last executing test programs: 4.162157141s ago: executing program 2 (id=3): setrlimit$auto(0x7, &(0x7f0000000040)={0xfffffffffffffffd, 0x7fffffffffffffff}) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x5}) clone$auto(0x2000020003b4a, 0x6, 0x0, 0x0, 0x103) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x28adc1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x42a81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) semctl$auto(0x2, 0xff, 0x1, 0x7ff) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(r0, 0x650, 0x5e95, &(0x7f0000000000)='\x00', 0x7) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000100), 0x18000, 0x0) signalfd$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x8000000000000000}, 0x8) fcntl$auto_F_GETFL(r0, 0x3, 0x7) 3.267590357s ago: executing program 3 (id=4): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0x4030582b, 0x0) 3.130134139s ago: executing program 0 (id=1): openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b80), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/tty4\x00', 0x101e81, 0x0) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, r3, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r5, 0x5408, 0x0) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ff010000fedbdf254900000019000d019bfcc642fb8222e81879d39dc6fd94f765ecdeab8b09a13decc2b447ca98dfe6dce12ac75112b89430d721c260ab14460aba606ddde049e604574c17a959655f14a8a935bc9575a604f42f42f4bd37a7d0c2d3acc445a5f73b3d8d779613267cfceb9bade7c017d456d35d0f5b226fe95d4047c17ae39e0e134adbb0f62e6c23ed1ce674893112ab7800000000000000000000000000cd9b3f1316f29af7a7a1c6813277658473dcb8058936ca6f3451affe9285cef8d0cb9c405c5496b8d28577163b700b46902c54"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) r7 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/mem\x00', 0x2a0241, 0x0) r8 = fsmount$auto(r6, 0x401, 0x6) r9 = socket(0x10, 0x2, 0x4) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f0000000480)=0x1000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r10, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e8", @ANYRES32=r9, @ANYBLOB, @ANYRES32], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r10, @ANYBLOB="10012cbd7000fbdbdf2507000000280001800800030004000000140002006272696467655f736c6176655f31000008000300010000000c00018008000300450a000018000180140002007465616d5f736c6176655f3000000000340001801400020073797a6b616c6c65723000000000000008000100", @ANYRES32=r11, @ANYBLOB="1400020076657468305f076f5f68737200000000"], 0x94}, 0x1, 0x0, 0x0, 0x4008001}, 0x88c4) socket(0x15, 0x3, 0x8) ioctl$auto_USB_RAW_IOCTL_EP_DISABLE(0xffffffffffffffff, 0x40045506, &(0x7f0000000000)=0x8) epoll_ctl$auto(r7, 0x3, r7, &(0x7f0000000500)={0x74c, 0x19}) read$auto_proc_pid_smaps_operations_internal(r6, &(0x7f00000002c0)=""/190, 0xfffffe39) 2.979130649s ago: executing program 3 (id=5): close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0xfffffffffffffffe) lstat$auto(0x0, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000084) lstat$auto(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x38) 2.733849208s ago: executing program 1 (id=2): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) pread64$auto(r1, 0x0, 0xf469, 0xbc3ab41) readv$auto(r0, &(0x7f00000000c0)={&(0x7f0000000280)="3d3d3c28a2e2f2f7daec7fd3f549c5e11d4a9230e584ef53609d15577401fffbc7f178e7c2d0c485c56f217eda485a5ac07e108a1af1f0d33b3b74db85fcc5c19461c394813ae1910fd95d1b5230acfb1b1199903d5e4c56cd3dea556d19b5c989e696c2eaa4e5dde9523a6ac3b784276c89296e13bf5adda2ff02450a7170434901a5413e5810aa77a211812f8d4a28ecd26f5a89524f69c6e957adf4984fe260ef0ef74b94be59c58fd3f5521fcedcd654f59026665635f10df833a670695c19bde586212c7adcbd77595f8d9f51d37df49d5afc1fee4f391cffc757f42b4d2d8ac9ac7ca14c24d0890d914e12", 0x8000000000000000}, 0x8001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r2) sendmsg$auto_WG_CMD_SET_DEVICE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010029bd6000fbdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="5ef2ca1e86718d35a51f7c495034d0f9ae64aa211601d9ea8bbc5939694dd43898b8b3f732735b70c377f440c6935399d3d9fac756771c3a5f86495d754b7c717136647899994d50fb154df9d0bc7a20adfa465d240ea58108e13ff0daf97e27691f42c333ae4a63c6cda4ed9672d20364a99eb1166f9cfacd"], 0x1c}, 0x1, 0x0, 0x0, 0x20000811}, 0x810) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) 2.527298242s ago: executing program 3 (id=6): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) write$auto(0x3, 0x0, 0xfdef) clock_nanosleep$auto(0x0, 0x3, &(0x7f0000001200)={0x8, 0x3}, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c8873997d14d3080bea8200", @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf256b00000015000d018223d208b7dd3463a3a936688073d724bb000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$auto_NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "fb7d"}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040004) sendmsg$auto_NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9a9}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004018}, 0x4008880) r5 = open(0x0, 0x22240, 0x55) statx$auto(r5, 0x0, 0x1001, 0x82, 0x0) write$auto_evdev_fops_evdev(r5, &(0x7f0000000080)="9744139beb7aaea8502691c0ccccda897d60fe9bf9d31f2b093ea8ae49b36dd6dccbf797b561853b5c3a0ab1b7ac0f894ede159b8c4508b56bf970bc3506a134e3762d32fa7aa3f1cafcfd7ccf1d5215b169f1ea3c1902e2a7cddfe35d4a9b832320e8268b24948e1bba166723b0493af41029c306baf7ebc9722f2759203dfde9ea000b02834f", 0x87) write$auto(0x3, 0x0, 0x5c8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/sockstat\x00', 0x22000, 0x0) select$auto(0x6, &(0x7f0000000380)={[0x5, 0x2, 0x7a0, 0x2000000000000, 0x17, 0x9, 0x9, 0x7fff, 0x7fffffff, 0x7fffffffffffffff, 0x2, 0x8, 0x5, 0xfffffffffffffff8, 0x7ff, 0x944]}, &(0x7f0000000400)={[0x5, 0x81, 0xd7, 0x5, 0x7, 0xc740, 0x81, 0x852, 0x1, 0x4, 0x2, 0x1000, 0x7, 0x1, 0x81]}, &(0x7f0000000480)={[0x5, 0xd, 0x7, 0x8, 0xffffffffffffff01, 0x0, 0x76, 0xd81, 0xffffffffffffff6d, 0x3, 0x0, 0x4, 0x15a, 0x6, 0x1, 0x11a1]}, &(0x7f0000000540)={0x3, 0xfff}) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) 2.480318461s ago: executing program 1 (id=7): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) write$auto(0x3, 0x0, 0xfdef) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x5609, r1) 2.094745527s ago: executing program 3 (id=8): r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000214af"], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000044) write$auto(r0, &(0x7f0000000100)='\x00', 0xfffffffffffffffa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x8031ca, 0x9) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x1000000000008, 0x4, 0x3, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) r2 = prctl$auto(0x3e, 0x2, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, 0x0, 0x4) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x2000d, 0x8, 0xeb1, 0x404, 0x80000000) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r4 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) socketpair$auto(0x1, 0x1, 0x2a340, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x1ff, 0x3, 0x1, 0x7, 0xfffffffffffffffb, 0x15f4da05, 0x10, 0x4000000000001000, 0x3, 0x4000008000001f, 0x6, 0x6d3e, 0x8cfb7, 0x9, 0x6]}, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r5, 0x80, 0x0, 0x0) wait4$auto(r4, 0x0, 0x80000001, 0x0) mprotect$auto(0x0, 0x806121, 0x8) mbind$auto(0x10001, 0x4, 0x6, &(0x7f0000000000)=0x8, 0x3, 0x0) 1.387798573s ago: executing program 1 (id=9): mmap$auto(0x0, 0x2, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x73) ioctl$auto(0x3, 0x80000541b, 0x38) madvise$auto(0x5, 0x10, 0x2) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x20009, 0x7fffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x20) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x5, 0x4, 0x7) close_range$auto(0x2, 0x8, 0x0) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x42800, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) read$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000200)=""/81, 0x51) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x8000000002, 0xfffffffffffffffa, 0xdf, 0x9b72, r0, 0x73e8079b) close_range$auto(0x2, r0, 0x0) r1 = socket(0x2, 0x80002, 0x73) r2 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, 0x0, 0x80) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r2, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, 0x0) io_uring_enter$auto(0x3, 0x8, 0xffffffff, 0x2, 0x0, 0x80000002) 434.957903ms ago: executing program 0 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x301, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_QSTATS_IFINDEX={0x8}]}, 0x24}, 0x1, 0x1c00, 0x0, 0x80}, 0x8000) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf251b0000000c00018008000100", @ANYRES32, @ANYBLOB="0c00028008000300af1d0f2556228a4eec4fc9eb00c9a1f41fec01d490907e61dd15f4c7d332c3bec7e7d64cba3903000000bf", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x1f40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x4611, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) clone$auto(0x4, 0xffffffff, &(0x7f0000000380)=0x1, &(0x7f0000000400)=0x5, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x3c757e4aea4d7e78, 0x70bd28, 0x25dfdbfd, {}, [@NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008810}, 0x80) 362.099352ms ago: executing program 1 (id=11): syz_clone3(&(0x7f0000000280)={0x1e02c856826e0653, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) socket(0x10, 0x80002, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_create$auto(0x20009) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) r0 = epoll_create$auto(0x3e) ioctl$auto_EXT4_IOC_SETVERSION_OLD(0xffffffffffffffff, 0x40087602, &(0x7f0000000100)="f9c6db73364934578d51601d132b20dd82ae0781f6cb18c55fb7ed811a498af961a2ba35abcb2a9e90cb1318a4e844fa36d450dd94feeb082f1df20f92ccf13a81a57128c3747e32049e83c577e1acbc77ae0592cdbc051382debcaa0dc8ed6a464e67d65d0fe51909b6301747549e056844706522e452069bc58cceba3c6f41643ea20806562e91ca8a2cc01217c98f9dbad36dd49ba0ac6b5eac96f27ca3511f2ead4005") sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x28, 0x800, 0x64f5dd5e) socket(0x1e, 0x800, 0x8000000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r1, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000300)={{0x0, 0x80000002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x4, 0x9}, 0x4}, 0x7, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) mlock$auto(0xaa, 0x1ae) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffdf, 0xfffffeff, 0x80002, 0xffff, 0x7, 0x9, 0xffffffffffffffff, [0x2000000], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x3, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xa000, 0x0) r6 = open$dir(&(0x7f0000000080)='.\x00', 0x440180, 0xc2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) read$auto(r3, &(0x7f0000000040)='/dev/snd/seq\x00', 0x5) open_tree_attr$auto(r6, &(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f0000000100)={0x4861765c, 0xa6f, 0x0, @inferred=r0}, 0x7) ioctl$auto_EVIOCGMASK(r5, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) ioctl$auto(r2, 0x80004509, r4) 126.51664ms ago: executing program 3 (id=12): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0xa, 0x2, 0x13, 0x21) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x2c0340, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3, 0x5) lseek$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xffffffffffffffc0, 0x6, 0x9b72, 0x2, 0x8008) r0 = socket(0xa, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, 0x0, 0x9, 0x20000000) socketpair$auto(0x8, 0x5, 0x4, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyr3/dev\x00', 0x40200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x8000, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r2, r1, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 2 (id=13): socket(0x29, 0x800, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x19, 0x0, 0x0, 0x0, 0x2, 0x80008003}, 0x8}, 0x5, 0x1c) (async) pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,v\xf58\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000140)=@ax25={0x3, @bcast}, 0x7) (async) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) (async) mmap$auto(0x0, 0x7, 0x8, 0x1c, 0x40000000000a5, 0x8000) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r3, 0x0, 0x100000001, 0x100) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) socketpair$auto(0x3, 0x3, 0x8, 0x0) (async, rerun: 32) epoll_create$auto(0x1) r4 = socket(0xa, 0x3, 0x6) getsockopt$auto(r4, 0x2d, 0x0, 0xfffffffffffffffe, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0x636241, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x88040, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129841, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) ioctl$auto(0x3, 0x89e0, 0x91) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 69.192123][ T5488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.208611][ T5488] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. syzkaller login: [ 99.942070][ T5810] cgroup: Unknown subsys name 'net' [ 100.072845][ T5810] cgroup: Unknown subsys name 'cpuset' [ 100.082741][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.976727][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.229885][ T42] cfg80211: failed to load regulatory.db [ 104.947681][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.956248][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.965137][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.973964][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.981938][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.982132][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.989810][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.992743][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.011261][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.018712][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.031930][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.039292][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.039560][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.053488][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.057048][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.066303][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.075061][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.075848][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.085789][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.092479][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.663361][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 105.737067][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 105.821432][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 105.904220][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 106.002806][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.011110][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.018905][ T5828] bridge_slave_0: entered allmulticast mode [ 106.026334][ T5828] bridge_slave_0: entered promiscuous mode [ 106.069385][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.077387][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.085152][ T5828] bridge_slave_1: entered allmulticast mode [ 106.092800][ T5828] bridge_slave_1: entered promiscuous mode [ 106.119982][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.127219][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.134803][ T5830] bridge_slave_0: entered allmulticast mode [ 106.142450][ T5830] bridge_slave_0: entered promiscuous mode [ 106.168658][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.175834][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.183210][ T5831] bridge_slave_0: entered allmulticast mode [ 106.191303][ T5831] bridge_slave_0: entered promiscuous mode [ 106.200146][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.207284][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.214614][ T5831] bridge_slave_1: entered allmulticast mode [ 106.222127][ T5831] bridge_slave_1: entered promiscuous mode [ 106.230494][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.237659][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.246264][ T5830] bridge_slave_1: entered allmulticast mode [ 106.253804][ T5830] bridge_slave_1: entered promiscuous mode [ 106.304651][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.354831][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.377811][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.390865][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.411603][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.419048][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.426238][ T5829] bridge_slave_0: entered allmulticast mode [ 106.434110][ T5829] bridge_slave_0: entered promiscuous mode [ 106.444906][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.467886][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.488866][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.496053][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.503666][ T5829] bridge_slave_1: entered allmulticast mode [ 106.511708][ T5829] bridge_slave_1: entered promiscuous mode [ 106.543735][ T5828] team0: Port device team_slave_0 added [ 106.552748][ T5828] team0: Port device team_slave_1 added [ 106.571399][ T5831] team0: Port device team_slave_0 added [ 106.615678][ T5831] team0: Port device team_slave_1 added [ 106.624275][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.636592][ T5830] team0: Port device team_slave_0 added [ 106.666557][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.673669][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.700869][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.715619][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.747463][ T5830] team0: Port device team_slave_1 added [ 106.764983][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.772107][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.798725][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.834734][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.842854][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.874937][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.891424][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.899465][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.932877][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.964946][ T5829] team0: Port device team_slave_0 added [ 107.000485][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.009293][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.044705][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.061265][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.070446][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.104324][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.116589][ T5834] Bluetooth: hci0: command tx timeout [ 107.123747][ T5829] team0: Port device team_slave_1 added [ 107.186584][ T5828] hsr_slave_0: entered promiscuous mode [ 107.193057][ T5834] Bluetooth: hci3: command tx timeout [ 107.199998][ T5834] Bluetooth: hci2: command tx timeout [ 107.200004][ T5838] Bluetooth: hci1: command tx timeout [ 107.203262][ T5828] hsr_slave_1: entered promiscuous mode [ 107.271198][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.279585][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.316059][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.335673][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.344140][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.376450][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.409315][ T5831] hsr_slave_0: entered promiscuous mode [ 107.420087][ T5831] hsr_slave_1: entered promiscuous mode [ 107.428501][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 107.436039][ T5831] Cannot create hsr debugfs directory [ 107.473145][ T5830] hsr_slave_0: entered promiscuous mode [ 107.481156][ T5830] hsr_slave_1: entered promiscuous mode [ 107.488356][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 107.494887][ T5830] Cannot create hsr debugfs directory [ 107.670640][ T5829] hsr_slave_0: entered promiscuous mode [ 107.678589][ T5829] hsr_slave_1: entered promiscuous mode [ 107.686734][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 107.695288][ T5829] Cannot create hsr debugfs directory [ 108.135202][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.164665][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.177467][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.197599][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.254883][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.266879][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.279313][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.293103][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.394150][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.416315][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.431337][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.465579][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.534730][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.546781][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.559500][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.581783][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.716563][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.766302][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.776256][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.812273][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.819604][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.833554][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.856502][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.863682][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.875520][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.882741][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.917088][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.924335][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.992219][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.013705][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.066599][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.086950][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.114497][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.121823][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.147886][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.155168][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.201180][ T5834] Bluetooth: hci0: command tx timeout [ 109.213778][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.221044][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.241793][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.249171][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.269498][ T5834] Bluetooth: hci2: command tx timeout [ 109.270749][ T5838] Bluetooth: hci3: command tx timeout [ 109.274982][ T5834] Bluetooth: hci1: command tx timeout [ 109.493604][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.662357][ T5828] veth0_vlan: entered promiscuous mode [ 109.679069][ T5828] veth1_vlan: entered promiscuous mode [ 109.757205][ T5828] veth0_macvtap: entered promiscuous mode [ 109.782439][ T5828] veth1_macvtap: entered promiscuous mode [ 109.884610][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.909699][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.926815][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.980568][ T1159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.994139][ T1159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.012364][ T1159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.022543][ T1159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.081973][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.116588][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.135809][ T5831] veth0_vlan: entered promiscuous mode [ 110.200325][ T5831] veth1_vlan: entered promiscuous mode [ 110.248894][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.270487][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.317412][ T5829] veth0_vlan: entered promiscuous mode [ 110.347635][ T5831] veth0_macvtap: entered promiscuous mode [ 110.353566][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.362627][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.390641][ T5831] veth1_macvtap: entered promiscuous mode [ 110.400042][ T5829] veth1_vlan: entered promiscuous mode [ 110.410400][ T5830] veth0_vlan: entered promiscuous mode [ 110.440341][ T5830] veth1_vlan: entered promiscuous mode [ 110.486324][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.497559][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.547092][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.556859][ T5829] veth0_macvtap: entered promiscuous mode [ 110.583889][ T5830] veth0_macvtap: entered promiscuous mode [ 110.597663][ T5829] veth1_macvtap: entered promiscuous mode [ 110.618992][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.642778][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.681025][ T5830] veth1_macvtap: entered promiscuous mode [ 110.706222][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.722240][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.741514][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.777254][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.823065][ T1159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.868460][ T1159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.910871][ T1159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.928716][ T1159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.964749][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.979596][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.989439][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.087953][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.126505][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.136005][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.170266][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.181335][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.201797][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.218240][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.237223][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.255292][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.269267][ T5834] Bluetooth: hci0: command tx timeout [ 111.350062][ T5834] Bluetooth: hci3: command tx timeout [ 111.350083][ T51] Bluetooth: hci2: command tx timeout [ 111.355569][ T5834] Bluetooth: hci1: command tx timeout [ 111.399787][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.407678][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.640725][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.670415][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.792438][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.803804][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.961741][ T5929] netlink: 186 bytes leftover after parsing attributes in process `syz.3.5'. [ 111.990577][ T5929] Zero length message leads to an empty skb [ 112.430208][ T5935] FAULT_INJECTION: forcing a failure. [ 112.430208][ T5935] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 112.430335][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: syz.3.6 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.430382][ T5935] Tainted: [L]=SOFTLOCKUP [ 112.430394][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 112.430422][ T5935] Call Trace: [ 112.430432][ T5935] [ 112.430444][ T5935] dump_stack_lvl+0x100/0x190 [ 112.430501][ T5935] should_fail_ex.cold+0x5/0xa [ 112.430572][ T5935] ? prepare_alloc_pages+0x16d/0x5f0 [ 112.430631][ T5935] should_fail_alloc_page+0xeb/0x140 [ 112.430683][ T5935] prepare_alloc_pages+0x1f0/0x5f0 [ 112.430734][ T5935] ? __lock_acquire+0x4a5/0x2630 [ 112.430786][ T5935] __alloc_frozen_pages_noprof+0x193/0x2410 [ 112.430831][ T5935] ? lock_acquire+0x17c/0x330 [ 112.430885][ T5935] ? __lock_acquire+0x4a5/0x2630 [ 112.430938][ T5935] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.430994][ T5935] ? do_raw_spin_lock+0x128/0x260 [ 112.431035][ T5935] ? mark_held_locks+0x40/0x70 [ 112.431082][ T5935] ? find_held_lock+0x2b/0x80 [ 112.431119][ T5935] ? find_held_lock+0x2b/0x80 [ 112.431153][ T5935] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.431192][ T5935] ? policy_nodemask+0xed/0x4f0 [ 112.431242][ T5935] alloc_pages_mpol+0x1fb/0x550 [ 112.431289][ T5935] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 112.431347][ T5935] folio_alloc_mpol_noprof+0x36/0x340 [ 112.431405][ T5935] vma_alloc_folio_noprof+0xed/0x1d0 [ 112.431444][ T5935] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 112.431490][ T5935] do_anonymous_page+0xb10/0x1f40 [ 112.431551][ T5935] __handle_mm_fault+0x1d3a/0x2b50 [ 112.431598][ T5935] ? reacquire_held_locks+0xce/0x1e0 [ 112.431652][ T5935] ? __pfx___handle_mm_fault+0x10/0x10 [ 112.431698][ T5935] ? lock_vma_under_rcu+0x17c/0x5a0 [ 112.431758][ T5935] handle_mm_fault+0x36d/0xa20 [ 112.431806][ T5935] do_user_addr_fault+0x5a3/0x12f0 [ 112.431860][ T5935] exc_page_fault+0x6f/0xd0 [ 112.431896][ T5935] asm_exc_page_fault+0x26/0x30 [ 112.431929][ T5935] RIP: 0033:0x7fd27245d92b [ 112.431964][ T5935] Code: 00 00 00 48 8d 3d 45 ab 1a 00 48 89 c1 31 c0 e8 3b 36 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 79 ab 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 112.431997][ T5935] RSP: 002b:00007fd273538fa0 EFLAGS: 00010206 [ 112.432030][ T5935] RAX: 0000000000000000 RBX: 00007fd272815fa0 RCX: 0000000000000000 [ 112.432051][ T5935] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000100 [ 112.432072][ T5935] RBP: 00007fd2726327e0 R08: 0000000000000000 R09: 0000000000000000 [ 112.432092][ T5935] R10: 0000200000000100 R11: 0000000000000000 R12: 0000000000000000 [ 112.432112][ T5935] R13: 00007fd272816038 R14: 00007fd272815fa0 R15: 00007ffc0bd68b18 [ 112.432156][ T5935] [ 112.432417][ T5935] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 113.197989][ T5943] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 113.348948][ T5834] Bluetooth: hci0: command tx timeout [ 113.428296][ T5834] Bluetooth: hci2: command tx timeout [ 113.434186][ T5834] Bluetooth: hci3: command tx timeout [ 113.439731][ T5834] Bluetooth: hci1: command tx timeout [ 113.960452][ T5944] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 114.552856][ T5959] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 114.873583][ T5958] FAULT_INJECTION: forcing a failure. [ 114.873583][ T5958] name failslab, interval 1, probability 0, space 0, times 1 [ 114.887034][ T5958] CPU: 0 UID: 0 PID: 5958 Comm: syz.0.10 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.887084][ T5958] Tainted: [L]=SOFTLOCKUP [ 114.887095][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 114.887114][ T5958] Call Trace: [ 114.887124][ T5958] [ 114.887135][ T5958] dump_stack_lvl+0x100/0x190 [ 114.887186][ T5958] should_fail_ex.cold+0x5/0xa [ 114.887250][ T5958] should_failslab+0xc2/0x120 [ 114.887317][ T5958] kmem_cache_alloc_noprof+0x83/0x780 [ 114.887369][ T5958] ? copy_process+0x28d9/0x79b0 [ 114.887413][ T5958] ? copy_process+0x2921/0x79b0 [ 114.887467][ T5958] ? copy_process+0x2921/0x79b0 [ 114.887512][ T5958] copy_process+0x2921/0x79b0 [ 114.887559][ T5958] ? preempt_schedule_thunk+0x16/0x30 [ 114.887613][ T5958] ? __pfx_copy_process+0x10/0x10 [ 114.887660][ T5958] ? find_held_lock+0x2b/0x80 [ 114.887702][ T5958] ? futex_private_hash_put+0x107/0x1c0 [ 114.887751][ T5958] kernel_clone+0xfc/0x930 [ 114.887801][ T5958] ? __pfx_kernel_clone+0x10/0x10 [ 114.887868][ T5958] __do_sys_clone+0xd9/0x120 [ 114.887912][ T5958] ? __pfx___do_sys_clone+0x10/0x10 [ 114.887961][ T5958] ? __fget_files+0x21f/0x3d0 [ 114.888020][ T5958] ? xfd_validate_state+0x129/0x190 [ 114.888067][ T5958] do_syscall_64+0xc9/0xf80 [ 114.888107][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.888142][ T5958] RIP: 0033:0x7ffbc159bf79 [ 114.888167][ T5958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.888198][ T5958] RSP: 002b:00007ffbc2438028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 114.888227][ T5958] RAX: ffffffffffffffda RBX: 00007ffbc1815fa0 RCX: 00007ffbc159bf79 [ 114.888247][ T5958] RDX: 0000200000000380 RSI: 00000000ffffffff RDI: 0000000000000004 [ 114.888266][ T5958] RBP: 00007ffbc16327e0 R08: 0000000000000002 R09: 0000000000000000 [ 114.888284][ T5958] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 114.888304][ T5958] R13: 00007ffbc1816038 R14: 00007ffbc1815fa0 R15: 00007ffd08e00448 [ 114.888356][ T5958] [ 114.950865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 115.060906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 115.147962][ T5967] BUG: Bad rss-counter state mm:ffff88807d580c40 type:MM_FILEPAGES val:512 Comm:syz.2.13 Pid:5967 [ 115.479322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.579108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.669891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!