscuous mode [ 2396.826244][ T1156] veth0_macvtap: left promiscuous mode [ 2396.831890][ T1156] veth1_vlan: left promiscuous mode [ 2396.837350][ T1156] veth0_vlan: left promiscuous mode [ 2399.785543][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 2399.988328][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 2401.980244][ T5016] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2402.081470][ T5016] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2402.106178][ T5016] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2402.132095][ T5016] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2403.450764][ T5016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2403.703884][ T5016] 8021q: adding VLAN 0 to HW filter on device team0 [ 2403.740215][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 2403.747658][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2404.068496][ T5016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2404.079063][ T5016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2404.105648][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 2404.112771][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2404.324281][ T5279] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4878'. [ 2405.552062][ T5016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2405.935516][ T5016] veth0_vlan: entered promiscuous mode [ 2406.007180][ T5016] veth1_vlan: entered promiscuous mode [ 2406.401781][ T5016] veth0_macvtap: entered promiscuous mode [ 2406.411486][ T5016] veth1_macvtap: entered promiscuous mode [ 2406.472217][ T5016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2406.647970][ T5016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2406.769667][T28315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2406.824930][T28315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2406.856130][T28315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2407.066736][T28315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2407.410706][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2407.447285][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2407.660177][ T3454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2407.691266][ T3454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2411.260219][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2411.283588][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2412.127710][ T5376] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2412.789403][ T5387] FAULT_INJECTION: forcing a failure. [ 2412.789403][ T5387] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.823654][ T5387] CPU: 1 UID: 0 PID: 5387 Comm: syz.2.4889 Not tainted syzkaller #0 PREEMPT(full) [ 2412.823694][ T5387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2412.823712][ T5387] Call Trace: [ 2412.823723][ T5387] [ 2412.823735][ T5387] dump_stack_lvl+0x100/0x190 [ 2412.823776][ T5387] should_fail_ex.cold+0x5/0xa [ 2412.823818][ T5387] should_failslab+0xc2/0x120 [ 2412.823856][ T5387] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 2412.823894][ T5387] ? __alloc_skb+0x156/0x410 [ 2412.823933][ T5387] ? __alloc_skb+0x156/0x410 [ 2412.823963][ T5387] __alloc_skb+0x156/0x410 [ 2412.823984][ T5387] ? __alloc_skb+0x35d/0x410 [ 2412.824001][ T5387] ? __pfx___alloc_skb+0x10/0x10 [ 2412.824019][ T5387] ? netlink_autobind.isra.0+0xc0/0x370 [ 2412.824045][ T5387] netlink_alloc_large_skb+0x69/0x150 [ 2412.824068][ T5387] netlink_sendmsg+0x680/0xda0 [ 2412.824091][ T5387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2412.824115][ T5387] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2412.824133][ T5387] __sys_sendto+0x4aa/0x520 [ 2412.824153][ T5387] ? __pfx___sys_sendto+0x10/0x10 [ 2412.824176][ T5387] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 2412.824213][ T5387] __x64_sys_sendto+0xe0/0x1c0 [ 2412.824230][ T5387] ? do_syscall_64+0x94/0xf80 [ 2412.824246][ T5387] ? lockdep_hardirqs_on+0x78/0x100 [ 2412.824261][ T5387] do_syscall_64+0xc9/0xf80 [ 2412.824278][ T5387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2412.824294][ T5387] RIP: 0033:0x7f001a15c84e [ 2412.824308][ T5387] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2412.824323][ T5387] RSP: 002b:00007f001af92e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2412.824339][ T5387] RAX: ffffffffffffffda RBX: 00007f001af946c0 RCX: 00007f001a15c84e [ 2412.824350][ T5387] RDX: 000000000000001c RSI: 00007f001af93000 RDI: 0000000000000005 [ 2412.824360][ T5387] RBP: 0000000000000000 R08: 00007f001af92f04 R09: 000000000000000c [ 2412.824370][ T5387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2412.824380][ T5387] R13: 00007f001af92f58 R14: 00007f001af93000 R15: 0000000000000000 [ 2412.824399][ T5387] [ 2419.314112][ T5479] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4902'. [ 2420.627034][ T5492] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4905'. [ 2424.084074][ T5523] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4910'. [ 2433.813648][T19555] Bluetooth: hci2: command 0x0406 tx timeout [ 2443.761933][ T5777] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4942'. [ 2459.423569][T19555] Bluetooth: hci4: command 0x0406 tx timeout [ 2461.390860][ T5968] FAULT_INJECTION: forcing a failure. [ 2461.390860][ T5968] name failslab, interval 1, probability 0, space 0, times 0 [ 2461.407422][ T5968] CPU: 1 UID: 0 PID: 5968 Comm: syz.1.4968 Not tainted syzkaller #0 PREEMPT(full) [ 2461.407462][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2461.407479][ T5968] Call Trace: [ 2461.407489][ T5968] [ 2461.407500][ T5968] dump_stack_lvl+0x100/0x190 [ 2461.407543][ T5968] should_fail_ex.cold+0x5/0xa [ 2461.407605][ T5968] should_failslab+0xc2/0x120 [ 2461.407648][ T5968] __kmalloc_cache_noprof+0x80/0x810 [ 2461.407679][ T5968] ? trace_parser_get_init+0x30/0xc0 [ 2461.407714][ T5968] ? trace_pid_list_alloc+0x9d/0x480 [ 2461.407741][ T5968] ? __kmalloc_noprof+0x365/0x9c0 [ 2461.407771][ T5968] ? rcu_is_watching+0x12/0xc0 [ 2461.407804][ T5968] ? trace_pid_list_alloc+0x9d/0x480 [ 2461.407830][ T5968] trace_pid_list_alloc+0x9d/0x480 [ 2461.407861][ T5968] trace_pid_write+0x110/0x480 [ 2461.407900][ T5968] ? __pfx_trace_pid_write+0x10/0x10 [ 2461.407938][ T5968] ? update_last_data+0xaa/0x510 [ 2461.407994][ T5968] event_pid_write.isra.0+0x1e4/0x7f0 [ 2461.408029][ T5968] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 2461.408073][ T5968] vfs_write+0x2aa/0x1070 [ 2461.408108][ T5968] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 2461.408144][ T5968] ? __pfx_vfs_write+0x10/0x10 [ 2461.408175][ T5968] ? find_held_lock+0x2b/0x80 [ 2461.408209][ T5968] ? __fget_files+0x215/0x3d0 [ 2461.408250][ T5968] ? __fget_files+0x21f/0x3d0 [ 2461.408295][ T5968] ksys_write+0x12a/0x250 [ 2461.408329][ T5968] ? __pfx_ksys_write+0x10/0x10 [ 2461.408373][ T5968] do_syscall_64+0xc9/0xf80 [ 2461.408407][ T5968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2461.408437][ T5968] RIP: 0033:0x7fd218f9bf79 [ 2461.408461][ T5968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2461.408489][ T5968] RSP: 002b:00007fd2171f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2461.408516][ T5968] RAX: ffffffffffffffda RBX: 00007fd219215fa0 RCX: 00007fd218f9bf79 [ 2461.408537][ T5968] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 2461.408556][ T5968] RBP: 00007fd2190327e0 R08: 0000000000000000 R09: 0000000000000000 [ 2461.408575][ T5968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2461.408601][ T5968] R13: 00007fd219216038 R14: 00007fd219215fa0 R15: 00007fffa17ff488 [ 2461.408643][ T5968] [ 2472.132804][ T6093] FAULT_INJECTION: forcing a failure. [ 2472.132804][ T6093] name failslab, interval 1, probability 0, space 0, times 0 [ 2472.168006][ T6093] CPU: 1 UID: 0 PID: 6093 Comm: syz.3.4985 Not tainted syzkaller #0 PREEMPT(full) [ 2472.168031][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2472.168041][ T6093] Call Trace: [ 2472.168047][ T6093] [ 2472.168054][ T6093] dump_stack_lvl+0x100/0x190 [ 2472.168080][ T6093] should_fail_ex.cold+0x5/0xa [ 2472.168113][ T6093] should_failslab+0xc2/0x120 [ 2472.168136][ T6093] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 2472.168158][ T6093] ? __alloc_skb+0x156/0x410 [ 2472.168180][ T6093] ? __alloc_skb+0x156/0x410 [ 2472.168196][ T6093] __alloc_skb+0x156/0x410 [ 2472.168213][ T6093] ? __alloc_skb+0x35d/0x410 [ 2472.168231][ T6093] ? __pfx___alloc_skb+0x10/0x10 [ 2472.168249][ T6093] ? netlink_autobind.isra.0+0xc0/0x370 [ 2472.168276][ T6093] netlink_alloc_large_skb+0x69/0x150 [ 2472.168298][ T6093] netlink_sendmsg+0x680/0xda0 [ 2472.168322][ T6093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2472.168345][ T6093] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2472.168364][ T6093] __sys_sendto+0x4aa/0x520 [ 2472.168383][ T6093] ? __pfx___sys_sendto+0x10/0x10 [ 2472.168407][ T6093] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 2472.168442][ T6093] __x64_sys_sendto+0xe0/0x1c0 [ 2472.168461][ T6093] ? do_syscall_64+0x94/0xf80 [ 2472.168476][ T6093] ? lockdep_hardirqs_on+0x78/0x100 [ 2472.168491][ T6093] do_syscall_64+0xc9/0xf80 [ 2472.168508][ T6093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2472.168524][ T6093] RIP: 0033:0x7fa9a2f5c84e [ 2472.168537][ T6093] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2472.168552][ T6093] RSP: 002b:00007fa9a3e03e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2472.168574][ T6093] RAX: ffffffffffffffda RBX: 00007fa9a3e056c0 RCX: 00007fa9a2f5c84e [ 2472.168585][ T6093] RDX: 000000000000001c RSI: 00007fa9a3e04000 RDI: 0000000000000005 [ 2472.168595][ T6093] RBP: 0000000000000000 R08: 00007fa9a3e03f04 R09: 000000000000000c [ 2472.168605][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2472.168615][ T6093] R13: 00007fa9a3e03f58 R14: 00007fa9a3e04000 R15: 0000000000000000 [ 2472.168634][ T6093] [ 2472.714475][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2472.725271][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2479.416005][ T6164] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4997'. [ 2479.893836][T19555] Bluetooth: hci0: command 0x0406 tx timeout [ 2493.582876][ T6301] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5017'. [ 2499.435908][ T6368] FAULT_INJECTION: forcing a failure. [ 2499.435908][ T6368] name failslab, interval 1, probability 0, space 0, times 0 [ 2499.635250][ T6368] CPU: 1 UID: 0 PID: 6368 Comm: syz.3.5023 Not tainted syzkaller #0 PREEMPT(full) [ 2499.635288][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2499.635306][ T6368] Call Trace: [ 2499.635315][ T6368] [ 2499.635325][ T6368] dump_stack_lvl+0x100/0x190 [ 2499.635365][ T6368] should_fail_ex.cold+0x5/0xa [ 2499.635410][ T6368] should_failslab+0xc2/0x120 [ 2499.635451][ T6368] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 2499.635489][ T6368] ? __alloc_skb+0x156/0x410 [ 2499.635527][ T6368] ? __alloc_skb+0x156/0x410 [ 2499.635557][ T6368] __alloc_skb+0x156/0x410 [ 2499.635587][ T6368] ? __alloc_skb+0x35d/0x410 [ 2499.635620][ T6368] ? __pfx___alloc_skb+0x10/0x10 [ 2499.635654][ T6368] ? netlink_autobind.isra.0+0xc0/0x370 [ 2499.635703][ T6368] netlink_alloc_large_skb+0x69/0x150 [ 2499.635746][ T6368] netlink_sendmsg+0x680/0xda0 [ 2499.635792][ T6368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2499.635854][ T6368] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2499.635889][ T6368] __sys_sendto+0x4aa/0x520 [ 2499.635926][ T6368] ? __pfx___sys_sendto+0x10/0x10 [ 2499.635968][ T6368] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 2499.636020][ T6368] ? __pfx_sched_clock_cpu+0x10/0x10 [ 2499.636059][ T6368] ? __pfx_flush_tlb_func+0x10/0x10 [ 2499.636086][ T6368] ? rcu_is_watching+0x12/0xc0 [ 2499.636118][ T6368] __x64_sys_sendto+0xe0/0x1c0 [ 2499.636152][ T6368] ? do_syscall_64+0x94/0xf80 [ 2499.636181][ T6368] ? lockdep_hardirqs_on+0x78/0x100 [ 2499.636208][ T6368] do_syscall_64+0xc9/0xf80 [ 2499.636240][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2499.636269][ T6368] RIP: 0033:0x7fa9a2f5c84e [ 2499.636293][ T6368] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2499.636321][ T6368] RSP: 002b:00007fa9a3e03e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2499.636350][ T6368] RAX: ffffffffffffffda RBX: 00007fa9a3e056c0 RCX: 00007fa9a2f5c84e [ 2499.636370][ T6368] RDX: 000000000000001c RSI: 00007fa9a3e04000 RDI: 0000000000000005 [ 2499.636388][ T6368] RBP: 0000000000000000 R08: 00007fa9a3e03f04 R09: 000000000000000c [ 2499.636406][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2499.636424][ T6368] R13: 00007fa9a3e03f58 R14: 00007fa9a3e04000 R15: 0000000000000000 [ 2499.636463][ T6368] [ 2503.799485][ T6415] netlink: 330 bytes leftover after parsing attributes in process `syz.1.5031'. [ 2510.643634][T19555] Bluetooth: hci1: command 0x0406 tx timeout [ 2512.780740][ T6503] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5044'. [ 2534.141969][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2534.148315][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2538.454934][ T6805] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5084'. [ 2556.724777][ T7001] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5107'. [ 2562.042073][ T7063] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5115'. [ 2578.304191][ T7248] netlink: 330 bytes leftover after parsing attributes in process `syz.0.5138'. [ 2595.595845][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2595.602535][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2606.811674][ T7531] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5175'. [ 2615.338048][ T7625] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5186'. [ 2621.860255][ T7717] netlink: 330 bytes leftover after parsing attributes in process `syz.1.5198'. [ 2628.945663][ T7793] netlink: 330 bytes leftover after parsing attributes in process `syz.0.5206'. [ 2644.800075][ T7981] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5231'. [ 2657.020401][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2657.026757][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2657.804341][ T8117] netlink: 330 bytes leftover after parsing attributes in process `syz.1.5248'. [ 2675.312504][ T8315] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5273'. [ 2684.855979][ T8397] netlink: 330 bytes leftover after parsing attributes in process `syz.1.5282'. [ 2685.236114][ T8400] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5284'. [ 2686.628137][ T8416] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5286'. [ 2690.556992][ T8464] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5291'. [ 2691.031324][ T8473] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5293'. [ 2691.621276][ T8485] netlink: 330 bytes leftover after parsing attributes in process `syz.0.5295'. [ 2698.027304][ T8568] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5304'. [ 2717.275526][ T8798] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5333'. [ 2718.473659][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2718.479978][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2719.372525][ T8812] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5335'. [ 2736.974577][ T9011] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5359'. [ 2751.329025][ T9192] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5382'. [ 2752.929897][ T9201] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5383'. [ 2759.714096][ T9277] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5393'. [ 2772.484280][ T9406] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5409'. [ 2779.896525][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2779.902944][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2780.744835][ T9504] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5422'. [ 2781.779874][ T9515] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5424'. [ 2790.136112][ T9604] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5435'. [ 2796.015312][ T9683] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5444'. [ 2797.940331][ T9698] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5446'. [ 2805.490837][ T9782] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5458'. [ 2809.098105][ T9827] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5463'. [ 2814.651664][ T9870] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5468'. [ 2821.236324][ T9957] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5479'. [ 2822.442297][ T9971] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5481'. [ 2830.311617][T10064] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5495'. [ 2841.340768][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2841.347180][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2852.723941][T10321] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5527'. [ 2854.136481][T10342] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5528'. [ 2857.141891][T10385] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5534'. [ 2869.072234][T10526] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5550'. [ 2875.549065][T10599] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5560'. [ 2887.006059][T10725] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5575'. [ 2889.831309][T10747] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5579'. [ 2891.000913][T10763] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5581'. [ 2898.173771][T10848] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5591'. [ 2899.730050][T10859] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5593'. [ 2902.685252][T10899] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5597'. [ 2902.780151][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2902.786574][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2910.083148][T10962] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5605'. [ 2920.426394][T11069] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5619'. [ 2922.594047][T11096] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5622'. [ 2931.446040][T11181] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5633'. [ 2932.669717][T11188] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5634'. [ 2932.762950][T11191] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5635'. [ 2938.478039][T11270] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5645'. [ 2950.743076][T11424] netlink: 330 bytes leftover after parsing attributes in process `syz.1.5664'. [ 2954.485946][T11461] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5668'. [ 2959.561220][T11507] netlink: 330 bytes leftover after parsing attributes in process `syz.1.5673'. [ 2961.337794][T11528] netlink: 330 bytes leftover after parsing attributes in process `syz.1.5678'. [ 2964.217858][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2964.224443][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2964.597991][T11555] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5682'. [ 2969.605420][T11605] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5687'. [ 2969.626223][T11606] netlink: 322 bytes leftover after parsing attributes in process `syz.1.5688'. [ 2975.714292][T11672] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5697'. [ 2977.025215][T11684] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5698'. [ 2983.230123][T11736] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5705'. [ 2990.516857][T11805] netlink: 330 bytes leftover after parsing attributes in process `syz.0.5714'. [ 2999.258592][T11894] netlink: 322 bytes leftover after parsing attributes in process `syz.1.5726'. [ 3000.792942][T11911] netlink: 322 bytes leftover after parsing attributes in process `syz.0.5729'. [ 3001.994653][T11926] netlink: 322 bytes leftover after parsing attributes in process `syz.0.5731'. [ 3004.108256][T11946] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5734'. [ 3006.374669][T11966] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5736'. [ 3009.605030][T12003] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5742'. [ 3011.215569][T12018] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5743'. [ 3013.555424][T12042] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5746'. [ 3017.068607][T12081] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5753'. [ 3024.694439][T12161] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5769'. [ 3025.658652][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3025.665129][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3037.173477][ T4094] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 3039.504613][ T4094] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 3044.140559][ T4094] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 3045.504937][T19555] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 3054.213329][T19555] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 3062.215451][T19555] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 3066.373463][T19555] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 3068.790772][T12850] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5901'. [ 3073.744791][T12920] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5912'. [ 3073.973560][T19555] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 3083.421567][T13080] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5938'. [ 3085.690159][T13103] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5942'. [ 3086.373429][T19555] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 3087.106001][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3087.113586][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3088.065468][T13144] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5951'. [ 3090.053200][T19555] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 3090.204378][T13167] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5955'. [ 3092.186408][T13185] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5957'. [ 3092.613224][T19555] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 3093.328054][T13200] netlink: 330 bytes leftover after parsing attributes in process `syz.1.5967'. [ 3095.225692][T13235] netlink: 330 bytes leftover after parsing attributes in process `syz.0.5963'. [ 3097.413709][T19555] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 3097.555446][T13248] netlink: 330 bytes leftover after parsing attributes in process `syz.0.5976'. [ 3098.973985][T13276] netlink: 330 bytes leftover after parsing attributes in process `syz.1.5971'. [ 3100.427723][T13294] netlink: 330 bytes leftover after parsing attributes in process `syz.1.5975'. [ 3100.856790][T19555] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 3101.044079][T13302] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5979'. [ 3101.893640][ T4094] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 3103.217163][T13336] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5984'. [ 3103.249931][T13337] netlink: 330 bytes leftover after parsing attributes in process `syz.1.5992'. [ 3104.447100][T13359] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5987'. [ 3105.662002][T13373] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5989'. [ 3106.882257][T13383] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5990'. [ 3107.253316][ T4094] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 3108.459440][T13396] netlink: 330 bytes leftover after parsing attributes in process `syz.0.5993'. [ 3109.870836][T13421] netlink: 330 bytes leftover after parsing attributes in process `syz.0.6006'. [ 3113.893666][ T4094] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 3116.978606][T13501] netlink: 330 bytes leftover after parsing attributes in process `syz.0.6014'. [ 3117.333506][ T4094] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 3117.497118][T13509] netlink: 330 bytes leftover after parsing attributes in process `syz.3.6016'. [ 3118.428323][T13515] netlink: 330 bytes leftover after parsing attributes in process `syz.1.6017'. [ 3120.792201][T13556] netlink: 330 bytes leftover after parsing attributes in process `syz.3.6023'. [ 3122.535455][ T4094] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 3123.838220][T13597] netlink: 330 bytes leftover after parsing attributes in process `syz.3.6030'. [ 3124.259436][T13604] netlink: 330 bytes leftover after parsing attributes in process `syz.0.6031'. [ 3124.945677][T13615] netlink: 330 bytes leftover after parsing attributes in process `syz.3.6032'. [ 3124.994297][T13617] netlink: 330 bytes leftover after parsing attributes in process `syz.1.6034'. [ 3125.213083][T13614] serio: Serial port pty6 [ 3126.812557][T13648] netlink: 330 bytes leftover after parsing attributes in process `syz.0.6039'. [ 3127.066067][T13643] serio: Serial port pty6 [ 3127.983900][T13670] netlink: 330 bytes leftover after parsing attributes in process `syz.2.6043'. [ 3128.229865][T13669] smpboot: CPU 1 is now offline [ 3128.326653][T13672] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 3128.344445][ T0] numa_add_cpu cpu 1 node 0: mask now 0-1 [ 3128.344476][ T0] numa_add_cpu cpu 1 node 1: mask now 0-1 [ 3128.345383][ T19] ------------[ cut here ]------------ [ 3128.345832][ T19] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 3128.345851][ T19] WARNING: kernel/sched/sched.h:1575 at update_rq_clock+0x34a/0xd30, CPU#0: migration/0/19 [ 3128.345903][ T19] Modules linked in: [ 3128.346254][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Not tainted syzkaller #0 PREEMPT(full) [ 3128.346274][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3128.346289][ T19] Stopper: 0x0 <- 0x0 [ 3128.346305][ T19] RIP: 0010:update_rq_clock+0x34a/0xd30 [ 3128.346326][ T19] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 79 a6 09 a8 04 0f 84 9e fd ff ff 90 0f 0b 90 e9 95 fd ff ff 90 <0f> 0b 90 e9 51 fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 3128.346342][ T19] RSP: 0018:ffffc90000187c28 EFLAGS: 00010046 [ 3128.346356][ T19] RAX: 0000000000000000 RBX: ffff8880b853ae00 RCX: 0000000000000001 [ 3128.346365][ T19] RDX: 0000000000000046 RSI: ffffffff8dc27210 RDI: ffffffff8bfa95a0 [ 3128.346375][ T19] RBP: ffffc90000187dd0 R08: 0000000000000001 R09: 0000000000000001 [ 3128.346385][ T19] R10: ffff88805651a007 R11: 000002d85fe87400 R12: ffffffff90b87eb4 [ 3128.346395][ T19] R13: ffff8880b853bc30 R14: ffff8880988e1e40 R15: ffff8880b853ae00 [ 3128.346406][ T19] FS: 0000000000000000(0000) GS:ffff8881245c1000(0000) knlGS:0000000000000000 [ 3128.346421][ T19] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3128.346432][ T19] CR2: 0000001b3430dff8 CR3: 000000009ca40000 CR4: 00000000003526f0 [ 3128.346442][ T19] Call Trace: [ 3128.346448][ T19] [ 3128.346454][ T19] ? pick_task_fair+0x85/0x350 [ 3128.346477][ T19] __schedule+0x1b0f/0x5fa0 [ 3128.346501][ T19] ? __lock_acquire+0x4a5/0x2630 [ 3128.346533][ T19] ? __pfx___schedule+0x10/0x10 [ 3128.346557][ T19] ? find_held_lock+0x2b/0x80 [ 3128.346575][ T19] ? schedule+0x2bf/0x390 [ 3128.346600][ T19] schedule+0xdd/0x390 [ 3128.346623][ T19] smpboot_thread_fn+0x893/0xaa0 [ 3128.346647][ T19] ? kthread+0x13a/0x450 [ 3128.346659][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 3128.346680][ T19] kthread+0x370/0x450 [ 3128.346692][ T19] ? __pfx_kthread+0x10/0x10 [ 3128.346707][ T19] ret_from_fork+0x754/0xaf0 [ 3128.346725][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 3128.346743][ T19] ? __switch_to+0x7b9/0x10c0 [ 3128.346765][ T19] ? __pfx_kthread+0x10/0x10 [ 3128.346779][ T19] ret_from_fork_asm+0x1a/0x30 [ 3128.346808][ T19] [ 3128.346816][ T19] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3128.346826][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Not tainted syzkaller #0 PREEMPT(full) [ 3128.346844][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3128.346853][ T19] Stopper: 0x0 <- 0x0 [ 3128.346866][ T19] Call Trace: [ 3128.346872][ T19] [ 3128.346878][ T19] dump_stack_lvl+0x100/0x190 [ 3128.346898][ T19] vpanic+0x20d/0x630 [ 3128.346914][ T19] panic+0xd1/0xd1 [ 3128.346928][ T19] ? __pfx_panic+0x10/0x10 [ 3128.346947][ T19] ? check_panic_on_warn+0x1f/0x90 [ 3128.346966][ T19] check_panic_on_warn.cold+0x19/0x34 [ 3128.346982][ T19] ? update_rq_clock+0x34a/0xd30 [ 3128.347000][ T19] __warn.cold+0x191/0x2f8 [ 3128.347017][ T19] __report_bug+0x296/0x3d0 [ 3128.347040][ T19] ? update_rq_clock+0x34a/0xd30 [ 3128.347060][ T19] ? __pfx___report_bug+0x10/0x10 [ 3128.347085][ T19] ? rcu_is_watching+0x12/0xc0 [ 3128.347106][ T19] ? update_rq_clock+0x34a/0xd30 [ 3128.347124][ T19] report_bug+0xb2/0x220 [ 3128.347147][ T19] ? update_rq_clock+0x34a/0xd30 [ 3128.347165][ T19] handle_bug+0x166/0x2a0 [ 3128.347184][ T19] exc_invalid_op+0x17/0x50 [ 3128.347202][ T19] asm_exc_invalid_op+0x1a/0x20 [ 3128.347217][ T19] RIP: 0010:update_rq_clock+0x34a/0xd30 [ 3128.347236][ T19] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 79 a6 09 a8 04 0f 84 9e fd ff ff 90 0f 0b 90 e9 95 fd ff ff 90 <0f> 0b 90 e9 51 fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 3128.347251][ T19] RSP: 0018:ffffc90000187c28 EFLAGS: 00010046 [ 3128.347263][ T19] RAX: 0000000000000000 RBX: ffff8880b853ae00 RCX: 0000000000000001 [ 3128.347273][ T19] RDX: 0000000000000046 RSI: ffffffff8dc27210 RDI: ffffffff8bfa95a0 [ 3128.347283][ T19] RBP: ffffc90000187dd0 R08: 0000000000000001 R09: 0000000000000001 [ 3128.347293][ T19] R10: ffff88805651a007 R11: 000002d85fe87400 R12: ffffffff90b87eb4 [ 3128.347302][ T19] R13: ffff8880b853bc30 R14: ffff8880988e1e40 R15: ffff8880b853ae00 [ 3128.347322][ T19] ? update_rq_clock+0x9b/0xd30 [ 3128.347340][ T19] ? pick_task_fair+0x85/0x350 [ 3128.347359][ T19] __schedule+0x1b0f/0x5fa0 [ 3128.347382][ T19] ? __lock_acquire+0x4a5/0x2630 [ 3128.347413][ T19] ? __pfx___schedule+0x10/0x10 [ 3128.347434][ T19] ? find_held_lock+0x2b/0x80 [ 3128.347462][ T19] ? schedule+0x2bf/0x390 [ 3128.347488][ T19] schedule+0xdd/0x390 [ 3128.347511][ T19] smpboot_thread_fn+0x893/0xaa0 [ 3128.347537][ T19] ? kthread+0x13a/0x450 [ 3128.347549][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 3128.347569][ T19] kthread+0x370/0x450 [ 3128.347582][ T19] ? __pfx_kthread+0x10/0x10 [ 3128.347596][ T19] ret_from_fork+0x754/0xaf0 [ 3128.347613][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 3128.347631][ T19] ? __switch_to+0x7b9/0x10c0 [ 3128.347651][ T19] ? __pfx_kthread+0x10/0x10 [ 3128.347666][ T19] ret_from_fork_asm+0x1a/0x30 [ 3128.347688][ T19] [ 3128.347740][ T19] Kernel Offset: disabled