last executing test programs: 3.069580192s ago: executing program 2 (id=3): setrlimit$auto(0x7, &(0x7f0000000040)={0xfffffffffffffffd, 0x7fffffffffffffff}) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x5}) clone$auto(0x2000020003b4a, 0x6, 0x0, 0x0, 0x103) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x28adc1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x42a81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) semctl$auto(0x2, 0xff, 0x1, 0x7ff) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) lremovexattr$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(r0, 0x650, 0x5e95, &(0x7f0000000000)='\x00', 0x7) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000100), 0x18000, 0x0) signalfd$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x8000000000000000}, 0x8) fcntl$auto_F_GETFL(r0, 0x3, 0x7) 2.397272526s ago: executing program 1 (id=2): close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0xfffffffffffffffe) lstat$auto(0x0, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x38) 1.847679706s ago: executing program 1 (id=5): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) write$auto(0x3, 0x0, 0xfdef) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(0x3, 0x0, 0x5c8) select$auto(0x6, &(0x7f0000000380)={[0x5, 0x2, 0x7a0, 0x2000000000000, 0x17, 0x9, 0x9, 0x7fff, 0x7fffffff, 0x7fffffffffffffff, 0x2, 0x8, 0x5, 0xfffffffffffffff8, 0x7ff, 0x944]}, &(0x7f0000000400)={[0x5, 0x81, 0xd7, 0x5, 0x7, 0xc740, 0x81, 0x852, 0x1, 0x4, 0x2, 0x1000, 0x7, 0x1, 0x81]}, &(0x7f0000000480)={[0x5, 0xd, 0x7, 0x8, 0xffffffffffffff01, 0x0, 0x76, 0xd81, 0xffffffffffffff6d, 0x3, 0x0, 0x4, 0x15a, 0x6, 0x1, 0x11a1]}, &(0x7f0000000540)={0x3, 0xfff}) (fail_nth: 1) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) 1.625033256s ago: executing program 3 (id=4): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) pread64$auto(r1, 0x0, 0xf469, 0xbc3ab41) readv$auto(r0, &(0x7f00000000c0)={&(0x7f0000000280)="3d3d3c28a2e2f2f7daec7fd3f549c5e11d4a9230e584ef53609d15577401fffbc7f178e7c2d0c485c56f217eda485a5ac07e108a1af1f0d33b3b74db85fcc5c19461c394813ae1910fd95d1b5230acfb1b1199903d5e4c56cd3dea556d19b5c989e696c2eaa4e5dde9523a6ac3b784276c89296e13bf5adda2ff02450a7170434901a5413e5810aa77a211812f8d4a28ecd26f5a89524f69c6e957adf4984fe260ef0ef74b94be59c58fd3f5521fcedcd654f59026665635f10df833a670695c19bde586212c7adcbd77595f8d9f51d37df49d5afc1fee4f391cffc757f42b4d2d8ac9ac7ca14c24d0890d914e12", 0x8000000000000000}, 0x8001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r2) sendmsg$auto_WG_CMD_SET_DEVICE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010029bd6000fbdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="5ef2ca1e86718d35a51f7c495034d0f9ae64aa211601d9ea8bbc5939694dd43898b8b3f732735b70c377f440c6935399d3d9fac756771c3a5f86495d754b7c717136647899994d50fb154df9d0bc7a20adfa465d240ea58108e13ff0daf97e27691f42c333ae4a63c6cda4ed9672d20364a99eb1166f9cfacd"], 0x1c}, 0x1, 0x0, 0x0, 0x20000811}, 0x810) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) 1.517742538s ago: executing program 0 (id=1): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0xa, 0x2, 0x13, 0x21) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x2c0340, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3, 0x5) lseek$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xffffffffffffffc0, 0x6, 0x9b72, 0x2, 0x8008) r0 = socket(0xa, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, 0x0, 0x9, 0x20000000) socketpair$auto(0x8, 0x5, 0x4, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyr3/dev\x00', 0x40200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x8000, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r2, r1, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) 1.024023938s ago: executing program 1 (id=6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r1, 0x301, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_QSTATS_IFINDEX={0x8}]}, 0x24}, 0x1, 0x1c00, 0x0, 0x80}, 0x8000) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf251b0000000c00018008000100", @ANYRES32, @ANYBLOB="0c00028008000300af1d0f2556228a4eec4fc9eb00c9a1f41fec01d490907e61dd15f4c7d332c3bec7e7d64cba3903000000bf", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x1f40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x4611, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) clone$auto(0x4, 0xffffffff, &(0x7f0000000380)=0x1, &(0x7f0000000400)=0x5, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x3c757e4aea4d7e78, 0x70bd28, 0x25dfdbfd, {}, [@NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008810}, 0x80) 1.006559879s ago: executing program 3 (id=7): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x80400, 0x42) open_by_handle_at$auto(r0, &(0x7f0000000200)={0x8, 0xfe, "0200000000000000"}, 0x100004) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, 0x0, 0x21) unshare$auto(0x40000080) r1 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r1, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) r3 = socket$nl_generic(0x11, 0x3, 0x10) bpf$auto(0x9, &(0x7f0000000a40)=@prog_bind_map={r3, r2, 0x2f}, 0x121) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x405b) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00', @ANYRES16=0x0, @ANYBLOB="110b27bd7000ffdbdf250900000800"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_7={@prog_id=0x2, 0x8, 0x3}, 0x7) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) 359.831509ms ago: executing program 1 (id=8): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x40d81, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000080), 0x0) mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r1, 0xe) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mlockall$auto(0x7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000000)=0x5, &(0x7f0000000140)=0x2) ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xec) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r2, 0x5608, 0x7) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x40040, 0x0) read$auto(0x3, 0x0, 0xfdef) 0s ago: executing program 0 (id=9): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) write$auto(0x3, 0x0, 0xfdef) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(0x3, 0x0, 0x5c8) select$auto(0x6, &(0x7f0000000380)={[0x5, 0x2, 0x7a0, 0x2000000000000, 0x17, 0x9, 0x9, 0x7fff, 0x7fffffff, 0x7fffffffffffffff, 0x2, 0x8, 0x5, 0xfffffffffffffff8, 0x7ff, 0x944]}, &(0x7f0000000400)={[0x5, 0x81, 0xd7, 0x5, 0x7, 0xc740, 0x81, 0x852, 0x1, 0x4, 0x2, 0x1000, 0x7, 0x1, 0x81]}, &(0x7f0000000480)={[0x5, 0xd, 0x7, 0x8, 0xffffffffffffff01, 0x0, 0x76, 0xd81, 0xffffffffffffff6d, 0x3, 0x0, 0x4, 0x15a, 0x6, 0x1, 0x11a1]}, &(0x7f0000000540)={0x3, 0xfff}) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 112.568705][ T5806] cgroup: Unknown subsys name 'net' [ 112.679339][ T5806] cgroup: Unknown subsys name 'cpuset' [ 112.692761][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 113.916408][ T29] cfg80211: failed to load regulatory.db [ 114.661344][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 117.539514][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.563157][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.579901][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.588508][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.598711][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.606991][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.612390][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.625375][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.641156][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.649998][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.662828][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.666600][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 117.678258][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.690599][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.693064][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.710816][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.723565][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.743039][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 117.758009][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 117.766285][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.334080][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 118.497975][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 118.549810][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 118.627441][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.639956][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.648495][ T5824] bridge_slave_0: entered allmulticast mode [ 118.657153][ T5824] bridge_slave_0: entered promiscuous mode [ 118.668523][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 118.715431][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.725224][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.734469][ T5824] bridge_slave_1: entered allmulticast mode [ 118.742265][ T5824] bridge_slave_1: entered promiscuous mode [ 118.890040][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.912707][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.921270][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.930405][ T5825] bridge_slave_0: entered allmulticast mode [ 118.940063][ T5825] bridge_slave_0: entered promiscuous mode [ 118.967947][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.976351][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.986379][ T5820] bridge_slave_0: entered allmulticast mode [ 118.994771][ T5820] bridge_slave_0: entered promiscuous mode [ 119.008380][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.025788][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.034380][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.042399][ T5825] bridge_slave_1: entered allmulticast mode [ 119.051422][ T5825] bridge_slave_1: entered promiscuous mode [ 119.060543][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.070205][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.079244][ T5820] bridge_slave_1: entered allmulticast mode [ 119.088265][ T5820] bridge_slave_1: entered promiscuous mode [ 119.200470][ T5824] team0: Port device team_slave_0 added [ 119.210607][ T5824] team0: Port device team_slave_1 added [ 119.218023][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.227269][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.235840][ T5823] bridge_slave_0: entered allmulticast mode [ 119.244443][ T5823] bridge_slave_0: entered promiscuous mode [ 119.256093][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.270902][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.290877][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.317645][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.325731][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.333451][ T5823] bridge_slave_1: entered allmulticast mode [ 119.342932][ T5823] bridge_slave_1: entered promiscuous mode [ 119.378477][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.427271][ T5825] team0: Port device team_slave_0 added [ 119.446501][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.455010][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.482561][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.499861][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.513397][ T5825] team0: Port device team_slave_1 added [ 119.548989][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.558239][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.586983][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.602661][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.639989][ T5820] team0: Port device team_slave_0 added [ 119.649964][ T5820] team0: Port device team_slave_1 added [ 119.677262][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.684762][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.714567][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.755055][ T5830] Bluetooth: hci1: command tx timeout [ 119.762889][ T5823] team0: Port device team_slave_0 added [ 119.764852][ T5830] Bluetooth: hci0: command tx timeout [ 119.775299][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.782662][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.812020][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.834280][ T5830] Bluetooth: hci3: command tx timeout [ 119.840285][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.841697][ T5830] Bluetooth: hci2: command tx timeout [ 119.853230][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.887555][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.904937][ T5823] team0: Port device team_slave_1 added [ 119.917289][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.926132][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.958558][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.042692][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.050484][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.078196][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.110634][ T5825] hsr_slave_0: entered promiscuous mode [ 120.119194][ T5825] hsr_slave_1: entered promiscuous mode [ 120.127506][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.134916][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.163709][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.190649][ T5824] hsr_slave_0: entered promiscuous mode [ 120.200167][ T5824] hsr_slave_1: entered promiscuous mode [ 120.208039][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 120.215506][ T5824] Cannot create hsr debugfs directory [ 120.258405][ T5820] hsr_slave_0: entered promiscuous mode [ 120.265308][ T5820] hsr_slave_1: entered promiscuous mode [ 120.272356][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 120.278982][ T5820] Cannot create hsr debugfs directory [ 120.427702][ T5823] hsr_slave_0: entered promiscuous mode [ 120.435227][ T5823] hsr_slave_1: entered promiscuous mode [ 120.441877][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 120.448241][ T5823] Cannot create hsr debugfs directory [ 120.920877][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 120.944705][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.960511][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 120.989288][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.063623][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.084924][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 121.107941][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.135622][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 121.236239][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 121.261582][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 121.280828][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 121.296467][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 121.461599][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.483204][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.512366][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.525777][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.551150][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.629188][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.650658][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.684610][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.695195][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.737576][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.755884][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.764787][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.797017][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.808824][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.834890][ T5830] Bluetooth: hci0: command tx timeout [ 121.842235][ T5830] Bluetooth: hci1: command tx timeout [ 121.861046][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.869655][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.914682][ T5830] Bluetooth: hci2: command tx timeout [ 121.920618][ T5830] Bluetooth: hci3: command tx timeout [ 121.942224][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.059197][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.072353][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.133067][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.140478][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.172833][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.181534][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.199342][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.246482][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.254088][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.326729][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.335753][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.463801][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.550430][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.649923][ T5824] veth0_vlan: entered promiscuous mode [ 122.732697][ T5824] veth1_vlan: entered promiscuous mode [ 122.847906][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.889036][ T5824] veth0_macvtap: entered promiscuous mode [ 122.909374][ T5824] veth1_macvtap: entered promiscuous mode [ 122.991768][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.022014][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.058805][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.072580][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.094810][ T5820] veth0_vlan: entered promiscuous mode [ 123.104395][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.117605][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.165585][ T5820] veth1_vlan: entered promiscuous mode [ 123.215309][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.297820][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.327171][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.336601][ T5820] veth0_macvtap: entered promiscuous mode [ 123.346881][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.384219][ T5820] veth1_macvtap: entered promiscuous mode [ 123.452690][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.467255][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.511288][ T5823] veth0_vlan: entered promiscuous mode [ 123.523331][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.566258][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.591916][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 123.619825][ T5825] veth0_vlan: entered promiscuous mode [ 123.630596][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.641939][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.659200][ T5823] veth1_vlan: entered promiscuous mode [ 123.669999][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.690081][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.718936][ T5825] veth1_vlan: entered promiscuous mode [ 123.868636][ T5825] veth0_macvtap: entered promiscuous mode [ 123.898153][ T5825] veth1_macvtap: entered promiscuous mode [ 123.914733][ T51] Bluetooth: hci0: command tx timeout [ 123.920583][ T5830] Bluetooth: hci1: command tx timeout [ 123.958221][ T5823] veth0_macvtap: entered promiscuous mode [ 123.979645][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.994877][ T5830] Bluetooth: hci3: command tx timeout [ 124.000572][ T51] Bluetooth: hci2: command tx timeout [ 124.010024][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.027829][ T5823] veth1_macvtap: entered promiscuous mode [ 124.073021][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.115101][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.132034][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.155673][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.166694][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.187352][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.206310][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.225928][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.249816][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.298499][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.343522][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.363538][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.394257][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.446518][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.590439][ T5923] Zero length message leads to an empty skb [ 124.684904][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.724546][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.765220][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.783726][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.872185][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.914501][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.987332][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.002113][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.259098][ T5926] FAULT_INJECTION: forcing a failure. [ 125.259098][ T5926] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.344114][ T5926] CPU: 0 UID: 0 PID: 5926 Comm: syz.1.5 Not tainted syzkaller #0 PREEMPT(full) [ 125.344157][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 125.344185][ T5926] Call Trace: [ 125.344196][ T5926] [ 125.344208][ T5926] dump_stack_lvl+0x100/0x190 [ 125.344273][ T5926] should_fail_ex.cold+0x5/0xa [ 125.344339][ T5926] _copy_from_user+0x2e/0xd0 [ 125.344382][ T5926] kern_select+0xcf/0x270 [ 125.344423][ T5926] ? __pfx_kern_select+0x10/0x10 [ 125.344465][ T5926] ? __pfx_ksys_write+0x10/0x10 [ 125.344509][ T5926] __x64_sys_select+0xbd/0x160 [ 125.344545][ T5926] ? do_syscall_64+0x94/0xf80 [ 125.344576][ T5926] ? lockdep_hardirqs_on+0x78/0x100 [ 125.344609][ T5926] do_syscall_64+0xc9/0xf80 [ 125.344645][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.344676][ T5926] RIP: 0033:0x7ff1daf9bf79 [ 125.344710][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.344741][ T5926] RSP: 002b:00007ff1dbebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 125.344775][ T5926] RAX: ffffffffffffffda RBX: 00007ff1db215fa0 RCX: 00007ff1daf9bf79 [ 125.344795][ T5926] RDX: 0000200000000400 RSI: 0000200000000380 RDI: 0000000000000006 [ 125.344820][ T5926] RBP: 00007ff1dbebf090 R08: 0000200000000540 R09: 0000000000000000 [ 125.344840][ T5926] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 125.344859][ T5926] R13: 00007ff1db216038 R14: 00007ff1db215fa0 R15: 00007ffc565bb958 [ 125.344900][ T5926] [ 125.904478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.994614][ T5830] Bluetooth: hci1: command tx timeout [ 126.000532][ T51] Bluetooth: hci0: command tx timeout [ 126.075052][ T5830] Bluetooth: hci3: command tx timeout [ 126.080684][ T51] Bluetooth: hci2: command tx timeout [ 126.106292][ T5936] FAULT_INJECTION: forcing a failure. [ 126.106292][ T5936] name failslab, interval 1, probability 0, space 0, times 1 [ 126.122119][ T5936] CPU: 0 UID: 0 PID: 5936 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT(full) [ 126.122162][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 126.122179][ T5936] Call Trace: [ 126.122188][ T5936] [ 126.122199][ T5936] dump_stack_lvl+0x100/0x190 [ 126.122253][ T5936] should_fail_ex.cold+0x5/0xa [ 126.122306][ T5936] should_failslab+0xc2/0x120 [ 126.122349][ T5936] kmem_cache_alloc_noprof+0x83/0x780 [ 126.122387][ T5936] ? lockdep_init_map_type+0x5c/0x250 [ 126.122447][ T5936] ? copy_process+0x72ff/0x79b0 [ 126.122496][ T5936] ? copy_process+0x72ff/0x79b0 [ 126.122534][ T5936] copy_process+0x72ff/0x79b0 [ 126.122590][ T5936] ? __pfx_copy_process+0x10/0x10 [ 126.122632][ T5936] ? find_held_lock+0x2b/0x80 [ 126.122675][ T5936] kernel_clone+0xfc/0x930 [ 126.122714][ T5936] ? __pfx_futex_wait+0x10/0x10 [ 126.122744][ T5936] ? __pfx_kernel_clone+0x10/0x10 [ 126.122804][ T5936] __do_sys_clone+0xd9/0x120 [ 126.122846][ T5936] ? __pfx___do_sys_clone+0x10/0x10 [ 126.122887][ T5936] ? __fget_files+0x21f/0x3d0 [ 126.122934][ T5936] ? __pfx_do_writev+0x10/0x10 [ 126.122966][ T5936] ? fdget+0x18b/0x210 [ 126.123003][ T5936] do_syscall_64+0xc9/0xf80 [ 126.123035][ T5936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.123064][ T5936] RIP: 0033:0x7ff1daf9bf79 [ 126.123086][ T5936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.123112][ T5936] RSP: 002b:00007ff1dbebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 126.123140][ T5936] RAX: ffffffffffffffda RBX: 00007ff1db215fa0 RCX: 00007ff1daf9bf79 [ 126.123158][ T5936] RDX: 0000200000000380 RSI: 00000000ffffffff RDI: 0000000000000004 [ 126.123176][ T5936] RBP: 00007ff1db0327e0 R08: 0000000000000002 R09: 0000000000000000 [ 126.123192][ T5936] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 126.123209][ T5936] R13: 00007ff1db216038 R14: 00007ff1db215fa0 R15: 00007ffc565bb958 [ 126.123250][ T5936] [ 126.863422][ T5935] BUG: Bad rss-counter state mm:ffff88807904e200 type:MM_FILEPAGES val:432 Comm:syz.3.7 Pid:5935 [ 127.012290][ T5947] FAULT_INJECTION: forcing a failure. [ 127.012290][ T5947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.054830][ T5947] CPU: 0 UID: 0 PID: 5947 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT(full) [ 127.054871][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 127.054889][ T5947] Call Trace: [ 127.054898][ T5947] [ 127.054908][ T5947] dump_stack_lvl+0x100/0x190 [ 127.054954][ T5947] should_fail_ex.cold+0x5/0xa [ 127.055010][ T5947] _copy_to_user+0x32/0xd0 [ 127.055054][ T5947] poll_select_finish+0x32f/0x670 [ 127.055094][ T5947] ? __pfx_poll_select_finish+0x10/0x10 [ 127.055136][ T5947] ? ktime_get_ts64+0x2d2/0x3f0 [ 127.055194][ T5947] ? read_tsc+0x9/0x20 [ 127.055238][ T5947] ? ktime_get_ts64+0x256/0x3f0 [ 127.055285][ T5947] kern_select+0x21b/0x270 [ 127.055328][ T5947] ? __pfx_kern_select+0x10/0x10 [ 127.055379][ T5947] __x64_sys_select+0xbd/0x160 [ 127.055417][ T5947] ? do_syscall_64+0x94/0xf80 [ 127.055453][ T5947] ? lockdep_hardirqs_on+0x78/0x100 [ 127.055484][ T5947] do_syscall_64+0xc9/0xf80 [ 127.055516][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.055546][ T5947] RIP: 0033:0x7f3cd6b9bf79 [ 127.055570][ T5947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.055600][ T5947] RSP: 002b:00007f3cd7aaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 127.055628][ T5947] RAX: ffffffffffffffda RBX: 00007f3cd6e15fa0 RCX: 00007f3cd6b9bf79 [ 127.055649][ T5947] RDX: 0000200000000400 RSI: 0000200000000380 RDI: 0000000000000006 [ 127.055668][ T5947] RBP: 00007f3cd6c327e0 R08: 0000200000000540 R09: 0000000000000000 [ 127.055687][ T5947] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 127.055707][ T5947] R13: 00007f3cd6e16038 R14: 00007f3cd6e15fa0 R15: 00007ffe87229378 [ 127.055765][ T5947] [ 127.503108][ T5943] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030