last executing test programs: 1m3.044596203s ago: executing program 4 (id=124): r0 = socket$inet_udp(0x2, 0x2, 0x0) setreuid(0x0, 0xee01) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 1m2.86799991s ago: executing program 4 (id=125): ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0245629, &(0x7f0000000240)={0x0, 0x6, 0x0, '\x00', &(0x7f0000000200)=0x9}) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1m2.65871054s ago: executing program 4 (id=127): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f0000001f00)=""/4096, 0x0, 0x1000, 0x1}, 0x28) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 1m2.483984655s ago: executing program 4 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 1m2.380596616s ago: executing program 4 (id=130): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000b00)={r2, r1}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) shutdown(r2, 0x1) 1m2.000263532s ago: executing program 4 (id=133): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x2400c846, 0x0, 0x0) shutdown(r0, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) 1m1.245270958s ago: executing program 32 (id=133): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x2400c846, 0x0, 0x0) shutdown(r0, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) 41.298862559s ago: executing program 5 (id=285): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00', 0x2}) 40.10668507s ago: executing program 5 (id=292): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0xc00) sendto$inet(r0, &(0x7f0000000140)="a2", 0x1, 0x44095, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) 39.946805846s ago: executing program 5 (id=293): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.823708371s ago: executing program 5 (id=295): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x3, 0x2b, 0x4000007, 0x10, 0x4, 0x100, 0x0, 0xba, 0x1}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 39.640740993s ago: executing program 5 (id=299): write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xf}, 0x20, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0xfffffffffffffffc) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 39.268782966s ago: executing program 5 (id=305): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x267, &(0x7f0000000840)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104000, 0x0, 0x1, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800000, 0x0, 0xfa, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 38.71796382s ago: executing program 33 (id=305): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c6e66732c73686f72746e616d653d77696e6e742c726f6469722c696f636861727365743d6b6f69382d72752c73686f72746e616d653d6d697865642c757466383d302c756e695f786c6174653d312c756e695f786c6174653d312c006a4fcfcc9fc5ea902e1a6384d405e843e1dfa18259eaaba553a63617a0f84f2e66f4a8121e2cea67640f61a98cef24cdbc0121ddb0212c7365c895e70775f8c82357782f45acff678373e50747f0dbd34a6c51a45f248402fd4340c0024ca0ee5de3af9233d9e31dd6f105e2696137379613fb63ef2adfa2f785af00684cfa440b01bda2cbcd1b326a0ee91991ebfbd00ec2a75ac8d59d1e7793dfb73a16dd3b166bc6a158528f"], 0x1, 0x267, &(0x7f0000000840)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfYpUEAOKkoWuLDZFaWqhhYIu2u6K30G/gi7dCi7ErV9ABKmCG+uqCyESb/8kNYmtNY3o82z6cu7745yTXu6li55c+3NxYW5pZX57eyvy+Uxky1GOnUwUYyiGI7URAMCPZKfRiHeN1KDXAgCcDu9/APj59Hr/Zzb2xy6e/soAgH450d//Q31ZEgDQZ5evXD0/XanMXEqSfMTi5mp1tZr+TK9Pz8fNqEctJqIQHyIa+9L67LnKzETS9LoY+cX1oTS/vlodbs9PRiGKnfOTSSqqzdxefiTGdvMvxqIWU1GI3zrnpzrmf4l//2mZvxSFeH49lqIec9HMpvlcRKxNJsmZC5VD+dynPgAAAAAAAAAAAAAAAAAAAAAA6IdSsq/Yfv5Nen5PqdTteppvPR9otNf5QI31Q+frZOOP7GD3DgAAAAAAAAAAAAAAAAAAAN+Lldt3Fmbr9dpyr+LWswdPtnJp4IvNvYvM7rzHS2327Bk92i4OFb/+/epep0u5yB338/m6YiQiWkeS3Skf/9XHSb9V8XTrxu//rYz/360nsq0jd5tbbevpciNl+/WBvy1EdO3Jn+jGfrhXlN9/1rN3K9WWRwf9ixu/X559tPbyzVFTPR4ajeE+PIkAAAAAAAAAAAAAAAAAAICDf/od9EoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYHAOvv//uEUu2kbyXZs3Br1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4GAAA//+HNZS6") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104000, 0x0, 0x1, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800000, 0x0, 0xfa, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 4.480206871s ago: executing program 0 (id=562): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x0, 0x4a7}}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x35}) 4.033093324s ago: executing program 0 (id=570): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8050) 3.845852034s ago: executing program 0 (id=573): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = dup(r0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 3.718519864s ago: executing program 3 (id=576): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80801) 3.546882831s ago: executing program 2 (id=580): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x20000880) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.315072684s ago: executing program 2 (id=592): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe0000000}) 3.272113227s ago: executing program 0 (id=583): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x78a09a1d84b4e9f1, 0x7, 0x3, "5e6da0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.181064939s ago: executing program 2 (id=584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 2.944124905s ago: executing program 6 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x22}, 0x78, r2}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={r3, r4/1000+60000}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8918, &(0x7f0000000000)) 2.943773825s ago: executing program 2 (id=587): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 2.937221115s ago: executing program 6 (id=588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000300), &(0x7f0000000280)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x8000, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x2, {0x0, 0x3}}}}}}}}, 0x0) 2.863341034s ago: executing program 6 (id=589): socket$pppoe(0x18, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000004c0)={'raw\x00', 0xe, "40f61bf1497281a38317cb5ef440"}, &(0x7f0000000600)=0x32) 2.804934993s ago: executing program 3 (id=590): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x1000004}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) chdir(&(0x7f0000000380)='./file0\x00') listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 2.662740272s ago: executing program 2 (id=591): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x98}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.662561723s ago: executing program 6 (id=593): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='veth0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 2.646942487s ago: executing program 3 (id=594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000200)={0xd000, 0x210000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) 2.580500786s ago: executing program 6 (id=595): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = dup(r0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 2.51454336s ago: executing program 1 (id=596): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000180)=0x1, 0x4) 2.3395479s ago: executing program 3 (id=597): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) 2.236645692s ago: executing program 1 (id=598): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(0xffffffffffffffff, 0x400454a4, 0xfffffffffffffffc) writev(r0, 0x0, 0x0) 2.211661592s ago: executing program 3 (id=599): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r3 = eventfd2(0x7, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2.119928286s ago: executing program 1 (id=600): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x8) 2.023440397s ago: executing program 2 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) unshare(0x6a040000) write(r0, &(0x7f0000000000)='10', 0x2) 2.021841636s ago: executing program 1 (id=611): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x98}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.008079981s ago: executing program 6 (id=602): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x800) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0xa, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 1.907313081s ago: executing program 3 (id=603): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000007a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.51086539s ago: executing program 1 (id=604): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4014) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@local}, &(0x7f0000000340)=0xc) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x400970, 0x1f280, 0xfffffffe, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0xfffe, {0xffffffff}}, 0xb) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x35, 0x0, 0x0) 1.19979374s ago: executing program 1 (id=605): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r1, &(0x7f0000000000)='3', 0x4e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) 723.831877ms ago: executing program 0 (id=606): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000000)={0x0, 0xdeeb, 0x0, 0x1, 0x330}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB=')'], 0x18}, 0x440e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=607): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, {[], @mld={0x82, 0x0, 0x0, 0xb, 0xc036, @remote}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@broadcast, @random="5aeadd61229e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @mcast2, {[], @time_exceed={0x4, 0x2, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], "af34000000000000"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): d impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.060751][ T6170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.123530][ T6170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.123545][ T6170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.123568][ T6170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.204000][ T5618] Bluetooth: hci2: command tx timeout [ 96.408725][ T6170] hsr_slave_0: entered promiscuous mode [ 96.417124][ T6170] hsr_slave_1: entered promiscuous mode [ 96.423259][ T6170] debugfs: 'hsr0' already exists in 'hsr' [ 96.423278][ T6170] Cannot create hsr debugfs directory [ 97.276239][ T6170] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.282145][ T6349] jffs2: notice: (6349) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.294397][ T6170] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.297106][ T6170] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.367715][ T6170] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.371543][ T6170] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.406562][ T6170] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.409143][ T6170] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.437010][ T6170] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.479173][ T6353] FAULT_INJECTION: forcing a failure. [ 97.479173][ T6353] name failslab, interval 1, probability 0, space 0, times 0 [ 97.479199][ T6353] CPU: 1 UID: 0 PID: 6353 Comm: syz.3.183 Not tainted syzkaller #0 PREEMPT(full) [ 97.479220][ T6353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.479231][ T6353] Call Trace: [ 97.479238][ T6353] [ 97.479247][ T6353] dump_stack_lvl+0xe8/0x150 [ 97.479273][ T6353] should_fail_ex+0x3eb/0x540 [ 97.479298][ T6353] should_failslab+0xa8/0x100 [ 97.479320][ T6353] __kmalloc_noprof+0xf9/0x710 [ 97.479337][ T6353] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 97.479355][ T6353] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 97.479380][ T6353] __memcg_list_lru_alloc+0x1d9/0x760 [ 97.479408][ T6353] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 97.479426][ T6353] ? xa_load+0x60/0x210 [ 97.479459][ T6353] __memcg_slab_post_alloc_hook+0x3b2/0xdb0 [ 97.479481][ T6353] ? __memcg_slab_post_alloc_hook+0x1f1/0xdb0 [ 97.479515][ T6353] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 97.479536][ T6353] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 97.479555][ T6353] ? alloc_inode+0xb8/0x1b0 [ 97.479571][ T6353] ? alloc_inode+0xb8/0x1b0 [ 97.479595][ T6353] alloc_inode+0xb8/0x1b0 [ 97.479614][ T6353] new_inode+0x1f/0x170 [ 97.479635][ T6353] devpts_fill_super+0x13f/0x4f0 [ 97.479653][ T6353] ? __pfx_devpts_fill_super+0x10/0x10 [ 97.479673][ T6353] get_tree_nodev+0xbb/0x150 [ 97.479698][ T6353] vfs_get_tree+0x92/0x2a0 [ 97.479719][ T6353] do_new_mount+0x319/0xdc0 [ 97.479745][ T6353] ? __pfx_do_new_mount+0x10/0x10 [ 97.479766][ T6353] ? ns_capable+0x84/0xe0 [ 97.479787][ T6353] ? path_mount+0x647/0x1050 [ 97.479810][ T6353] ? user_path_at+0xd4/0x160 [ 97.479831][ T6353] __se_sys_mount+0x31d/0x420 [ 97.479853][ T6353] ? __pfx___se_sys_mount+0x10/0x10 [ 97.479877][ T6353] ? __x64_sys_mount+0x20/0xc0 [ 97.479897][ T6353] do_syscall_64+0x166/0x520 [ 97.479914][ T6353] ? trace_irq_disable+0x3b/0x140 [ 97.479929][ T6353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.479949][ T6353] ? clear_bhb_loop+0x70/0xc0 [ 97.479969][ T6353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.479987][ T6353] RIP: 0033:0x7f6ba8f9e159 [ 97.480013][ T6353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.480028][ T6353] RSP: 002b:00007f6ba9f46028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 97.480049][ T6353] RAX: ffffffffffffffda RBX: 00007f6ba9225fa0 RCX: 00007f6ba8f9e159 [ 97.480064][ T6353] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 97.480076][ T6353] RBP: 00007f6ba903506b R08: 0000000000000000 R09: 0000000000000000 [ 97.480088][ T6353] R10: 0000000000400040 R11: 0000000000000246 R12: 0000000000000000 [ 97.480099][ T6353] R13: 00007f6ba9226038 R14: 00007f6ba9225fa0 R15: 00007ffded08efd8 [ 97.480128][ T6353] [ 97.480375][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 97.923003][ T6370] Bluetooth: MGMT ver 1.23 [ 97.933229][ T61] IPVS: starting estimator thread 0... [ 97.938368][ T6170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.002838][ T6170] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.038669][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.038771][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.040578][ T6373] IPVS: using max 33 ests per chain, 79200 per kthread [ 98.086755][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.086854][ T4397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.284015][ T5618] Bluetooth: hci2: command tx timeout [ 98.424782][ T6391] FAULT_INJECTION: forcing a failure. [ 98.424782][ T6391] name failslab, interval 1, probability 0, space 0, times 0 [ 98.424811][ T6391] CPU: 0 UID: 0 PID: 6391 Comm: syz.3.194 Not tainted syzkaller #0 PREEMPT(full) [ 98.424832][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.424843][ T6391] Call Trace: [ 98.424851][ T6391] [ 98.424859][ T6391] dump_stack_lvl+0xe8/0x150 [ 98.424885][ T6391] should_fail_ex+0x3eb/0x540 [ 98.424909][ T6391] should_failslab+0xa8/0x100 [ 98.424931][ T6391] kmem_cache_alloc_bulk_noprof+0x86/0x7b0 [ 98.424952][ T6391] ? pfn_valid+0x125/0x4c0 [ 98.424970][ T6391] ? pfn_valid+0x125/0x4c0 [ 98.424987][ T6391] ? pfn_valid+0x125/0x4c0 [ 98.425010][ T6391] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 98.425041][ T6391] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 98.425072][ T6391] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 98.425092][ T6391] ? 0xffffffffa0404540 [ 98.425157][ T6391] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 98.425182][ T6391] ? _copy_from_user+0x94/0xb0 [ 98.425201][ T6391] ? bpf_test_init+0x113/0x150 [ 98.425219][ T6391] ? xdp_convert_md_to_buff+0x5b/0x330 [ 98.425241][ T6391] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 98.425275][ T6391] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.425298][ T6391] ? __fget_files+0x2a/0x420 [ 98.425322][ T6391] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.425342][ T6391] bpf_prog_test_run+0x2c5/0x340 [ 98.425365][ T6391] __sys_bpf+0xb1e/0xe00 [ 98.425392][ T6391] ? __pfx___sys_bpf+0x10/0x10 [ 98.425421][ T6391] ? do_futex+0x3e7/0x4e0 [ 98.425469][ T6391] ? rcu_is_watching+0x16/0xb0 [ 98.425494][ T6391] __x64_sys_bpf+0xba/0xd0 [ 98.425517][ T6391] do_syscall_64+0x166/0x520 [ 98.425535][ T6391] ? trace_irq_disable+0x3b/0x140 [ 98.425552][ T6391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.425573][ T6391] ? clear_bhb_loop+0x70/0xc0 [ 98.425594][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.425613][ T6391] RIP: 0033:0x7f6ba8f9e159 [ 98.425630][ T6391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.425645][ T6391] RSP: 002b:00007f6ba9f46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.425666][ T6391] RAX: ffffffffffffffda RBX: 00007f6ba9225fa0 RCX: 00007f6ba8f9e159 [ 98.425680][ T6391] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 98.425693][ T6391] RBP: 00007f6ba903506b R08: 0000000000000000 R09: 0000000000000000 [ 98.425704][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.425716][ T6391] R13: 00007f6ba9226038 R14: 00007f6ba9225fa0 R15: 00007ffded08efd8 [ 98.425747][ T6391] [ 98.767122][ T6405] netlink: 'syz.2.198': attribute type 39 has an invalid length. [ 99.431885][ T6434] i2c i2c-0: new_device: Invalid device name [ 99.623190][ T6170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.629135][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 99.701305][ T6413] 9pnet_fd: p9_fd_create_tcp (6413): problem connecting socket to 127.0.0.1 [ 99.987049][ T6454] loop2: detected capacity change from 0 to 128 [ 100.029246][ T6454] FAT-fs (loop2): bogus number of FAT sectors [ 100.029267][ T6454] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 100.029281][ T6454] FAT-fs (loop2): Can't find a valid FAT filesystem [ 100.364454][ T5618] Bluetooth: hci2: command tx timeout [ 100.556541][ T6170] veth0_vlan: entered promiscuous mode [ 100.575331][ T6170] veth1_vlan: entered promiscuous mode [ 100.699224][ T6170] veth0_macvtap: entered promiscuous mode [ 100.714792][ T6170] veth1_macvtap: entered promiscuous mode [ 100.733237][ T6454] loop2: detected capacity change from 0 to 32768 [ 100.800098][ T6454] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 100.809069][ T6170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.826929][ T6170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.891208][ T6454] XFS (loop2): Ending clean mount [ 101.055101][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.056516][ T1277] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.056554][ T1277] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.056585][ T1277] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.108509][ T5613] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.182514][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.182533][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.282813][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.282832][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.878097][ T6519] netlink: 'syz.2.228': attribute type 1 has an invalid length. [ 101.927005][ T6519] bond1: entered promiscuous mode [ 101.927569][ T6519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.967464][ T6519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.967840][ T6519] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 101.967858][ T6519] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 101.971469][ T6519] bond1: (slave ip6gre1): making interface the new active one [ 101.971487][ T6519] ip6gre1: entered promiscuous mode [ 102.018559][ T6519] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 102.028548][ T6522] bridge0: port 3(syzkaller0) entered blocking state [ 102.030380][ T6522] bridge0: port 3(syzkaller0) entered disabled state [ 102.030507][ T6522] syzkaller0: entered allmulticast mode [ 102.043119][ T6522] syzkaller0: entered promiscuous mode [ 102.053203][ T6522] bridge0: port 3(syzkaller0) entered blocking state [ 102.053807][ T6522] bridge0: port 3(syzkaller0) entered forwarding state [ 102.100597][ T6521] bridge0: port 3(syzkaller0) entered disabled state [ 102.129739][ T6521] syzkaller0 (unregistering): left allmulticast mode [ 102.129761][ T6521] syzkaller0 (unregistering): left promiscuous mode [ 102.129835][ T6521] bridge0: port 3(syzkaller0) entered disabled state [ 102.173864][ T6526] syz_tun: entered allmulticast mode [ 102.183493][ T6525] syz_tun: left allmulticast mode [ 102.255259][ T6528] loop2: detected capacity change from 0 to 128 [ 103.133033][ T6560] netlink: 'syz.1.242': attribute type 83 has an invalid length. [ 103.538866][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.244'. [ 103.615613][ T6566] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 103.623091][ T6566] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.739051][ T6597] netlink: 44 bytes leftover after parsing attributes in process `syz.2.255'. [ 105.745213][ T6597] netlink: 44 bytes leftover after parsing attributes in process `syz.2.255'. [ 106.775767][ T6616] loop2: detected capacity change from 0 to 40427 [ 106.816518][ T6616] F2FS-fs (loop2): build fault injection rate: 174 [ 106.816539][ T6616] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 106.827380][ T6616] F2FS-fs (loop2): invalid crc value [ 107.114147][ T6647] loop8: detected capacity change from 0 to 16384 [ 107.132992][ T6616] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 107.151404][ T6616] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.357083][ T6650] loop8: detected capacity change from 16384 to 16383 [ 107.491570][ T6658] FAULT_INJECTION: forcing a failure. [ 107.491570][ T6658] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 107.491601][ T6658] CPU: 0 UID: 0 PID: 6658 Comm: syz.5.274 Not tainted syzkaller #0 PREEMPT(full) [ 107.491623][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.491635][ T6658] Call Trace: [ 107.491642][ T6658] [ 107.491651][ T6658] dump_stack_lvl+0xe8/0x150 [ 107.491677][ T6658] should_fail_ex+0x3eb/0x540 [ 107.491701][ T6658] prepare_alloc_pages+0x21e/0x5f0 [ 107.491727][ T6658] __alloc_frozen_pages_noprof+0x17a/0x400 [ 107.491747][ T6658] ? __lock_acquire+0x747/0x2de0 [ 107.491769][ T6658] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 107.491796][ T6658] ? policy_nodemask+0x2cc/0x8e0 [ 107.491821][ T6658] alloc_pages_mpol+0x21e/0x390 [ 107.491846][ T6658] alloc_pages_noprof+0xb1/0x2b0 [ 107.491868][ T6658] get_free_pages_noprof+0xf/0x80 [ 107.491886][ T6658] __kasan_populate_vmalloc+0x38/0x1c0 [ 107.491905][ T6658] ? do_raw_spin_unlock+0xf5/0x200 [ 107.491929][ T6658] alloc_vmap_area+0xd10/0x1410 [ 107.491962][ T6658] ? __pfx_alloc_vmap_area+0x10/0x10 [ 107.491979][ T6658] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 107.492000][ T6658] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 107.492019][ T6658] ? __get_vm_area_node+0x155/0x2f0 [ 107.492042][ T6658] __get_vm_area_node+0x200/0x2f0 [ 107.492067][ T6658] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 107.492087][ T6658] ? __do_replace+0xb2/0x990 [ 107.492104][ T6658] ? pcpu_alloc_noprof+0x1036/0x1900 [ 107.492142][ T6658] ? translate_table+0x1d10/0x1f80 [ 107.492170][ T6658] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 107.492196][ T6658] ? __do_replace+0xb2/0x990 [ 107.492214][ T6658] vzalloc_noprof+0xb2/0xe0 [ 107.492232][ T6658] ? __do_replace+0xb2/0x990 [ 107.492252][ T6658] __do_replace+0xb2/0x990 [ 107.492282][ T6658] ? __pfx___do_replace+0x10/0x10 [ 107.492303][ T6658] ? _copy_from_user+0x94/0xb0 [ 107.492330][ T6658] do_ipt_set_ctl+0xb3c/0xe20 [ 107.492356][ T6658] ? rcu_is_watching+0x16/0xb0 [ 107.492376][ T6658] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 107.492410][ T6658] ? __mutex_unlock_slowpath+0x731/0x900 [ 107.492435][ T6658] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.492468][ T6658] nf_setsockopt+0x26f/0x290 [ 107.492488][ T6658] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 107.492511][ T6658] do_sock_setsockopt+0x17c/0x1b0 [ 107.492541][ T6658] __x64_sys_setsockopt+0x13d/0x1b0 [ 107.492565][ T6658] do_syscall_64+0x166/0x520 [ 107.492583][ T6658] ? trace_irq_disable+0x3b/0x140 [ 107.492601][ T6658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.492621][ T6658] ? clear_bhb_loop+0x70/0xc0 [ 107.492642][ T6658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.492662][ T6658] RIP: 0033:0x7f19c039e159 [ 107.492680][ T6658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.492696][ T6658] RSP: 002b:00007f19c1273028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.492718][ T6658] RAX: ffffffffffffffda RBX: 00007f19c0625fa0 RCX: 00007f19c039e159 [ 107.492732][ T6658] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 107.492743][ T6658] RBP: 00007f19c043506b R08: 0000000000000248 R09: 0000000000000000 [ 107.492755][ T6658] R10: 00002000000019c0 R11: 0000000000000246 R12: 0000000000000000 [ 107.492768][ T6658] R13: 00007f19c0626038 R14: 00007f19c0625fa0 R15: 00007fff36872d28 [ 107.492799][ T6658] [ 107.558850][ T6658] syz.5.274: vmalloc error: size 48, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 107.558991][ T6658] CPU: 1 UID: 0 PID: 6658 Comm: syz.5.274 Not tainted syzkaller #0 PREEMPT(full) [ 107.559012][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.559032][ T6658] Call Trace: [ 107.559039][ T6658] [ 107.559047][ T6658] dump_stack_lvl+0xe8/0x150 [ 107.559071][ T6658] warn_alloc+0x24d/0x270 [ 107.559091][ T6658] ? lockdep_hardirqs_on+0x7b/0x110 [ 107.559112][ T6658] ? __pfx_warn_alloc+0x10/0x10 [ 107.559130][ T6658] ? kfree+0x1c5/0x650 [ 107.559152][ T6658] ? __get_vm_area_node+0x219/0x2f0 [ 107.559178][ T6658] __vmalloc_node_range_noprof+0x396/0x16f0 [ 107.559198][ T6658] ? pcpu_alloc_noprof+0x1036/0x1900 [ 107.559234][ T6658] ? translate_table+0x1d10/0x1f80 [ 107.559261][ T6658] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 107.559287][ T6658] ? __do_replace+0xb2/0x990 [ 107.559304][ T6658] vzalloc_noprof+0xb2/0xe0 [ 107.559321][ T6658] ? __do_replace+0xb2/0x990 [ 107.559341][ T6658] __do_replace+0xb2/0x990 [ 107.559370][ T6658] ? __pfx___do_replace+0x10/0x10 [ 107.559390][ T6658] ? _copy_from_user+0x94/0xb0 [ 107.559413][ T6658] do_ipt_set_ctl+0xb3c/0xe20 [ 107.559438][ T6658] ? rcu_is_watching+0x16/0xb0 [ 107.559458][ T6658] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 107.559491][ T6658] ? __mutex_unlock_slowpath+0x731/0x900 [ 107.559515][ T6658] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.559546][ T6658] nf_setsockopt+0x26f/0x290 [ 107.559565][ T6658] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 107.559587][ T6658] do_sock_setsockopt+0x17c/0x1b0 [ 107.559608][ T6658] __x64_sys_setsockopt+0x13d/0x1b0 [ 107.559632][ T6658] do_syscall_64+0x166/0x520 [ 107.559648][ T6658] ? trace_irq_disable+0x3b/0x140 [ 107.559665][ T6658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.559684][ T6658] ? clear_bhb_loop+0x70/0xc0 [ 107.559703][ T6658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.559721][ T6658] RIP: 0033:0x7f19c039e159 [ 107.559739][ T6658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.559755][ T6658] RSP: 002b:00007f19c1273028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.559773][ T6658] RAX: ffffffffffffffda RBX: 00007f19c0625fa0 RCX: 00007f19c039e159 [ 107.559788][ T6658] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 107.559799][ T6658] RBP: 00007f19c043506b R08: 0000000000000248 R09: 0000000000000000 [ 107.559810][ T6658] R10: 00002000000019c0 R11: 0000000000000246 R12: 0000000000000000 [ 107.559822][ T6658] R13: 00007f19c0626038 R14: 00007f19c0625fa0 R15: 00007fff36872d28 [ 107.559851][ T6658] [ 107.559865][ T6658] Mem-Info: [ 107.559878][ T6658] active_anon:17595 inactive_anon:0 isolated_anon:0 [ 107.559878][ T6658] active_file:0 inactive_file:53031 isolated_file:0 [ 107.559878][ T6658] unevictable:0 dirty:755 writeback:0 [ 107.559878][ T6658] slab_reclaimable:11091 slab_unreclaimable:98519 [ 107.559878][ T6658] mapped:34371 shmem:11205 pagetables:1359 [ 107.559878][ T6658] sec_pagetables:0 bounce:0 [ 107.559878][ T6658] kernel_misc_reclaimable:0 [ 107.559878][ T6658] free:1305804 free_pcp:11270 free_cma:0 [ 107.559927][ T6658] Node 0 active_anon:70380kB inactive_anon:0kB active_file:0kB inactive_file:211928kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137484kB dirty:3016kB writeback:0kB shmem:44820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12432kB pagetables:5308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 107.559979][ T6658] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 107.560031][ T6658] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.560088][ T6658] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 107.560121][ T6658] Node 0 DMA32 free:1272116kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:70380kB inactive_anon:0kB active_file:0kB inactive_file:211928kB unevictable:0kB writepending:3080kB zspages:0kB present:3129332kB managed:2546328kB mlocked:0kB bounce:0kB free_pcp:45080kB local_pcp:29812kB free_cma:0kB [ 107.560176][ T6658] lowmem_reserve[]: 0 0 0 0 0 [ 107.592861][ T6658] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.592915][ T6658] lowmem_reserve[]: 0 0 0 0 0 [ 107.592948][ T6658] Node 1 Normal free:3935740kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.593001][ T6658] lowmem_reserve[]: 0 0 0 0 0 [ 107.593042][ T6658] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 107.593153][ T6658] Node 0 DMA32: 11*4kB (ME) 55*8kB (UME) 9*16kB (E) 130*32kB (UME) 226*64kB (UME) 99*128kB (UME) 48*256kB (UME) 14*512kB (UM) 12*1024kB (UM) 2*2048kB (ME) 294*4096kB (UM) = 1271988kB [ 107.593302][ T6658] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 107.593394][ T6658] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 7*16kB (UM) 7*32kB (UM) 8*64kB (UM) 5*128kB (UM) 4*256kB (UM) 6*512kB (UM) 2*1024kB (UM) 0*2048kB 959*4096kB (M) = 3935740kB [ 107.593534][ T6658] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.593549][ T6658] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.593564][ T6658] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.593579][ T6658] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.593593][ T6658] 64313 total pagecache pages [ 107.593609][ T6658] 0 pages in swap cache [ 107.593616][ T6658] Free swap = 124996kB [ 107.593622][ T6658] Total swap = 124996kB [ 107.593629][ T6658] 2097051 pages RAM [ 107.593636][ T6658] 0 pages HighMem/MovableOnly [ 107.593643][ T6658] 428853 pages reserved [ 107.593651][ T6658] 0 pages cma reserved [ 107.665732][ T5613] syz-executor: attempt to access beyond end of device [ 107.665732][ T5613] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 107.689722][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 107.689747][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.689758][ T5613] Call Trace: [ 107.689766][ T5613] [ 107.689773][ T5613] dump_stack_lvl+0xe8/0x150 [ 107.689797][ T5613] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 107.689823][ T5613] f2fs_write_end_bio+0xda7/0x11c0 [ 107.689857][ T5613] __submit_merged_bio+0x258/0x6a0 [ 107.689876][ T5613] ? rcu_is_watching+0x16/0xb0 [ 107.689899][ T5613] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 107.689922][ T5613] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 107.689964][ T5613] f2fs_write_data_pages+0x2a13/0x36e0 [ 107.690024][ T5613] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 107.690040][ T5613] ? is_bpf_text_address+0x26/0x2b0 [ 107.690069][ T5613] ? arch_stack_walk+0xfb/0x150 [ 107.690114][ T5613] ? add_lock_to_list+0xc7/0x100 [ 107.690134][ T5613] ? lockdep_unlock+0x5c/0xd0 [ 107.690149][ T5613] ? __lock_acquire+0x1511/0x2de0 [ 107.690192][ T5613] ? do_raw_spin_lock+0x12b/0x2f0 [ 107.690220][ T5613] ? do_raw_spin_unlock+0xf5/0x200 [ 107.690238][ T5613] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 107.690258][ T5613] do_writepages+0x338/0x560 [ 107.690287][ T5613] ? do_raw_spin_unlock+0xf5/0x200 [ 107.690309][ T5613] filemap_fdatawrite+0x1e9/0x2f0 [ 107.690330][ T5613] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 107.690393][ T5613] ? do_raw_spin_unlock+0xf5/0x200 [ 107.690416][ T5613] f2fs_sync_dirty_inodes+0x471/0x970 [ 107.690448][ T5613] f2fs_write_checkpoint+0x860/0x24d0 [ 107.690499][ T5613] kill_f2fs_super+0x2dc/0x700 [ 107.690522][ T5613] ? rcu_do_enqueue+0x616/0x870 [ 107.690539][ T5613] ? lockdep_hardirqs_on+0x7b/0x110 [ 107.690557][ T5613] ? __pfx_kill_f2fs_super+0x10/0x10 [ 107.690590][ T5613] ? __pfx_call_rcu+0x10/0x10 [ 107.690613][ T5613] ? shrinker_free+0x2a7/0x3b0 [ 107.690634][ T5613] deactivate_locked_super+0xbe/0x110 [ 107.690654][ T5613] cleanup_mnt+0x3d3/0x460 [ 107.690676][ T5613] task_work_run+0x1d9/0x260 [ 107.690698][ T5613] ? __pfx_task_work_run+0x10/0x10 [ 107.690725][ T5613] exit_to_user_mode_loop+0x204/0x770 [ 107.690742][ T5613] ? rcu_is_watching+0x16/0xb0 [ 107.690764][ T5613] do_syscall_64+0x328/0x520 [ 107.690781][ T5613] ? trace_irq_disable+0x3b/0x140 [ 107.690797][ T5613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.690815][ T5613] ? clear_bhb_loop+0x70/0xc0 [ 107.690836][ T5613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.690853][ T5613] RIP: 0033:0x7f40b0d9f397 [ 107.690870][ T5613] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 107.690884][ T5613] RSP: 002b:00007ffc0f10b048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 107.690903][ T5613] RAX: 0000000000000000 RBX: 00007f40b0e344bb RCX: 00007f40b0d9f397 [ 107.690916][ T5613] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0f10b100 [ 107.690927][ T5613] RBP: 00007ffc0f10b100 R08: 00007ffc0f10c100 R09: 00000000ffffffff [ 107.690939][ T5613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0f10c190 [ 107.690950][ T5613] R13: 00007f40b0e344bb R14: 000000000001a3af R15: 00007ffc0f10c1d0 [ 107.690980][ T5613] [ 107.708376][ T5613] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 107.708471][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 107.708493][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.708502][ T5613] Call Trace: [ 107.708509][ T5613] [ 107.708516][ T5613] dump_stack_lvl+0xe8/0x150 [ 107.708539][ T5613] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 107.708564][ T5613] f2fs_write_end_bio+0xda7/0x11c0 [ 107.708600][ T5613] __submit_merged_bio+0x258/0x6a0 [ 107.708617][ T5613] ? rcu_is_watching+0x16/0xb0 [ 107.708640][ T5613] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 107.708662][ T5613] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 107.708704][ T5613] f2fs_write_data_pages+0x2a13/0x36e0 [ 107.708756][ T5613] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 107.708773][ T5613] ? is_bpf_text_address+0x26/0x2b0 [ 107.708802][ T5613] ? arch_stack_walk+0xfb/0x150 [ 107.708846][ T5613] ? add_lock_to_list+0xc7/0x100 [ 107.708865][ T5613] ? lockdep_unlock+0x5c/0xd0 [ 107.708880][ T5613] ? __lock_acquire+0x1511/0x2de0 [ 107.708923][ T5613] ? do_raw_spin_lock+0x12b/0x2f0 [ 107.708951][ T5613] ? do_raw_spin_unlock+0xf5/0x200 [ 107.708969][ T5613] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 107.708989][ T5613] do_writepages+0x338/0x560 [ 107.709023][ T5613] ? do_raw_spin_unlock+0xf5/0x200 [ 107.709045][ T5613] filemap_fdatawrite+0x1e9/0x2f0 [ 107.709066][ T5613] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 107.709128][ T5613] ? do_raw_spin_unlock+0xf5/0x200 [ 107.709149][ T5613] f2fs_sync_dirty_inodes+0x471/0x970 [ 107.709182][ T5613] f2fs_write_checkpoint+0x860/0x24d0 [ 107.709235][ T5613] kill_f2fs_super+0x2dc/0x700 [ 107.709256][ T5613] ? rcu_do_enqueue+0x616/0x870 [ 107.709273][ T5613] ? lockdep_hardirqs_on+0x7b/0x110 [ 107.709292][ T5613] ? __pfx_kill_f2fs_super+0x10/0x10 [ 107.709325][ T5613] ? __pfx_call_rcu+0x10/0x10 [ 107.709350][ T5613] ? shrinker_free+0x2a7/0x3b0 [ 107.709371][ T5613] deactivate_locked_super+0xbe/0x110 [ 107.709392][ T5613] cleanup_mnt+0x3d3/0x460 [ 107.709414][ T5613] task_work_run+0x1d9/0x260 [ 107.709435][ T5613] ? __pfx_task_work_run+0x10/0x10 [ 107.709461][ T5613] exit_to_user_mode_loop+0x204/0x770 [ 107.709478][ T5613] ? rcu_is_watching+0x16/0xb0 [ 107.709500][ T5613] do_syscall_64+0x328/0x520 [ 107.709516][ T5613] ? trace_irq_disable+0x3b/0x140 [ 107.709533][ T5613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.709550][ T5613] ? clear_bhb_loop+0x70/0xc0 [ 107.709570][ T5613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.709588][ T5613] RIP: 0033:0x7f40b0d9f397 [ 107.709605][ T5613] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 107.709618][ T5613] RSP: 002b:00007ffc0f10b048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 107.709637][ T5613] RAX: 0000000000000000 RBX: 00007f40b0e344bb RCX: 00007f40b0d9f397 [ 107.709649][ T5613] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0f10b100 [ 107.709660][ T5613] RBP: 00007ffc0f10b100 R08: 00007ffc0f10c100 R09: 00000000ffffffff [ 107.709672][ T5613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0f10c190 [ 107.709683][ T5613] R13: 00007f40b0e344bb R14: 000000000001a3af R15: 00007ffc0f10c1d0 [ 107.709713][ T5613] [ 107.725674][ T5613] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 109.200504][ T6672] loop0: detected capacity change from 0 to 128 [ 109.256865][ T6672] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 109.336176][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.452827][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 109.454807][ T6676] FAULT_INJECTION: forcing a failure. [ 109.454807][ T6676] name failslab, interval 1, probability 0, space 0, times 0 [ 109.454834][ T6676] CPU: 1 UID: 0 PID: 6676 Comm: syz.5.281 Not tainted syzkaller #0 PREEMPT(full) [ 109.454854][ T6676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.454866][ T6676] Call Trace: [ 109.454872][ T6676] [ 109.454880][ T6676] dump_stack_lvl+0xe8/0x150 [ 109.454906][ T6676] should_fail_ex+0x3eb/0x540 [ 109.454931][ T6676] should_failslab+0xa8/0x100 [ 109.454952][ T6676] __kmalloc_noprof+0xf9/0x710 [ 109.454970][ T6676] ? __kmalloc_cache_noprof+0x148/0x600 [ 109.454987][ T6676] ? mpi_alloc+0x77/0x140 [ 109.455003][ T6676] ? mpi_alloc+0x77/0x140 [ 109.455026][ T6676] mpi_alloc+0x77/0x140 [ 109.455045][ T6676] mpi_read_raw_data+0x139/0x970 [ 109.455072][ T6676] dh_set_secret+0x193/0x320 [ 109.455089][ T6676] ? crypto_create_tfm_node+0x81/0x3c0 [ 109.455112][ T6676] ? __pfx_dh_set_secret+0x10/0x10 [ 109.455134][ T6676] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 109.455164][ T6676] __keyctl_dh_compute+0x5ae/0xd10 [ 109.455193][ T6676] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 109.455237][ T6676] ? __might_fault+0xaf/0x130 [ 109.455262][ T6676] keyctl_dh_compute+0x124/0x180 [ 109.455282][ T6676] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 109.455316][ T6676] __se_sys_keyctl+0x44c/0xbc0 [ 109.455337][ T6676] ? __pfx___se_sys_keyctl+0x10/0x10 [ 109.455366][ T6676] ? __pfx_do_futex+0x10/0x10 [ 109.455392][ T6676] ? __se_sys_futex+0x3a8/0x450 [ 109.455417][ T6676] ? rcu_is_watching+0x16/0xb0 [ 109.455443][ T6676] ? __x64_sys_keyctl+0x20/0xc0 [ 109.455463][ T6676] do_syscall_64+0x166/0x520 [ 109.455479][ T6676] ? trace_irq_disable+0x3b/0x140 [ 109.455496][ T6676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.455515][ T6676] ? clear_bhb_loop+0x70/0xc0 [ 109.455536][ T6676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.455555][ T6676] RIP: 0033:0x7f19c039e159 [ 109.455573][ T6676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.455587][ T6676] RSP: 002b:00007f19c1273028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 109.455607][ T6676] RAX: ffffffffffffffda RBX: 00007f19c0625fa0 RCX: 00007f19c039e159 [ 109.455621][ T6676] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000017 [ 109.455633][ T6676] RBP: 00007f19c043506b R08: 0000200000000200 R09: 0000000000000000 [ 109.455646][ T6676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.455657][ T6676] R13: 00007f19c0626038 R14: 00007f19c0625fa0 R15: 00007fff36872d28 [ 109.455685][ T6676] [ 109.521594][ T27] usb 4-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 109.523426][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.523467][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.523487][ T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.523508][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.523544][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.915002][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 110.194153][ T32] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.250431][ T6697] FAULT_INJECTION: forcing a failure. [ 110.250431][ T6697] name failslab, interval 1, probability 0, space 0, times 0 [ 110.250484][ T6697] CPU: 1 UID: 0 PID: 6697 Comm: syz.2.289 Not tainted syzkaller #0 PREEMPT(full) [ 110.250506][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.250518][ T6697] Call Trace: [ 110.250525][ T6697] [ 110.250533][ T6697] dump_stack_lvl+0xe8/0x150 [ 110.250559][ T6697] should_fail_ex+0x3eb/0x540 [ 110.250585][ T6697] should_failslab+0xa8/0x100 [ 110.250609][ T6697] __kmalloc_cache_noprof+0x9e/0x600 [ 110.250629][ T6697] ? __local_bh_enable_ip+0xd6/0x140 [ 110.250649][ T6697] ? igmp6_group_dropped+0x5f0/0x1190 [ 110.250668][ T6697] ? igmp6_group_dropped+0x5f0/0x1190 [ 110.250695][ T6697] igmp6_group_dropped+0x5f0/0x1190 [ 110.250721][ T6697] ? __pfx___mutex_lock+0x10/0x10 [ 110.250744][ T6697] ? __pfx_igmp6_group_dropped+0x10/0x10 [ 110.250766][ T6697] ? __lock_acquire+0x747/0x2de0 [ 110.250794][ T6697] __ipv6_dev_mc_dec+0x2c8/0x3a0 [ 110.250824][ T6697] addrconf_leave_solict+0x11c/0x1a0 [ 110.250845][ T6697] ? __pfx_addrconf_leave_solict+0x10/0x10 [ 110.250867][ T6697] ? __local_bh_enable_ip+0xd6/0x140 [ 110.250890][ T6697] __ipv6_dev_ac_dec+0x51d/0x660 [ 110.250920][ T6697] __ipv6_sock_ac_close+0x23f/0x420 [ 110.250945][ T6697] inet6_release+0x4f/0x70 [ 110.250964][ T6697] __sock_release+0xa0/0x1f0 [ 110.250984][ T6697] ? __pfx_sock_close+0x10/0x10 [ 110.251002][ T6697] sock_close+0x1c/0x30 [ 110.251019][ T6697] __fput+0x413/0xa50 [ 110.251046][ T6697] fput_close_sync+0x11f/0x240 [ 110.251065][ T6697] ? __pfx_fput_close_sync+0x10/0x10 [ 110.251084][ T6697] ? do_raw_spin_unlock+0xf5/0x200 [ 110.251112][ T6697] __se_sys_close+0xa2/0x160 [ 110.251133][ T6697] do_syscall_64+0x166/0x520 [ 110.251150][ T6697] ? trace_irq_disable+0x3b/0x140 [ 110.251168][ T6697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.251188][ T6697] ? clear_bhb_loop+0x70/0xc0 [ 110.251209][ T6697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.251228][ T6697] RIP: 0033:0x7f40b0d9e159 [ 110.251246][ T6697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.251262][ T6697] RSP: 002b:00007f40aeff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 110.251291][ T6697] RAX: ffffffffffffffda RBX: 00007f40b1025fa0 RCX: 00007f40b0d9e159 [ 110.251306][ T6697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 110.251317][ T6697] RBP: 00007f40b0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 110.251330][ T6697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.251341][ T6697] R13: 00007f40b1026038 R14: 00007f40b1025fa0 R15: 00007ffc0f10bdd8 [ 110.251373][ T6697] [ 110.459656][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.459703][ T32] usb 2-1: New USB device found: idVendor=0763, idProduct=2030, bcdDevice=0.40 [ 110.463713][ T32] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 110.463753][ T32] usb 2-1: can't read configurations, error -71 [ 110.855683][ T27] gud 4-1:1.0: Failed to get connectors (error=-71) [ 110.855722][ T27] gud 4-1:1.0: probe with driver gud failed with error -71 [ 110.903268][ T27] usb 4-1: USB disconnect, device number 5 [ 111.751287][ T47] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.819289][ T6742] Unknown status report in ack skb [ 111.904849][ T47] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.977264][ T47] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.088246][ T47] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.293445][ T6758] FAULT_INJECTION: forcing a failure. [ 112.293445][ T6758] name failslab, interval 1, probability 0, space 0, times 0 [ 112.293473][ T6758] CPU: 0 UID: 0 PID: 6758 Comm: syz.1.308 Not tainted syzkaller #0 PREEMPT(full) [ 112.293495][ T6758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.293506][ T6758] Call Trace: [ 112.293513][ T6758] [ 112.293521][ T6758] dump_stack_lvl+0xe8/0x150 [ 112.293546][ T6758] should_fail_ex+0x3eb/0x540 [ 112.293569][ T6758] ? __pfx_kvm_gmem_alloc_inode+0x10/0x10 [ 112.293595][ T6758] should_failslab+0xa8/0x100 [ 112.293615][ T6758] ? __pfx_kvm_gmem_alloc_inode+0x10/0x10 [ 112.293632][ T6758] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 112.293655][ T6758] ? kvm_gmem_alloc_inode+0x2c/0x140 [ 112.293671][ T6758] ? kvm_gmem_alloc_inode+0x2c/0x140 [ 112.293694][ T6758] ? __pfx_kvm_gmem_alloc_inode+0x10/0x10 [ 112.293712][ T6758] kvm_gmem_alloc_inode+0x2c/0x140 [ 112.293730][ T6758] ? __pfx_kvm_gmem_alloc_inode+0x10/0x10 [ 112.293747][ T6758] alloc_inode+0x6a/0x1b0 [ 112.293768][ T6758] alloc_anon_inode+0x1e/0x330 [ 112.293789][ T6758] anon_inode_make_secure_inode+0x7b/0x180 [ 112.293809][ T6758] ? __kasan_kmalloc+0x93/0xb0 [ 112.293829][ T6758] ? __pfx_anon_inode_make_secure_inode+0x10/0x10 [ 112.293849][ T6758] ? __kmalloc_cache_noprof+0x148/0x600 [ 112.293866][ T6758] ? kvm_gmem_create+0x1a2/0x870 [ 112.293883][ T6758] ? kvm_gmem_create+0x1a2/0x870 [ 112.293909][ T6758] kvm_gmem_create+0x1f9/0x870 [ 112.293932][ T6758] ? __pfx_kvm_gmem_create+0x10/0x10 [ 112.293959][ T6758] ? __might_fault+0xaf/0x130 [ 112.293984][ T6758] kvm_vm_ioctl+0x97c/0xcb0 [ 112.294005][ T6758] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 112.294035][ T6758] ? kasan_quarantine_put+0xbb/0x1f0 [ 112.294063][ T6758] ? tomoyo_path_number_perm+0x219/0x5f0 [ 112.294083][ T6758] ? tomoyo_path_number_perm+0x219/0x5f0 [ 112.294106][ T6758] ? do_vfs_ioctl+0x116f/0x1530 [ 112.294126][ T6758] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 112.294156][ T6758] ? do_futex+0x3e7/0x4e0 [ 112.294191][ T6758] ? __fget_files+0x2a/0x420 [ 112.294213][ T6758] ? __fget_files+0x2a/0x420 [ 112.294234][ T6758] ? bpf_lsm_file_ioctl+0x9/0x20 [ 112.294252][ T6758] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 112.294269][ T6758] __se_sys_ioctl+0xfc/0x170 [ 112.294289][ T6758] do_syscall_64+0x166/0x520 [ 112.294306][ T6758] ? trace_irq_disable+0x3b/0x140 [ 112.294322][ T6758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.294342][ T6758] ? clear_bhb_loop+0x70/0xc0 [ 112.294361][ T6758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.294380][ T6758] RIP: 0033:0x7fb7e579e159 [ 112.294398][ T6758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.294412][ T6758] RSP: 002b:00007fb7e6724028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.294434][ T6758] RAX: ffffffffffffffda RBX: 00007fb7e5a25fa0 RCX: 00007fb7e579e159 [ 112.294449][ T6758] RDX: 00002000000001c0 RSI: 00000000c040aed4 RDI: 0000000000000004 [ 112.294461][ T6758] RBP: 00007fb7e583506b R08: 0000000000000000 R09: 0000000000000000 [ 112.294473][ T6758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.294485][ T6758] R13: 00007fb7e5a26038 R14: 00007fb7e5a25fa0 R15: 00007ffeea44f788 [ 112.294515][ T6758] [ 112.664758][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.666114][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.666800][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.671148][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.679088][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.756772][ T47] bridge_slave_1: left allmulticast mode [ 112.756795][ T47] bridge_slave_1: left promiscuous mode [ 112.756995][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.792641][ T47] bridge_slave_0: left allmulticast mode [ 112.792663][ T47] bridge_slave_0: left promiscuous mode [ 112.792853][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.934480][ T6774] FAULT_INJECTION: forcing a failure. [ 112.934480][ T6774] name failslab, interval 1, probability 0, space 0, times 0 [ 112.934509][ T6774] CPU: 1 UID: 0 PID: 6774 Comm: syz.2.312 Not tainted syzkaller #0 PREEMPT(full) [ 112.934529][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.934541][ T6774] Call Trace: [ 112.934549][ T6774] [ 112.934557][ T6774] dump_stack_lvl+0xe8/0x150 [ 112.934582][ T6774] should_fail_ex+0x3eb/0x540 [ 112.934610][ T6774] should_failslab+0xa8/0x100 [ 112.934630][ T6774] ? vm_area_dup+0x28/0x760 [ 112.934649][ T6774] kmem_cache_alloc_noprof+0x9c/0x600 [ 112.934672][ T6774] ? vm_area_dup+0x28/0x760 [ 112.934698][ T6774] vm_area_dup+0x28/0x760 [ 112.934714][ T6774] ? dup_mmap+0x875/0x1dc0 [ 112.934735][ T6774] dup_mmap+0x87d/0x1dc0 [ 112.934772][ T6774] ? __pfx_dup_mmap+0x10/0x10 [ 112.934791][ T6774] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.934826][ T6774] ? lock_acquire+0x115/0x350 [ 112.934863][ T6774] copy_mm+0x115/0x470 [ 112.934885][ T6774] copy_process+0x1ea2/0x4430 [ 112.934917][ T6774] ? copy_process+0xd11/0x4430 [ 112.934955][ T6774] ? __pfx_copy_process+0x10/0x10 [ 112.934986][ T6774] kernel_clone+0x2d7/0x940 [ 112.935011][ T6774] ? __pfx_kernel_clone+0x10/0x10 [ 112.935048][ T6774] ? do_futex+0x3e7/0x4e0 [ 112.935075][ T6774] __x64_sys_clone+0x1b6/0x230 [ 112.935098][ T6774] ? __pfx___x64_sys_clone+0x10/0x10 [ 112.935132][ T6774] ? rcu_is_watching+0x16/0xb0 [ 112.935164][ T6774] do_syscall_64+0x166/0x520 [ 112.935182][ T6774] ? trace_irq_disable+0x3b/0x140 [ 112.935200][ T6774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.935219][ T6774] ? clear_bhb_loop+0x70/0xc0 [ 112.935241][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.935260][ T6774] RIP: 0033:0x7f40b0d9e159 [ 112.935278][ T6774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.935293][ T6774] RSP: 002b:00007f40aeff5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 112.935314][ T6774] RAX: ffffffffffffffda RBX: 00007f40b1025fa0 RCX: 00007f40b0d9e159 [ 112.935329][ T6774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400 [ 112.935340][ T6774] RBP: 00007f40b0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 112.935352][ T6774] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 112.935362][ T6774] R13: 00007f40b1026038 R14: 00007f40b1025fa0 R15: 00007ffc0f10bdd8 [ 112.935395][ T6774] [ 113.401233][ T6787] FAULT_INJECTION: forcing a failure. [ 113.401233][ T6787] name failslab, interval 1, probability 0, space 0, times 0 [ 113.401263][ T6787] CPU: 1 UID: 0 PID: 6787 Comm: syz.1.317 Not tainted syzkaller #0 PREEMPT(full) [ 113.401286][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.401297][ T6787] Call Trace: [ 113.401305][ T6787] [ 113.401314][ T6787] dump_stack_lvl+0xe8/0x150 [ 113.401340][ T6787] should_fail_ex+0x3eb/0x540 [ 113.401366][ T6787] should_failslab+0xa8/0x100 [ 113.401390][ T6787] __kmalloc_cache_noprof+0x9e/0x600 [ 113.401412][ T6787] ? sctp_association_new+0x89/0x25d0 [ 113.401431][ T6787] ? sctp_association_new+0x89/0x25d0 [ 113.401457][ T6787] sctp_association_new+0x89/0x25d0 [ 113.401487][ T6787] sctp_connect_new_asoc+0x2e4/0x6b0 [ 113.401510][ T6787] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 113.401536][ T6787] ? __local_bh_enable_ip+0xd6/0x140 [ 113.401555][ T6787] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 113.401572][ T6787] ? security_sctp_bind_connect+0x7e/0x2c0 [ 113.401595][ T6787] sctp_sendmsg+0x159b/0x2d00 [ 113.401628][ T6787] ? __pfx_sctp_sendmsg+0x10/0x10 [ 113.401645][ T6787] ? finish_task_switch+0x40e/0xc60 [ 113.401668][ T6787] ? __lock_acquire+0x747/0x2de0 [ 113.401700][ T6787] ? aa_sock_msg_perm+0xfc/0x210 [ 113.401718][ T6787] ? sock_rps_record_flow+0x19/0x350 [ 113.401741][ T6787] ? inet_sendmsg+0x298/0x320 [ 113.401761][ T6787] ? __pfx_inet_sendmsg+0x10/0x10 [ 113.401778][ T6787] sock_sendmsg_nosec+0x10f/0x190 [ 113.401801][ T6787] ____sys_sendmsg+0x54e/0x850 [ 113.401827][ T6787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.401855][ T6787] ? import_iovec+0x73/0xa0 [ 113.401878][ T6787] ___sys_sendmsg+0x2a5/0x360 [ 113.401894][ T6787] ? __lock_acquire+0x747/0x2de0 [ 113.401917][ T6787] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.401943][ T6787] ? __pfx_futex_wake_mark+0x10/0x10 [ 113.401999][ T6787] ? __fget_files+0x3a2/0x420 [ 113.402018][ T6787] ? __fget_files+0x2a/0x420 [ 113.402044][ T6787] __sys_sendmmsg+0x273/0x4d0 [ 113.402070][ T6787] ? __pfx___sys_sendmmsg+0x10/0x10 [ 113.402087][ T6787] ? do_futex+0x3e7/0x4e0 [ 113.402114][ T6787] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 113.402153][ T6787] ? rcu_is_watching+0x16/0xb0 [ 113.402181][ T6787] __x64_sys_sendmmsg+0xa0/0xc0 [ 113.402202][ T6787] do_syscall_64+0x166/0x520 [ 113.402220][ T6787] ? trace_irq_disable+0x3b/0x140 [ 113.402237][ T6787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.402257][ T6787] ? clear_bhb_loop+0x70/0xc0 [ 113.402278][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.402297][ T6787] RIP: 0033:0x7fb7e579e159 [ 113.402315][ T6787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.402330][ T6787] RSP: 002b:00007fb7e6724028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.402351][ T6787] RAX: ffffffffffffffda RBX: 00007fb7e5a25fa0 RCX: 00007fb7e579e159 [ 113.402365][ T6787] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 113.402380][ T6787] RBP: 00007fb7e583506b R08: 0000000000000000 R09: 0000000000000000 [ 113.402392][ T6787] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.402404][ T6787] R13: 00007fb7e5a26038 R14: 00007fb7e5a25fa0 R15: 00007ffeea44f788 [ 113.402436][ T6787] [ 113.418751][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.502440][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.553663][ T47] bond0 (unregistering): Released all slaves [ 113.580723][ T6756] loop0: detected capacity change from 0 to 32768 [ 113.615344][ T6756] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.307 (6756) [ 113.799537][ T6756] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 113.799568][ T6756] BTRFS info (device loop0): using blake2b checksum algorithm [ 113.976826][ T6756] BTRFS info (device loop0): enabling ssd optimizations [ 113.976852][ T6756] BTRFS info (device loop0): turning on async discard [ 113.976867][ T6756] BTRFS info (device loop0): enabling free space tree [ 113.976883][ T6756] BTRFS info (device loop0): use zstd compression, level 3 [ 114.083967][ T6816] ip_tables: iptables: counters copy to user failed while replacing table [ 114.159390][ T33] kauditd_printk_skb: 1 callbacks suppressed [ 114.159407][ T33] audit: type=1800 audit(1790831527.413:15): pid=6756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.307" name="file1" dev="loop0" ino=260 res=0 errno=-22 [ 114.472196][ T47] hsr_slave_0: left promiscuous mode [ 114.491208][ T47] hsr_slave_1: left promiscuous mode [ 114.492069][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.492089][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.509881][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.509900][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.591247][ T47] veth1_macvtap: left promiscuous mode [ 114.591307][ T47] veth0_macvtap: left promiscuous mode [ 114.591972][ T47] veth1_vlan: left promiscuous mode [ 114.593796][ T47] veth0_vlan: left promiscuous mode [ 114.776998][ T5618] Bluetooth: hci2: command tx timeout [ 114.813482][ T5607] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 115.777638][ T6852] netlink: 'syz.3.328': attribute type 6 has an invalid length. [ 115.777658][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 115.939568][ T47] team0 (unregistering): Port device team_slave_1 removed [ 116.572120][ T47] team0 (unregistering): Port device team_slave_0 removed [ 116.854183][ T5618] Bluetooth: hci2: command tx timeout [ 118.897478][ T33] audit: type=1800 audit(1790831532.153:16): pid=6856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.330" name="regulatory.db" dev="sda1" ino=448 res=0 errno=-4 [ 118.900145][ T6856] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 118.900183][ T6856] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 118.900200][ T6856] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 118.936106][ T5618] Bluetooth: hci2: command tx timeout [ 119.200660][ T6874] batman_adv: batadv0: Adding interface: syzkaller0 [ 119.200679][ T6874] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.200705][ T6874] batman_adv: batadv0: Interface activated: syzkaller0 [ 119.622482][ T6869] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 119.719460][ T6869] batman_adv: batadv0: Removing interface: syzkaller0 [ 119.973512][ T6902] loop1: detected capacity change from 0 to 512 [ 120.123882][ T6902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.124889][ T6902] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.359402][ T6902] EXT4-fs error (device loop1): ext4_get_first_dir_block:3539: inode #12: comm syz.1.340: Directory hole found for htree leaf block 0 [ 120.406596][ T6902] EXT4-fs (loop1): Remounting filesystem read-only [ 120.504874][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.691480][ T6898] loop3: detected capacity change from 0 to 32768 [ 120.703650][ T6765] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.703742][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.703868][ T6765] bridge_slave_0: entered allmulticast mode [ 120.733146][ T6765] bridge_slave_0: entered promiscuous mode [ 120.738320][ T6765] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.738413][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.738523][ T6765] bridge_slave_1: entered allmulticast mode [ 120.743623][ T6765] bridge_slave_1: entered promiscuous mode [ 120.797010][ T6936] loop0: detected capacity change from 0 to 2048 [ 120.854563][ T6898] JBD2: Ignoring recovery information on journal [ 120.890935][ T6936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.923352][ T6937] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 120.947501][ T6765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.972425][ T6765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.007458][ T5618] Bluetooth: hci2: command tx timeout [ 121.019190][ T6943] FAULT_INJECTION: forcing a failure. [ 121.019190][ T6943] name failslab, interval 1, probability 0, space 0, times 0 [ 121.019222][ T6943] CPU: 1 UID: 0 PID: 6943 Comm: syz.2.347 Not tainted syzkaller #0 PREEMPT(full) [ 121.019244][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.019256][ T6943] Call Trace: [ 121.019263][ T6943] [ 121.019270][ T6943] dump_stack_lvl+0xe8/0x150 [ 121.019298][ T6943] should_fail_ex+0x3eb/0x540 [ 121.019323][ T6943] should_failslab+0xa8/0x100 [ 121.019346][ T6943] __kmalloc_cache_noprof+0x9e/0x600 [ 121.019365][ T6943] ? tipc_conn_alloc+0x57/0x4a0 [ 121.019383][ T6943] ? tipc_conn_alloc+0x57/0x4a0 [ 121.019406][ T6943] tipc_conn_alloc+0x57/0x4a0 [ 121.019429][ T6943] tipc_topsrv_kern_subscr+0xf8/0x250 [ 121.019448][ T6943] ? tipc_own_addr+0x45/0x2a0 [ 121.019466][ T6943] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 121.019489][ T6943] ? tipc_own_addr+0x45/0x2a0 [ 121.019508][ T6943] ? __asan_memset+0x22/0x50 [ 121.019528][ T6943] tipc_group_create+0x35b/0x4f0 [ 121.019554][ T6943] tipc_sk_join+0x25d/0x6a0 [ 121.019577][ T6943] ? __pfx_tipc_sk_join+0x10/0x10 [ 121.019592][ T6943] ? tipc_setsockopt+0x731/0x9a0 [ 121.019613][ T6943] ? __local_bh_enable_ip+0xd6/0x140 [ 121.019636][ T6943] tipc_setsockopt+0x73e/0x9a0 [ 121.019660][ T6943] ? __pfx_tipc_setsockopt+0x10/0x10 [ 121.019679][ T6943] ? aa_sock_opt_perm+0x142/0x1e0 [ 121.019701][ T6943] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 121.019718][ T6943] ? __pfx_tipc_setsockopt+0x10/0x10 [ 121.019738][ T6943] do_sock_setsockopt+0x17c/0x1b0 [ 121.019767][ T6943] __x64_sys_setsockopt+0x13d/0x1b0 [ 121.019791][ T6943] do_syscall_64+0x166/0x520 [ 121.019809][ T6943] ? trace_irq_disable+0x3b/0x140 [ 121.019827][ T6943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.019847][ T6943] ? clear_bhb_loop+0x70/0xc0 [ 121.019868][ T6943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.019888][ T6943] RIP: 0033:0x7f40b0d9e159 [ 121.019911][ T6943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.019926][ T6943] RSP: 002b:00007f40aeff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.019950][ T6943] RAX: ffffffffffffffda RBX: 00007f40b1025fa0 RCX: 00007f40b0d9e159 [ 121.019964][ T6943] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 121.019977][ T6943] RBP: 00007f40b0e3506b R08: 00000000000004bd R09: 0000000000000000 [ 121.019989][ T6943] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 121.020001][ T6943] R13: 00007f40b1026038 R14: 00007f40b1025fa0 R15: 00007ffc0f10bdd8 [ 121.020033][ T6943] [ 121.030851][ T6898] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 121.139624][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 121.148741][ T6765] team0: Port device team_slave_0 added [ 121.162415][ T6765] team0: Port device team_slave_1 added [ 121.355960][ T6765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.355975][ T6765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.355998][ T6765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.371617][ T6765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.371630][ T6765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.371648][ T6765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.430051][ T33] audit: type=1800 audit(1790831534.673:17): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.339" name="bus" dev="loop3" ino=17058 res=0 errno=-22 [ 121.530859][ T6936] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.586678][ T6765] hsr_slave_0: entered promiscuous mode [ 121.588099][ T6765] hsr_slave_1: entered promiscuous mode [ 121.588736][ T6765] debugfs: 'hsr0' already exists in 'hsr' [ 121.588751][ T6765] Cannot create hsr debugfs directory [ 121.642659][ T5604] ocfs2: Unmounting device (7,3) on (node local) [ 121.709749][ T5607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.727796][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.815518][ T6958] veth1_to_bond: entered allmulticast mode [ 121.817564][ T6958] veth1_to_bond: entered promiscuous mode [ 121.823766][ T6958] netlink: 148 bytes leftover after parsing attributes in process `syz.2.352'. [ 121.874562][ T9] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 121.882146][ T6958] bridge_slave_0 (unregistering): left allmulticast mode [ 121.882167][ T6958] bridge_slave_0 (unregistering): left promiscuous mode [ 121.882247][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.887973][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.932666][ T9] usb 2-1: config 0 descriptor?? [ 122.009863][ T6957] veth1_to_bond: left promiscuous mode [ 122.010080][ T6957] veth1_to_bond: left allmulticast mode [ 122.142775][ T6765] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 122.156271][ T6765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.157176][ T6765] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 122.160412][ T9] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 122.191443][ T6765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.213616][ T6765] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 122.221130][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 122.241346][ T6765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.303097][ T6765] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 122.318138][ T6765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.422777][ T9] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 122.422801][ T9] [drm] Initialized udl on minor 1 [ 122.568313][ T6765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.603650][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 122.623483][ T6765] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.639158][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 122.643292][ T9] usb 2-1: USB disconnect, device number 5 [ 122.649966][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.650065][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.700913][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.701012][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.838455][ T6976] loop2: detected capacity change from 0 to 32768 [ 122.844662][ T6976] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.356 (6976) [ 122.887085][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 122.901357][ T6976] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 122.901383][ T6976] BTRFS info (device loop2): using blake2b checksum algorithm [ 123.007968][ T6976] BTRFS info (device loop2): enabling ssd optimizations [ 123.007992][ T6976] BTRFS info (device loop2): turning on async discard [ 123.008008][ T6976] BTRFS info (device loop2): enabling free space tree [ 123.070525][ T33] audit: type=1800 audit(1790831536.323:18): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.356" name="file1" dev="loop2" ino=260 res=0 errno=-22 [ 123.222801][ T5613] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 123.569939][ T7017] kernel read not supported for file /file1 (pid: 7017 comm: syz.2.359) [ 123.596688][ T33] audit: type=1800 audit(1790831536.853:19): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.359" name="file1" dev="mqueue" ino=13971 res=0 errno=-22 [ 123.620132][ T7021] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 123.620155][ T7021] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 123.625889][ T7021] vhci_hcd vhci_hcd.0: Device attached [ 123.702113][ T7022] vhci_hcd: connection closed [ 123.718588][ T47] vhci_hcd vhci_hcd.1: stop threads [ 123.719047][ T47] vhci_hcd vhci_hcd.1: release socket [ 123.729762][ T47] vhci_hcd vhci_hcd.1: disconnect device [ 123.788300][ T27] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 123.936826][ T7031] loop2: detected capacity change from 0 to 128 [ 123.966990][ T7031] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 123.967048][ T7031] hpfs: filesystem error: improperly stopped [ 123.967062][ T7031] hpfs: You really don't want any checks? You are crazy... [ 123.967394][ T7031] hpfs: hpfs_map_sector(): read error [ 123.967404][ T7031] hpfs: code page support is disabled [ 123.967505][ T7031] hpfs: hpfs_map_4sectors(): unaligned read [ 123.967569][ T7031] hpfs: hpfs_map_4sectors(): unaligned read [ 123.967578][ T7031] hpfs: filesystem error: unable to find root dir [ 124.030918][ T7031] hpfs: hpfs_map_4sectors(): unaligned read [ 124.031373][ T7031] hpfs: hpfs_map_sector(): read error [ 124.046299][ T7031] hpfs: hpfs_map_4sectors(): unaligned read [ 124.046327][ T7031] hpfs: hpfs_map_sector(): read error [ 124.288625][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 124.315425][ T6990] loop3: detected capacity change from 0 to 65536 [ 124.351814][ T6765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.376897][ T6990] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 124.467445][ T6990] XFS (loop3): Ending clean mount [ 124.510492][ T33] audit: type=1326 audit(1790831537.763:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.2.366" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b0d9e159 code=0x7ffc0000 [ 124.510553][ T33] audit: type=1326 audit(1790831537.763:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.2.366" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b0d9e159 code=0x7ffc0000 [ 124.510594][ T33] audit: type=1326 audit(1790831537.763:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.2.366" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b0d9e159 code=0x7ffc0000 [ 124.510632][ T33] audit: type=1326 audit(1790831537.763:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.2.366" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b0d9e159 code=0x7ffc0000 [ 124.510670][ T33] audit: type=1326 audit(1790831537.763:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.2.366" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f40b0d9e159 code=0x7ffc0000 [ 124.511761][ T33] audit: type=1326 audit(1790831537.763:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.2.366" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b0d9e159 code=0x7ffc0000 [ 124.517509][ T6990] XFS (loop3): Quotacheck needed: Please wait. [ 124.557916][ T1277] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 [ 124.557963][ T1277] XFS (loop3): Unmount and run xfs_repair [ 124.557974][ T1277] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 124.557988][ T1277] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 124.558002][ T1277] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 124.558015][ T1277] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 124.558028][ T1277] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 124.558040][ T1277] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 124.567941][ T33] audit: type=1326 audit(1790831537.823:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.2.366" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f40b0d5e98e code=0x7ffc0000 [ 124.573761][ T1277] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 124.573778][ T1277] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 124.573790][ T1277] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 124.577523][ T1277] XFS (loop3): metadata I/O error in "xfs_read_agf+0x272/0x5c0" at daddr 0x1 len 1 error 74 [ 124.577702][ T1277] loop3: lost filesystem error report for type 5 error -117 [ 124.590525][ T6990] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 124.610447][ T6990] loop3: lost filesystem error report for type 5 error -117 [ 124.916119][ T5604] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 124.921687][ T5604] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 124.922047][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 125.179536][ T7070] bridge_slave_0: left allmulticast mode [ 125.179562][ T7070] bridge_slave_0: left promiscuous mode [ 125.179765][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.229465][ T7071] netlink: 'syz.1.369': attribute type 10 has an invalid length. [ 125.251647][ T7070] bridge_slave_1: left allmulticast mode [ 125.251671][ T7070] bridge_slave_1: left promiscuous mode [ 125.251895][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.303377][ T7070] bond0: (slave bond_slave_0): Releasing backup interface [ 125.348594][ T7070] bond0: (slave bond_slave_1): Releasing backup interface [ 125.434124][ T7070] team0: Port device team_slave_0 removed [ 125.463501][ T7070] team0: Port device team_slave_1 removed [ 125.488267][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.488289][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.508499][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.508518][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.534745][ T7070] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 125.587369][ T7078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.633793][ T7071] team0: Port device dummy0 added [ 125.806880][ T6765] veth0_vlan: entered promiscuous mode [ 125.838706][ T6765] veth1_vlan: entered promiscuous mode [ 125.884485][ T5739] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.940980][ T6765] veth0_macvtap: entered promiscuous mode [ 125.959966][ T6765] veth1_macvtap: entered promiscuous mode [ 125.979963][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 126.002935][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.021586][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.034563][ T5739] usb 1-1: Using ep0 maxpacket: 16 [ 126.036375][ T5739] usb 1-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 126.038537][ T5739] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.038564][ T5739] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.038584][ T5739] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 126.038621][ T5739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.057253][ T5739] usb 1-1: config 0 descriptor?? [ 126.107763][ T1277] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.107830][ T1277] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.107862][ T1277] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.107892][ T1277] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.233527][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.233545][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.295061][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.295082][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.391442][ T7100] ip_tables: iptables: counters copy to user failed while replacing table [ 126.670908][ T5739] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input6 [ 126.738322][ T7112] loop3: detected capacity change from 0 to 512 [ 126.771428][ T7112] EXT4-fs: Ignoring removed oldalloc option [ 126.808485][ T7112] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.379: dx entry: limit 1024 != root limit 124 [ 126.808516][ T7112] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.379: Corrupt directory, running e2fsck is recommended [ 126.836859][ T7112] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 126.836957][ T7112] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.379: corrupted in-inode xattr: invalid ea_ino [ 126.836983][ T7112] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 126.842759][ T7112] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.379: couldn't read orphan inode 15 (err -117) [ 126.842787][ T7112] loop3: lost filesystem error report for type 5 error -117 [ 126.844114][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 126.844134][ C0] EXT4-fs (loop3): initial error at time 1790831540: ext4_iget_extra_inode:5210: inode 15 [ 126.844163][ C0] EXT4-fs (loop3): last error at time 1790831540: ext4_orphan_get:1408 [ 126.861675][ T5739] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 126.877590][ T7112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.959276][ T7112] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.379: dx entry: limit 1024 != root limit 124 [ 126.959301][ T7112] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.379: Corrupt directory, running e2fsck is recommended [ 126.975646][ T7112] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.379: dx entry: limit 1024 != root limit 124 [ 126.975674][ T7112] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.379: Corrupt directory, running e2fsck is recommended [ 126.990161][ T7112] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.379: dx entry: limit 1024 != root limit 124 [ 126.990189][ T7112] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.379: Corrupt directory, running e2fsck is recommended [ 127.028125][ T7112] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.379: dx entry: limit 1024 != root limit 124 [ 127.028153][ T7112] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.379: Corrupt directory, running e2fsck is recommended [ 127.067955][ T7117] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 127.082208][ T5739] usb 1-1: USB disconnect, device number 5 [ 127.088577][ T7112] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.379: dx entry: limit 1024 != root limit 124 [ 127.088605][ T7112] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.379: Corrupt directory, running e2fsck is recommended [ 127.307549][ T5604] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.467250][ T7122] fido_id[7122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 127.676066][ T7131] loop3: detected capacity change from 0 to 4096 [ 127.795553][ T7136] loop2: detected capacity change from 0 to 128 [ 127.842193][ T7136] FAULT_INJECTION: forcing a failure. [ 127.842193][ T7136] name failslab, interval 1, probability 0, space 0, times 0 [ 127.842220][ T7136] CPU: 0 UID: 0 PID: 7136 Comm: syz.2.385 Not tainted syzkaller #0 PREEMPT(full) [ 127.842242][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.842254][ T7136] Call Trace: [ 127.842262][ T7136] [ 127.842270][ T7136] dump_stack_lvl+0xe8/0x150 [ 127.842297][ T7136] should_fail_ex+0x3eb/0x540 [ 127.842322][ T7136] ? __pfx_fat_alloc_inode+0x10/0x10 [ 127.842340][ T7136] should_failslab+0xa8/0x100 [ 127.842361][ T7136] ? __pfx_fat_alloc_inode+0x10/0x10 [ 127.842377][ T7136] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 127.842399][ T7136] ? fat_alloc_inode+0x30/0xf0 [ 127.842415][ T7136] ? fat_alloc_inode+0x30/0xf0 [ 127.842438][ T7136] ? __pfx_fat_alloc_inode+0x10/0x10 [ 127.842455][ T7136] fat_alloc_inode+0x30/0xf0 [ 127.842475][ T7136] ? __pfx_fat_alloc_inode+0x10/0x10 [ 127.842491][ T7136] alloc_inode+0x6a/0x1b0 [ 127.842511][ T7136] new_inode+0x1f/0x170 [ 127.842534][ T7136] fat_build_inode+0x201/0x3e0 [ 127.842559][ T7136] vfat_lookup+0x255/0x490 [ 127.842584][ T7136] ? __pfx_vfat_lookup+0x10/0x10 [ 127.842608][ T7136] ? do_raw_spin_unlock+0xf5/0x200 [ 127.842639][ T7136] ? _raw_spin_unlock+0x28/0x50 [ 127.842659][ T7136] ? d_alloc+0x144/0x190 [ 127.842682][ T7136] lookup_one_qstr_excl+0x12d/0x360 [ 127.842707][ T7136] filename_create+0x20e/0x370 [ 127.842734][ T7136] ? __pfx_filename_create+0x10/0x10 [ 127.842764][ T7136] filename_mknodat+0x18c/0x660 [ 127.842787][ T7136] ? __pfx_filename_mknodat+0x10/0x10 [ 127.842810][ T7136] ? do_getname+0x151/0x250 [ 127.842831][ T7136] __se_sys_mknodat+0x3b/0x150 [ 127.842854][ T7136] do_syscall_64+0x166/0x520 [ 127.842872][ T7136] ? trace_irq_disable+0x3b/0x140 [ 127.842889][ T7136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.842910][ T7136] ? clear_bhb_loop+0x70/0xc0 [ 127.842932][ T7136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.842951][ T7136] RIP: 0033:0x7f40b0d9e159 [ 127.842969][ T7136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.842984][ T7136] RSP: 002b:00007f40aeff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 127.843006][ T7136] RAX: ffffffffffffffda RBX: 00007f40b1025fa0 RCX: 00007f40b0d9e159 [ 127.843020][ T7136] RDX: 0000000000001000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 127.843034][ T7136] RBP: 00007f40b0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 127.843047][ T7136] R10: 0000000000000705 R11: 0000000000000246 R12: 0000000000000000 [ 127.843059][ T7136] R13: 00007f40b1026038 R14: 00007f40b1025fa0 R15: 00007ffc0f10bdd8 [ 127.843091][ T7136] [ 127.944921][ T7109] syz.1.380 (7109): drop_caches: 2 [ 128.008002][ T7140] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.151258][ T7143] loop6: detected capacity change from 0 to 256 [ 128.160615][ T7143] exfat: Deprecated parameter 'namecase' [ 128.160652][ T7143] exfat: Deprecated parameter 'namecase' [ 128.260968][ T7143] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 128.358912][ T7148] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 128.358928][ T7148] CPU: 0 UID: 0 PID: 7148 Comm: syz.1.389 Not tainted syzkaller #0 PREEMPT(full) [ 128.358942][ T7148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.358949][ T7148] Call Trace: [ 128.358954][ T7148] [ 128.358959][ T7148] dump_stack_lvl+0xe8/0x150 [ 128.358975][ T7148] sysfs_create_dir_ns+0x271/0x2a0 [ 128.358989][ T7148] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 128.359003][ T7148] ? do_raw_spin_unlock+0xf5/0x200 [ 128.359016][ T7148] kobject_add_internal+0x622/0xcd0 [ 128.359031][ T7148] kobject_add+0x163/0x240 [ 128.359041][ T7148] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.359054][ T7148] ? __pfx_kobject_add+0x10/0x10 [ 128.359068][ T7148] ? get_device_parent+0x366/0x3a0 [ 128.359081][ T7148] device_add+0x3fa/0xb80 [ 128.359098][ T7148] tty_register_device_attr+0x425/0x990 [ 128.359123][ T7148] ? __pfx_tty_register_device_attr+0x10/0x10 [ 128.359148][ T7148] ? tty_port_init+0x136/0x1a0 [ 128.359166][ T7148] ? gsm_dlci_alloc+0x330/0x640 [ 128.359191][ T7148] gsm_activate_mux+0x110/0x2a0 [ 128.359204][ T7148] gsmld_ioctl+0x12d3/0x1930 [ 128.359220][ T7148] ? __pfx_gsmld_ioctl+0x10/0x10 [ 128.359237][ T7148] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 128.359253][ T7148] ? ldsem_down_read+0x12/0x40 [ 128.359266][ T7148] ? __pfx_gsmld_ioctl+0x10/0x10 [ 128.359276][ T7148] tty_ioctl+0x9bd/0xde0 [ 128.359287][ T7148] ? __pfx_tty_ioctl+0x10/0x10 [ 128.359297][ T7148] __se_sys_ioctl+0xfc/0x170 [ 128.359309][ T7148] do_syscall_64+0x166/0x520 [ 128.359320][ T7148] ? trace_irq_disable+0x3b/0x140 [ 128.359330][ T7148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.359341][ T7148] ? clear_bhb_loop+0x70/0xc0 [ 128.359352][ T7148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.359363][ T7148] RIP: 0033:0x7fb7e579e159 [ 128.359374][ T7148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.359385][ T7148] RSP: 002b:00007fb7e6703028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.359405][ T7148] RAX: ffffffffffffffda RBX: 00007fb7e5a26090 RCX: 00007fb7e579e159 [ 128.359419][ T7148] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 128.359431][ T7148] RBP: 00007fb7e583506b R08: 0000000000000000 R09: 0000000000000000 [ 128.359443][ T7148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.359455][ T7148] R13: 00007fb7e5a26128 R14: 00007fb7e5a26090 R15: 00007ffeea44f788 [ 128.359474][ T7148] [ 128.373413][ T7148] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 128.851877][ T7156] loop3: detected capacity change from 0 to 512 [ 128.867727][ T7156] EXT4-fs: Ignoring removed bh option [ 128.960042][ T7163] fuse: Bad value for 'fd' [ 128.973804][ T7156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.993463][ T7156] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.422843][ T5604] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.880603][ T7189] syz_tun: entered allmulticast mode [ 129.894113][ T7188] syz_tun: left allmulticast mode [ 129.953984][ T7191] ip_tables: iptables: counters copy to user failed while replacing table [ 130.250430][ T7201] warning: `syz.2.409' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 130.421337][ T7210] geneve2: entered allmulticast mode [ 130.604820][ T5722] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.756478][ T5722] usb 3-1: Using ep0 maxpacket: 8 [ 130.758704][ T5722] usb 3-1: New USB device found: idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 130.759539][ T5722] usb 3-1: config 0 has no interfaces? [ 130.789613][ T5722] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 130.789636][ T5722] usb 3-1: Product: syz [ 130.789650][ T5722] usb 3-1: Manufacturer: syz [ 130.789663][ T5722] usb 3-1: SerialNumber: syz [ 130.819678][ T5722] usb 3-1: config 0 descriptor?? [ 130.951496][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 130.952352][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 131.044757][ T5722] usb 3-1: USB disconnect, device number 4 [ 131.533755][ T7245] ip_tables: iptables: counters copy to user failed while replacing table [ 131.539730][ T7239] loop1: detected capacity change from 0 to 32768 [ 131.556565][ T7239] xfs: Deprecated parameter 'ikeep' [ 131.556576][ T7239] XFS: ikeep mount option is deprecated. [ 131.556600][ T7239] xfs: Deprecated parameter 'noattr2' [ 131.556606][ T7239] XFS: noattr2 mount option is deprecated. [ 131.593563][ T7239] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.716304][ T7239] XFS (loop1): Ending clean mount [ 131.718436][ T7239] XFS (loop1): Quotacheck needed: Please wait. [ 131.799868][ T7263] netlink: 88 bytes leftover after parsing attributes in process `syz.6.429'. [ 131.830375][ T7239] XFS (loop1): Quotacheck: Done. [ 131.893048][ T7266] geneve2: entered promiscuous mode [ 131.905299][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 47729 - 0 [ 131.905338][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 47729 - 0 [ 131.905371][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 47729 - 0 [ 131.905402][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 47729 - 0 [ 132.108703][ T5605] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.238817][ T7281] bridge0: port 1(syz_tun) entered blocking state [ 132.238953][ T7281] bridge0: port 1(syz_tun) entered disabled state [ 132.239110][ T7281] syz_tun: entered allmulticast mode [ 132.246616][ T7281] syz_tun: entered promiscuous mode [ 132.260124][ T7281] netlink: 5 bytes leftover after parsing attributes in process `syz.2.437'. [ 132.260141][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.437'. [ 132.767605][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.768324][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.872007][ T45] IPVS: starting estimator thread 0... [ 132.954774][ T7303] IPVS: using max 28 ests per chain, 67200 per kthread [ 133.411081][ T7314] loop0: detected capacity change from 0 to 32768 [ 133.437127][ T7314] JBD2: Ignoring recovery information on journal [ 133.494011][ T7314] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 133.555700][ T27] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 133.600985][ T7314] OCFS2: ERROR (device loop0): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 9 used bits, but a count shows 8 [ 133.601017][ T7314] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 133.601028][ T7314] OCFS2: File system is now read-only. [ 133.601037][ T7314] (syz.0.447,7314,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 133.601059][ T7314] (syz.0.447,7314,1):ocfs2_reserve_clusters_with_limit:1288 ERROR: status = -30 [ 133.601094][ T7314] (syz.0.447,7314,1):ocfs2_reserve_clusters_with_limit:1337 ERROR: status = -30 [ 133.601115][ T7314] (syz.0.447,7314,1):ocfs2_lock_allocators:3292 ERROR: status = -30 [ 133.601134][ T7314] (syz.0.447,7314,1):ocfs2_write_begin_nolock:1724 ERROR: status = -30 [ 133.601173][ T7314] (syz.0.447,7314,1):ocfs2_write_begin:1888 ERROR: status = -30 [ 133.753445][ T27] usb 3-1: New USB device found: idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 133.754860][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.778248][ T27] usb 3-1: config 0 descriptor?? [ 133.831256][ T27] pwc: Samsung MPC-C10 USB webcam detected. [ 133.914989][ T5607] ocfs2: Unmounting device (7,0) on (node local) [ 134.008378][ T27] pwc: send_video_command error -71 [ 134.008395][ T27] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 134.008489][ T27] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 134.016817][ T27] usb 3-1: USB disconnect, device number 5 [ 134.063976][ T5715] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.216543][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 134.217185][ T5715] usb 2-1: New USB device found: idVendor=056e, idProduct=00fb, bcdDevice=0.00 [ 134.218332][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.218359][ T5715] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.218398][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.221123][ T5715] usb 2-1: config 0 descriptor?? [ 134.544537][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.609984][ T7343] syz_tun: entered allmulticast mode [ 134.619778][ T7342] syz_tun: left allmulticast mode [ 134.656380][ T5715] elecom 0003:056E:00FB.0002: unknown main item tag 0x0 [ 134.656413][ T5715] elecom 0003:056E:00FB.0002: unknown main item tag 0x0 [ 134.656438][ T5715] elecom 0003:056E:00FB.0002: unknown main item tag 0x0 [ 134.656463][ T5715] elecom 0003:056E:00FB.0002: unknown main item tag 0x0 [ 134.656487][ T5715] elecom 0003:056E:00FB.0002: unknown main item tag 0x0 [ 134.656510][ T5715] elecom 0003:056E:00FB.0002: unknown main item tag 0x0 [ 134.656534][ T5715] elecom 0003:056E:00FB.0002: unknown main item tag 0x0 [ 134.656558][ T5715] elecom 0003:056E:00FB.0002: unknown main item tag 0x0 [ 134.656583][ T5715] elecom 0003:056E:00FB.0002: unknown main item tag 0x0 [ 134.656606][ T5715] elecom 0003:056E:00FB.0002: unknown main item tag 0x0 [ 134.699011][ T27] usb 3-1: New USB device found: idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 134.703359][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.706063][ T27] usb 3-1: config 0 descriptor?? [ 134.719350][ T27] pwc: Samsung MPC-C10 USB webcam detected. [ 134.768929][ T5715] elecom 0003:056E:00FB.0002: hidraw0: USB HID v0.04 Device [HID 056e:00fb] on usb-dummy_hcd.1-1/input0 [ 134.823965][ T5739] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 134.970267][ T5722] usb 2-1: USB disconnect, device number 6 [ 134.981027][ T5739] usb 4-1: Using ep0 maxpacket: 8 [ 134.989246][ T5739] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.991665][ T5739] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 134.991713][ T5739] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.991734][ T5739] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.991758][ T5739] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.991779][ T5739] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.991816][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.134969][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 135.150340][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 135.263127][ T5739] usb 4-1: usb_control_msg returned -32 [ 135.263173][ T5739] usbtmc 4-1:16.0: can't read capabilities [ 135.351842][ T27] pwc: recv_control_msg error -71 req 02 val 2c00 [ 135.353012][ T27] pwc: recv_control_msg error -71 req 04 val 1000 [ 135.354084][ T27] pwc: recv_control_msg error -71 req 04 val 1300 [ 135.355840][ T27] pwc: recv_control_msg error -71 req 04 val 1400 [ 135.357420][ T27] pwc: recv_control_msg error -71 req 02 val 2000 [ 135.359341][ T27] pwc: recv_control_msg error -71 req 02 val 2100 [ 135.360835][ T27] pwc: recv_control_msg error -71 req 02 val 2200 [ 135.361725][ T27] pwc: recv_control_msg error -71 req 06 val 0600 [ 135.362208][ T27] pwc: recv_control_msg error -71 req 04 val 1500 [ 135.362600][ T27] pwc: recv_control_msg error -71 req 02 val 2500 [ 135.362984][ T27] pwc: recv_control_msg error -71 req 02 val 2400 [ 135.363385][ T27] pwc: recv_control_msg error -71 req 02 val 2600 [ 135.363772][ T27] pwc: recv_control_msg error -71 req 02 val 2900 [ 135.364220][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 135.364960][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 135.365451][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 135.381259][ T27] pwc: Registered as video103. [ 135.385617][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 135.482260][ T27] usb 3-1: USB disconnect, device number 6 [ 135.734981][ T7366] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 135.959738][ T7366] bond1 (unregistering): Released all slaves [ 136.078332][ T7381] FAULT_INJECTION: forcing a failure. [ 136.078332][ T7381] name failslab, interval 1, probability 0, space 0, times 0 [ 136.078362][ T7381] CPU: 1 UID: 0 PID: 7381 Comm: syz.2.470 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.078389][ T7381] Tainted: [L]=SOFTLOCKUP [ 136.078396][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.078408][ T7381] Call Trace: [ 136.078415][ T7381] [ 136.078423][ T7381] dump_stack_lvl+0xe8/0x150 [ 136.078449][ T7381] should_fail_ex+0x3eb/0x540 [ 136.078474][ T7381] should_failslab+0xa8/0x100 [ 136.078495][ T7381] ? __se_sys_mbind+0x82b/0x10e0 [ 136.078515][ T7381] kmem_cache_alloc_noprof+0x9c/0x600 [ 136.078538][ T7381] ? __se_sys_mbind+0x82b/0x10e0 [ 136.078560][ T7381] __se_sys_mbind+0x82b/0x10e0 [ 136.078580][ T7381] ? vmemmap_restore_pte+0x14/0x4f0 [ 136.078605][ T7381] ? __pfx___se_sys_mbind+0x10/0x10 [ 136.078622][ T7381] ? udp_lib_setsockopt+0x1e0/0x6b0 [ 136.078650][ T7381] ? __se_sys_futex+0x3a8/0x450 [ 136.078677][ T7381] ? rcu_is_watching+0x16/0xb0 [ 136.078704][ T7381] ? __x64_sys_mbind+0x21/0xf0 [ 136.078726][ T7381] do_syscall_64+0x166/0x520 [ 136.078745][ T7381] ? trace_irq_disable+0x3b/0x140 [ 136.078762][ T7381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.078782][ T7381] ? clear_bhb_loop+0x70/0xc0 [ 136.078804][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.078824][ T7381] RIP: 0033:0x7f40b0d9e159 [ 136.078843][ T7381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.078859][ T7381] RSP: 002b:00007f40aeff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 136.078881][ T7381] RAX: ffffffffffffffda RBX: 00007f40b1025fa0 RCX: 00007f40b0d9e159 [ 136.078896][ T7381] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000200000000000 [ 136.078909][ T7381] RBP: 00007f40b0e3506b R08: 0000000000000000 R09: 0000000000000002 [ 136.078930][ T7381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.078943][ T7381] R13: 00007f40b1026038 R14: 00007f40b1025fa0 R15: 00007ffc0f10bdd8 [ 136.078974][ T7381] [ 136.617092][ T7398] netlink: 'syz.0.476': attribute type 10 has an invalid length. [ 136.617304][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.617918][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.658134][ T7398] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.658915][ T7398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.659214][ T7398] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.659330][ T7398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.684161][ T7398] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 136.833988][ T5715] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.861843][ T7401] FAULT_INJECTION: forcing a failure. [ 136.861843][ T7401] name failslab, interval 1, probability 0, space 0, times 0 [ 136.861875][ T7401] CPU: 1 UID: 0 PID: 7401 Comm: syz.0.478 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.861903][ T7401] Tainted: [L]=SOFTLOCKUP [ 136.861911][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.861923][ T7401] Call Trace: [ 136.861930][ T7401] [ 136.861938][ T7401] dump_stack_lvl+0xe8/0x150 [ 136.861965][ T7401] should_fail_ex+0x3eb/0x540 [ 136.861991][ T7401] should_failslab+0xa8/0x100 [ 136.862012][ T7401] ? ptlock_alloc+0x20/0x70 [ 136.862031][ T7401] kmem_cache_alloc_noprof+0x9c/0x600 [ 136.862054][ T7401] ? ptlock_alloc+0x20/0x70 [ 136.862079][ T7401] ptlock_alloc+0x20/0x70 [ 136.862098][ T7401] pte_alloc_one+0x7a/0x370 [ 136.862120][ T7401] __pte_alloc+0x25/0x1a0 [ 136.862144][ T7401] walk_pgd_range+0xfd5/0x1dc0 [ 136.862184][ T7401] ? __pfx_guard_install_set_pte+0x10/0x10 [ 136.862204][ T7401] ? __pfx_guard_install_set_pte+0x10/0x10 [ 136.862222][ T7401] ? __pfx_guard_install_set_pte+0x10/0x10 [ 136.862244][ T7401] ? __pfx_guard_install_set_pte+0x10/0x10 [ 136.862268][ T7401] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 136.862289][ T7401] ? __pfx_walk_pgd_range+0x10/0x10 [ 136.862318][ T7401] __walk_page_range+0x16d/0x720 [ 136.862343][ T7401] ? find_vma+0xed/0x160 [ 136.862360][ T7401] ? __pfx_find_vma+0x10/0x10 [ 136.862389][ T7401] walk_page_range_mm_unsafe+0x46b/0x680 [ 136.862412][ T7401] ? look_up_lock_class+0x57/0x110 [ 136.862446][ T7401] ? __pfx_walk_page_range_mm_unsafe+0x10/0x10 [ 136.862483][ T7401] madvise_vma_behavior+0x43a8/0x5180 [ 136.862514][ T7401] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 136.862542][ T7401] ? do_raw_spin_lock+0x12b/0x2f0 [ 136.862571][ T7401] ? rcu_is_watching+0x16/0xb0 [ 136.862591][ T7401] ? trace_hrtimer_start+0x82/0x200 [ 136.862615][ T7401] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 136.862633][ T7401] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 136.862652][ T7401] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 136.862674][ T7401] ? __pfx_guard_install_set_pte+0x10/0x10 [ 136.862694][ T7401] ? __lock_acquire+0x747/0x2de0 [ 136.862716][ T7401] ? finish_task_switch+0x40e/0xc60 [ 136.862736][ T7401] ? lockdep_hardirqs_on+0x7b/0x110 [ 136.862757][ T7401] ? rcu_is_watching+0x16/0xb0 [ 136.862780][ T7401] ? __lock_acquire+0x747/0x2de0 [ 136.862806][ T7401] ? mtree_range_walk+0x707/0x8b0 [ 136.862835][ T7401] ? mt_find+0x186/0x630 [ 136.862857][ T7401] ? mt_find+0x481/0x630 [ 136.862878][ T7401] ? mt_find+0x186/0x630 [ 136.862896][ T7401] ? __pfx_mt_find+0x10/0x10 [ 136.862921][ T7401] ? find_vma_prev+0x123/0x1b0 [ 136.862938][ T7401] ? lock_acquire+0x115/0x350 [ 136.862964][ T7401] ? find_vma+0xed/0x160 [ 136.862987][ T7401] ? down_read+0x2b9/0x320 [ 136.863010][ T7401] madvise_walk_vmas+0x57d/0xb70 [ 136.863042][ T7401] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 136.863067][ T7401] ? blk_start_plug+0x6e/0x1b0 [ 136.863089][ T7401] madvise_do_behavior+0x385/0x540 [ 136.863109][ T7401] ? __pfx_futex_wait+0x10/0x10 [ 136.863132][ T7401] ? __pfx_madvise_do_behavior+0x10/0x10 [ 136.863171][ T7401] do_madvise+0x26f/0x330 [ 136.863197][ T7401] ? __pfx_do_madvise+0x10/0x10 [ 136.863228][ T7401] ? rcu_is_watching+0x16/0xb0 [ 136.863255][ T7401] __x64_sys_madvise+0xa6/0xc0 [ 136.863276][ T7401] do_syscall_64+0x166/0x520 [ 136.863294][ T7401] ? trace_irq_disable+0x3b/0x140 [ 136.863311][ T7401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.863331][ T7401] ? clear_bhb_loop+0x70/0xc0 [ 136.863353][ T7401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.863372][ T7401] RIP: 0033:0x7f9a4579e159 [ 136.863391][ T7401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.863408][ T7401] RSP: 002b:00007f9a465a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 136.863435][ T7401] RAX: ffffffffffffffda RBX: 00007f9a45a25fa0 RCX: 00007f9a4579e159 [ 136.863450][ T7401] RDX: 0000000000000066 RSI: 0000000000600722 RDI: 0000200000000000 [ 136.863463][ T7401] RBP: 00007f9a4583506b R08: 0000000000000000 R09: 0000000000000000 [ 136.863476][ T7401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.863488][ T7401] R13: 00007f9a45a26038 R14: 00007f9a45a25fa0 R15: 00007ffe36c91368 [ 136.863521][ T7401] [ 137.008328][ T5715] usb 3-1: Using ep0 maxpacket: 8 [ 137.031399][ T5715] usb 3-1: New USB device found: idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 137.214489][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.214515][ T5715] usb 3-1: Product: syz [ 137.214530][ T5715] usb 3-1: Manufacturer: syz [ 137.214542][ T5715] usb 3-1: SerialNumber: syz [ 137.355254][ T5715] usb 3-1: config 0 descriptor?? [ 137.363083][ T5715] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 137.664480][ T5722] usb 4-1: USB disconnect, device number 6 [ 138.340218][ T7442] overlayfs: failed to clone lowerpath [ 138.509386][ T7450] FAULT_INJECTION: forcing a failure. [ 138.509386][ T7450] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.509418][ T7450] CPU: 1 UID: 0 PID: 7450 Comm: syz.3.491 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.509446][ T7450] Tainted: [L]=SOFTLOCKUP [ 138.509454][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.509466][ T7450] Call Trace: [ 138.509473][ T7450] [ 138.509482][ T7450] dump_stack_lvl+0xe8/0x150 [ 138.509508][ T7450] should_fail_ex+0x3eb/0x540 [ 138.509535][ T7450] prepare_alloc_pages+0x21e/0x5f0 [ 138.509561][ T7450] __alloc_frozen_pages_noprof+0x17a/0x400 [ 138.509585][ T7450] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 138.509610][ T7450] ? lock_acquire+0x115/0x350 [ 138.509630][ T7450] ? policy_nodemask+0x2cc/0x8e0 [ 138.509648][ T7450] ? __lock_acquire+0x747/0x2de0 [ 138.509669][ T7450] alloc_pages_mpol+0x21e/0x390 [ 138.509694][ T7450] folio_alloc_mpol_noprof+0x39/0x160 [ 138.509717][ T7450] vma_alloc_folio_noprof+0xe1/0x1e0 [ 138.509739][ T7450] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 138.509765][ T7450] ? vma_has_anon_rmap+0x95/0x270 [ 138.509786][ T7450] do_pte_missing+0x16d4/0x3570 [ 138.509823][ T7450] handle_mm_fault+0x1a53/0x3750 [ 138.509851][ T7450] ? handle_mm_fault+0xf1/0x3750 [ 138.509881][ T7450] ? __pfx_handle_mm_fault+0x10/0x10 [ 138.509901][ T7450] ? follow_page_pte+0x748/0xf10 [ 138.509929][ T7450] ? __pfx_follow_page_pte+0x10/0x10 [ 138.509958][ T7450] __get_user_pages+0x1669/0x26e0 [ 138.510009][ T7450] __gup_longterm_locked+0xe24/0x16f0 [ 138.510041][ T7450] ? sanity_check_pinned_pages+0x817/0x8d0 [ 138.510072][ T7450] gup_fast_fallback+0x360/0x27a0 [ 138.510096][ T7450] ? rds_getsockopt+0x38b/0x600 [ 138.510162][ T7450] ? __pfx_gup_fast_fallback+0x10/0x10 [ 138.510181][ T7450] ? rds_info_getsockopt+0x254/0x730 [ 138.510201][ T7450] ? rcu_is_watching+0x16/0xb0 [ 138.510220][ T7450] ? is_valid_gup_args+0x11f/0x200 [ 138.510242][ T7450] ? pin_user_pages_fast+0x4d/0xb0 [ 138.510263][ T7450] iov_iter_extract_pages+0x3a1/0x690 [ 138.510292][ T7450] rds_info_getsockopt+0x289/0x730 [ 138.510318][ T7450] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 138.510350][ T7450] ? __might_fault+0xaf/0x130 [ 138.510377][ T7450] rds_getsockopt+0x38b/0x600 [ 138.510399][ T7450] ? __pfx_rds_getsockopt+0x10/0x10 [ 138.510419][ T7450] ? __might_fault+0xaf/0x130 [ 138.510444][ T7450] do_sock_getsockopt+0x40c/0x640 [ 138.510471][ T7450] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 138.510506][ T7450] ? __fget_files+0x3a2/0x420 [ 138.510524][ T7450] ? __fget_files+0x2a/0x420 [ 138.510550][ T7450] __x64_sys_getsockopt+0x1a4/0x240 [ 138.510579][ T7450] do_syscall_64+0x166/0x520 [ 138.510597][ T7450] ? trace_irq_disable+0x3b/0x140 [ 138.510614][ T7450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.510634][ T7450] ? clear_bhb_loop+0x70/0xc0 [ 138.510656][ T7450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.510676][ T7450] RIP: 0033:0x7f6ba8f9e159 [ 138.510695][ T7450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.510711][ T7450] RSP: 002b:00007f6ba9f46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 138.510732][ T7450] RAX: ffffffffffffffda RBX: 00007f6ba9225fa0 RCX: 00007f6ba8f9e159 [ 138.510748][ T7450] RDX: 000000000000271f RSI: 0000000000000114 RDI: 0000000000000004 [ 138.510760][ T7450] RBP: 00007f6ba903506b R08: 00002000000000c0 R09: 0000000000000000 [ 138.510774][ T7450] R10: 0000200000019440 R11: 0000000000000246 R12: 0000000000000000 [ 138.510787][ T7450] R13: 00007f6ba9226038 R14: 00007f6ba9225fa0 R15: 00007ffded08efd8 [ 138.510818][ T7450] [ 138.837681][ T5715] gspca_sonixj: i2c_w8 err -71 [ 138.879654][ T5715] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 138.910667][ T5715] usb 3-1: USB disconnect, device number 7 [ 139.011020][ T7465] loop3: detected capacity change from 0 to 512 [ 139.120505][ T7465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.120602][ T7465] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.319731][ T5604] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.797161][ T7526] Dead loop on virtual device lo (net 37), fix it urgently! [ 140.797333][ T7526] Dead loop on virtual device lo (net 37), fix it urgently! [ 140.797468][ T7526] Dead loop on virtual device lo (net 37), fix it urgently! [ 140.832145][ T7526] Dead loop on virtual device lo (net 37), fix it urgently! [ 140.832259][ T7526] Dead loop on virtual device lo (net 37), fix it urgently! [ 140.832371][ T7526] Dead loop on virtual device lo (net 37), fix it urgently! [ 140.832649][ T7526] Dead loop on virtual device lo (net 37), fix it urgently! [ 140.832754][ T7526] Dead loop on virtual device lo (net 37), fix it urgently! [ 140.832856][ T7526] Dead loop on virtual device lo (net 37), fix it urgently! [ 140.833736][ T7526] Dead loop on virtual device lo (net 37), fix it urgently! [ 140.868445][ T5618] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 140.868469][ T5618] CPU: 1 UID: 0 PID: 5618 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.868495][ T5618] Tainted: [L]=SOFTLOCKUP [ 140.868503][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.868515][ T5618] Workqueue: hci4 hci_rx_work [ 140.868539][ T5618] Call Trace: [ 140.868546][ T5618] [ 140.868555][ T5618] dump_stack_lvl+0xe8/0x150 [ 140.868579][ T5618] sysfs_create_dir_ns+0x271/0x2a0 [ 140.868603][ T5618] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 140.868627][ T5618] ? do_raw_spin_unlock+0xf5/0x200 [ 140.868652][ T5618] kobject_add_internal+0x622/0xcd0 [ 140.868678][ T5618] kobject_add+0x163/0x240 [ 140.868702][ T5618] ? __pfx_kobject_add+0x10/0x10 [ 140.868727][ T5618] ? get_device_parent+0x366/0x3a0 [ 140.868752][ T5618] device_add+0x3fa/0xb80 [ 140.868773][ T5618] hci_conn_add_sysfs+0xd5/0x210 [ 140.868797][ T5618] le_conn_complete_evt+0x10b2/0x17a0 [ 140.868823][ T5618] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 140.868844][ T5618] ? __mutex_unlock_slowpath+0x731/0x900 [ 140.868868][ T5618] ? skb_pull_data+0xf0/0x200 [ 140.868893][ T5618] hci_le_conn_complete_evt+0x187/0x470 [ 140.868927][ T5618] hci_event_packet+0x67a/0xf10 [ 140.868955][ T5618] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 140.868973][ T5618] ? __pfx_hci_event_packet+0x10/0x10 [ 140.868998][ T5618] ? kcov_remote_start+0x523/0x7e0 [ 140.869020][ T5618] ? hci_send_to_monitor+0xdf/0x600 [ 140.869046][ T5618] hci_rx_work+0x2b4/0x1110 [ 140.869073][ T5618] ? process_scheduled_works+0x97a/0x1630 [ 140.869094][ T5618] process_scheduled_works+0xc3d/0x1630 [ 140.869146][ T5618] ? __pfx_process_scheduled_works+0x10/0x10 [ 140.869172][ T5618] ? assign_work+0x3cf/0x5d0 [ 140.869196][ T5618] worker_thread+0xa47/0xfb0 [ 140.869242][ T5618] kthread+0x38b/0x480 [ 140.869260][ T5618] ? __pfx_worker_thread+0x10/0x10 [ 140.869276][ T5618] ? __pfx_kthread+0x10/0x10 [ 140.869296][ T5618] ret_from_fork+0x514/0xb70 [ 140.869317][ T5618] ? __pfx_ret_from_fork+0x10/0x10 [ 140.869336][ T5618] ? __switch_to+0xc78/0x1410 [ 140.869357][ T5618] ? __pfx_kthread+0x10/0x10 [ 140.869376][ T5618] ret_from_fork_asm+0x1a/0x30 [ 140.869411][ T5618] [ 140.871021][ T5618] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 140.871057][ T5618] Bluetooth: hci4: failed to register connection device [ 141.245411][ T7512] loop1: detected capacity change from 0 to 40427 [ 141.275290][ T7512] F2FS-fs (loop1): invalid crc value [ 141.389296][ T7512] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 141.421964][ T7512] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 141.421988][ T7512] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 141.422218][ T7512] F2FS-fs (loop1): Start checkpoint disabled! [ 141.492889][ T7512] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 141.506500][ T7512] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 141.796484][ T13] kworker/u8:1: attempt to access beyond end of device [ 141.796484][ T13] loop1: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 141.820069][ T13] kworker/u8:1: attempt to access beyond end of device [ 141.820069][ T13] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 141.828409][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.828438][ T13] Tainted: [L]=SOFTLOCKUP [ 141.828445][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.828457][ T13] Workqueue: writeback wb_workfn (flush-7:1) [ 141.828485][ T13] Call Trace: [ 141.828493][ T13] [ 141.828501][ T13] dump_stack_lvl+0xe8/0x150 [ 141.828523][ T13] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 141.828547][ T13] f2fs_write_end_bio+0xda7/0x11c0 [ 141.828586][ T13] __submit_merged_bio+0x258/0x6a0 [ 141.828604][ T13] ? rcu_is_watching+0x16/0xb0 [ 141.828628][ T13] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 141.828650][ T13] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 141.828692][ T13] f2fs_write_data_pages+0x2a13/0x36e0 [ 141.828745][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 141.828776][ T13] ? stack_trace_save+0xa9/0x100 [ 141.828818][ T13] ? __pfx_read_node_cache+0x10/0x10 [ 141.828865][ T13] ? __lock_acquire+0x747/0x2de0 [ 141.828897][ T13] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 141.828920][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 141.828940][ T13] do_writepages+0x338/0x560 [ 141.828966][ T13] ? reacquire_held_locks+0x117/0x1a0 [ 141.828983][ T13] ? writeback_sb_inodes+0x450/0x1af0 [ 141.829006][ T13] __writeback_single_inode+0x136/0x1220 [ 141.829027][ T13] ? do_raw_spin_unlock+0xf5/0x200 [ 141.829049][ T13] writeback_sb_inodes+0x9de/0x1af0 [ 141.829066][ T13] ? __lock_acquire+0x747/0x2de0 [ 141.829106][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 141.829164][ T13] ? rcu_is_watching+0x16/0xb0 [ 141.829183][ T13] ? queue_io+0x2d3/0x470 [ 141.829204][ T13] wb_writeback+0x41c/0xad0 [ 141.829224][ T13] ? queue_io+0x2c1/0x470 [ 141.829247][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 141.829262][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 141.829295][ T13] wb_workfn+0x431/0x10f0 [ 141.829330][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 141.829360][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 141.829387][ T13] ? lock_acquire+0x115/0x350 [ 141.829412][ T13] ? rcu_is_watching+0x16/0xb0 [ 141.829432][ T13] ? process_scheduled_works+0x97a/0x1630 [ 141.829451][ T13] process_scheduled_works+0xc3d/0x1630 [ 141.829500][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 141.829525][ T13] ? assign_work+0x3cf/0x5d0 [ 141.829549][ T13] worker_thread+0xa47/0xfb0 [ 141.829592][ T13] kthread+0x38b/0x480 [ 141.829610][ T13] ? __pfx_worker_thread+0x10/0x10 [ 141.829625][ T13] ? __pfx_kthread+0x10/0x10 [ 141.829644][ T13] ret_from_fork+0x514/0xb70 [ 141.829664][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 141.829682][ T13] ? __switch_to+0xc78/0x1410 [ 141.829702][ T13] ? __pfx_kthread+0x10/0x10 [ 141.829721][ T13] ret_from_fork_asm+0x1a/0x30 [ 141.829755][ T13] [ 141.836711][ T13] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 142.033554][ T5715] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 142.219799][ T5715] usb 3-1: unable to get BOS descriptor or descriptor too short [ 142.227313][ T5715] usb 3-1: not running at top speed; connect to a high speed hub [ 142.227346][ T5715] usb 3-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 142.228864][ T5715] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 142.228886][ T5715] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 142.228904][ T5715] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 142.228921][ T5715] usb 3-1: config 14 has no interface number 0 [ 142.228936][ T5715] usb 3-1: config 14 has no interface number 1 [ 142.228991][ T5715] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 142.229012][ T5715] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 142.229034][ T5715] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.229056][ T5715] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.229076][ T5715] usb 3-1: config 14 interface 57 has no altsetting 0 [ 142.229092][ T5715] usb 3-1: config 14 interface 228 has no altsetting 0 [ 142.231096][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.231117][ T5715] usb 3-1: Product: syz [ 142.231129][ T5715] usb 3-1: Manufacturer: syz [ 142.231142][ T5715] usb 3-1: SerialNumber: syz [ 142.325279][ T7567] FAULT_INJECTION: forcing a failure. [ 142.325279][ T7567] name failslab, interval 1, probability 0, space 0, times 0 [ 142.325309][ T7567] CPU: 0 UID: 0 PID: 7567 Comm: syz.3.523 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.325337][ T7567] Tainted: [L]=SOFTLOCKUP [ 142.325345][ T7567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.325357][ T7567] Call Trace: [ 142.325364][ T7567] [ 142.325372][ T7567] dump_stack_lvl+0xe8/0x150 [ 142.325398][ T7567] should_fail_ex+0x3eb/0x540 [ 142.325423][ T7567] should_failslab+0xa8/0x100 [ 142.325444][ T7567] __kmalloc_cache_noprof+0x9e/0x600 [ 142.325465][ T7567] ? netstat_seq_show+0x10d/0xe50 [ 142.325483][ T7567] ? netstat_seq_show+0x10d/0xe50 [ 142.325501][ T7567] ? seq_write+0xd8/0x140 [ 142.325523][ T7567] netstat_seq_show+0x10d/0xe50 [ 142.325540][ T7567] ? __kvmalloc_node_noprof+0x52a/0x820 [ 142.325561][ T7567] ? __kvmalloc_node_noprof+0x340/0x820 [ 142.325579][ T7567] ? seq_read_iter+0x1ea/0xca0 [ 142.325596][ T7567] ? seq_read_iter+0x1ea/0xca0 [ 142.325621][ T7567] seq_read_iter+0x463/0xca0 [ 142.325653][ T7567] seq_read+0x367/0x480 [ 142.325680][ T7567] ? __pfx_seq_read+0x10/0x10 [ 142.325696][ T7567] ? __mutex_trylock_common+0x15f/0x270 [ 142.325724][ T7567] ? apparmor_file_permission+0x1fb/0x2b0 [ 142.325750][ T7567] ? __pfx_seq_read+0x10/0x10 [ 142.325766][ T7567] proc_reg_read+0x1e9/0x2e0 [ 142.325787][ T7567] ? __pfx_proc_reg_read+0x10/0x10 [ 142.325805][ T7567] vfs_read+0x213/0xa80 [ 142.325828][ T7567] ? __pfx___mutex_lock+0x10/0x10 [ 142.325847][ T7567] ? __pfx_vfs_read+0x10/0x10 [ 142.325866][ T7567] ? __fget_files+0x2a/0x420 [ 142.325883][ T7567] ? __fget_files+0x3a2/0x420 [ 142.325899][ T7567] ? __fget_files+0x2a/0x420 [ 142.325921][ T7567] ? fdget+0x1ac/0x250 [ 142.325944][ T7567] ksys_read+0x150/0x270 [ 142.325965][ T7567] ? __pfx_ksys_read+0x10/0x10 [ 142.325994][ T7567] do_syscall_64+0x166/0x520 [ 142.326013][ T7567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.326033][ T7567] ? clear_bhb_loop+0x70/0xc0 [ 142.326052][ T7567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.326071][ T7567] RIP: 0033:0x7f6ba8f9e159 [ 142.326089][ T7567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.326105][ T7567] RSP: 002b:00007f6ba9f46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.326126][ T7567] RAX: ffffffffffffffda RBX: 00007f6ba9225fa0 RCX: 00007f6ba8f9e159 [ 142.326140][ T7567] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000003 [ 142.326152][ T7567] RBP: 00007f6ba903506b R08: 0000000000000000 R09: 0000000000000000 [ 142.326164][ T7567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.326176][ T7567] R13: 00007f6ba9226038 R14: 00007f6ba9225fa0 R15: 00007ffded08efd8 [ 142.326207][ T7567] [ 142.725397][ T5715] legousbtower 3-1:14.57: interrupt endpoints not found [ 142.746789][ T7575] FAULT_INJECTION: forcing a failure. [ 142.746789][ T7575] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 142.746822][ T7575] CPU: 0 UID: 0 PID: 7575 Comm: syz.0.525 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.746849][ T7575] Tainted: [L]=SOFTLOCKUP [ 142.746856][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.746868][ T7575] Call Trace: [ 142.746876][ T7575] [ 142.746885][ T7575] dump_stack_lvl+0xe8/0x150 [ 142.746914][ T7575] should_fail_ex+0x3eb/0x540 [ 142.746940][ T7575] _copy_to_user+0x31/0xb0 [ 142.746962][ T7575] __se_sys_cachestat+0x9d1/0xad0 [ 142.746983][ T7575] ? __se_sys_cachestat+0x3c1/0xad0 [ 142.747004][ T7575] ? __pfx___se_sys_cachestat+0x10/0x10 [ 142.747051][ T7575] do_syscall_64+0x166/0x520 [ 142.747071][ T7575] ? trace_irq_disable+0x3b/0x140 [ 142.747089][ T7575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.747109][ T7575] ? clear_bhb_loop+0x70/0xc0 [ 142.747130][ T7575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.747150][ T7575] RIP: 0033:0x7f9a4579e159 [ 142.747168][ T7575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.747185][ T7575] RSP: 002b:00007f9a465a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c3 [ 142.747207][ T7575] RAX: ffffffffffffffda RBX: 00007f9a45a25fa0 RCX: 00007f9a4579e159 [ 142.747222][ T7575] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 142.747234][ T7575] RBP: 00007f9a4583506b R08: 0000000000000000 R09: 0000000000000000 [ 142.747256][ T7575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.747268][ T7575] R13: 00007f9a45a26038 R14: 00007f9a45a25fa0 R15: 00007ffe36c91368 [ 142.747300][ T7575] [ 143.185607][ T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 143.297955][ T7582] loop0: detected capacity change from 0 to 32768 [ 143.301587][ T5715] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 143.303295][ T5715] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 143.321493][ T7582] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 143.321510][ T7582] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 143.386290][ T27] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 143.387355][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.393439][ T7582] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 143.415958][ T5739] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 143.415973][ T5739] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 143.661839][ T5739] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 245ms [ 143.662409][ T5739] gfs2: fsid=syz:syz.0: jid=0: Done [ 143.662452][ T7582] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 143.663670][ T27] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 143.758464][ T7600] usb 3-1: LEGO USB Tower reset control request failed [ 143.961051][ T27] usb 3-1: USB disconnect, device number 8 [ 144.036099][ T27] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 144.173191][ T33] kauditd_printk_skb: 53 callbacks suppressed [ 144.173209][ T33] audit: type=1800 audit(1790831557.423:80): pid=7582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.528" name="file1" dev="loop0" ino=9378 res=0 errno=-22 [ 144.188699][ T9] usb 4-1: USB disconnect, device number 7 [ 144.714508][ T7614] loop1: detected capacity change from 0 to 128 [ 144.733175][ T7614] vfat: Unknown parameter 'T\iN [ 148.960123][ T7778] dump_stack_lvl+0xe8/0x150 [ 148.960150][ T7778] should_fail_ex+0x3eb/0x540 [ 148.960177][ T7778] should_failslab+0xa8/0x100 [ 148.960213][ T7778] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 148.960235][ T7778] ? neigh_parms_alloc+0x83/0x500 [ 148.960254][ T7778] ? neigh_parms_alloc+0x83/0x500 [ 148.960280][ T7778] kmemdup_noprof+0x2b/0x70 [ 148.960301][ T7778] neigh_parms_alloc+0x83/0x500 [ 148.960326][ T7778] inetdev_init+0x142/0x4f0 [ 148.960351][ T7778] inetdev_event+0x11c4/0x1610 [ 148.960377][ T7778] ? __pfx_inetdev_event+0x10/0x10 [ 148.960408][ T7778] notifier_call_chain+0x1a5/0x3d0 [ 148.960438][ T7778] register_netdevice+0x189f/0x1eb0 [ 148.960474][ T7778] ? __pfx_register_netdevice+0x10/0x10 [ 148.960503][ T7778] ? alloc_netdev_mqs+0xe78/0x12c0 [ 148.960527][ T7778] register_netdev+0x40/0x60 [ 148.960546][ T7778] loopback_net_init+0x75/0x150 [ 148.960569][ T7778] ops_init+0x35d/0x5d0 [ 148.960598][ T7778] setup_net+0x118/0x350 [ 148.960619][ T7778] ? __pfx_setup_net+0x10/0x10 [ 148.960639][ T7778] ? down_read_killable+0x1b6/0x3b0 [ 148.960659][ T7778] ? __ns_common_init+0x38a/0x590 [ 148.960682][ T7778] copy_net_ns+0x536/0x770 [ 148.960704][ T7778] create_new_namespaces+0x3f0/0x6b0 [ 148.960727][ T7778] ? security_capable+0x7e/0x2c0 [ 148.960754][ T7778] unshare_nsproxy_namespaces+0x144/0x190 [ 148.960778][ T7778] ksys_unshare+0x53c/0x890 [ 148.960801][ T7778] ? __pfx_ksys_unshare+0x10/0x10 [ 148.960822][ T7778] ? rcu_is_watching+0x16/0xb0 [ 148.960854][ T7778] __x64_sys_unshare+0x38/0x50 [ 148.960871][ T7778] do_syscall_64+0x166/0x520 [ 148.960888][ T7778] ? trace_irq_disable+0x3b/0x140 [ 148.960905][ T7778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.960922][ T7778] ? clear_bhb_loop+0x70/0xc0 [ 148.960943][ T7778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.960963][ T7778] RIP: 0033:0x7f40b0d9e159 [ 148.960980][ T7778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.960996][ T7778] RSP: 002b:00007f40aeff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 148.961019][ T7778] RAX: ffffffffffffffda RBX: 00007f40b1025fa0 RCX: 00007f40b0d9e159 [ 148.961035][ T7778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 148.961048][ T7778] RBP: 00007f40b0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 148.961060][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.961072][ T7778] R13: 00007f40b1026038 R14: 00007f40b1025fa0 R15: 00007ffc0f10bdd8 [ 148.961101][ T7778] [ 149.531842][ T32] gspca_vc032x: reg_w err -71 [ 149.531923][ T32] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 149.549041][ T32] usb 1-1: USB disconnect, device number 7 [ 150.855511][ C1] [ 150.857873][ C1] ================================ [ 150.862963][ C1] WARNING: inconsistent lock state [ 150.868064][ C1] syzkaller #0 Tainted: G L [ 150.874117][ C1] -------------------------------- [ 150.879216][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 150.886041][ C1] ksoftirqd/1/26 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 150.892262][ C1] ffff88807ac9c260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 150.901558][ C1] {SOFTIRQ-ON-W} state was registered at: [ 150.907257][ C1] lock_acquire+0x115/0x350 [ 150.911843][ C1] lock_sock_nested+0x41/0x100 [ 150.916683][ C1] x25_bind+0x209/0x450 [ 150.920913][ C1] __sys_bind+0x2e3/0x410 [ 150.925311][ C1] __x64_sys_bind+0x7a/0x90 [ 150.929885][ C1] do_syscall_64+0x166/0x520 [ 150.934558][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.940540][ C1] irq event stamp: 1541356 [ 150.944935][ C1] hardirqs last enabled at (1541356): [] __local_bh_enable_ip+0xd6/0x140 [ 150.954986][ C1] hardirqs last disabled at (1541355): [] __local_bh_enable_ip+0x72/0x140 [ 150.965035][ C1] softirqs last enabled at (1541296): [] run_ksoftirqd+0x36/0x60 [ 150.974394][ C1] softirqs last disabled at (1541301): [] run_ksoftirqd+0x36/0x60 [ 150.983762][ C1] [ 150.983762][ C1] other info that might help us debug this: [ 150.991805][ C1] Possible unsafe locking scenario: [ 150.991805][ C1] [ 150.999234][ C1] CPU0 [ 151.002499][ C1] ---- [ 151.005759][ C1] lock(sk_lock-AF_X25); [ 151.010076][ C1] [ 151.013512][ C1] lock(sk_lock-AF_X25); [ 151.017999][ C1] [ 151.017999][ C1] *** DEADLOCK *** [ 151.017999][ C1] [ 151.026121][ C1] locks held by ksoftirqd/1/26: 1, last CPU#1: [ 151.032254][ C1] #0: ffffffff8ed5c620 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 151.042247][ C1] [ 151.042247][ C1] stack backtrace: [ 151.048120][ C1] CPU: 1 UID: 0 PID: 26 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.058950][ C1] Tainted: [L]=SOFTLOCKUP [ 151.063254][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.073288][ C1] Call Trace: [ 151.076551][ C1] [ 151.079475][ C1] dump_stack_lvl+0xe8/0x150 [ 151.084050][ C1] print_usage_bug+0x28c/0x2e0 [ 151.088810][ C1] valid_state+0xbe/0xf0 [ 151.093052][ C1] mark_lock_irq+0x36/0x380 [ 151.097546][ C1] ? ktime_get+0x45/0x220 [ 151.101864][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 151.108008][ C1] mark_lock+0x117/0x190 [ 151.112242][ C1] __lock_acquire+0x71e/0x2de0 [ 151.116996][ C1] ? irqentry_exit+0x218/0x920 [ 151.121743][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 151.126927][ C1] ? irqentry_exit+0x218/0x920 [ 151.131673][ C1] ? trace_irq_disable+0x3b/0x140 [ 151.136684][ C1] lock_acquire+0x115/0x350 [ 151.141169][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 151.146266][ C1] ? x25_kill_by_neigh+0x103/0x250 [ 151.151362][ C1] lock_sock_nested+0x41/0x100 [ 151.156109][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 151.161204][ C1] x25_kill_by_neigh+0x10d/0x250 [ 151.166126][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 151.171490][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 151.176930][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 151.182375][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 151.188252][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 151.193615][ C1] lapbeth_napi_poll+0x42/0x90 [ 151.198365][ C1] __napi_poll+0xaa/0x330 [ 151.202679][ C1] net_rx_action+0x61d/0xf50 [ 151.207256][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 151.212353][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 151.217546][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 151.222823][ C1] handle_softirqs+0x223/0x840 [ 151.227574][ C1] ? run_ksoftirqd+0x36/0x60 [ 151.232153][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 151.237162][ C1] run_ksoftirqd+0x36/0x60 [ 151.241563][ C1] smpboot_thread_fn+0x565/0xa70 [ 151.246485][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 151.251497][ C1] kthread+0x38b/0x480 [ 151.255548][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 151.260990][ C1] ? __pfx_kthread+0x10/0x10 [ 151.265563][ C1] ret_from_fork+0x514/0xb70 [ 151.270139][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 151.275235][ C1] ? __switch_to+0xc78/0x1410 [ 151.279896][ C1] ? __pfx_kthread+0x10/0x10 [ 151.284470][ C1] ret_from_fork_asm+0x1a/0x30 [ 151.289228][ C1] [ 151.292308][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3839 [ 151.292322][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 26, name: ksoftirqd/1 [ 151.292339][ C1] preempt_count: 100, expected: 0 [ 151.292348][ C1] RCU nest depth: 1, expected: 0 [ 151.292357][ C1] INFO: lockdep is turned off. [ 151.292362][ C1] Preemption disabled at: [ 151.292366][ C1] [] handle_softirqs+0xab/0x840 [ 151.292398][ C1] CPU: 1 UID: 0 PID: 26 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.292443][ C1] Tainted: [L]=SOFTLOCKUP [ 151.292451][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.292464][ C1] Call Trace: [ 151.292472][ C1] [ 151.292480][ C1] dump_stack_lvl+0xe8/0x150 [ 151.292500][ C1] __might_resched+0x36a/0x4c0 [ 151.292520][ C1] ? handle_softirqs+0xab/0x840 [ 151.292540][ C1] lock_sock_nested+0x56/0x100 [ 151.292562][ C1] x25_kill_by_neigh+0x10d/0x250 [ 151.292585][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 151.292608][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 151.292627][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 151.292646][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 151.292668][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 151.292690][ C1] lapbeth_napi_poll+0x42/0x90 [ 151.292712][ C1] __napi_poll+0xaa/0x330 [ 151.292733][ C1] net_rx_action+0x61d/0xf50 [ 151.292756][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 151.292774][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 151.292797][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 151.292824][ C1] handle_softirqs+0x223/0x840 [ 151.292845][ C1] ? run_ksoftirqd+0x36/0x60 [ 151.292865][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 151.292884][ C1] run_ksoftirqd+0x36/0x60 [ 151.292897][ C1] smpboot_thread_fn+0x565/0xa70 [ 151.292915][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 151.292936][ C1] kthread+0x38b/0x480 [ 151.292955][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 151.292973][ C1] ? __pfx_kthread+0x10/0x10 [ 151.292992][ C1] ret_from_fork+0x514/0xb70 [ 151.293011][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 151.293030][ C1] ? __switch_to+0xc78/0x1410 [ 151.293050][ C1] ? __pfx_kthread+0x10/0x10 [ 151.293069][ C1] ret_from_fork_asm+0x1a/0x30 [ 151.293095][ C1] [ 152.037061][ T7788] FAULT_INJECTION: forcing a failure. [ 152.037061][ T7788] name failslab, interval 1, probability 0, space 0, times 0 [ 152.037094][ T7788] CPU: 0 UID: 0 PID: 7788 Comm: syz.1.605 Tainted: G W L syzkaller #0 PREEMPT(full) [ 152.037123][ T7788] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 152.037130][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.037142][ T7788] Call Trace: [ 152.037148][ T7788] [ 152.037156][ T7788] dump_stack_lvl+0xe8/0x150 [ 152.037179][ T7788] should_fail_ex+0x3eb/0x540 [ 152.037203][ T7788] should_failslab+0xa8/0x100 [ 152.037222][ T7788] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 152.037242][ T7788] ? kernel_text_address+0xa5/0xe0 [ 152.037259][ T7788] ? __kernfs_new_node+0xa9/0x980 [ 152.037275][ T7788] ? __kernfs_new_node+0xa9/0x980 [ 152.037294][ T7788] kstrdup+0x42/0x100 [ 152.037308][ T7788] __kernfs_new_node+0xa9/0x980 [ 152.037322][ T7788] ? rcu_is_watching+0x16/0xb0 [ 152.037337][ T7788] ? trace_irq_enable+0x3b/0x140 [ 152.037351][ T7788] ? __pfx___kernfs_new_node+0x10/0x10 [ 152.037364][ T7788] ? rcu_is_watching+0x16/0xb0 [ 152.037378][ T7788] ? kernfs_root+0x1c/0x230 [ 152.037391][ T7788] ? rcu_is_watching+0x16/0xb0 [ 152.037404][ T7788] ? kernfs_root+0x1c/0x230 [ 152.037416][ T7788] ? lock_release+0x4b/0x3c0 [ 152.037430][ T7788] ? __pfx_make_kgid+0x10/0x10 [ 152.037443][ T7788] ? kernfs_root+0x1c/0x230 [ 152.037455][ T7788] ? kernfs_root+0x1c/0x230 [ 152.037469][ T7788] kernfs_create_dir_ns+0xf7/0x220 [ 152.037485][ T7788] sysfs_create_dir_ns+0x12f/0x2a0 [ 152.037500][ T7788] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 152.037515][ T7788] ? do_raw_spin_unlock+0xf5/0x200 [ 152.037530][ T7788] kobject_add_internal+0x622/0xcd0 [ 152.037547][ T7788] kobject_add+0x163/0x240 [ 152.037561][ T7788] ? rcu_is_watching+0x16/0xb0 [ 152.037575][ T7788] ? __pfx_kobject_add+0x10/0x10 [ 152.037587][ T7788] ? kobject_put+0x50f/0x550 [ 152.037601][ T7788] ? get_device_parent+0x366/0x3a0 [ 152.037617][ T7788] device_add+0x3fa/0xb80 [ 152.037631][ T7788] netdev_register_kobject+0x197/0x350 [ 152.037648][ T7788] register_netdevice+0x142e/0x1eb0 [ 152.037667][ T7788] ? __pfx_register_netdevice+0x10/0x10 [ 152.037682][ T7788] ? rcu_is_watching+0x16/0xb0 [ 152.037695][ T7788] ? kfree+0x4d/0x650 [ 152.037707][ T7788] ? trace_irq_enable+0x3b/0x140 [ 152.037720][ T7788] slip_open+0xbbb/0xe60 [ 152.037733][ T7788] ? lockdep_hardirqs_on+0x7b/0x110 [ 152.037750][ T7788] ? __pfx_slip_open+0x10/0x10 [ 152.037766][ T7788] tty_ldisc_open+0xa1/0x100 [ 152.037780][ T7788] tty_set_ldisc+0x365/0x540 [ 152.037795][ T7788] tty_ioctl+0xc30/0xde0 [ 152.037807][ T7788] ? __pfx_tty_ioctl+0x10/0x10 [ 152.037820][ T7788] __se_sys_ioctl+0xfc/0x170 [ 152.037834][ T7788] do_syscall_64+0x166/0x520 [ 152.037847][ T7788] ? trace_irq_disable+0x3b/0x140 [ 152.037860][ T7788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.037883][ T7788] ? clear_bhb_loop+0x70/0xc0 [ 152.037897][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.037914][ T7788] RIP: 0033:0x7fb7e579e159 [ 152.037928][ T7788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.037941][ T7788] RSP: 002b:00007fb7e6724028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.037958][ T7788] RAX: ffffffffffffffda RBX: 00007fb7e5a25fa0 RCX: 00007fb7e579e159 [ 152.037969][ T7788] RDX: 0000200000000480 RSI: 0000000000005423 RDI: 0000000000000003 [ 152.037978][ T7788] RBP: 00007fb7e583506b R08: 0000000000000000 R09: 0000000000000000 [ 152.037988][ T7788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.037997][ T7788] R13: 00007fb7e5a26038 R14: 00007fb7e5a25fa0 R15: 00007ffeea44f788 [ 152.038014][ T7788] [ 152.071370][ T7788] kobject: kobject_add_internal failed for sl0 (error: -12 parent: net)