last executing test programs: 30.12903085s ago: executing program 2 (id=1516): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x1, 0x0, 0x80080000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0x2020) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 28.506642736s ago: executing program 2 (id=1517): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='my_tracefs\x00', &(0x7f00000001c0)='ncpfs\x00', 0x204023, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000f01000/0x3000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x3000}) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) 19.551253349s ago: executing program 1 (id=1530): socket$inet_udp(0x2, 0x2, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f00000c8000/0x3000)=nil, 0x3000, 0x1000005, 0x8010, 0xffffffffffffffff, 0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) rt_sigqueueinfo(0x0, 0x2a, &(0x7f0000000400)={0x3d, 0xb804, 0x6}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000009400)={&(0x7f0000009240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x40, 0xd03c}, {0x10, 0x5}, {0x7, 0x4}, {0x8, 0x7}, {0xe}, {0x5, 0x9}, {0x2, 0x6}, {0x3, 0x10}, {0x3, 0x9}, {0x343, 0xff}, {0x6, 0x5}, {0x2, 0xe005}, {0x3, 0x9}, {0xf4fb, 0x3}, {0x63f8, 0xc}, {0x4, 0x5}, {0x2, 0xe904}, {0x1, 0x28}, {0xfff, 0x1}, {0x0, 0x1ff}, {0x2, 0xdec}, {0x7fffffffffffffff, 0x1}, {0xffffffffffffffff, 0x1}, {0x3, 0x5}, {0x400, 0x3}, {0x400, 0x4}, {0x5, 0x3}, {0x4, 0xffffffffffffffff}, {0x6, 0x6}, {0x8, 0x2}, {0x7, 0x4}, {0xfffffffffffffd65, 0xfffffffffffffff8}, {0x1ff, 0x6}, {0x7, 0x8}, {0x100, 0x6}, {0xffffffffffffffb3}, {0xfffffffffffffff9, 0x5}, {0x1, 0x7}, {0x65, 0x100000000}, {0x2, 0x3}, {0x1ec, 0x401}, {0x4, 0x80000000}, {0x4, 0x3}, {0x6, 0x3}, {0x98c, 0xfffffffffffffffa}, {0x101, 0xe}, {0x9, 0x7}, {0xd467800000000000, 0x1800000000000}, {0xc2, 0x1}, {0x8, 0x8000000000000000}, {0x3ff, 0x9}, {0x1000, 0x1bc}, {0xfffffffffffffff7, 0x1}, {0x80000000, 0x8000000000000001}, {0x9, 0x401}, {0xcff, 0xa}, {0x4, 0x3}, {0x9, 0x7}, {0x37, 0x3ff}, {0x7897}, {0x2, 0x5}, {0x7c, 0x4}, {0x4, 0x6f8}, {0x8, 0x8}, {0x7fff, 0x80000001}, {0x7, 0x520ba26a}, {0x3}, {0x6, 0x7}, {0xc891, 0x1}, {0xca5, 0x1}, {0x6, 0x661}, {0x2, 0x41e74bda}, {0x200}, {0x1, 0x416}, {0x8, 0x9}, {0x2, 0xca}, {0xffffffff, 0x400}, {0x100, 0xaf03}, {0x80000000}, {0x96}, {0x401, 0xc}, {0x8000, 0xffffffff000}, {0x8000000000000001, 0x400}, {0x6, 0x10}, {0x49c1a567, 0xde}, {0x800, 0x3}, {0x2, 0x80000001}, {0x9, 0x1}, {0xffff, 0x6}, {0x2}, {0x2, 0x4}, {0xc, 0x80}, {0xd4e3, 0x80000000}, {0x9}, {0x811, 0x6}, {0x1, 0x101}, {0x1, 0xf}, {0x8, 0x7fff}, {0x2, 0x8}, {0x7, 0x7fffffffffffffff}, {0x10001, 0xffffffff}, {0x8c, 0x3}, {0x7, 0x8}, {0x9, 0x9}, {0x2, 0x9}, {0xd1, 0x8}, {0x6, 0x39f}, {0x10000, 0x7}, {0x2, 0x4}, {0x1ff}, {0x9, 0x10001}, {0xabd6, 0x3}, {0x9, 0x2}, {0x80000000, 0x4}, {0x9, 0x54}, {0x101, 0xc3bf}, {0x8, 0x9}, {0x80000000, 0x5}, {0x0, 0x1}, {0xffff, 0xa}, {0x14e1, 0xa6c3}, {0xf1c, 0x81}, {0xff, 0x3}, {0x6, 0xffffffffd5074900}, {0x0, 0xffffffffffffffff}, {0x7, 0x2}, {0x5, 0x6}, {0x4, 0x8}, {0x100000001, 0x4}, {0x8, 0x1}, {0x0, 0x7}, {0x837e, 0x9}, {0x5, 0x81}, {0x200, 0x1ff}, {0xffffffff, 0x1}, {0x32, 0x99}, {0x7fffffffffffffff, 0x4}, {0x0, 0x40}, {0xfffffffffffffff8, 0xfffffffffffffffd}, {0x8000000000000000}, {0x1, 0x200}, {0x7, 0x60a}, {0x5, 0xc}, {0x2, 0x11c}, {0xffff, 0x7d}, {0x80000001}, {0x101, 0x5}, {0x0, 0xf}, {0x200, 0x72b}, {0x6, 0x2}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x2}, {0xe19, 0x3}, {0x5}, {0xbdd, 0x9}, {0x9, 0xffffffffffffffff}, {0xf, 0x4}, {0x0, 0x8}, {0xd, 0xfffffffffffff801}, {0x4, 0x3}, {0x0, 0xe}, {0x100, 0x2}, {0x2, 0x280000000}, {0x5f, 0x1ea}, {0x7fff, 0x1}, {0x5, 0x8}, {0xd53, 0x9}, {0x2}, {0x7, 0x22}, {0x0, 0xfffffffffffffe01}, {0x2, 0x1800000000000000}, {0xffffffffffffffff, 0x178}, {0x1, 0x80}, {0x696, 0x9}, {0x3, 0xfffffffffffffffa}, {0x0, 0x9}, {0x3, 0x7ff}, {0x9, 0x3}, {0x726, 0x100000000}, {0x7, 0x50}, {0x705, 0x86e}, {0xb, 0x6}, {0x5, 0x7fffffffffffffff}, {0x80000001, 0x200}, {0x4, 0x3}, {0xfffffffffffffff8, 0x32954bdd}, {0x3}, {0x993d, 0x7}, {0x1f915b03, 0xf67}, {0x2, 0x7ff}, {0x800, 0xa3e}, {0x3, 0x2d82}, {0x4, 0x6}, {0xb9, 0x9}, {0x9, 0x2}, {0x10000, 0x1}, {0x7, 0x4}, {0x7fffffff, 0x8}, {0xdd4, 0xa82}, {0x0, 0x5a32}, {0xe76a, 0x80}, {0x0, 0x8}, {0x4ad, 0x7000000000}, {0x4, 0x4}, {0x4, 0x3}, {0x8001, 0x4}, {0x4, 0xcf}, {0x8000, 0x8000}, {0x6, 0x8}, {0x5, 0x70}, {0x5, 0x1}, {0x1518, 0x80}, {0x1, 0x8000}, {0x9, 0xa}, {0x6, 0x7}, {0x2, 0x6}, {0xfffffffffffffffc, 0x10}, {0x5, 0x8}, {0x0, 0xca5}, {0x7, 0x8000}, {0x1000, 0xba}, {0xfffffffffffffffc, 0x1}, {0xffffffffffffffff, 0x800}, {0x7, 0x10000}, {0x9, 0x3}, {0x0, 0x7}, {0x2, 0x9}, {0x8, 0x8000000000000001}, {0x1, 0x7fffffffffffffff}, {0xe0cd, 0x9}, {0x4, 0x3}, {0x2, 0xd}, {0x5, 0x7}, {0x9, 0x8}, {0x0, 0x9f}, {0x3, 0x6}, {0xffff, 0x6}, {0x80, 0xb1}, {0xba7a, 0x5}, {0x3ff, 0xfffffffffd8adff2}, {0x5, 0x9}, {0x5, 0x5}, {0xf, 0x5931}, {0x400000, 0x2}, {0x4, 0x7fffffff}, {0xffffffffffff8000, 0x8d}, {0xfc3a, 0x1}, {0x5, 0xffff}, {0x800, 0x8000000000000001}, {0x0, 0xa3a6}, {0xb4d, 0x3c}, {0x5, 0x1}, {0x1, 0x2}, {0x4, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 18.25177519s ago: executing program 1 (id=1531): getpgid(0x0) syz_open_dev$evdev(0x0, 0x3ff, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1, 0x14, 0x5) sched_setaffinity(r2, 0x0, 0x0) epoll_create(0xaf2) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$FIONREAD(r6, 0x541b, 0x0) 16.662440465s ago: executing program 3 (id=1534): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c0010001000100000000000000010000000000000000000000000000000100"/67, 0x43, 0x0, 0x0, 0x0) 16.595438868s ago: executing program 0 (id=1535): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r4 = accept4$unix(r3, 0x0, 0x0, 0x80800) recvfrom$unix(r4, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@mpls_getroute={0x16, 0x1a, 0x1}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @private=0xa010101}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x8044) 16.13235461s ago: executing program 0 (id=1536): sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x200c01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4000080) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}}, 0x20}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000aa00)=ANY=[@ANYBLOB="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"], 0x50d8}}, 0xc000) 15.05093929s ago: executing program 0 (id=1537): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x7}, 0x1c) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x17, 0x3, "4d5ac8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) setresgid(0xee01, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{0x0}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 14.993563173s ago: executing program 2 (id=1538): socket$inet_udp(0x2, 0x2, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f00000c8000/0x3000)=nil, 0x3000, 0x1000005, 0x8010, 0xffffffffffffffff, 0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) rt_sigqueueinfo(0x0, 0x2a, &(0x7f0000000400)={0x3d, 0xb804, 0x6}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={[{@quota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x31]}}]}) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) open(0x0, 0x108843, 0x55) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r2, @ANYBLOB="80e39bbcd1495fcbd8a21bec57d8f95ea1c97f49fe1d98295298120af6c045d98cea37ba4bb7e856c2fa97a613c5d6e0658bb6785740dad3f8cd6bb4ea634d76b6e7c47c11dd798257c706ea1b0ff38dab58ccaf9c1c4a99dff30ccd46b3f181354027ba33dece7f65505c3c8ff5fe7a569dcf8a"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000009400)={&(0x7f0000009240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x40, 0xd03c}, {0x10, 0x5}, {0xffff, 0x4}, {0x8, 0x7}, {0xe}, {0x5, 0x9}, {0x2, 0x6}, {0x3, 0x10}, {0x3, 0x9}, {0x343, 0xff}, {0x6, 0x5}, {0x2, 0xe005}, {0x3, 0x9}, {0xf4fb, 0x3}, {0x63f8, 0xc}, {0x4, 0x5}, {0x2, 0xe904}, {0x1, 0x28}, {0xfff, 0x1}, {0x0, 0x1ff}, {0x2, 0xdec}, {0x7fffffffffffffff, 0x1}, {0xffffffffffffffff, 0x1}, {0x3, 0x5}, {0x400, 0x3}, {0x400, 0x4}, {0x5, 0x3}, {0x4, 0xffffffffffffffff}, {0x6, 0x6}, {0x8, 0x2}, {0x7, 0x4}, {0xfffffffffffffd65, 0xfffffffffffffff8}, {0x1ff, 0x6}, {0x7, 0x8}, {0x100, 0x6}, {0xffffffffffffffb3}, {0xfffffffffffffff9, 0x5}, {0x1, 0x7}, {0x65, 0x100000000}, {0x2, 0x3}, {0x1ec, 0x401}, {0x8, 0x80000000}, {0x4, 0x3}, {0x6, 0x3}, {0x98c, 0xfffffffffffffffa}, {0x101, 0xe}, {0x9, 0x7}, {0xd467800000000000, 0x1800000000000}, {0xc2, 0x1}, {0x8, 0x8000000000000000}, {0x3ff, 0x9}, {0x1000, 0x1bc}, {0xfffffffffffffff7, 0x1}, {0x80000000, 0xa}, {0x9, 0x401}, {0xcff, 0xa}, {0x4, 0x3}, {0x9, 0x7}, {0x37, 0x3ff}, {0x7897}, {0x2, 0x5}, {0x7c, 0x4}, {0x4, 0x6f8}, {0x8, 0x8}, {0x7fff, 0x80400001}, {0x7, 0x520ba26a}, {0x3}, {0x6, 0x7}, {0xc891, 0x1}, {0xca5, 0x1}, {0x6, 0x661}, {0x2, 0x41e74bda}, {0x200}, {0x1, 0x416}, {0x8, 0x9}, {0x2, 0xca}, {0xffffffff, 0x400}, {0x100, 0xaf03}, {0x80001000}, {0x96}, {0x402, 0xc}, {0x8000, 0xffffffff000}, {0x8000000000000001, 0x400}, {0x6, 0x10}, {0x49c1a567, 0xde}, {0x800, 0x3}, {0x2, 0x80000001}, {0x9, 0x1}, {0xffff, 0x6}, {0x2}, {0x2, 0x4}, {0xc, 0x80}, {0xd4e3, 0x80000000}, {0x9}, {0x811, 0x6}, {0x1, 0x101}, {0x1, 0xf}, {0x8, 0x7fff}, {0x2, 0x8}, {0x7, 0x7fffffffffffffff}, {0x10001, 0xffffffff}, {0x8c, 0x3}, {0x7, 0x8}, {0x9, 0x9}, {0x2, 0x9}, {0xd1, 0x8}, {0x6, 0x39f}, {0x10000, 0x7}, {0x2, 0x4}, {0x1ff}, {0x9, 0x10001}, {0xabd6, 0x3}, {0x9, 0x2}, {0x80000000, 0x4}, {0x9, 0x54}, {0x101, 0xc3bf}, {0x8, 0x9}, {0x80000000, 0x5}, {0x0, 0x1}, {0xffff, 0xa}, {0x14e1, 0xa6c3}, {0xf1c, 0x81}, {0xff, 0x3}, {0x6, 0xffffffffd5074900}, {0x0, 0xffffffffffffffff}, {0x7, 0x2}, {0x5, 0x6}, {0x4, 0x8}, {0x100000001, 0x4}, {0x8, 0x7f50c674}, {0x0, 0x1}, {0x837e, 0x9}, {0x9, 0x81}, {0x200, 0x1ff}, {0xffffffff, 0x1}, {0x32, 0x99}, {0x7fffffffffffffff, 0x4}, {0x0, 0x40}, {0xfffffffffffffff8, 0xfffffffffffffffd}, {}, {0x1, 0x200}, {0x7, 0x60a}, {0x5, 0xc}, {0x2, 0x11c}, {0xffff, 0x7d}, {0x80000001}, {0x101, 0x5}, {0x0, 0xf}, {0x200, 0x72b}, {0x6, 0x2}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x2}, {0xe19, 0x3}, {0x5}, {0xbdd, 0x9}, {0x9, 0xffffffffffffffff}, {0x3, 0x10004}, {0x0, 0x8}, {0xd, 0xfffffffffffff801}, {0x4, 0x3}, {0x0, 0xe}, {0x100, 0x2}, {0x2, 0x280000000}, {0x5f, 0x1ea}, {0x7fff, 0x1}, {0x5, 0x8}, {0xd53, 0x9}, {0x2}, {0x7, 0x22}, {0x0, 0xfffffffffffffe01}, {0x2, 0x1800000000000000}, {0xffffffffffffffff, 0x178}, {0x1, 0x80}, {0x696, 0x9}, {0x3, 0xfffffffffffffffa}, {0x0, 0x9}, {0x3, 0x7ff}, {0x9, 0x3}, {0x726, 0x100000000}, {0x7, 0x50}, {0x705, 0x86e}, {0xb, 0x6}, {0x5, 0x7fffffffffffffff}, {0x1, 0x200}, {0x4, 0x3}, {0xfffffffffffffff8, 0x32954bdd}, {0x3}, {0x993d, 0x7}, {0x1f915b03, 0xf67}, {0x2, 0x7ff}, {0x800, 0xa3e}, {0x3, 0x2d82}, {0x4, 0x6}, {0xb9, 0x9}, {0x9, 0x2}, {0x10000, 0x1}, {0x7, 0x4}, {0x7fffffff, 0x8}, {0xdd4, 0xa84}, {0x0, 0x5a32}, {0xe76a, 0x80}, {0x0, 0x8}, {0x4ad, 0x7000000000}, {0x4, 0x4}, {0x4, 0x3}, {0x8001, 0x4}, {0x4, 0xcf}, {0x8000, 0x8000}, {0x6, 0x8}, {0x5, 0x70}, {0x5, 0x1}, {0x1518, 0x80}, {0x1, 0x8000}, {0x9, 0xa}, {0x6, 0x7}, {0x802, 0x6}, {0xfffffffffffffffc, 0x10}, {0x5, 0x8}, {0x0, 0xca5}, {0x7, 0x8000}, {0x1000, 0xba}, {0xfffffffffffffffc, 0x1}, {0xffffffffffffffff, 0x800}, {0x7, 0x10000}, {0x9, 0x3}, {0x0, 0x7}, {0x2, 0x9}, {0x8, 0x8000000000000001}, {0x1, 0x7fffffffffffffff}, {0xe0cd, 0x9}, {0x4, 0x3}, {0x2, 0xd}, {0x5, 0x7}, {0x9, 0x8}, {0x0, 0x9f}, {0x3, 0x6}, {0x10003, 0x6}, {0x80, 0xb1}, {0xba7a, 0x5}, {0x3ff, 0xfffffffffd8adff2}, {0x5, 0x9}, {0x5, 0x5}, {0xf, 0x5931}, {0x400000, 0x2}, {0x4, 0x7fffffff}, {0xffffffffffff8000, 0x8d}, {0xfc3a, 0x1}, {0x5, 0xffff}, {0x800, 0x8000000000000001}, {0x0, 0xa3a6}, {0xb4d, 0x3c}, {0x5, 0x1}, {0x1, 0x2}, {0x4, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 13.915014744s ago: executing program 1 (id=1539): socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_PAGE_SCAN_TYPE={{0x1}, 0x9}}}, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd8400000000000007010000f8ffffffb702000008b19200b703000000000000850000002e00000095"], &(0x7f0000000a00)='syzkaller\x00', 0x6, 0x98, &(0x7f0000000000)=""/152}, 0x94) 12.467725322s ago: executing program 2 (id=1540): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) fstatfs(r1, 0x0) r2 = syz_usb_connect(0x5, 0x39, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="0007010cc365c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='6', 0x1) 11.596077793s ago: executing program 0 (id=1541): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x1000, 0x5, 0xfffffffffffffffb}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x800000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r2 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)='::,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) mount(0x0, 0x0, &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./tracing\x00', 0x101b02, 0xa8) write(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 9.154910128s ago: executing program 1 (id=1542): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x1b6e, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={0x0}, &(0x7f0000000300)={&(0x7f0000000340)="705b20de24280f6fde576aafcfca44ea30de8ba5e78db2c53ddf5988d6dadd855e51b11cb3756cc24fd58c38ce7fc4f224bd75ee4cc5b6dbead2f23f89c3a4e9e1629a43c8e593692e6343aaa245be98bbedcec27248a3b49cab35b999f391d95a96d1f360a6cc17633e", 0x6a, 0x1}}, 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r7, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dedbfb, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0xfac0b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42914}, 0x4000014) 9.035671524s ago: executing program 3 (id=1543): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) timerfd_create(0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x201, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x1, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x2, 0xffd, 0x0, 0x0, 0x1}, {0x1003, 0x3ffe, 0x0, 0x0, 0x1}, {0x8, 0xaf1, 0x0, 0x0, 0x1}]}) 6.952780812s ago: executing program 3 (id=1544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000500)=""/102400, 0x19000) userfaultfd(0x801) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) dup(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') read(r4, &(0x7f0000001380)=""/4096, 0x1000) 6.946186043s ago: executing program 1 (id=1545): syz_open_dev$video4linux(0x0, 0x80000003, 0x20040) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$LINK_DETACH(0x22, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfff2) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) close(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.331166319s ago: executing program 3 (id=1546): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='my_tracefs\x00', &(0x7f00000001c0)='ncpfs\x00', 0x204023, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000f01000/0x3000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x3000}) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) 5.193819335s ago: executing program 2 (id=1547): getpgid(0x0) syz_open_dev$evdev(0x0, 0x3ff, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1, 0x14, 0x5) sched_setaffinity(r2, 0x0, 0x0) epoll_create(0xaf2) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$FIONREAD(r6, 0x541b, 0x0) 5.162521136s ago: executing program 0 (id=1548): socket$inet_udp(0x2, 0x2, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f00000c8000/0x3000)=nil, 0x3000, 0x1000005, 0x8010, 0xffffffffffffffff, 0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) rt_sigqueueinfo(0x0, 0x2a, &(0x7f0000000400)={0x3d, 0xb804, 0x6}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={[{@quota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x31]}}]}) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x55) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000009400)={&(0x7f0000009240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x40, 0xd03c}, {0x10, 0x5}, {0xffff, 0x4}, {0x8, 0x7}, {0xe}, {0x5, 0x9}, {0x2, 0x6}, {0x3, 0x10}, {0x3, 0x9}, {0x343, 0xff}, {0x6, 0x5}, {0x2, 0xe005}, {0x3, 0x9}, {0xf4fb, 0x3}, {0x63f8, 0xc}, {0x4, 0x5}, {0x2, 0xe904}, {0x1, 0x28}, {0xfff, 0x1}, {0x0, 0x1ff}, {0x2, 0xdec}, {0x7fffffffffffffff, 0x1}, {0xffffffffffffffff, 0x1}, {0x3, 0x5}, {0x400, 0x3}, {0x400, 0x4}, {0x5, 0x3}, {0x4, 0xffffffffffffffff}, {0x6, 0x6}, {0x8, 0x2}, {0x7, 0x4}, {0xfffffffffffffd65, 0xfffffffffffffff8}, {0x1ff, 0x6}, {0x7, 0x8}, {0x100, 0x6}, {0xffffffffffffffb3}, {0xfffffffffffffff9, 0x5}, {0x1, 0x7}, {0x65, 0x100000000}, {0x2, 0x3}, {0x1ec, 0x401}, {0x8, 0x80000000}, {0x4, 0x3}, {0x6, 0x3}, {0x98c, 0xfffffffffffffffa}, {0x101, 0xe}, {0x9, 0x7}, {0xd467800000000000, 0x1800000000000}, {0xc2, 0x1}, {0x8, 0x8000000000000000}, {0x3ff, 0x9}, {0x1000, 0x1bc}, {0xfffffffffffffff7, 0x1}, {0x80000000, 0xa}, {0x9, 0x401}, {0xcff, 0xa}, {0x4, 0x3}, {0x9, 0x7}, {0x37, 0x3ff}, {0x7897}, {0x2, 0x5}, {0x7c, 0x4}, {0x4, 0x6f8}, {0x8, 0x8}, {0x7fff, 0x80400001}, {0x7, 0x520ba26a}, {0x3}, {0x6, 0x7}, {0xc891, 0x1}, {0xca5, 0x1}, {0x6, 0x661}, {0x2, 0x41e74bda}, {0x200}, {0x1, 0x416}, {0x8, 0x9}, {0x2, 0xca}, {0xffffffff, 0x400}, {0x100, 0xaf03}, {0x80001000}, {0x96}, {0x402, 0xc}, {0x8000, 0xffffffff000}, {0x8000000000000001, 0x400}, {0x6, 0x10}, {0x49c1a567, 0xde}, {0x800, 0x3}, {0x2, 0x80000001}, {0x9, 0x1}, {0xffff, 0x6}, {0x2}, {0x2, 0x4}, {0xc, 0x80}, {0xd4e3, 0x80000000}, {0x9}, {0x811, 0x6}, {0x1, 0x101}, {0x1, 0xf}, {0x8, 0x7fff}, {0x2, 0x8}, {0x7, 0x7fffffffffffffff}, {0x10001, 0xffffffff}, {0x8c, 0x3}, {0x7, 0x8}, {0x9, 0x9}, {0x2, 0x9}, {0xd1, 0x8}, {0x6, 0x39f}, {0x10000, 0x7}, {0x2, 0x4}, {0x1ff}, {0x9, 0x10001}, {0xabd6, 0x3}, {0x9, 0x2}, {0x80000000, 0x4}, {0x9, 0x54}, {0x101, 0xc3bf}, {0x8, 0x9}, {0x80000000, 0x5}, {0x0, 0x1}, {0xffff, 0xa}, {0x14e1, 0xa6c3}, {0xf1c, 0x81}, {0xff, 0x3}, {0x6, 0xffffffffd5074900}, {0x0, 0xffffffffffffffff}, {0x7, 0x2}, {0x5, 0x6}, {0x4, 0x8}, {0x100000001, 0x4}, {0x8, 0x7f50c674}, {0x0, 0x1}, {0x837e, 0x9}, {0x9, 0x81}, {0x200, 0x1ff}, {0xffffffff, 0x1}, {0x32, 0x99}, {0x7fffffffffffffff, 0x4}, {0x0, 0x40}, {0xfffffffffffffff8, 0xfffffffffffffffd}, {}, {0x1, 0x200}, {0x7, 0x60a}, {0x5, 0xc}, {0x2, 0x11c}, {0xffff, 0x7d}, {0x80000001}, {0x101, 0x5}, {0x0, 0xf}, {0x200, 0x72b}, {0x6, 0x2}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x2}, {0xe19, 0x3}, {0x5}, {0xbdd, 0x9}, {0x9, 0xffffffffffffffff}, {0x3, 0x10004}, {0x0, 0x8}, {0xd, 0xfffffffffffff801}, {0x4, 0x3}, {0x0, 0xe}, {0x100, 0x2}, {0x2, 0x280000000}, {0x5f, 0x1ea}, {0x7fff, 0x1}, {0x5, 0x8}, {0xd53, 0x9}, {0x2}, {0x7, 0x22}, {0x0, 0xfffffffffffffe01}, {0x2, 0x1800000000000000}, {0xffffffffffffffff, 0x178}, {0x1, 0x80}, {0x696, 0x9}, {0x3, 0xfffffffffffffffa}, {0x0, 0x9}, {0x3, 0x7ff}, {0x9, 0x3}, {0x726, 0x100000000}, {0x7, 0x50}, {0x705, 0x86e}, {0xb, 0x6}, {0x5, 0x7fffffffffffffff}, {0x1, 0x200}, {0x4, 0x3}, {0xfffffffffffffff8, 0x32954bdd}, {0x3}, {0x993d, 0x7}, {0x1f915b03, 0xf67}, {0x2, 0x7ff}, {0x800, 0xa3e}, {0x3, 0x2d82}, {0x4, 0x6}, {0xb9, 0x9}, {0x9, 0x2}, {0x10000, 0x1}, {0x7, 0x4}, {0x7fffffff, 0x8}, {0xdd4, 0xa84}, {0x0, 0x5a32}, {0xe76a, 0x80}, {0x0, 0x8}, {0x4ad, 0x7000000000}, {0x4, 0x4}, {0x4, 0x3}, {0x8001, 0x4}, {0x4, 0xcf}, {0x8000, 0x8000}, {0x6, 0x8}, {0x5, 0x70}, {0x5, 0x1}, {0x1518, 0x80}, {0x1, 0x8000}, {0x9, 0xa}, {0x6, 0x7}, {0x802, 0x6}, {0xfffffffffffffffc, 0x10}, {0x5, 0x8}, {0x0, 0xca5}, {0x7, 0x8000}, {0x1000, 0xba}, {0xfffffffffffffffc, 0x1}, {0xffffffffffffffff, 0x800}, {0x7, 0x10000}, {0x9, 0x3}, {0x0, 0x7}, {0x2, 0x9}, {0x8, 0x8000000000000001}, {0x1, 0x7fffffffffffffff}, {0xe0cd, 0x9}, {0x4, 0x3}, {0x2, 0xd}, {0x5, 0x7}, {0x9, 0x8}, {0x0, 0x9f}, {0x3, 0x6}, {0x10003, 0x6}, {0x80, 0xb1}, {0xba7a, 0x5}, {0x3ff, 0xfffffffffd8adff2}, {0x5, 0x9}, {0x5, 0x5}, {0xf, 0x5931}, {0x400000, 0x2}, {0x4, 0x7fffffff}, {0xffffffffffff8000, 0x8d}, {0xfc3a, 0x1}, {0x5, 0xffff}, {0x800, 0x8000000000000001}, {0x0, 0xa3a6}, {0xb4d, 0x3c}, {0x5, 0x1}, {0x1, 0x2}, {0x4, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 3.767062412s ago: executing program 0 (id=1549): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x7}, 0x1c) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x17, 0x3, "4d5ac8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) setresgid(0xee01, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{0x0}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 2.525619121s ago: executing program 2 (id=1550): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x149) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000200)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) r2 = io_uring_setup(0x54be, &(0x7f0000000240)={0x0, 0x62f2, 0x1, 0x0, 0x58, 0x0, r0}) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) close_range(r3, 0xffffffffffffffff, 0x2) r4 = eventfd2(0x0, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000180)=r4, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x1000}) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x100}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x80401}]}}}]}, 0x4c}}, 0x80) 1.360191806s ago: executing program 3 (id=1551): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c0010001000100000000000000010000000000000000000000000000000100"/67, 0x43, 0x0, 0x0, 0x0) 350.947203ms ago: executing program 1 (id=1552): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) read$FUSE(0xffffffffffffffff, &(0x7f0000001380)={0x2020}, 0x2072) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x4}}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x40009}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r3, 0x4}, 0x38) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000880)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}], 0x1, 0x48091) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 0s ago: executing program 3 (id=1553): socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="00000080fe534d424000010000000000000001000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004100010000030000000000000000000000000000000000000000000000001000000010000000100000000000000000000000000000000000000080000000", 0x82, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009000000480030004e544c4d53535000020000000000000000000000000208200000", 0x66, 0x0, 0x0, 0x0) close(r1) kernel console output (not intermixed with test programs): ctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 291.523969][ T7082] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 294.308143][ T7096] input: syz1 as /devices/virtual/input/input7 [ 295.321018][ T7093] syz.1.326 (7093): drop_caches: 2 [ 303.233392][ T7168] jffs2: notice: (7168) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 303.777515][ T7170] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 304.913092][ T27] audit: type=1800 audit(1789158276.764:5): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.342" name=08 dev="sda1" ino=2044 res=0 errno=0 [ 309.498062][ T7196] input: syz1 as /devices/virtual/input/input8 [ 313.044751][ T7223] binder: BINDER_SET_CONTEXT_MGR already set [ 313.051030][ T7223] binder: 7220:7223 ioctl 4018620d 200000004a80 returned -16 [ 313.082868][ T7193] syz.2.338 (7193): drop_caches: 2 [ 318.210181][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.216633][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.489238][ T7276] binder: BINDER_SET_CONTEXT_MGR already set [ 318.517209][ T7276] binder: 7274:7276 ioctl 4018620d 200000004a80 returned -16 [ 318.908493][ T7286] siw: device registration error -23 [ 325.454868][ T7324] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 325.463358][ T7324] CPU: 1 PID: 7324 Comm: syz.1.372 Not tainted syzkaller #0 [ 325.470739][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.480885][ T7324] Call Trace: [ 325.484176][ T7324] [ 325.487118][ T7324] dump_stack_lvl+0x18c/0x250 [ 325.491820][ T7324] ? show_regs_print_info+0x20/0x20 [ 325.497025][ T7324] ? load_image+0x420/0x420 [ 325.501542][ T7324] sysfs_create_dir_ns+0x26e/0x2a0 [ 325.506677][ T7324] ? __lock_acquire+0x7d80/0x7d80 [ 325.511737][ T7324] ? sysfs_warn_dup+0xa0/0xa0 [ 325.516444][ T7324] ? rcu_is_watching+0x15/0xb0 [ 325.521253][ T7324] ? do_raw_spin_unlock+0x121/0x230 [ 325.526506][ T7324] kobject_add_internal+0x617/0xc90 [ 325.531839][ T7324] kobject_add+0x164/0x240 [ 325.536291][ T7324] ? kobject_init+0x1d0/0x1d0 [ 325.541004][ T7324] ? get_device_parent+0x366/0x390 [ 325.546158][ T7324] device_add+0x3fa/0xc40 [ 325.550534][ T7324] tty_register_device_attr+0x425/0x950 [ 325.556126][ T7324] ? tty_register_device+0x30/0x30 [ 325.561271][ T7324] ? tty_port_init+0x132/0x1a0 [ 325.566042][ T7324] ? gsm_dlci_alloc+0x32a/0x630 [ 325.570895][ T7324] ? __might_fault+0xaa/0x120 [ 325.575581][ T7324] gsm_activate_mux+0x110/0x2a0 [ 325.580440][ T7324] gsmld_ioctl+0x12ca/0x1900 [ 325.585038][ T7324] ? gsmld_write+0x120/0x120 [ 325.589637][ T7324] ? __init_ldsem+0x150/0x150 [ 325.594316][ T7324] ? __fget_files+0x28/0x460 [ 325.598914][ T7324] ? gsmld_write+0x120/0x120 [ 325.603505][ T7324] tty_ioctl+0x9b5/0xdc0 [ 325.607751][ T7324] ? tty_get_icount+0xb0/0xb0 [ 325.612436][ T7324] __se_sys_ioctl+0xfd/0x170 [ 325.617033][ T7324] do_syscall_64+0x55/0xb0 [ 325.621457][ T7324] ? clear_bhb_loop+0x40/0x90 [ 325.626137][ T7324] ? clear_bhb_loop+0x40/0x90 [ 325.630817][ T7324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.636715][ T7324] RIP: 0033:0x7f358a39e159 [ 325.641480][ T7324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.661121][ T7324] RSP: 002b:00007f358b28e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.669541][ T7324] RAX: ffffffffffffffda RBX: 00007f358a626090 RCX: 00007f358a39e159 [ 325.677512][ T7324] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 325.685477][ T7324] RBP: 00007f358a43503b R08: 0000000000000000 R09: 0000000000000000 [ 325.693449][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.701415][ T7324] R13: 00007f358a626128 R14: 00007f358a626090 R15: 00007fffe4f6d218 [ 325.709400][ T7324] [ 325.742126][ T7324] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 328.776801][ T7340] input: syz1 as /devices/virtual/input/input9 [ 331.079407][ T7333] syz.3.361 (7333): drop_caches: 2 [ 332.613608][ T7359] trusted_key: encrypted_key: key user:syz not found [ 332.710152][ T7368] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 332.732148][ T7368] rtrs_client L2075: : Failed to resolve address, err: -19 [ 332.740248][ T7368] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 337.429185][ T7400] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 337.455627][ T7400] rtrs_client L2075: : Failed to resolve address, err: -19 [ 337.463589][ T7400] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 339.730687][ T7417] IPVS: set_ctl: invalid protocol: 0 172.20.20.35:20002 [ 342.326239][ T7437] 9pnet_fd: Insufficient options for proto=fd [ 342.339014][ T7437] mtrr: base(0x2000000000000000000) is not aligned on a size(0x53700000) boundary [ 349.741961][ T7468] 9pnet_fd: Insufficient options for proto=fd [ 349.752976][ T7468] mtrr: base(0x2000000000000000000) is not aligned on a size(0x53700000) boundary [ 359.186080][ T7519] fuse: Bad value for 'rootmode' [ 359.471957][ T7525] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 359.505424][ T7525] CPU: 1 PID: 7525 Comm: syz.0.434 Not tainted syzkaller #0 [ 359.512774][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.522954][ T7525] Call Trace: [ 359.526375][ T7525] [ 359.526483][ T7525] dump_stack_lvl+0x18c/0x250 [ 359.526673][ T7525] ? show_regs_print_info+0x20/0x20 [ 359.526727][ T7525] ? load_image+0x420/0x420 [ 359.526771][ T7525] sysfs_create_dir_ns+0x26e/0x2a0 [ 359.526825][ T7525] ? __lock_acquire+0x7d80/0x7d80 [ 359.526866][ T7525] ? sysfs_warn_dup+0xa0/0xa0 [ 359.526885][ T7525] ? rcu_is_watching+0x15/0xb0 [ 359.526915][ T7525] ? do_raw_spin_unlock+0x121/0x230 [ 359.526946][ T7525] kobject_add_internal+0x617/0xc90 [ 359.526987][ T7525] kobject_add+0x164/0x240 [ 359.527021][ T7525] ? kobject_init+0x1d0/0x1d0 [ 359.527054][ T7525] ? get_device_parent+0x366/0x390 [ 359.527109][ T7525] device_add+0x3fa/0xc40 [ 359.527135][ T7525] tty_register_device_attr+0x425/0x950 [ 359.527190][ T7525] ? tty_register_device+0x30/0x30 [ 359.527223][ T7525] ? tty_port_init+0x132/0x1a0 [ 359.527244][ T7525] ? gsm_dlci_alloc+0x32a/0x630 [ 359.527268][ T7525] ? __might_fault+0xaa/0x120 [ 359.527301][ T7525] gsm_activate_mux+0x110/0x2a0 [ 359.527332][ T7525] gsmld_ioctl+0x12ca/0x1900 [ 359.527367][ T7525] ? gsmld_write+0x120/0x120 [ 359.527404][ T7525] ? __init_ldsem+0x150/0x150 [ 359.527439][ T7525] ? __fget_files+0x28/0x460 [ 359.527484][ T7525] ? gsmld_write+0x120/0x120 [ 359.527508][ T7525] tty_ioctl+0x9b5/0xdc0 [ 359.527532][ T7525] ? tty_get_icount+0xb0/0xb0 [ 359.527556][ T7525] __se_sys_ioctl+0xfd/0x170 [ 359.527585][ T7525] do_syscall_64+0x55/0xb0 [ 359.527606][ T7525] ? clear_bhb_loop+0x40/0x90 [ 359.527678][ T7525] ? clear_bhb_loop+0x40/0x90 [ 359.527704][ T7525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.527728][ T7525] RIP: 0033:0x7f33ed99e159 [ 359.527778][ T7525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.527827][ T7525] RSP: 002b:00007f33ee8ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.527878][ T7525] RAX: ffffffffffffffda RBX: 00007f33edc26090 RCX: 00007f33ed99e159 [ 359.527894][ T7525] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 359.527909][ T7525] RBP: 00007f33eda3503b R08: 0000000000000000 R09: 0000000000000000 [ 359.527923][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.527935][ T7525] R13: 00007f33edc26128 R14: 00007f33edc26090 R15: 00007ffd54577488 [ 359.527966][ T7525] [ 359.531216][ T7525] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 360.154260][ T7528] No source specified [ 362.032692][ T7548] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 362.043523][ T7548] CPU: 0 PID: 7548 Comm: syz.1.440 Not tainted syzkaller #0 [ 362.050864][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.060958][ T7548] Call Trace: [ 362.064258][ T7548] [ 362.067187][ T7548] dump_stack_lvl+0x18c/0x250 [ 362.071868][ T7548] ? show_regs_print_info+0x20/0x20 [ 362.077073][ T7548] ? load_image+0x420/0x420 [ 362.081577][ T7548] sysfs_create_dir_ns+0x26e/0x2a0 [ 362.086780][ T7548] ? __lock_acquire+0x7d80/0x7d80 [ 362.091825][ T7548] ? sysfs_warn_dup+0xa0/0xa0 [ 362.096526][ T7548] ? rcu_is_watching+0x15/0xb0 [ 362.101302][ T7548] ? do_raw_spin_unlock+0x121/0x230 [ 362.106511][ T7548] kobject_add_internal+0x617/0xc90 [ 362.111736][ T7548] kobject_add+0x164/0x240 [ 362.116170][ T7548] ? kobject_init+0x1d0/0x1d0 [ 362.120868][ T7548] ? get_device_parent+0x366/0x390 [ 362.125994][ T7548] device_add+0x3fa/0xc40 [ 362.130336][ T7548] tty_register_device_attr+0x425/0x950 [ 362.135891][ T7548] ? tty_register_device+0x30/0x30 [ 362.141007][ T7548] ? tty_port_init+0x132/0x1a0 [ 362.145766][ T7548] ? gsm_dlci_alloc+0x32a/0x630 [ 362.150618][ T7548] ? __might_fault+0xaa/0x120 [ 362.155320][ T7548] gsm_activate_mux+0x110/0x2a0 [ 362.160168][ T7548] gsmld_ioctl+0x12ca/0x1900 [ 362.164782][ T7548] ? gsmld_write+0x120/0x120 [ 362.169391][ T7548] ? __init_ldsem+0x150/0x150 [ 362.174071][ T7548] ? __fget_files+0x28/0x460 [ 362.178696][ T7548] ? gsmld_write+0x120/0x120 [ 362.183282][ T7548] tty_ioctl+0x9b5/0xdc0 [ 362.187544][ T7548] ? tty_get_icount+0xb0/0xb0 [ 362.192269][ T7548] __se_sys_ioctl+0xfd/0x170 [ 362.196967][ T7548] do_syscall_64+0x55/0xb0 [ 362.201413][ T7548] ? clear_bhb_loop+0x40/0x90 [ 362.206114][ T7548] ? clear_bhb_loop+0x40/0x90 [ 362.210790][ T7548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.216699][ T7548] RIP: 0033:0x7f358a39e159 [ 362.221138][ T7548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.241032][ T7548] RSP: 002b:00007f358b28e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.249622][ T7548] RAX: ffffffffffffffda RBX: 00007f358a626090 RCX: 00007f358a39e159 [ 362.257600][ T7548] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 362.265571][ T7548] RBP: 00007f358a43503b R08: 0000000000000000 R09: 0000000000000000 [ 362.273710][ T7548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.281702][ T7548] R13: 00007f358a626128 R14: 00007f358a626090 R15: 00007fffe4f6d218 [ 362.289694][ T7548] [ 363.154037][ T7548] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 363.640607][ T7556] binder: BINDER_SET_CONTEXT_MGR already set [ 363.668170][ T7556] binder: 7555:7556 ioctl 4018620d 200000004a80 returned -16 [ 363.837265][ T7562] No source specified [ 364.833215][ T7557] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 366.438371][ T7576] ======================================================= [ 366.438371][ T7576] WARNING: The mand mount option has been deprecated and [ 366.438371][ T7576] and is ignored by this kernel. Remove the mand [ 366.438371][ T7576] option from the mount to silence this warning. [ 366.438371][ T7576] ======================================================= [ 366.475396][ T7576] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 366.484804][ T7576] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 368.245353][ T7583] blktrace: Concurrent blktraces are not allowed on loop5 [ 368.861818][ T7588] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 368.875337][ T7588] CPU: 0 PID: 7588 Comm: syz.0.454 Not tainted syzkaller #0 [ 368.882679][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 368.892744][ T7588] Call Trace: [ 368.896031][ T7588] [ 368.898970][ T7588] dump_stack_lvl+0x18c/0x250 [ 368.903665][ T7588] ? show_regs_print_info+0x20/0x20 [ 368.908962][ T7588] ? load_image+0x420/0x420 [ 368.913493][ T7588] sysfs_create_dir_ns+0x26e/0x2a0 [ 368.918616][ T7588] ? __lock_acquire+0x7d80/0x7d80 [ 368.924059][ T7588] ? sysfs_warn_dup+0xa0/0xa0 [ 368.928772][ T7588] ? rcu_is_watching+0x15/0xb0 [ 368.933562][ T7588] ? do_raw_spin_unlock+0x121/0x230 [ 368.938786][ T7588] kobject_add_internal+0x617/0xc90 [ 368.944003][ T7588] kobject_add+0x164/0x240 [ 368.948434][ T7588] ? kobject_init+0x1d0/0x1d0 [ 368.953132][ T7588] ? get_device_parent+0x366/0x390 [ 368.958252][ T7588] device_add+0x3fa/0xc40 [ 368.962586][ T7588] tty_register_device_attr+0x425/0x950 [ 368.968144][ T7588] ? tty_register_device+0x30/0x30 [ 368.973523][ T7588] ? tty_port_init+0x132/0x1a0 [ 368.978282][ T7588] ? gsm_dlci_alloc+0x32a/0x630 [ 368.983150][ T7588] ? __might_fault+0xaa/0x120 [ 368.987829][ T7588] gsm_activate_mux+0x110/0x2a0 [ 368.992690][ T7588] gsmld_ioctl+0x12ca/0x1900 [ 368.997285][ T7588] ? gsmld_write+0x120/0x120 [ 369.001885][ T7588] ? __init_ldsem+0x150/0x150 [ 369.006566][ T7588] ? __fget_files+0x28/0x460 [ 369.011179][ T7588] ? gsmld_write+0x120/0x120 [ 369.015774][ T7588] tty_ioctl+0x9b5/0xdc0 [ 369.020023][ T7588] ? tty_get_icount+0xb0/0xb0 [ 369.024705][ T7588] __se_sys_ioctl+0xfd/0x170 [ 369.029332][ T7588] do_syscall_64+0x55/0xb0 [ 369.033784][ T7588] ? clear_bhb_loop+0x40/0x90 [ 369.038473][ T7588] ? clear_bhb_loop+0x40/0x90 [ 369.043185][ T7588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.049085][ T7588] RIP: 0033:0x7f33ed99e159 [ 369.053509][ T7588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.073550][ T7588] RSP: 002b:00007f33ee8ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.081971][ T7588] RAX: ffffffffffffffda RBX: 00007f33edc26090 RCX: 00007f33ed99e159 [ 369.089949][ T7588] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 369.097919][ T7588] RBP: 00007f33eda3503b R08: 0000000000000000 R09: 0000000000000000 [ 369.105889][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.113948][ T7588] R13: 00007f33edc26128 R14: 00007f33edc26090 R15: 00007ffd54577488 [ 369.121953][ T7588] [ 369.233963][ T7588] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 370.695461][ T7601] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty65' [ 370.704101][ T7601] CPU: 0 PID: 7601 Comm: syz.2.457 Not tainted syzkaller #0 [ 370.711416][ T7601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.721499][ T7601] Call Trace: [ 370.724802][ T7601] [ 370.727750][ T7601] dump_stack_lvl+0x18c/0x250 [ 370.732472][ T7601] ? show_regs_print_info+0x20/0x20 [ 370.737694][ T7601] ? load_image+0x420/0x420 [ 370.742232][ T7601] sysfs_create_dir_ns+0x26e/0x2a0 [ 370.747382][ T7601] ? __lock_acquire+0x7d80/0x7d80 [ 370.752435][ T7601] ? sysfs_warn_dup+0xa0/0xa0 [ 370.757124][ T7601] ? rcu_is_watching+0x15/0xb0 [ 370.761887][ T7601] ? do_raw_spin_unlock+0x121/0x230 [ 370.767082][ T7601] kobject_add_internal+0x617/0xc90 [ 370.772283][ T7601] kobject_add+0x164/0x240 [ 370.776742][ T7601] ? kobject_init+0x1d0/0x1d0 [ 370.781431][ T7601] ? get_device_parent+0x366/0x390 [ 370.786544][ T7601] device_add+0x3fa/0xc40 [ 370.790870][ T7601] tty_register_device_attr+0x425/0x950 [ 370.796439][ T7601] ? tty_register_device+0x30/0x30 [ 370.801563][ T7601] ? tty_port_init+0x132/0x1a0 [ 370.806325][ T7601] ? gsm_dlci_alloc+0x32a/0x630 [ 370.811167][ T7601] ? __might_fault+0xaa/0x120 [ 370.815881][ T7601] gsm_activate_mux+0x110/0x2a0 [ 370.820759][ T7601] gsmld_ioctl+0x12ca/0x1900 [ 370.825359][ T7601] ? gsmld_write+0x120/0x120 [ 370.829958][ T7601] ? __init_ldsem+0x150/0x150 [ 370.834634][ T7601] ? lockdep_hardirqs_on+0x98/0x150 [ 370.839829][ T7601] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 370.845459][ T7601] ? gsmld_write+0x120/0x120 [ 370.850041][ T7601] tty_ioctl+0x9b5/0xdc0 [ 370.854279][ T7601] ? tty_get_icount+0xb0/0xb0 [ 370.858954][ T7601] __se_sys_ioctl+0xfd/0x170 [ 370.863544][ T7601] do_syscall_64+0x55/0xb0 [ 370.868054][ T7601] ? clear_bhb_loop+0x40/0x90 [ 370.872756][ T7601] ? clear_bhb_loop+0x40/0x90 [ 370.877433][ T7601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.883348][ T7601] RIP: 0033:0x7f2a07d9e159 [ 370.887758][ T7601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.907425][ T7601] RSP: 002b:00007f2a08c34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.915839][ T7601] RAX: ffffffffffffffda RBX: 00007f2a08026180 RCX: 00007f2a07d9e159 [ 370.923835][ T7601] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 370.931815][ T7601] RBP: 00007f2a07e3503b R08: 0000000000000000 R09: 0000000000000000 [ 370.939797][ T7601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.947773][ T7601] R13: 00007f2a08026218 R14: 00007f2a08026180 R15: 00007ffd437b24f8 [ 370.955776][ T7601] [ 371.010403][ T7601] kobject: kobject_add_internal failed for gsmtty65 with -EEXIST, don't try to register things with the same name in the same directory. [ 371.447667][ T7604] CIFS: Attempting to mount //127.0.0.1/share [ 371.521227][ T7607] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 371.559250][ T7604] CIFS: VFS: cifs_mount failed w/return code = -112 [ 373.087653][ T7615] blktrace: Concurrent blktraces are not allowed on loop7 [ 374.698424][ T7624] jffs2: notice: (7624) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 378.980769][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.987255][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.908414][ T7658] blktrace: Concurrent blktraces are not allowed on loop1 [ 382.341443][ T7660] CIFS: Attempting to mount //127.0.0.1/share [ 382.496620][ T7660] CIFS: decode_ntlmssp_challenge: authentication has been weakened as server does not support key exchange [ 382.634384][ T7660] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 382.641887][ T7660] CIFS: VFS: cifs_mount failed w/return code = -11 [ 385.199906][ T7683] input: syz1 as /devices/virtual/input/input10 [ 385.465017][ T7678] syz.2.477 (7678): drop_caches: 2 [ 385.858419][ T7696] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 385.874092][ T7696] CPU: 1 PID: 7696 Comm: syz.0.482 Not tainted syzkaller #0 [ 385.881534][ T7696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.891619][ T7696] Call Trace: [ 385.894927][ T7696] [ 385.897883][ T7696] dump_stack_lvl+0x18c/0x250 [ 385.902592][ T7696] ? show_regs_print_info+0x20/0x20 [ 385.907802][ T7696] ? load_image+0x420/0x420 [ 385.912306][ T7696] sysfs_create_dir_ns+0x26e/0x2a0 [ 385.917414][ T7696] ? __lock_acquire+0x7d80/0x7d80 [ 385.922432][ T7696] ? sysfs_warn_dup+0xa0/0xa0 [ 385.927098][ T7696] ? rcu_is_watching+0x15/0xb0 [ 385.931860][ T7696] ? do_raw_spin_unlock+0x121/0x230 [ 385.937084][ T7696] kobject_add_internal+0x617/0xc90 [ 385.942332][ T7696] kobject_add+0x164/0x240 [ 385.946811][ T7696] ? kobject_init+0x1d0/0x1d0 [ 385.951538][ T7696] ? get_device_parent+0x366/0x390 [ 385.956693][ T7696] device_add+0x3fa/0xc40 [ 385.961062][ T7696] tty_register_device_attr+0x425/0x950 [ 385.966671][ T7696] ? tty_register_device+0x30/0x30 [ 385.971787][ T7696] ? tty_port_init+0x132/0x1a0 [ 385.976542][ T7696] ? gsm_dlci_alloc+0x32a/0x630 [ 385.981384][ T7696] ? __might_fault+0xaa/0x120 [ 385.986060][ T7696] gsm_activate_mux+0x110/0x2a0 [ 385.990907][ T7696] gsmld_ioctl+0x12ca/0x1900 [ 385.995494][ T7696] ? gsmld_write+0x120/0x120 [ 386.000082][ T7696] ? __init_ldsem+0x150/0x150 [ 386.004751][ T7696] ? __fget_files+0x28/0x460 [ 386.009338][ T7696] ? gsmld_write+0x120/0x120 [ 386.013922][ T7696] tty_ioctl+0x9b5/0xdc0 [ 386.018175][ T7696] ? tty_get_icount+0xb0/0xb0 [ 386.022864][ T7696] __se_sys_ioctl+0xfd/0x170 [ 386.027452][ T7696] do_syscall_64+0x55/0xb0 [ 386.031859][ T7696] ? clear_bhb_loop+0x40/0x90 [ 386.036536][ T7696] ? clear_bhb_loop+0x40/0x90 [ 386.041216][ T7696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.047129][ T7696] RIP: 0033:0x7f33ed99e159 [ 386.051551][ T7696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.071174][ T7696] RSP: 002b:00007f33ee8ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.079592][ T7696] RAX: ffffffffffffffda RBX: 00007f33edc26090 RCX: 00007f33ed99e159 [ 386.087564][ T7696] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 386.095532][ T7696] RBP: 00007f33eda3503b R08: 0000000000000000 R09: 0000000000000000 [ 386.103500][ T7696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.111465][ T7696] R13: 00007f33edc26128 R14: 00007f33edc26090 R15: 00007ffd54577488 [ 386.119443][ T7696] [ 386.123474][ T7696] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 391.889145][ T7715] jffs2: notice: (7715) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 392.334181][ T7719] siw: device registration error -23 [ 392.954386][ T7727] binder: 7722:7727 ioctl 4018620d 0 returned -22 [ 393.038590][ T7727] binder: 7722:7727 ioctl c0306201 0 returned -14 [ 400.687388][ T7767] trusted_key: encrypted_key: key trusted:syz not found [ 406.280303][ T7807] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 406.296081][ T7807] CPU: 0 PID: 7807 Comm: syz.3.509 Not tainted syzkaller #0 [ 406.303394][ T7807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.313890][ T7807] Call Trace: [ 406.317166][ T7807] [ 406.320094][ T7807] dump_stack_lvl+0x18c/0x250 [ 406.324778][ T7807] ? show_regs_print_info+0x20/0x20 [ 406.329973][ T7807] ? load_image+0x420/0x420 [ 406.334512][ T7807] sysfs_create_dir_ns+0x26e/0x2a0 [ 406.339662][ T7807] ? __lock_acquire+0x7d80/0x7d80 [ 406.344725][ T7807] ? sysfs_warn_dup+0xa0/0xa0 [ 406.349435][ T7807] ? rcu_is_watching+0x15/0xb0 [ 406.354245][ T7807] ? do_raw_spin_unlock+0x121/0x230 [ 406.359488][ T7807] kobject_add_internal+0x617/0xc90 [ 406.364736][ T7807] kobject_add+0x164/0x240 [ 406.369209][ T7807] ? kobject_init+0x1d0/0x1d0 [ 406.373933][ T7807] ? get_device_parent+0x366/0x390 [ 406.379097][ T7807] device_add+0x3fa/0xc40 [ 406.383467][ T7807] tty_register_device_attr+0x425/0x950 [ 406.389051][ T7807] ? tty_register_device+0x30/0x30 [ 406.394187][ T7807] ? tty_port_init+0x132/0x1a0 [ 406.398990][ T7807] ? gsm_dlci_alloc+0x32a/0x630 [ 406.403872][ T7807] ? __might_fault+0xaa/0x120 [ 406.408577][ T7807] gsm_activate_mux+0x110/0x2a0 [ 406.413462][ T7807] gsmld_ioctl+0x12ca/0x1900 [ 406.418063][ T7807] ? gsmld_write+0x120/0x120 [ 406.422659][ T7807] ? __init_ldsem+0x150/0x150 [ 406.427343][ T7807] ? __fget_files+0x28/0x460 [ 406.432040][ T7807] ? gsmld_write+0x120/0x120 [ 406.436625][ T7807] tty_ioctl+0x9b5/0xdc0 [ 406.440867][ T7807] ? tty_get_icount+0xb0/0xb0 [ 406.445559][ T7807] __se_sys_ioctl+0xfd/0x170 [ 406.450173][ T7807] do_syscall_64+0x55/0xb0 [ 406.454583][ T7807] ? clear_bhb_loop+0x40/0x90 [ 406.459251][ T7807] ? clear_bhb_loop+0x40/0x90 [ 406.464003][ T7807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.469894][ T7807] RIP: 0033:0x7f4c1099e159 [ 406.474302][ T7807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.493925][ T7807] RSP: 002b:00007f4c11868028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.502362][ T7807] RAX: ffffffffffffffda RBX: 00007f4c10c26090 RCX: 00007f4c1099e159 [ 406.510331][ T7807] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 406.518302][ T7807] RBP: 00007f4c10a3503b R08: 0000000000000000 R09: 0000000000000000 [ 406.526293][ T7807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.534261][ T7807] R13: 00007f4c10c26128 R14: 00007f4c10c26090 R15: 00007fff3d2db108 [ 406.542235][ T7807] [ 406.548591][ T7807] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 409.128653][ T7842] fuse: Unknown parameter 'user_id00000000000000000000' [ 411.235812][ T7857] jffs2: notice: (7857) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 411.951871][ T7864] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 411.969695][ T7864] rtrs_client L2075: : Failed to resolve address, err: -19 [ 411.977939][ T7864] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 413.333643][ T7873] jffs2: notice: (7873) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 413.781718][ T7880] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 416.597842][ T7895] 9pnet_fd: Insufficient options for proto=fd [ 416.609948][ T7895] mtrr: base(0x100000001000000000) is not aligned on a size(0x0000) boundary [ 417.861223][ T7907] netlink: 'syz.2.531': attribute type 1 has an invalid length. [ 417.896287][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'. [ 424.542671][ T7973] jffs2: notice: (7973) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 427.381951][ T8000] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 427.397354][ T8000] rtrs_client L2075: : Failed to resolve address, err: -19 [ 427.406640][ T8000] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 428.116157][ T8003] netlink: 'syz.0.540': attribute type 1 has an invalid length. [ 428.187018][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'. [ 428.814053][ T8006] trusted_key: encrypted_key: key user:syz not found [ 433.280521][ T1071] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.432942][ T1071] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.054903][ T1071] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.069954][ T1071] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.024701][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 437.038005][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 437.059113][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 437.076405][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 437.084706][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 437.092029][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 438.434835][ T8061] netlink: 'syz.3.557': attribute type 1 has an invalid length. [ 438.442529][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.557'. [ 439.144231][ T5781] Bluetooth: hci1: command tx timeout [ 440.670278][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.684720][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.223921][ T5781] Bluetooth: hci1: command tx timeout [ 441.399868][ T8045] chnl_net:caif_netlink_parms(): no params data found [ 442.476851][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.504061][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.511346][ T8045] bridge_slave_0: entered allmulticast mode [ 442.555334][ T8045] bridge_slave_0: entered promiscuous mode [ 442.700927][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.744502][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.761679][ T8045] bridge_slave_1: entered allmulticast mode [ 442.784046][ T8045] bridge_slave_1: entered promiscuous mode [ 442.895774][ T8045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.028581][ T8045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.303960][ T5781] Bluetooth: hci1: command tx timeout [ 445.386289][ T5781] Bluetooth: hci1: command tx timeout [ 445.813503][ T8045] team0: Port device team_slave_0 added [ 446.395684][ T8045] team0: Port device team_slave_1 added [ 448.797327][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.805775][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.952967][ T8045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.073191][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.098678][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.344152][ T8045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.657077][ T8045] hsr_slave_0: entered promiscuous mode [ 451.725720][ T8045] hsr_slave_1: entered promiscuous mode [ 451.763975][ T8045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.792110][ T8045] Cannot create hsr debugfs directory [ 453.066738][ T23] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 453.207047][ T1071] hsr_slave_0: left promiscuous mode [ 453.224243][ T1071] hsr_slave_1: left promiscuous mode [ 453.241867][ T1071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.249895][ T1071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.280641][ T1071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.282240][ T8181] CIFS: Attempting to mount //127.0.0.1/share [ 453.291327][ T1071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.309314][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 453.318617][ T23] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 242, changing to 4 [ 453.346663][ T1071] bridge_slave_1: left allmulticast mode [ 453.352735][ T1071] bridge_slave_1: left promiscuous mode [ 453.360880][ T23] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 453.376850][ T1071] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.386256][ T23] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 453.394377][ T8181] CIFS: VFS: Error connecting to socket. Aborting operation. [ 453.400968][ T23] usb 1-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 453.423872][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.434602][ T23] usb 1-1: Product: syz [ 453.438883][ T23] usb 1-1: Manufacturer: syz [ 453.439776][ T1071] bridge_slave_0: left allmulticast mode [ 453.451655][ T23] usb 1-1: SerialNumber: syz [ 453.456630][ T1071] bridge_slave_0: left promiscuous mode [ 453.470875][ T1071] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.483936][ T8181] CIFS: VFS: cifs_mount failed w/return code = -111 [ 453.617585][ T1071] veth1_macvtap: left promiscuous mode [ 453.643377][ T1071] veth0_macvtap: left promiscuous mode [ 453.654697][ T1071] veth1_vlan: left promiscuous mode [ 453.675289][ T1071] veth0_vlan: left promiscuous mode [ 453.767926][ T23] usb 1-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 453.909884][ T23] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 453.917998][ T23] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 453.937959][ T23] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 454.014472][ T23] usb 1-1: USB disconnect, device number 4 [ 454.244728][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.474433][ T8206] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 458.498222][ T8206] CPU: 0 PID: 8206 Comm: syz.1.588 Not tainted syzkaller #0 [ 458.505565][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.515726][ T8206] Call Trace: [ 458.519021][ T8206] [ 458.521972][ T8206] dump_stack_lvl+0x18c/0x250 [ 458.526728][ T8206] ? show_regs_print_info+0x20/0x20 [ 458.531965][ T8206] ? load_image+0x420/0x420 [ 458.536510][ T8206] sysfs_create_dir_ns+0x26e/0x2a0 [ 458.541665][ T8206] ? __lock_acquire+0x7d80/0x7d80 [ 458.546729][ T8206] ? sysfs_warn_dup+0xa0/0xa0 [ 458.551421][ T8206] ? rcu_is_watching+0x15/0xb0 [ 458.556213][ T8206] ? do_raw_spin_unlock+0x121/0x230 [ 458.561440][ T8206] kobject_add_internal+0x617/0xc90 [ 458.566684][ T8206] kobject_add+0x164/0x240 [ 458.571145][ T8206] ? kobject_init+0x1d0/0x1d0 [ 458.575851][ T8206] ? get_device_parent+0x366/0x390 [ 458.581018][ T8206] device_add+0x3fa/0xc40 [ 458.585387][ T8206] tty_register_device_attr+0x425/0x950 [ 458.590996][ T8206] ? tty_register_device+0x30/0x30 [ 458.596180][ T8206] ? tty_port_init+0x132/0x1a0 [ 458.600965][ T8206] ? gsm_dlci_alloc+0x32a/0x630 [ 458.605847][ T8206] ? __might_fault+0xaa/0x120 [ 458.610566][ T8206] gsm_activate_mux+0x110/0x2a0 [ 458.615445][ T8206] gsmld_ioctl+0x12ca/0x1900 [ 458.620057][ T8206] ? gsmld_write+0x120/0x120 [ 458.624658][ T8206] ? __init_ldsem+0x150/0x150 [ 458.629334][ T8206] ? __fget_files+0x28/0x460 [ 458.633959][ T8206] ? gsmld_write+0x120/0x120 [ 458.638569][ T8206] tty_ioctl+0x9b5/0xdc0 [ 458.642815][ T8206] ? tty_get_icount+0xb0/0xb0 [ 458.647492][ T8206] __se_sys_ioctl+0xfd/0x170 [ 458.652095][ T8206] do_syscall_64+0x55/0xb0 [ 458.656513][ T8206] ? clear_bhb_loop+0x40/0x90 [ 458.661213][ T8206] ? clear_bhb_loop+0x40/0x90 [ 458.665886][ T8206] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.671777][ T8206] RIP: 0033:0x7f358a39e159 [ 458.676201][ T8206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.695836][ T8206] RSP: 002b:00007f358b26d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.704249][ T8206] RAX: ffffffffffffffda RBX: 00007f358a626180 RCX: 00007f358a39e159 [ 458.712391][ T8206] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 458.720360][ T8206] RBP: 00007f358a43503b R08: 0000000000000000 R09: 0000000000000000 [ 458.728328][ T8206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.736296][ T8206] R13: 00007f358a626218 R14: 00007f358a626180 R15: 00007fffe4f6d218 [ 458.744322][ T8206] [ 458.751616][ T8206] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 459.099473][ T1071] team0 (unregistering): Port device team_slave_1 removed [ 459.867933][ T1071] team0 (unregistering): Port device team_slave_0 removed [ 460.265581][ T1071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.016901][ T1071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.062895][ T8225] CIFS: Attempting to mount //127.0.0.1/share [ 461.083115][ T8225] CIFS: VFS: Error connecting to socket. Aborting operation. [ 461.095536][ T8225] CIFS: VFS: cifs_mount failed w/return code = -111 [ 463.315161][ T1071] bond0 (unregistering): Released all slaves [ 468.072841][ T8045] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 468.087975][ T8269] CIFS: Attempting to mount //127.0.0.1/share [ 468.118383][ T8045] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 468.127591][ T8269] CIFS: VFS: Error connecting to socket. Aborting operation. [ 468.147898][ T8045] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 468.153969][ T8269] CIFS: VFS: cifs_mount failed w/return code = -111 [ 468.174721][ T8045] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 468.520520][ T8045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.599237][ T8045] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.613051][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.620916][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.839792][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.847057][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.418245][ T8045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 472.484924][ T8045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.177841][ T8045] veth0_vlan: entered promiscuous mode [ 473.242977][ T8045] veth1_vlan: entered promiscuous mode [ 473.484773][ T8045] veth0_macvtap: entered promiscuous mode [ 473.554436][ T8045] veth1_macvtap: entered promiscuous mode [ 474.104833][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.144008][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.193989][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.233868][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.277866][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.323878][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.380682][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.447885][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.511958][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.538367][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.588869][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.613866][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.642269][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.684556][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.267026][ T8045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.360814][ T8045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.467989][ T8045] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.550206][ T8045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.581180][ T8342] CIFS: Attempting to mount //127.0.0.1/share [ 476.601921][ T8342] CIFS: VFS: Error connecting to socket. Aborting operation. [ 476.634101][ T8342] CIFS: VFS: cifs_mount failed w/return code = -111 [ 476.657020][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.675468][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.411237][ T6094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.671085][ T6094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.934375][ T8401] CIFS: Attempting to mount //127.0.0.1/share [ 483.950389][ T8401] CIFS: VFS: Error connecting to socket. Aborting operation. [ 483.958153][ T8401] CIFS: VFS: cifs_mount failed w/return code = -111 [ 489.460748][ T8457] CIFS: Attempting to mount //127.0.0.1/share [ 489.511734][ T8457] CIFS: VFS: Error connecting to socket. Aborting operation. [ 489.519605][ T8457] CIFS: VFS: cifs_mount failed w/return code = -111 [ 490.627561][ T8469] binder: 8468:8469 ioctl c0306201 0 returned -14 [ 493.509738][ T8494] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 495.113965][ T8507] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 495.122489][ T8507] CPU: 1 PID: 8507 Comm: syz.1.647 Not tainted syzkaller #0 [ 495.129801][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.139966][ T8507] Call Trace: [ 495.143259][ T8507] [ 495.146208][ T8507] dump_stack_lvl+0x18c/0x250 [ 495.150923][ T8507] ? show_regs_print_info+0x20/0x20 [ 495.156146][ T8507] ? load_image+0x420/0x420 [ 495.160687][ T8507] sysfs_create_dir_ns+0x26e/0x2a0 [ 495.165822][ T8507] ? __lock_acquire+0x7d80/0x7d80 [ 495.170873][ T8507] ? sysfs_warn_dup+0xa0/0xa0 [ 495.175567][ T8507] ? rcu_is_watching+0x15/0xb0 [ 495.180354][ T8507] ? do_raw_spin_unlock+0x121/0x230 [ 495.185579][ T8507] kobject_add_internal+0x617/0xc90 [ 495.190812][ T8507] kobject_add+0x164/0x240 [ 495.195261][ T8507] ? kobject_init+0x1d0/0x1d0 [ 495.199968][ T8507] ? get_device_parent+0x366/0x390 [ 495.205110][ T8507] device_add+0x3fa/0xc40 [ 495.209465][ T8507] tty_register_device_attr+0x425/0x950 [ 495.215134][ T8507] ? tty_register_device+0x30/0x30 [ 495.220280][ T8507] ? tty_port_init+0x132/0x1a0 [ 495.225178][ T8507] ? gsm_dlci_alloc+0x32a/0x630 [ 495.230050][ T8507] ? __might_fault+0xaa/0x120 [ 495.234767][ T8507] gsm_activate_mux+0x110/0x2a0 [ 495.239658][ T8507] gsmld_ioctl+0x12ca/0x1900 [ 495.244281][ T8507] ? gsmld_write+0x120/0x120 [ 495.248911][ T8507] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 495.254574][ T8507] ? __init_ldsem+0x150/0x150 [ 495.259286][ T8507] ? __sanitizer_cov_trace_switch+0x8/0xe0 [ 495.265146][ T8507] ? gsmld_write+0x120/0x120 [ 495.269766][ T8507] tty_ioctl+0x9b5/0xdc0 [ 495.274044][ T8507] ? tty_get_icount+0xb0/0xb0 [ 495.278836][ T8507] __se_sys_ioctl+0xfd/0x170 [ 495.283454][ T8507] do_syscall_64+0x55/0xb0 [ 495.287895][ T8507] ? clear_bhb_loop+0x40/0x90 [ 495.292594][ T8507] ? clear_bhb_loop+0x40/0x90 [ 495.297295][ T8507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.303204][ T8507] RIP: 0033:0x7f358a39e159 [ 495.307642][ T8507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.327359][ T8507] RSP: 002b:00007f358b26d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.335817][ T8507] RAX: ffffffffffffffda RBX: 00007f358a626180 RCX: 00007f358a39e159 [ 495.343806][ T8507] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 495.352055][ T8507] RBP: 00007f358a43503b R08: 0000000000000000 R09: 0000000000000000 [ 495.360052][ T8507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.368040][ T8507] R13: 00007f358a626218 R14: 00007f358a626180 R15: 00007fffe4f6d218 [ 495.376050][ T8507] [ 495.380784][ T8507] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 497.121208][ T8520] binder: 8519:8520 ioctl c0306201 0 returned -14 [ 497.470991][ T8524] siw: device registration error -23 [ 501.914348][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.920697][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.096927][ T8592] binder: 8591:8592 ioctl c0306201 0 returned -14 [ 510.326507][ T27] audit: type=1800 audit(1789158481.784:6): pid=8626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.677" name="syzkaller0" dev="sda1" ino=2045 res=0 errno=0 [ 511.214654][ T8638] CIFS: Attempting to mount //127.0.0.1/share [ 511.245885][ T8638] CIFS: VFS: Error connecting to socket. Aborting operation. [ 511.288262][ T8638] CIFS: VFS: cifs_mount failed w/return code = -111 [ 513.455153][ T8669] trusted_key: encrypted_key: key trusted:syz not found [ 518.284400][ T8694] CIFS: Attempting to mount //127.0.0.1/share [ 518.369667][ T8694] CIFS: VFS: Error connecting to socket. Aborting operation. [ 518.411182][ T8694] CIFS: VFS: cifs_mount failed w/return code = -111 [ 521.919888][ T8721] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 523.509228][ T8738] CIFS: Attempting to mount //127.0.0.1/share [ 523.566243][ T8740] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 523.586006][ T8738] CIFS: VFS: \\127.0.0.1 Error -104 sending data on socket to server [ 523.625772][ T8738] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -103 [ 523.685425][ T8738] CIFS: VFS: cifs_mount failed w/return code = -103 [ 528.064883][ T8789] CIFS: Attempting to mount //127.0.0.1/share [ 528.197529][ T8789] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 528.294282][ T8789] CIFS: VFS: cifs_mount failed w/return code = -11 [ 530.489382][ T8811] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 530.498124][ T8811] CPU: 0 PID: 8811 Comm: syz.1.720 Not tainted syzkaller #0 [ 530.505437][ T8811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 530.515515][ T8811] Call Trace: [ 530.518817][ T8811] [ 530.521764][ T8811] dump_stack_lvl+0x18c/0x250 [ 530.526473][ T8811] ? show_regs_print_info+0x20/0x20 [ 530.531699][ T8811] ? load_image+0x420/0x420 [ 530.536237][ T8811] sysfs_create_dir_ns+0x26e/0x2a0 [ 530.541372][ T8811] ? __lock_acquire+0x7d80/0x7d80 [ 530.546420][ T8811] ? sysfs_warn_dup+0xa0/0xa0 [ 530.551110][ T8811] ? rcu_is_watching+0x15/0xb0 [ 530.555913][ T8811] ? do_raw_spin_unlock+0x121/0x230 [ 530.561141][ T8811] kobject_add_internal+0x617/0xc90 [ 530.566373][ T8811] kobject_add+0x164/0x240 [ 530.570819][ T8811] ? kobject_init+0x1d0/0x1d0 [ 530.575528][ T8811] ? get_device_parent+0x366/0x390 [ 530.580669][ T8811] device_add+0x3fa/0xc40 [ 530.585028][ T8811] tty_register_device_attr+0x425/0x950 [ 530.590611][ T8811] ? tty_register_device+0x30/0x30 [ 530.595756][ T8811] ? tty_port_init+0x132/0x1a0 [ 530.600536][ T8811] ? gsm_dlci_alloc+0x32a/0x630 [ 530.605409][ T8811] ? __might_fault+0xaa/0x120 [ 530.610109][ T8811] gsm_activate_mux+0x110/0x2a0 [ 530.614996][ T8811] gsmld_ioctl+0x12ca/0x1900 [ 530.619627][ T8811] ? gsmld_write+0x120/0x120 [ 530.624267][ T8811] ? __init_ldsem+0x150/0x150 [ 530.628999][ T8811] ? __fget_files+0x28/0x460 [ 530.633623][ T8811] ? gsmld_write+0x120/0x120 [ 530.638242][ T8811] tty_ioctl+0x9b5/0xdc0 [ 530.642510][ T8811] ? tty_get_icount+0xb0/0xb0 [ 530.647214][ T8811] __se_sys_ioctl+0xfd/0x170 [ 530.651834][ T8811] do_syscall_64+0x55/0xb0 [ 530.656283][ T8811] ? clear_bhb_loop+0x40/0x90 [ 530.661001][ T8811] ? clear_bhb_loop+0x40/0x90 [ 530.665729][ T8811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.671660][ T8811] RIP: 0033:0x7f358a39e159 [ 530.676108][ T8811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.695846][ T8811] RSP: 002b:00007f358b26d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 530.704465][ T8811] RAX: ffffffffffffffda RBX: 00007f358a626180 RCX: 00007f358a39e159 [ 530.712457][ T8811] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 530.720449][ T8811] RBP: 00007f358a43503b R08: 0000000000000000 R09: 0000000000000000 [ 530.728446][ T8811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.736443][ T8811] R13: 00007f358a626218 R14: 00007f358a626180 R15: 00007fffe4f6d218 [ 530.744500][ T8811] [ 530.748942][ T8811] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 535.103461][ T8827] CIFS: Attempting to mount //127.0.0.1/share [ 535.149242][ T8827] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 535.175505][ T8827] CIFS: VFS: cifs_mount failed w/return code = -11 [ 545.157826][ T8872] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 545.166580][ T8872] CPU: 0 PID: 8872 Comm: syz.1.734 Not tainted syzkaller #0 [ 545.173886][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.183957][ T8872] Call Trace: [ 545.187258][ T8872] [ 545.190199][ T8872] dump_stack_lvl+0x18c/0x250 [ 545.194904][ T8872] ? show_regs_print_info+0x20/0x20 [ 545.200122][ T8872] ? load_image+0x420/0x420 [ 545.204656][ T8872] sysfs_create_dir_ns+0x26e/0x2a0 [ 545.209791][ T8872] ? __lock_acquire+0x7d80/0x7d80 [ 545.214840][ T8872] ? sysfs_warn_dup+0xa0/0xa0 [ 545.219533][ T8872] ? preempt_schedule_thunk+0x1a/0x30 [ 545.224969][ T8872] kobject_add_internal+0x617/0xc90 [ 545.230199][ T8872] kobject_add+0x164/0x240 [ 545.234643][ T8872] ? kobject_init+0x1d0/0x1d0 [ 545.239347][ T8872] ? get_device_parent+0x366/0x390 [ 545.244485][ T8872] device_add+0x3fa/0xc40 [ 545.248843][ T8872] tty_register_device_attr+0x425/0x950 [ 545.254418][ T8872] ? tty_register_device+0x30/0x30 [ 545.259558][ T8872] ? tty_port_init+0x132/0x1a0 [ 545.264343][ T8872] ? gsm_dlci_alloc+0x32a/0x630 [ 545.269212][ T8872] ? __might_fault+0xaa/0x120 [ 545.273908][ T8872] gsm_activate_mux+0x110/0x2a0 [ 545.278783][ T8872] gsmld_ioctl+0x12ca/0x1900 [ 545.283400][ T8872] ? gsmld_write+0x120/0x120 [ 545.288023][ T8872] ? __init_ldsem+0x150/0x150 [ 545.292728][ T8872] ? __fget_files+0x28/0x460 [ 545.297350][ T8872] ? gsmld_write+0x120/0x120 [ 545.301960][ T8872] tty_ioctl+0x9b5/0xdc0 [ 545.306227][ T8872] ? tty_get_icount+0xb0/0xb0 [ 545.311017][ T8872] __se_sys_ioctl+0xfd/0x170 [ 545.315633][ T8872] do_syscall_64+0x55/0xb0 [ 545.320070][ T8872] ? clear_bhb_loop+0x40/0x90 [ 545.324766][ T8872] ? clear_bhb_loop+0x40/0x90 [ 545.329559][ T8872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.335468][ T8872] RIP: 0033:0x7f358a39e159 [ 545.339900][ T8872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.359525][ T8872] RSP: 002b:00007f358b26d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.367969][ T8872] RAX: ffffffffffffffda RBX: 00007f358a626180 RCX: 00007f358a39e159 [ 545.375969][ T8872] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 545.383952][ T8872] RBP: 00007f358a43503b R08: 0000000000000000 R09: 0000000000000000 [ 545.391938][ T8872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.399919][ T8872] R13: 00007f358a626218 R14: 00007f358a626180 R15: 00007fffe4f6d218 [ 545.407925][ T8872] [ 545.411859][ T8872] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 548.129793][ T8884] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 551.907894][ T8896] trusted_key: encrypted_key: insufficient parameters specified [ 557.610138][ T8921] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 557.618690][ T8921] CPU: 1 PID: 8921 Comm: syz.1.751 Not tainted syzkaller #0 [ 557.625998][ T8921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 557.637370][ T8921] Call Trace: [ 557.640759][ T8921] [ 557.643710][ T8921] dump_stack_lvl+0x18c/0x250 [ 557.648430][ T8921] ? show_regs_print_info+0x20/0x20 [ 557.653720][ T8921] ? load_image+0x420/0x420 [ 557.658289][ T8921] sysfs_create_dir_ns+0x26e/0x2a0 [ 557.663433][ T8921] ? __lock_acquire+0x7d80/0x7d80 [ 557.668494][ T8921] ? sysfs_warn_dup+0xa0/0xa0 [ 557.673198][ T8921] ? rcu_is_watching+0x15/0xb0 [ 557.677999][ T8921] ? do_raw_spin_unlock+0x121/0x230 [ 557.683235][ T8921] kobject_add_internal+0x617/0xc90 [ 557.688478][ T8921] kobject_add+0x164/0x240 [ 557.692929][ T8921] ? kobject_init+0x1d0/0x1d0 [ 557.697637][ T8921] ? get_device_parent+0x366/0x390 [ 557.702775][ T8921] device_add+0x3fa/0xc40 [ 557.707134][ T8921] tty_register_device_attr+0x425/0x950 [ 557.712720][ T8921] ? tty_register_device+0x30/0x30 [ 557.717862][ T8921] ? tty_port_init+0x132/0x1a0 [ 557.722646][ T8921] ? gsm_dlci_alloc+0x32a/0x630 [ 557.727518][ T8921] ? __might_fault+0xaa/0x120 [ 557.732222][ T8921] gsm_activate_mux+0x110/0x2a0 [ 557.737105][ T8921] gsmld_ioctl+0x12ca/0x1900 [ 557.741732][ T8921] ? gsmld_write+0x120/0x120 [ 557.746346][ T8921] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 557.752363][ T8921] ? lockdep_hardirqs_on+0x98/0x150 [ 557.757604][ T8921] ? tty_ldisc_ref_wait+0x48/0x70 [ 557.762657][ T8921] ? gsmld_write+0x120/0x120 [ 557.767268][ T8921] tty_ioctl+0x9b5/0xdc0 [ 557.771544][ T8921] ? tty_get_icount+0xb0/0xb0 [ 557.776249][ T8921] __se_sys_ioctl+0xfd/0x170 [ 557.780873][ T8921] do_syscall_64+0x55/0xb0 [ 557.785314][ T8921] ? clear_bhb_loop+0x40/0x90 [ 557.790008][ T8921] ? clear_bhb_loop+0x40/0x90 [ 557.794704][ T8921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.800617][ T8921] RIP: 0033:0x7f358a39e159 [ 557.805048][ T8921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.824676][ T8921] RSP: 002b:00007f358b26d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.833116][ T8921] RAX: ffffffffffffffda RBX: 00007f358a626180 RCX: 00007f358a39e159 [ 557.841111][ T8921] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 557.849101][ T8921] RBP: 00007f358a43503b R08: 0000000000000000 R09: 0000000000000000 [ 557.857091][ T8921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.865080][ T8921] R13: 00007f358a626218 R14: 00007f358a626180 R15: 00007fffe4f6d218 [ 557.873085][ T8921] [ 557.879329][ T8921] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 559.938304][ T8945] ip_tables: iptables: counters copy to user failed while replacing table [ 560.184722][ T8923] Bluetooth: hci1: command 0x0406 tx timeout [ 563.249800][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.256273][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.404786][ T27] audit: type=1800 audit(1789158536.214:7): pid=8970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.762" name=08 dev="sda1" ino=2044 res=0 errno=0 [ 565.473326][ T8975] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 565.481935][ T8975] CPU: 1 PID: 8975 Comm: syz.2.763 Not tainted syzkaller #0 [ 565.489280][ T8975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 565.499355][ T8975] Call Trace: [ 565.502654][ T8975] [ 565.505608][ T8975] dump_stack_lvl+0x18c/0x250 [ 565.510320][ T8975] ? show_regs_print_info+0x20/0x20 [ 565.515545][ T8975] ? load_image+0x420/0x420 [ 565.520089][ T8975] sysfs_create_dir_ns+0x26e/0x2a0 [ 565.525245][ T8975] ? __lock_acquire+0x7d80/0x7d80 [ 565.530314][ T8975] ? sysfs_warn_dup+0xa0/0xa0 [ 565.535013][ T8975] ? rcu_is_watching+0x15/0xb0 [ 565.539813][ T8975] ? do_raw_spin_unlock+0x121/0x230 [ 565.545055][ T8975] kobject_add_internal+0x617/0xc90 [ 565.550305][ T8975] kobject_add+0x164/0x240 [ 565.554759][ T8975] ? kobject_init+0x1d0/0x1d0 [ 565.559472][ T8975] ? get_device_parent+0x366/0x390 [ 565.564616][ T8975] device_add+0x3fa/0xc40 [ 565.568976][ T8975] tty_register_device_attr+0x425/0x950 [ 565.574557][ T8975] ? tty_register_device+0x30/0x30 [ 565.579704][ T8975] ? tty_port_init+0x132/0x1a0 [ 565.584489][ T8975] ? gsm_dlci_alloc+0x32a/0x630 [ 565.589365][ T8975] ? __might_fault+0xaa/0x120 [ 565.594069][ T8975] gsm_activate_mux+0x110/0x2a0 [ 565.598954][ T8975] gsmld_ioctl+0x12ca/0x1900 [ 565.603581][ T8975] ? gsmld_write+0x120/0x120 [ 565.608219][ T8975] ? __init_ldsem+0x150/0x150 [ 565.612938][ T8975] ? __fget_files+0x28/0x460 [ 565.617584][ T8975] ? gsmld_write+0x120/0x120 [ 565.622201][ T8975] tty_ioctl+0x9b5/0xdc0 [ 565.626474][ T8975] ? tty_get_icount+0xb0/0xb0 [ 565.631180][ T8975] __se_sys_ioctl+0xfd/0x170 [ 565.635800][ T8975] do_syscall_64+0x55/0xb0 [ 565.640243][ T8975] ? clear_bhb_loop+0x40/0x90 [ 565.644944][ T8975] ? clear_bhb_loop+0x40/0x90 [ 565.649646][ T8975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 565.655564][ T8975] RIP: 0033:0x7f2dc379e159 [ 565.659996][ T8975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.679634][ T8975] RSP: 002b:00007f2dc19f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.688077][ T8975] RAX: ffffffffffffffda RBX: 00007f2dc3a26180 RCX: 00007f2dc379e159 [ 565.696070][ T8975] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 565.704060][ T8975] RBP: 00007f2dc383503b R08: 0000000000000000 R09: 0000000000000000 [ 565.712144][ T8975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.720140][ T8975] R13: 00007f2dc3a26218 R14: 00007f2dc3a26180 R15: 00007ffedbcbcbb8 [ 565.728158][ T8975] [ 565.733397][ T8975] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 567.318994][ T8992] siw: device registration error -23 [ 572.168286][ T9019] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 572.176871][ T9019] CPU: 0 PID: 9019 Comm: syz.1.773 Not tainted syzkaller #0 [ 572.184175][ T9019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.194246][ T9019] Call Trace: [ 572.197539][ T9019] [ 572.200482][ T9019] dump_stack_lvl+0x18c/0x250 [ 572.205188][ T9019] ? show_regs_print_info+0x20/0x20 [ 572.210409][ T9019] ? load_image+0x420/0x420 [ 572.214948][ T9019] sysfs_create_dir_ns+0x26e/0x2a0 [ 572.220114][ T9019] ? __lock_acquire+0x7d80/0x7d80 [ 572.225159][ T9019] ? sysfs_warn_dup+0xa0/0xa0 [ 572.229854][ T9019] ? rcu_is_watching+0x15/0xb0 [ 572.234651][ T9019] ? do_raw_spin_unlock+0x121/0x230 [ 572.239887][ T9019] kobject_add_internal+0x617/0xc90 [ 572.245123][ T9019] kobject_add+0x164/0x240 [ 572.249658][ T9019] ? kobject_init+0x1d0/0x1d0 [ 572.254365][ T9019] ? get_device_parent+0x366/0x390 [ 572.259589][ T9019] device_add+0x3fa/0xc40 [ 572.263947][ T9019] tty_register_device_attr+0x425/0x950 [ 572.269523][ T9019] ? tty_register_device+0x30/0x30 [ 572.274660][ T9019] ? tty_port_init+0x132/0x1a0 [ 572.279435][ T9019] ? gsm_dlci_alloc+0x32a/0x630 [ 572.284307][ T9019] ? __might_fault+0xaa/0x120 [ 572.289009][ T9019] gsm_activate_mux+0x110/0x2a0 [ 572.293887][ T9019] gsmld_ioctl+0x12ca/0x1900 [ 572.298509][ T9019] ? gsmld_write+0x120/0x120 [ 572.303133][ T9019] ? __init_ldsem+0x150/0x150 [ 572.307837][ T9019] ? __fget_files+0x28/0x460 [ 572.312462][ T9019] ? gsmld_write+0x120/0x120 [ 572.317111][ T9019] tty_ioctl+0x9b5/0xdc0 [ 572.321387][ T9019] ? tty_get_icount+0xb0/0xb0 [ 572.326087][ T9019] __se_sys_ioctl+0xfd/0x170 [ 572.330701][ T9019] do_syscall_64+0x55/0xb0 [ 572.335149][ T9019] ? clear_bhb_loop+0x40/0x90 [ 572.339863][ T9019] ? clear_bhb_loop+0x40/0x90 [ 572.344559][ T9019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.350475][ T9019] RIP: 0033:0x7f358a39e159 [ 572.354904][ T9019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.374623][ T9019] RSP: 002b:00007f358b26d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.383061][ T9019] RAX: ffffffffffffffda RBX: 00007f358a626180 RCX: 00007f358a39e159 [ 572.391049][ T9019] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 572.399039][ T9019] RBP: 00007f358a43503b R08: 0000000000000000 R09: 0000000000000000 [ 572.407031][ T9019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.415017][ T9019] R13: 00007f358a626218 R14: 00007f358a626180 R15: 00007fffe4f6d218 [ 572.423022][ T9019] [ 572.427213][ T9019] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 573.208783][ T9025] netlink: 32 bytes leftover after parsing attributes in process `syz.3.771'. [ 574.066033][ T9036] siw: device registration error -23 [ 576.365217][ T9049] NILFS (nullb0): couldn't find nilfs on the device [ 577.278096][ T9058] binder: 9056:9058 ioctl 4018620d 0 returned -22 [ 579.883440][ T9069] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 579.892187][ T9069] CPU: 1 PID: 9069 Comm: syz.1.786 Not tainted syzkaller #0 [ 579.899498][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 579.909571][ T9069] Call Trace: [ 579.912846][ T9069] [ 579.915768][ T9069] dump_stack_lvl+0x18c/0x250 [ 579.920444][ T9069] ? show_regs_print_info+0x20/0x20 [ 579.925641][ T9069] ? load_image+0x420/0x420 [ 579.930141][ T9069] sysfs_create_dir_ns+0x26e/0x2a0 [ 579.935252][ T9069] ? __lock_acquire+0x7d80/0x7d80 [ 579.940266][ T9069] ? sysfs_warn_dup+0xa0/0xa0 [ 579.945049][ T9069] ? do_raw_spin_unlock+0x121/0x230 [ 579.950256][ T9069] kobject_add_internal+0x617/0xc90 [ 579.955454][ T9069] kobject_add+0x164/0x240 [ 579.959888][ T9069] ? kobject_init+0x1d0/0x1d0 [ 579.964579][ T9069] ? get_device_parent+0x366/0x390 [ 579.969686][ T9069] device_add+0x3fa/0xc40 [ 579.974010][ T9069] tty_register_device_attr+0x425/0x950 [ 579.979574][ T9069] ? tty_register_device+0x30/0x30 [ 579.984785][ T9069] ? tty_port_init+0x132/0x1a0 [ 579.989540][ T9069] ? gsm_dlci_alloc+0x32a/0x630 [ 579.994382][ T9069] ? __might_fault+0xaa/0x120 [ 579.999068][ T9069] gsm_activate_mux+0x110/0x2a0 [ 580.003923][ T9069] gsmld_ioctl+0x12ca/0x1900 [ 580.008517][ T9069] ? gsmld_write+0x120/0x120 [ 580.013104][ T9069] ? __init_ldsem+0x150/0x150 [ 580.017780][ T9069] ? lockdep_hardirqs_on+0x98/0x150 [ 580.022989][ T9069] ? gsmld_write+0x120/0x120 [ 580.027667][ T9069] tty_ioctl+0x9b5/0xdc0 [ 580.031902][ T9069] ? tty_get_icount+0xb0/0xb0 [ 580.036571][ T9069] __se_sys_ioctl+0xfd/0x170 [ 580.041153][ T9069] do_syscall_64+0x55/0xb0 [ 580.045562][ T9069] ? clear_bhb_loop+0x40/0x90 [ 580.050235][ T9069] ? clear_bhb_loop+0x40/0x90 [ 580.054907][ T9069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 580.060865][ T9069] RIP: 0033:0x7f358a39e159 [ 580.065312][ T9069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.084921][ T9069] RSP: 002b:00007f358b26d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.093329][ T9069] RAX: ffffffffffffffda RBX: 00007f358a626180 RCX: 00007f358a39e159 [ 580.101303][ T9069] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 580.109271][ T9069] RBP: 00007f358a43503b R08: 0000000000000000 R09: 0000000000000000 [ 580.117246][ T9069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.125208][ T9069] R13: 00007f358a626218 R14: 00007f358a626180 R15: 00007fffe4f6d218 [ 580.133185][ T9069] [ 580.137429][ T9069] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 585.445038][ T9088] CIFS: Attempting to mount //127.0.0.1/share [ 585.523065][ T9088] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 585.544197][ T9088] CIFS: VFS: cifs_mount failed w/return code = -11 [ 589.467905][ T9114] binder: 9113:9114 ioctl 4018620d 0 returned -22 [ 589.604284][ T9119] syz.1.798: attempt to access beyond end of device [ 589.604284][ T9119] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 589.617950][ T9119] gfs2: error 10 reading superblock [ 590.006985][ T5765] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 590.407264][ T5765] usb 3-1: config 0 has no interfaces? [ 590.464320][ T5765] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 590.506395][ T9122] CIFS: Attempting to mount //127.0.0.1/share [ 590.513930][ T9122] CIFS: VFS: Error connecting to socket. Aborting operation. [ 590.521373][ T9122] CIFS: VFS: cifs_mount failed w/return code = -111 [ 590.524520][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.568399][ T5765] usb 3-1: config 0 descriptor?? [ 591.900837][ T5765] usb 3-1: USB disconnect, device number 7 [ 594.360457][ T9149] trusted_key: encrypted_key: key trusted:syz not found [ 596.030916][ T9155] binder: 9154:9155 ioctl 4018620d 0 returned -22 [ 597.469033][ T9160] CIFS: Attempting to mount //127.0.0.1/share [ 597.485316][ T9160] CIFS: VFS: Error connecting to socket. Aborting operation. [ 597.528315][ T9160] CIFS: VFS: cifs_mount failed w/return code = -111 [ 601.439346][ T9181] capability: warning: `syz.3.817' uses 32-bit capabilities (legacy support in use) [ 601.921922][ T9188] binder: 9186:9188 ioctl c0306201 0 returned -14 [ 606.162112][ T9203] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 608.796291][ T9212] CIFS: Attempting to mount //127.0.0.1/share [ 608.938584][ T9212] CIFS: VFS: Error connecting to socket. Aborting operation. [ 608.953869][ T9212] CIFS: VFS: cifs_mount failed w/return code = -111 [ 610.656199][ T9226] binder: 9225:9226 ioctl c0306201 0 returned -14 [ 612.944223][ T9240] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 612.953942][ T9240] CPU: 1 PID: 9240 Comm: syz.1.834 Not tainted syzkaller #0 [ 612.961277][ T9240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 612.971360][ T9240] Call Trace: [ 612.974652][ T9240] [ 612.977595][ T9240] dump_stack_lvl+0x18c/0x250 [ 612.982326][ T9240] ? show_regs_print_info+0x20/0x20 [ 612.987554][ T9240] ? load_image+0x420/0x420 [ 612.992087][ T9240] sysfs_create_dir_ns+0x26e/0x2a0 [ 612.997224][ T9240] ? __lock_acquire+0x7d80/0x7d80 [ 613.002365][ T9240] ? sysfs_warn_dup+0xa0/0xa0 [ 613.007066][ T9240] ? rcu_is_watching+0x15/0xb0 [ 613.011856][ T9240] ? do_raw_spin_unlock+0x121/0x230 [ 613.017085][ T9240] kobject_add_internal+0x617/0xc90 [ 613.022323][ T9240] kobject_add+0x164/0x240 [ 613.026771][ T9240] ? kobject_init+0x1d0/0x1d0 [ 613.031476][ T9240] ? get_device_parent+0x366/0x390 [ 613.036616][ T9240] device_add+0x3fa/0xc40 [ 613.040971][ T9240] tty_register_device_attr+0x425/0x950 [ 613.046551][ T9240] ? tty_register_device+0x30/0x30 [ 613.051690][ T9240] ? tty_port_init+0x132/0x1a0 [ 613.056474][ T9240] ? gsm_dlci_alloc+0x32a/0x630 [ 613.061350][ T9240] ? __might_fault+0xaa/0x120 [ 613.066052][ T9240] gsm_activate_mux+0x110/0x2a0 [ 613.070932][ T9240] gsmld_ioctl+0x12ca/0x1900 [ 613.075552][ T9240] ? gsmld_write+0x120/0x120 [ 613.080177][ T9240] ? __init_ldsem+0x150/0x150 [ 613.084878][ T9240] ? __fget_files+0x28/0x460 [ 613.089502][ T9240] ? gsmld_write+0x120/0x120 [ 613.094115][ T9240] tty_ioctl+0x9b5/0xdc0 [ 613.098383][ T9240] ? tty_get_icount+0xb0/0xb0 [ 613.103116][ T9240] __se_sys_ioctl+0xfd/0x170 [ 613.107736][ T9240] do_syscall_64+0x55/0xb0 [ 613.112177][ T9240] ? clear_bhb_loop+0x40/0x90 [ 613.116880][ T9240] ? clear_bhb_loop+0x40/0x90 [ 613.121578][ T9240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 613.127497][ T9240] RIP: 0033:0x7f358a39e159 [ 613.131927][ T9240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.151559][ T9240] RSP: 002b:00007f358b26d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.160001][ T9240] RAX: ffffffffffffffda RBX: 00007f358a626180 RCX: 00007f358a39e159 [ 613.167993][ T9240] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 613.175990][ T9240] RBP: 00007f358a43503b R08: 0000000000000000 R09: 0000000000000000 [ 613.183980][ T9240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.191969][ T9240] R13: 00007f358a626218 R14: 00007f358a626180 R15: 00007fffe4f6d218 [ 613.200002][ T9240] [ 613.238515][ T9240] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 613.913966][ T9245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.833'. [ 618.333961][ T9270] CIFS: Attempting to mount //127.0.0.1/share [ 618.360254][ T9272] jffs2: notice: (9272) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 618.425531][ T9273] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 619.642183][ T9270] CIFS: VFS: \\127.0.0.1 smb3_crypto_aead_allocate: Failed alloc encrypt aead [ 619.684234][ T9270] CIFS: VFS: \\127.0.0.1 SMB2_negotiate: crypto alloc failed, rc=-4 [ 619.692398][ T9270] CIFS: VFS: cifs_mount failed w/return code = -4 [ 625.399802][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.114819][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.947242][ T9312] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 628.258536][ T9315] syz.2.851: attempt to access beyond end of device [ 628.258536][ T9315] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 628.293918][ T9315] gfs2: error 10 reading superblock [ 628.627917][ T9318] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 628.643935][ T9318] rtrs_client L2075: : Failed to resolve address, err: -19 [ 628.652282][ T9318] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 636.329032][ T9353] syz.0.861: attempt to access beyond end of device [ 636.329032][ T9353] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 636.383915][ T9353] gfs2: error 10 reading superblock [ 638.376641][ T9366] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 645.836940][ T9412] trusted_key: encrypted_key: keylen parameter is missing [ 650.239865][ T9446] trusted_key: encrypted_key: keylen parameter is missing [ 654.506960][ T9475] trusted_key: encrypted_key: keylen parameter is missing [ 663.009761][ T9523] syz.1.915: attempt to access beyond end of device [ 663.009761][ T9523] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 663.024092][ T9523] gfs2: error 10 reading superblock [ 665.060363][ T9534] No source specified [ 665.184424][ T9536] CIFS mount error: No usable UNC path provided in device string! [ 665.184424][ T9536] [ 665.248460][ T9536] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 670.225025][ T9570] No source specified [ 674.917670][ T9596] syz.0.936: attempt to access beyond end of device [ 674.917670][ T9596] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 674.930991][ T9596] gfs2: error 10 reading superblock [ 679.948192][ T9622] No source specified [ 682.228669][ T9631] libceph: resolve ' [ 682.228669][ T9631] -&fYǝa2i [ 682.228669][ T9631] .?&*&' (ret=-3): failed [ 684.543113][ T9642] syz.1.946: attempt to access beyond end of device [ 684.543113][ T9642] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 684.556417][ T9642] gfs2: error 10 reading superblock [ 685.867634][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.874082][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.153023][ T9655] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 687.164698][ T9655] rtrs_client L2075: : Failed to resolve address, err: -19 [ 687.172353][ T9655] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 689.174564][ T9667] CIFS: Attempting to mount //127.0.0.1/share [ 689.181893][ T9667] CIFS: VFS: Error connecting to socket. Aborting operation. [ 689.223226][ T9667] CIFS: VFS: cifs_mount failed w/return code = -111 [ 693.939159][ T9700] syz.3.961: attempt to access beyond end of device [ 693.939159][ T9700] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 693.952548][ T9700] gfs2: error 10 reading superblock [ 697.624636][ T9715] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 697.633113][ T9715] CPU: 0 PID: 9715 Comm: syz.1.970 Not tainted syzkaller #0 [ 697.640423][ T9715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.650497][ T9715] Call Trace: [ 697.653794][ T9715] [ 697.656747][ T9715] dump_stack_lvl+0x18c/0x250 [ 697.661452][ T9715] ? show_regs_print_info+0x20/0x20 [ 697.666672][ T9715] ? load_image+0x420/0x420 [ 697.671207][ T9715] sysfs_create_dir_ns+0x26e/0x2a0 [ 697.676343][ T9715] ? __lock_acquire+0x7d80/0x7d80 [ 697.681389][ T9715] ? sysfs_warn_dup+0xa0/0xa0 [ 697.686080][ T9715] ? rcu_is_watching+0x15/0xb0 [ 697.690877][ T9715] ? do_raw_spin_unlock+0x121/0x230 [ 697.696105][ T9715] kobject_add_internal+0x617/0xc90 [ 697.701339][ T9715] kobject_add+0x164/0x240 [ 697.705783][ T9715] ? kobject_init+0x1d0/0x1d0 [ 697.710494][ T9715] ? get_device_parent+0x366/0x390 [ 697.715636][ T9715] device_add+0x3fa/0xc40 [ 697.719994][ T9715] tty_register_device_attr+0x425/0x950 [ 697.725573][ T9715] ? tty_register_device+0x30/0x30 [ 697.730716][ T9715] ? tty_port_init+0x132/0x1a0 [ 697.735498][ T9715] ? gsm_dlci_alloc+0x32a/0x630 [ 697.740373][ T9715] ? __might_fault+0xaa/0x120 [ 697.745074][ T9715] gsm_activate_mux+0x110/0x2a0 [ 697.749955][ T9715] gsmld_ioctl+0x12ca/0x1900 [ 697.754582][ T9715] ? gsmld_write+0x120/0x120 [ 697.759209][ T9715] ? __init_ldsem+0x150/0x150 [ 697.763912][ T9715] ? lockdep_hardirqs_on+0x98/0x150 [ 697.769151][ T9715] ? gsmld_write+0x120/0x120 [ 697.773761][ T9715] tty_ioctl+0x9b5/0xdc0 [ 697.778028][ T9715] ? tty_get_icount+0xb0/0xb0 [ 697.782734][ T9715] __se_sys_ioctl+0xfd/0x170 [ 697.787350][ T9715] do_syscall_64+0x55/0xb0 [ 697.791789][ T9715] ? clear_bhb_loop+0x40/0x90 [ 697.796483][ T9715] ? clear_bhb_loop+0x40/0x90 [ 697.801183][ T9715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 697.807103][ T9715] RIP: 0033:0x7f358a39e159 [ 697.811538][ T9715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.831165][ T9715] RSP: 002b:00007f358b26d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 697.839609][ T9715] RAX: ffffffffffffffda RBX: 00007f358a626180 RCX: 00007f358a39e159 [ 697.847601][ T9715] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 697.855592][ T9715] RBP: 00007f358a43503b R08: 0000000000000000 R09: 0000000000000000 [ 697.863582][ T9715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.871571][ T9715] R13: 00007f358a626218 R14: 00007f358a626180 R15: 00007fffe4f6d218 [ 697.879577][ T9715] [ 697.930567][ T9715] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 703.293468][ T9745] syz.3.978: attempt to access beyond end of device [ 703.293468][ T9745] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 703.306850][ T9745] gfs2: error 10 reading superblock [ 709.775047][ T9777] syz.1.979 uses obsolete (PF_INET,SOCK_PACKET) [ 713.810694][ T9802] syz.1.991: attempt to access beyond end of device [ 713.810694][ T9802] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 713.824766][ T9802] gfs2: error 10 reading superblock [ 714.284249][ T9808] syz.1.994: attempt to access beyond end of device [ 714.284249][ T9808] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 714.297430][ T9808] gfs2: error 10 reading superblock [ 723.747907][ T9854] syz.1.1004: attempt to access beyond end of device [ 723.747907][ T9854] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 723.761278][ T9854] gfs2: error 10 reading superblock [ 727.060384][ T9873] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 727.108738][ T9873] CIFS: Attempting to mount //127.0.0.1/share [ 727.168062][ T9873] CIFS: VFS: Error connecting to socket. Aborting operation. [ 727.233853][ T9873] CIFS: VFS: cifs_mount failed w/return code = -111 [ 730.952268][ T9901] syz.2.1016: attempt to access beyond end of device [ 730.952268][ T9901] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 730.965875][ T9901] gfs2: error 10 reading superblock [ 733.465913][ T9917] CIFS: Attempting to mount //127.0.0.1/share [ 733.473211][ T9917] CIFS: VFS: Error connecting to socket. Aborting operation. [ 733.533765][ T9917] CIFS: VFS: cifs_mount failed w/return code = -111 [ 738.363777][ T9942] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 738.378837][ T9942] CPU: 0 PID: 9942 Comm: syz.2.1028 Not tainted syzkaller #0 [ 738.386261][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.396339][ T9942] Call Trace: [ 738.399626][ T9942] [ 738.402548][ T9942] dump_stack_lvl+0x18c/0x250 [ 738.407245][ T9942] ? show_regs_print_info+0x20/0x20 [ 738.412438][ T9942] ? load_image+0x420/0x420 [ 738.416966][ T9942] sysfs_create_dir_ns+0x26e/0x2a0 [ 738.422099][ T9942] ? __lock_acquire+0x7d80/0x7d80 [ 738.427132][ T9942] ? sysfs_warn_dup+0xa0/0xa0 [ 738.431803][ T9942] ? rcu_is_watching+0x15/0xb0 [ 738.436561][ T9942] ? do_raw_spin_unlock+0x121/0x230 [ 738.441753][ T9942] kobject_add_internal+0x617/0xc90 [ 738.446967][ T9942] kobject_add+0x164/0x240 [ 738.451376][ T9942] ? kobject_init+0x1d0/0x1d0 [ 738.456050][ T9942] ? get_device_parent+0x366/0x390 [ 738.461159][ T9942] device_add+0x3fa/0xc40 [ 738.465480][ T9942] tty_register_device_attr+0x425/0x950 [ 738.471022][ T9942] ? tty_register_device+0x30/0x30 [ 738.476126][ T9942] ? tty_port_init+0x132/0x1a0 [ 738.480876][ T9942] ? gsm_dlci_alloc+0x32a/0x630 [ 738.485716][ T9942] ? __might_fault+0xaa/0x120 [ 738.490383][ T9942] gsm_activate_mux+0x110/0x2a0 [ 738.495230][ T9942] gsmld_ioctl+0x12ca/0x1900 [ 738.499820][ T9942] ? gsmld_write+0x120/0x120 [ 738.504454][ T9942] ? __init_ldsem+0x150/0x150 [ 738.509159][ T9942] ? __fget_files+0x28/0x460 [ 738.513786][ T9942] ? gsmld_write+0x120/0x120 [ 738.518376][ T9942] tty_ioctl+0x9b5/0xdc0 [ 738.522609][ T9942] ? tty_get_icount+0xb0/0xb0 [ 738.527275][ T9942] __se_sys_ioctl+0xfd/0x170 [ 738.531858][ T9942] do_syscall_64+0x55/0xb0 [ 738.536268][ T9942] ? clear_bhb_loop+0x40/0x90 [ 738.540938][ T9942] ? clear_bhb_loop+0x40/0x90 [ 738.545601][ T9942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 738.551484][ T9942] RIP: 0033:0x7f2dc379e159 [ 738.555891][ T9942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.575509][ T9942] RSP: 002b:00007f2dc19f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 738.583920][ T9942] RAX: ffffffffffffffda RBX: 00007f2dc3a26180 RCX: 00007f2dc379e159 [ 738.591883][ T9942] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 738.599861][ T9942] RBP: 00007f2dc383503b R08: 0000000000000000 R09: 0000000000000000 [ 738.607830][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.615804][ T9942] R13: 00007f2dc3a26218 R14: 00007f2dc3a26180 R15: 00007ffedbcbcbb8 [ 738.623792][ T9942] [ 738.628609][ T9942] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 741.842808][ T9953] syz.0.1027: attempt to access beyond end of device [ 741.842808][ T9953] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 741.856133][ T9953] gfs2: error 10 reading superblock [ 742.902702][ T9959] CIFS: Attempting to mount //127.0.0.1/share [ 742.941533][ T9959] CIFS: VFS: Error connecting to socket. Aborting operation. [ 742.988439][ T9959] CIFS: VFS: cifs_mount failed w/return code = -111 [ 743.682914][ T9965] syz.1.1030: attempt to access beyond end of device [ 743.682914][ T9965] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 743.696305][ T9965] gfs2: error 10 reading superblock [ 744.908640][ T9968] jffs2: notice: (9968) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 747.826283][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.832619][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.737754][ T9998] syz.3.1040: attempt to access beyond end of device [ 750.737754][ T9998] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 750.751067][ T9998] gfs2: error 10 reading superblock [ 751.780482][T10007] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 751.793893][T10007] CPU: 1 PID: 10007 Comm: syz.0.1037 Not tainted syzkaller #0 [ 751.801413][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 751.811498][T10007] Call Trace: [ 751.814793][T10007] [ 751.817741][T10007] dump_stack_lvl+0x18c/0x250 [ 751.822456][T10007] ? show_regs_print_info+0x20/0x20 [ 751.827680][T10007] ? load_image+0x420/0x420 [ 751.832222][T10007] sysfs_create_dir_ns+0x26e/0x2a0 [ 751.837364][T10007] ? __lock_acquire+0x7d80/0x7d80 [ 751.842409][T10007] ? sysfs_warn_dup+0xa0/0xa0 [ 751.847132][T10007] ? rcu_is_watching+0x15/0xb0 [ 751.851928][T10007] ? do_raw_spin_unlock+0x121/0x230 [ 751.857161][T10007] kobject_add_internal+0x617/0xc90 [ 751.862408][T10007] kobject_add+0x164/0x240 [ 751.866874][T10007] ? kobject_init+0x1d0/0x1d0 [ 751.871596][T10007] ? get_device_parent+0x366/0x390 [ 751.876754][T10007] device_add+0x3fa/0xc40 [ 751.881112][T10007] tty_register_device_attr+0x425/0x950 [ 751.886704][T10007] ? tty_register_device+0x30/0x30 [ 751.891846][T10007] ? tty_port_init+0x132/0x1a0 [ 751.896629][T10007] ? gsm_dlci_alloc+0x32a/0x630 [ 751.901501][T10007] ? __might_fault+0xaa/0x120 [ 751.906205][T10007] gsm_activate_mux+0x110/0x2a0 [ 751.911092][T10007] gsmld_ioctl+0x12ca/0x1900 [ 751.915724][T10007] ? gsmld_write+0x120/0x120 [ 751.920353][T10007] ? __init_ldsem+0x150/0x150 [ 751.925056][T10007] ? __fget_files+0x28/0x460 [ 751.929679][T10007] ? gsmld_write+0x120/0x120 [ 751.934294][T10007] tty_ioctl+0x9b5/0xdc0 [ 751.938561][T10007] ? tty_get_icount+0xb0/0xb0 [ 751.943260][T10007] __se_sys_ioctl+0xfd/0x170 [ 751.947877][T10007] do_syscall_64+0x55/0xb0 [ 751.952310][T10007] ? clear_bhb_loop+0x40/0x90 [ 751.957008][T10007] ? clear_bhb_loop+0x40/0x90 [ 751.961709][T10007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 751.967609][T10007] RIP: 0033:0x7f33ed99e159 [ 751.972026][T10007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.991636][T10007] RSP: 002b:00007f33ee899028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.000057][T10007] RAX: ffffffffffffffda RBX: 00007f33edc26180 RCX: 00007f33ed99e159 [ 752.008033][T10007] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 752.016012][T10007] RBP: 00007f33eda3503b R08: 0000000000000000 R09: 0000000000000000 [ 752.023988][T10007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.031991][T10007] R13: 00007f33edc26218 R14: 00007f33edc26180 R15: 00007ffd54577488 [ 752.039980][T10007] [ 752.049826][T10007] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 753.638165][T10021] CIFS: Attempting to mount //127.0.0.1/share [ 753.908107][T10022] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 753.946694][T10021] CIFS: VFS: cifs_mount failed w/return code = -112 [ 761.515595][T10060] CIFS: Attempting to mount //127.0.0.1/share [ 761.584555][T10062] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 761.664706][T10065] syz.0.1051: attempt to access beyond end of device [ 761.664706][T10065] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 761.677993][T10065] gfs2: error 10 reading superblock [ 761.698340][T10060] CIFS: VFS: cifs_mount failed w/return code = -112 [ 762.740134][T10071] libceph: resolve ' [ 762.740134][T10071] -&fYǝa2i [ 762.740134][T10071] .?&*&' (ret=-3): failed [ 762.884912][T10074] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 762.893369][T10074] CPU: 1 PID: 10074 Comm: syz.1.1057 Not tainted syzkaller #0 [ 762.900840][T10074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 762.910930][T10074] Call Trace: [ 762.914237][T10074] [ 762.917193][T10074] dump_stack_lvl+0x18c/0x250 [ 762.921912][T10074] ? show_regs_print_info+0x20/0x20 [ 762.927147][T10074] ? load_image+0x420/0x420 [ 762.931694][T10074] sysfs_create_dir_ns+0x26e/0x2a0 [ 762.936839][T10074] ? __lock_acquire+0x7d80/0x7d80 [ 762.941904][T10074] ? sysfs_warn_dup+0xa0/0xa0 [ 762.946614][T10074] ? rcu_is_watching+0x15/0xb0 [ 762.951393][T10074] ? do_raw_spin_unlock+0x121/0x230 [ 762.956608][T10074] kobject_add_internal+0x617/0xc90 [ 762.961824][T10074] kobject_add+0x164/0x240 [ 762.966253][T10074] ? kobject_init+0x1d0/0x1d0 [ 762.970942][T10074] ? get_device_parent+0x366/0x390 [ 762.976066][T10074] device_add+0x3fa/0xc40 [ 762.980415][T10074] tty_register_device_attr+0x425/0x950 [ 762.985987][T10074] ? tty_register_device+0x30/0x30 [ 762.991140][T10074] ? tty_port_init+0x132/0x1a0 [ 762.995934][T10074] ? gsm_dlci_alloc+0x32a/0x630 [ 763.000798][T10074] ? __might_fault+0xaa/0x120 [ 763.005572][T10074] gsm_activate_mux+0x110/0x2a0 [ 763.010430][T10074] gsmld_ioctl+0x12ca/0x1900 [ 763.015026][T10074] ? gsmld_write+0x120/0x120 [ 763.019628][T10074] ? __init_ldsem+0x150/0x150 [ 763.024305][T10074] ? __fget_files+0x28/0x460 [ 763.028903][T10074] ? gsmld_write+0x120/0x120 [ 763.033492][T10074] tty_ioctl+0x9b5/0xdc0 [ 763.037737][T10074] ? tty_get_icount+0xb0/0xb0 [ 763.042412][T10074] __se_sys_ioctl+0xfd/0x170 [ 763.047006][T10074] do_syscall_64+0x55/0xb0 [ 763.051424][T10074] ? clear_bhb_loop+0x40/0x90 [ 763.056100][T10074] ? clear_bhb_loop+0x40/0x90 [ 763.060780][T10074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 763.066679][T10074] RIP: 0033:0x7f358a39e159 [ 763.071095][T10074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.090817][T10074] RSP: 002b:00007f358b26d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 763.099240][T10074] RAX: ffffffffffffffda RBX: 00007f358a626180 RCX: 00007f358a39e159 [ 763.107209][T10074] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 763.115175][T10074] RBP: 00007f358a43503b R08: 0000000000000000 R09: 0000000000000000 [ 763.123139][T10074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.131103][T10074] R13: 00007f358a626218 R14: 00007f358a626180 R15: 00007fffe4f6d218 [ 763.139120][T10074] [ 763.160459][T10074] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 767.499436][T10104] CIFS: Attempting to mount //127.0.0.1/share [ 767.555780][T10105] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 767.587207][T10104] CIFS: VFS: cifs_mount failed w/return code = -112 [ 767.799671][T10110] siw: device registration error -23 [ 768.604581][T10109] syz.0.1068: attempt to access beyond end of device [ 768.604581][T10109] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 768.617801][T10109] gfs2: error 10 reading superblock [ 775.935228][T10145] CIFS: Attempting to mount //127.0.0.1/share [ 776.008747][T10146] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 776.032608][T10145] CIFS: VFS: cifs_mount failed w/return code = -112 [ 779.571112][T10168] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 779.582454][T10168] rtrs_client L2075: : Failed to resolve address, err: -19 [ 779.590285][T10168] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 781.015390][T10182] CIFS: Attempting to mount //127.0.0.1/share [ 781.094925][T10183] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 781.208928][T10182] CIFS: VFS: cifs_mount failed w/return code = -112 [ 781.907266][T10187] syz.2.1091: attempt to access beyond end of device [ 781.907266][T10187] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 781.920658][T10187] gfs2: error 10 reading superblock [ 786.781556][T10211] CIFS: Attempting to mount //127.0.0.1/share [ 786.846583][T10212] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 786.859488][T10211] CIFS: VFS: cifs_mount failed w/return code = -112 [ 787.097180][T10216] siw: device registration error -23 [ 788.211542][T10224] syz.2.1102: attempt to access beyond end of device [ 788.211542][T10224] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 788.224892][T10224] gfs2: error 10 reading superblock [ 792.825570][T10251] jffs2: notice: (10251) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 795.985402][T10267] CIFS: Attempting to mount //127.0.0.1/share [ 796.338112][T10267] CIFS: VFS: cifs_mount failed w/return code = -112 [ 800.756826][T10295] jffs2: notice: (10295) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 807.146182][T10336] jffs2: notice: (10336) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 807.344302][T10340] siw: device registration error -23 [ 808.746598][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.753007][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.817785][T10376] jffs2: notice: (10376) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 815.678397][T10382] syz.3.1144: attempt to access beyond end of device [ 815.678397][T10382] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 815.692306][T10382] gfs2: error 10 reading superblock [ 825.651987][T10425] netlink: 'syz.3.1153': attribute type 1 has an invalid length. [ 825.662043][T10425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1153'. [ 826.730674][T10429] libceph: resolve ' [ 826.730674][T10429] -&fYǝa2i [ 826.730674][T10429] .?&*&' (ret=-3): failed [ 831.556600][T10467] netlink: 4852 bytes leftover after parsing attributes in process `syz.1.1166'. [ 831.880567][T10471] libceph: resolve ' [ 831.880567][T10471] -&fYǝa2i [ 831.880567][T10471] .?&*&' (ret=-3): failed [ 834.383990][ T12] kworker/dying (12) used greatest stack depth: 20904 bytes left [ 834.878036][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 835.109773][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 835.120842][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 835.130827][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 835.243523][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 835.255042][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 835.267254][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 835.278604][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 835.289790][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 835.433536][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 835.444810][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 835.455808][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 835.467636][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 10 endpoint descriptors, different from the interface descriptor's value: 14 [ 835.504236][ T23] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 835.514183][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.522267][ T23] usb 4-1: Product: syz [ 835.526662][ T23] usb 4-1: Manufacturer: syz [ 835.533472][ T23] usb 4-1: SerialNumber: syz [ 835.581250][T10488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 835.588710][T10488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 835.601521][T10488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 835.608827][T10488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 835.616062][T10488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 835.634071][T10488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 835.661597][T10488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 835.676990][T10488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 835.693619][T10488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 835.721312][T10488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 835.736413][ T23] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 835.764339][ T23] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 835.817317][ T23] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 5 [ 835.860587][ T23] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 835.893196][ T23] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 4 [ 835.911695][ T23] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 836.081155][ T23] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 839.248093][ T5840] usb 4-1: USB disconnect, device number 2 [ 839.289362][ T5840] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 839.385732][ T5840] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 839.536085][ T5840] keyspan 4-1:1.0: device disconnected [ 843.415226][T10539] trusted_key: encrypted_key: key user:syz not found [ 847.819978][T10556] siw: device registration error -23 [ 857.272827][T10595] trusted_key: encrypted_key: key user:syz not found [ 861.063027][T10612] CIFS: Attempting to mount //127.0.0.1/share [ 861.204045][T10612] CIFS: VFS: Error connecting to socket. Aborting operation. [ 861.211460][T10612] CIFS: VFS: cifs_mount failed w/return code = -111 [ 863.458253][T10635] CIFS: Attempting to mount //127.0.0.1/share [ 864.138771][T10635] CIFS: VFS: cifs_mount failed w/return code = -112 [ 865.354964][T10645] trusted_key: encrypted_key: key user:syz not found [ 867.597205][T10654] geneve0: entered promiscuous mode [ 867.616873][T10654] geneve0: entered allmulticast mode [ 870.184521][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.190883][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 887.398748][T10794] geneve2: entered promiscuous mode [ 887.414374][T10794] geneve2: entered allmulticast mode [ 893.774669][T10839] CIFS: Attempting to mount //127.0.0.1/share [ 893.806663][T10839] CIFS: VFS: Error connecting to socket. Aborting operation. [ 893.832698][T10839] CIFS: VFS: cifs_mount failed w/return code = -111 [ 901.884258][T10891] CIFS: Attempting to mount //127.0.0.1/share [ 901.910920][T10891] CIFS: VFS: Error connecting to socket. Aborting operation. [ 902.850429][T10891] CIFS: VFS: cifs_mount failed w/return code = -111 [ 903.583517][T10903] fuse: Bad value for 'fd' [ 904.499734][ T5765] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 904.725517][ T5765] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 904.749874][ T5765] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 904.791112][ T5765] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 904.809622][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 904.820167][ T5765] usb 1-1: Product: syz [ 904.824362][ T5765] usb 1-1: Manufacturer: syz [ 904.851474][ T5765] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 905.165539][T10911] syz.3.1261: attempt to access beyond end of device [ 905.165539][T10911] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 905.178920][T10911] gfs2: error 10 reading superblock [ 905.247995][ T5765] mos7840: probe of ttyUSB0 failed with error -5 [ 906.888647][ T5765] usb 1-1: USB disconnect, device number 5 [ 906.911188][ T5765] mos7840 1-1:1.0: device disconnected [ 913.032539][T10949] fuse: Unknown parameter '0x0000000000000004' [ 913.504862][ T5840] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 915.266402][ T5840] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 915.286034][ T5840] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 917.371004][ T5840] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 917.400803][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 917.443846][ T5840] usb 1-1: Product: syz [ 917.476046][ T5840] usb 1-1: can't set config #1, error -71 [ 917.506244][ T5840] usb 1-1: USB disconnect, device number 6 [ 918.842077][T10976] CIFS: Attempting to mount //127.0.0.1/share [ 918.964121][T10976] CIFS: VFS: Error connecting to socket. Aborting operation. [ 918.981712][T10976] CIFS: VFS: cifs_mount failed w/return code = -111 [ 923.159291][T11001] fuse: Unknown parameter '0x0000000000000004' [ 923.448554][ T5765] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 923.665463][ T5765] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 923.699304][ T5765] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 923.745691][ T5765] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 923.755244][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 923.774171][ T5765] usb 3-1: Product: syz [ 923.789330][ T5765] usb 3-1: Manufacturer: syz [ 923.814655][ T5765] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 924.752102][ T5765] mos7840: probe of ttyUSB0 failed with error -5 [ 927.122843][ T5765] usb 3-1: USB disconnect, device number 8 [ 927.157469][ T5765] mos7840 3-1:1.0: device disconnected [ 928.403603][T11026] rnbd_client L602: Mapping device /d on session s+, (access_mode: rw, nr_poll_queues: 0) [ 928.413893][T11026] rnbd_client L1255: Session s+ not found, and path parameter not given [ 932.741785][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.766641][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.590501][T11049] fuse: Unknown parameter '0x0000000000000004' [ 935.104345][ T5818] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 935.538386][ T5818] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 935.572470][ T5818] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 935.651810][T11059] rnbd_client L203: map_device: Unknown parameter or missing value 'path=' [ 936.201901][ T5818] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 936.380548][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 936.388718][ T5818] usb 2-1: Product: syz [ 936.392904][ T5818] usb 2-1: Manufacturer: syz [ 936.415729][ T5818] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 938.171743][ T5818] mos7840: probe of 2-1:1.0 failed with error -71 [ 938.218157][ T5818] usb 2-1: USB disconnect, device number 4 [ 943.257053][T11085] siw: device registration error -23 [ 943.783447][T11090] rnbd_client L203: map_device: Unknown parameter or missing value 'path=' [ 944.688847][T11092] CIFS: Attempting to mount //127.0.0.1/share [ 944.708597][T11092] CIFS: VFS: Error connecting to socket. Aborting operation. [ 944.716057][T11092] CIFS: VFS: cifs_mount failed w/return code = -111 [ 944.758234][T11094] fuse: Unknown parameter '0x0000000000000004' [ 945.057700][ T5819] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 945.321094][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 945.335845][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 945.356503][ T5819] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 945.376225][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 945.395477][ T5819] usb 3-1: Product: syz [ 945.413784][ T5819] usb 3-1: Manufacturer: syz [ 945.498758][ T5819] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 945.905776][ T5819] mos7840: probe of ttyUSB0 failed with error -5 [ 948.206015][ T5765] usb 3-1: USB disconnect, device number 9 [ 948.221173][ T5765] mos7840 3-1:1.0: device disconnected [ 950.237393][T11123] rnbd_client L203: map_device: Unknown parameter or missing value 'path=' [ 952.480938][T11136] syz.2.1327: attempt to access beyond end of device [ 952.480938][T11136] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 952.494283][T11136] gfs2: error 10 reading superblock [ 957.625259][T11154] rnbd_client L127: Can't parse path ip:127: -22 [ 960.028152][T11161] fuse: Unknown parameter '0x0000000000000004' [ 960.316591][ T5765] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 960.564047][ T5765] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 960.663112][ T5765] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 960.790870][ T5765] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 960.874759][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 960.953203][ T5765] usb 3-1: Product: syz [ 960.998651][ T5765] usb 3-1: Manufacturer: syz [ 962.313365][ T5765] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 962.582333][ T5765] mos7840: probe of ttyUSB0 failed with error -5 [ 964.390463][ T5765] usb 3-1: USB disconnect, device number 10 [ 964.414630][ T5765] mos7840 3-1:1.0: device disconnected [ 965.391050][T11184] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 965.399775][T11184] CPU: 1 PID: 11184 Comm: syz.2.1345 Not tainted syzkaller #0 [ 965.407269][T11184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 965.417351][T11184] Call Trace: [ 965.420654][T11184] [ 965.423608][T11184] dump_stack_lvl+0x18c/0x250 [ 965.428333][T11184] ? show_regs_print_info+0x20/0x20 [ 965.433567][T11184] ? load_image+0x420/0x420 [ 965.438111][T11184] sysfs_create_dir_ns+0x26e/0x2a0 [ 965.443255][T11184] ? __lock_acquire+0x7d80/0x7d80 [ 965.448325][T11184] ? sysfs_warn_dup+0xa0/0xa0 [ 965.453026][T11184] ? rcu_is_watching+0x15/0xb0 [ 965.457821][T11184] ? do_raw_spin_unlock+0x121/0x230 [ 965.463067][T11184] kobject_add_internal+0x617/0xc90 [ 965.468312][T11184] kobject_add+0x164/0x240 [ 965.472770][T11184] ? kobject_init+0x1d0/0x1d0 [ 965.477492][T11184] ? get_device_parent+0x366/0x390 [ 965.482651][T11184] device_add+0x3fa/0xc40 [ 965.487019][T11184] tty_register_device_attr+0x425/0x950 [ 965.492612][T11184] ? tty_register_device+0x30/0x30 [ 965.497762][T11184] ? tty_port_init+0x132/0x1a0 [ 965.502558][T11184] ? gsm_dlci_alloc+0x32a/0x630 [ 965.507704][T11184] ? __might_fault+0xaa/0x120 [ 965.512418][T11184] gsm_activate_mux+0x110/0x2a0 [ 965.517313][T11184] gsmld_ioctl+0x12ca/0x1900 [ 965.521944][T11184] ? gsmld_write+0x120/0x120 [ 965.526581][T11184] ? __init_ldsem+0x150/0x150 [ 965.531300][T11184] ? __fget_files+0x28/0x460 [ 965.535947][T11184] ? gsmld_write+0x120/0x120 [ 965.540549][T11184] tty_ioctl+0x9b5/0xdc0 [ 965.544831][T11184] ? tty_get_icount+0xb0/0xb0 [ 965.549532][T11184] __se_sys_ioctl+0xfd/0x170 [ 965.554161][T11184] do_syscall_64+0x55/0xb0 [ 965.558709][T11184] ? clear_bhb_loop+0x40/0x90 [ 965.563411][T11184] ? clear_bhb_loop+0x40/0x90 [ 965.568113][T11184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 965.574038][T11184] RIP: 0033:0x7f2dc379e159 [ 965.578480][T11184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.598121][T11184] RSP: 002b:00007f2dc4591028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 965.606556][T11184] RAX: ffffffffffffffda RBX: 00007f2dc3a26090 RCX: 00007f2dc379e159 [ 965.614526][T11184] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 965.622509][T11184] RBP: 00007f2dc383503b R08: 0000000000000000 R09: 0000000000000000 [ 965.630516][T11184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.638523][T11184] R13: 00007f2dc3a26128 R14: 00007f2dc3a26090 R15: 00007ffedbcbcbb8 [ 965.646637][T11184] [ 966.603924][T11184] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 966.791404][T11198] rnbd_client L127: Can't parse path ip:127: -22 [ 968.086939][T11206] siw: device registration error -23 [ 971.760441][T11225] fuse: Unknown parameter '0x0000000000000004' [ 971.954960][T11223] libceph: resolve ' [ 971.954960][T11223] -&fYǝa2i [ 971.954960][T11223] .?&*&' (ret=-3): failed [ 973.035769][ T8818] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 973.054241][T11235] rnbd_client L127: Can't parse path ip:127: -22 [ 973.282240][ T8818] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 973.397911][ T8818] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 973.533717][ T8818] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 973.619815][ T8818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 973.702464][ T8818] usb 4-1: Product: syz [ 973.742903][ T8818] usb 4-1: Manufacturer: syz [ 973.867303][ T8818] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 974.265148][ T8818] mos7840: probe of ttyUSB0 failed with error -5 [ 974.469675][T11242] siw: device registration error -23 [ 977.747003][ T5818] usb 4-1: USB disconnect, device number 3 [ 977.759394][ T5818] mos7840 4-1:1.0: device disconnected [ 979.255553][T11264] libceph: resolve ' [ 979.255553][T11264] -&fYǝa2i [ 979.255553][T11264] .?&*&' (ret=-3): failed [ 982.645677][T11280] fuse: Unknown parameter 'fd0x0000000000000004' [ 982.965431][ T5818] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 983.161687][ T5818] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 983.175125][ T5818] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 983.196751][ T5818] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 983.206202][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 983.214231][ T5818] usb 4-1: Product: syz [ 983.235152][ T5818] usb 4-1: Manufacturer: syz [ 983.266151][ T5818] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 984.253225][ T5818] mos7840: probe of ttyUSB0 failed with error -5 [ 985.264878][ T5818] usb 4-1: USB disconnect, device number 4 [ 985.274008][ T5818] mos7840 4-1:1.0: device disconnected [ 985.540921][T11293] libceph: resolve ' [ 985.540921][T11293] -&fYǝa2i [ 985.540921][T11293] .?&*&' (ret=-3): failed [ 987.465118][T11307] siw: device registration error -23 [ 990.415499][T11320] fuse: Unknown parameter 'fd0x0000000000000004' [ 990.714706][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 990.927144][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 992.654627][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 993.864080][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.871322][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.988206][T11333] libceph: resolve ' [ 993.988206][T11333] -&fYǝa2i [ 993.988206][T11333] .?&*&' (ret=-3): failed [ 994.087091][ T9] usb 2-1: string descriptor 0 read error: -71 [ 994.093365][ T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 994.131055][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 995.405183][ T9] usb 2-1: can't set config #1, error -71 [ 995.449420][ T9] usb 2-1: USB disconnect, device number 5 [ 999.547307][T11360] libceph: resolve ' [ 999.547307][T11360] -&fYǝa2i [ 999.547307][T11360] .?&*&' (ret=-3): failed [ 1003.195725][T11383] fuse: Unknown parameter 'fd0x0000000000000004' [ 1004.699847][ T5765] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1004.826725][T11394] libceph: resolve ' [ 1004.826725][T11394] -&fYǝa2i [ 1004.826725][T11394] .?&*&' (ret=-3): failed [ 1004.889520][ T5765] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1004.933869][ T5765] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1004.967255][ T5765] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1004.996551][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1005.015131][ T5765] usb 1-1: Product: syz [ 1005.019340][ T5765] usb 1-1: Manufacturer: syz [ 1006.331279][ T5765] usb 1-1: can't set config #1, error -71 [ 1006.363875][ T5765] usb 1-1: USB disconnect, device number 7 [ 1006.464195][T11400] netlink: 'syz.0.1408': attribute type 1 has an invalid length. [ 1010.297876][T11420] libceph: resolve ' [ 1010.297876][T11420] -&fYǝa2i [ 1010.297876][T11420] .?&*&' (ret=-3): failed [ 1011.993525][ T5819] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1014.024969][ T5819] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1014.053543][ T5819] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1014.075598][ T5819] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1014.093716][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1014.111977][ T5819] usb 1-1: Product: syz [ 1014.116488][ T5819] usb 1-1: Manufacturer: syz [ 1014.134843][ T5819] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1015.850776][ T5819] mos7840: probe of 1-1:1.0 failed with error -71 [ 1015.880587][ T5819] usb 1-1: USB disconnect, device number 8 [ 1016.146309][T11451] libceph: resolve ' [ 1016.146309][T11451] -&fYǝa2i [ 1016.146309][T11451] .?&*&' (ret=-3): failed [ 1021.933206][ T970] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1022.156903][ T970] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1022.175223][ T970] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1022.223198][ T970] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1022.234133][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1022.242162][ T970] usb 4-1: Product: syz [ 1022.246863][ T970] usb 4-1: Manufacturer: syz [ 1022.262252][ T970] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1022.683873][ T970] mos7840: probe of ttyUSB0 failed with error -5 [ 1024.358102][T11500] libceph: resolve ' [ 1024.358102][T11500] -&fYǝa2i [ 1024.358102][T11500] .?&*&' (ret=-3): failed [ 1025.753545][ T5765] usb 4-1: USB disconnect, device number 5 [ 1025.762127][ T5765] mos7840 4-1:1.0: device disconnected [ 1028.999341][T11534] libceph: resolve ' [ 1028.999341][T11534] -&fYǝa2i [ 1028.999341][T11534] .?&*&' (ret=-3): failed [ 1032.421087][ T5819] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1032.985012][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1033.012396][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1033.034245][ T5819] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1033.052333][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1033.070660][ T5819] usb 3-1: Product: syz [ 1033.074998][ T5819] usb 3-1: Manufacturer: syz [ 1033.112011][ T5819] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1033.967922][ T5819] mos7840: probe of 3-1:1.0 failed with error -71 [ 1033.989273][ T5819] usb 3-1: USB disconnect, device number 11 [ 1036.109102][T11579] libceph: resolve ' [ 1036.109102][T11579] -&fYǝa2i [ 1036.109102][T11579] .?&*&' (ret=-3): failed [ 1037.446681][T11594] syz.3.1468: attempt to access beyond end of device [ 1037.446681][T11594] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1037.459893][T11594] gfs2: error 10 reading superblock [ 1038.113840][T11604] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1038.122453][T11604] CPU: 0 PID: 11604 Comm: syz.3.1470 Not tainted syzkaller #0 [ 1038.129951][T11604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1038.140036][T11604] Call Trace: [ 1038.143330][T11604] [ 1038.146259][T11604] dump_stack_lvl+0x18c/0x250 [ 1038.150945][T11604] ? show_regs_print_info+0x20/0x20 [ 1038.156142][T11604] ? load_image+0x420/0x420 [ 1038.160649][T11604] sysfs_create_dir_ns+0x26e/0x2a0 [ 1038.165760][T11604] ? __lock_acquire+0x7d80/0x7d80 [ 1038.170787][T11604] ? sysfs_warn_dup+0xa0/0xa0 [ 1038.175464][T11604] ? rcu_is_watching+0x15/0xb0 [ 1038.180252][T11604] ? do_raw_spin_unlock+0x121/0x230 [ 1038.185476][T11604] kobject_add_internal+0x617/0xc90 [ 1038.190702][T11604] kobject_add+0x164/0x240 [ 1038.195144][T11604] ? kobject_init+0x1d0/0x1d0 [ 1038.199843][T11604] ? get_device_parent+0x366/0x390 [ 1038.204978][T11604] device_add+0x3fa/0xc40 [ 1038.209327][T11604] tty_register_device_attr+0x425/0x950 [ 1038.214886][T11604] ? tty_register_device+0x30/0x30 [ 1038.220009][T11604] ? tty_port_init+0x132/0x1a0 [ 1038.224771][T11604] ? gsm_dlci_alloc+0x32a/0x630 [ 1038.229626][T11604] ? __might_fault+0xaa/0x120 [ 1038.234306][T11604] gsm_activate_mux+0x110/0x2a0 [ 1038.239167][T11604] gsmld_ioctl+0x12ca/0x1900 [ 1038.243766][T11604] ? gsmld_write+0x120/0x120 [ 1038.248371][T11604] ? __init_ldsem+0x150/0x150 [ 1038.253059][T11604] ? __fget_files+0x28/0x460 [ 1038.257660][T11604] ? gsmld_write+0x120/0x120 [ 1038.262253][T11604] tty_ioctl+0x9b5/0xdc0 [ 1038.266507][T11604] ? tty_get_icount+0xb0/0xb0 [ 1038.271183][T11604] __se_sys_ioctl+0xfd/0x170 [ 1038.275784][T11604] do_syscall_64+0x55/0xb0 [ 1038.280201][T11604] ? clear_bhb_loop+0x40/0x90 [ 1038.284876][T11604] ? clear_bhb_loop+0x40/0x90 [ 1038.289551][T11604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1038.295447][T11604] RIP: 0033:0x7f4c1099e159 [ 1038.299863][T11604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.319479][T11604] RSP: 002b:00007f4c11868028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1038.327899][T11604] RAX: ffffffffffffffda RBX: 00007f4c10c26090 RCX: 00007f4c1099e159 [ 1038.335870][T11604] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1038.343839][T11604] RBP: 00007f4c10a3503b R08: 0000000000000000 R09: 0000000000000000 [ 1038.351991][T11604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1038.359963][T11604] R13: 00007f4c10c26128 R14: 00007f4c10c26090 R15: 00007fff3d2db108 [ 1038.367946][T11604] [ 1038.402123][T11604] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1039.311667][T11615] libceph: resolve ' [ 1039.311667][T11615] -&fYǝa2i [ 1039.311667][T11615] .?&*&' (ret=-3): failed [ 1041.707577][T11626] syz.2.1477: attempt to access beyond end of device [ 1041.707577][T11626] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1041.720840][T11626] gfs2: error 10 reading superblock [ 1044.026869][T11639] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1044.035566][T11639] CPU: 1 PID: 11639 Comm: syz.1.1481 Not tainted syzkaller #0 [ 1044.043057][T11639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1044.053136][T11639] Call Trace: [ 1044.056440][T11639] [ 1044.059393][T11639] dump_stack_lvl+0x18c/0x250 [ 1044.064115][T11639] ? show_regs_print_info+0x20/0x20 [ 1044.069355][T11639] ? load_image+0x420/0x420 [ 1044.073919][T11639] sysfs_create_dir_ns+0x26e/0x2a0 [ 1044.079064][T11639] ? __lock_acquire+0x7d80/0x7d80 [ 1044.084122][T11639] ? sysfs_warn_dup+0xa0/0xa0 [ 1044.088839][T11639] ? rcu_is_watching+0x15/0xb0 [ 1044.093646][T11639] ? do_raw_spin_unlock+0x121/0x230 [ 1044.098888][T11639] kobject_add_internal+0x617/0xc90 [ 1044.104136][T11639] kobject_add+0x164/0x240 [ 1044.108585][T11639] ? kobject_init+0x1d0/0x1d0 [ 1044.113265][T11639] ? get_device_parent+0x366/0x390 [ 1044.118382][T11639] device_add+0x3fa/0xc40 [ 1044.122720][T11639] tty_register_device_attr+0x425/0x950 [ 1044.128300][T11639] ? tty_register_device+0x30/0x30 [ 1044.133523][T11639] ? tty_port_init+0x132/0x1a0 [ 1044.138296][T11639] ? gsm_dlci_alloc+0x32a/0x630 [ 1044.143140][T11639] ? __might_fault+0xaa/0x120 [ 1044.147812][T11639] gsm_activate_mux+0x110/0x2a0 [ 1044.152662][T11639] gsmld_ioctl+0x12ca/0x1900 [ 1044.157270][T11639] ? gsmld_write+0x120/0x120 [ 1044.161865][T11639] ? __init_ldsem+0x150/0x150 [ 1044.166554][T11639] ? __fget_files+0x28/0x460 [ 1044.171167][T11639] ? gsmld_write+0x120/0x120 [ 1044.175749][T11639] tty_ioctl+0x9b5/0xdc0 [ 1044.179984][T11639] ? tty_get_icount+0xb0/0xb0 [ 1044.184657][T11639] __se_sys_ioctl+0xfd/0x170 [ 1044.189251][T11639] do_syscall_64+0x55/0xb0 [ 1044.193670][T11639] ? clear_bhb_loop+0x40/0x90 [ 1044.198369][T11639] ? clear_bhb_loop+0x40/0x90 [ 1044.203054][T11639] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1044.208968][T11639] RIP: 0033:0x7f358a39e159 [ 1044.213380][T11639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.232992][T11639] RSP: 002b:00007f358b28e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1044.241399][T11639] RAX: ffffffffffffffda RBX: 00007f358a626090 RCX: 00007f358a39e159 [ 1044.249372][T11639] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1044.257349][T11639] RBP: 00007f358a43503b R08: 0000000000000000 R09: 0000000000000000 [ 1044.265326][T11639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1044.273295][T11639] R13: 00007f358a626128 R14: 00007f358a626090 R15: 00007fffe4f6d218 [ 1044.281276][T11639] [ 1044.294532][T11639] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1049.434193][T11666] syz.1.1490: attempt to access beyond end of device [ 1049.434193][T11666] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1049.447979][T11666] gfs2: error 10 reading superblock [ 1054.528786][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.535393][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.637936][T11690] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1055.646754][T11690] CPU: 1 PID: 11690 Comm: syz.2.1496 Not tainted syzkaller #0 [ 1055.654252][T11690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1055.664342][T11690] Call Trace: [ 1055.667648][T11690] [ 1055.670599][T11690] dump_stack_lvl+0x18c/0x250 [ 1055.675326][T11690] ? show_regs_print_info+0x20/0x20 [ 1055.680560][T11690] ? load_image+0x420/0x420 [ 1055.685115][T11690] sysfs_create_dir_ns+0x26e/0x2a0 [ 1055.690266][T11690] ? __lock_acquire+0x7d80/0x7d80 [ 1055.695328][T11690] ? sysfs_warn_dup+0xa0/0xa0 [ 1055.700030][T11690] ? rcu_is_watching+0x15/0xb0 [ 1055.704831][T11690] ? do_raw_spin_unlock+0x121/0x230 [ 1055.710061][T11690] kobject_add_internal+0x617/0xc90 [ 1055.715284][T11690] kobject_add+0x164/0x240 [ 1055.719714][T11690] ? kobject_init+0x1d0/0x1d0 [ 1055.724402][T11690] ? get_device_parent+0x366/0x390 [ 1055.729545][T11690] device_add+0x3fa/0xc40 [ 1055.733877][T11690] tty_register_device_attr+0x425/0x950 [ 1055.739516][T11690] ? tty_register_device+0x30/0x30 [ 1055.744639][T11690] ? tty_port_init+0x132/0x1a0 [ 1055.749403][T11690] ? gsm_dlci_alloc+0x32a/0x630 [ 1055.754253][T11690] ? __might_fault+0xaa/0x120 [ 1055.758931][T11690] gsm_activate_mux+0x110/0x2a0 [ 1055.763796][T11690] gsmld_ioctl+0x12ca/0x1900 [ 1055.768395][T11690] ? gsmld_write+0x120/0x120 [ 1055.772997][T11690] ? __init_ldsem+0x150/0x150 [ 1055.777677][T11690] ? __fget_files+0x28/0x460 [ 1055.782280][T11690] ? gsmld_write+0x120/0x120 [ 1055.786874][T11690] tty_ioctl+0x9b5/0xdc0 [ 1055.791123][T11690] ? tty_get_icount+0xb0/0xb0 [ 1055.795797][T11690] __se_sys_ioctl+0xfd/0x170 [ 1055.800392][T11690] do_syscall_64+0x55/0xb0 [ 1055.804812][T11690] ? clear_bhb_loop+0x40/0x90 [ 1055.809493][T11690] ? clear_bhb_loop+0x40/0x90 [ 1055.814169][T11690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1055.820060][T11690] RIP: 0033:0x7f2dc379e159 [ 1055.824476][T11690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.844083][T11690] RSP: 002b:00007f2dc4591028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1055.852504][T11690] RAX: ffffffffffffffda RBX: 00007f2dc3a26090 RCX: 00007f2dc379e159 [ 1055.860475][T11690] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1055.868446][T11690] RBP: 00007f2dc383503b R08: 0000000000000000 R09: 0000000000000000 [ 1055.876428][T11690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.884393][T11690] R13: 00007f2dc3a26128 R14: 00007f2dc3a26090 R15: 00007ffedbcbcbb8 [ 1055.892378][T11690] [ 1055.941420][T11690] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1059.851668][T11709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1498'. [ 1061.371607][T11717] CIFS: Attempting to mount //127.0.0.1/share [ 1061.379764][T11717] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1062.706569][T11717] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1068.050600][ T5840] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1068.210362][ T5840] usb 1-1: device descriptor read/64, error -71 [ 1069.620624][ T5840] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1069.810316][ T5840] usb 1-1: device descriptor read/64, error -71 [ 1069.940527][ T5840] usb usb1-port1: attempt power cycle [ 1077.635441][ T970] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1078.279774][ T970] usb 1-1: device descriptor read/64, error -71 [ 1078.579884][ T970] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1079.908539][ T970] usb 1-1: device descriptor read/64, error -71 [ 1080.051555][ T970] usb usb1-port1: attempt power cycle [ 1086.911578][T11848] libceph: resolve ' [ 1086.911578][T11848] -&fYǝa2i [ 1086.911578][T11848] .?&*&' (ret=-3): failed [ 1087.034590][T11850] CIFS: Attempting to mount //127.0.0.1/share [ 1088.920328][ T5781] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 1088.922577][T11850] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1089.509301][ T5765] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1089.679358][ T5765] usb 3-1: device descriptor read/64, error -71 [ 1091.198674][ T5765] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1096.716856][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.881213][T11899] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1096.896651][T11899] rtrs_client L2075: : Failed to resolve address, err: -19 [ 1096.904768][T11899] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1097.667124][T11898] CIFS: Attempting to mount //127.0.0.1/share [ 1097.711566][T11898] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1097.743554][T11898] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1098.601727][T11904] CIFS: Attempting to mount //127.0.0.1/share [ 1098.659368][T11905] CIFS: VFS: \\127.0.0.1 SMB response too long (65536 bytes) [ 1098.676564][T11904] CIFS: VFS: \\127.0.0.1 Error -104 sending data on socket to server [ 1098.740603][T11904] ------------[ cut here ]------------ [ 1098.746295][T11904] WARNING: CPU: 1 PID: 11904 at fs/smb/client/smb2ops.c:97 smb2_add_credits+0x1365/0x2600 [ 1098.756291][T11904] Modules linked in: [ 1098.760214][T11904] CPU: 1 PID: 11904 Comm: syz.3.1553 Not tainted syzkaller #0 [ 1098.767695][T11904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1098.777762][T11904] RIP: 0010:smb2_add_credits+0x1365/0x2600 [ 1098.783605][T11904] Code: 03 42 80 3c 28 00 74 08 4c 89 e7 e8 b5 b1 3c ff 49 8b 34 24 48 c7 c7 a0 21 f7 8a e8 35 f1 e0 07 e9 eb f9 ff ff e8 1b 30 e4 fe <0f> 0b e9 d9 ef ff ff e8 0f 30 e4 fe c6 05 5e be d3 0b 01 48 c7 c7 [ 1098.803493][T11904] RSP: 0018:ffffc90003d2f380 EFLAGS: 00010287 [ 1098.809619][T11904] RAX: ffffffff82a35255 RBX: ffff888026d982c0 RCX: 0000000000080000 [ 1098.817598][T11904] RDX: ffffc9000da04000 RSI: 000000000001107c RDI: 000000000001107d [ 1098.826379][T11904] RBP: 0000000000002000 R08: 0000000000000003 R09: 0000000000000004 [ 1098.834533][T11904] R10: dffffc0000000000 R11: fffff520007a5e60 R12: 1ffff11004db3058 [ 1098.842544][T11904] R13: dffffc0000000000 R14: ffff888026d98000 R15: 0000000000000000 [ 1098.850543][T11904] FS: 00007f4c118896c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1098.859505][T11904] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1098.866093][T11904] CR2: 00007f4c109eb840 CR3: 0000000069784000 CR4: 00000000003506e0 [ 1098.874087][T11904] Call Trace: [ 1098.877354][T11904] [ 1098.880313][T11904] compound_send_recv+0x1254/0x3040 [ 1098.885503][T11904] ? stack_trace_save+0x100/0x100 [ 1098.890593][T11904] ? stack_trace_save+0xaa/0x100 [ 1098.895521][T11904] ? stack_trace_snprint+0xf0/0xf0 [ 1098.900654][T11904] ? cifs_pick_channel+0x320/0x320 [ 1098.905755][T11904] ? kasan_set_track+0x5f/0x70 [ 1098.910562][T11904] ? __kasan_kmalloc+0x8f/0xa0 [ 1098.915329][T11904] ? __kmalloc+0xb7/0x240 [ 1098.919684][T11904] ? build_ntlmssp_smb3_negotiate_blob+0x51/0x670 [ 1098.926841][T11904] ? cifs_smb3_do_mount+0x2e5/0x710 [ 1098.932165][T11904] ? smb3_get_tree+0x5a5/0xa90 [ 1098.936924][T11904] ? vfs_get_tree+0x8c/0x280 [ 1098.941542][T11904] ? do_new_mount+0x24a/0xa40 [ 1098.946204][T11904] ? __se_sys_mount+0x2e7/0x3d0 [ 1098.951159][T11904] ? do_syscall_64+0x55/0xb0 [ 1098.955827][T11904] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1098.961916][T11904] cifs_send_recv+0x40/0x50 [ 1098.966409][T11904] SMB2_sess_sendreceive+0x258/0x4d0 [ 1098.971726][T11904] ? SMB2_sess_alloc_buffer+0x9b0/0x9b0 [ 1098.977279][T11904] ? build_ntlmssp_smb3_negotiate_blob+0x51/0x670 [ 1098.983727][T11904] ? rcu_is_watching+0x15/0xb0 [ 1098.988483][T11904] ? build_ntlmssp_smb3_negotiate_blob+0xe9/0x670 [ 1098.994956][T11904] SMB2_sess_auth_rawntlmssp_negotiate+0x309/0xb70 [ 1099.001506][T11904] ? SMB2_auth_kerberos+0x930/0x930 [ 1099.006721][T11904] ? SMB2_sess_setup+0x439/0x8a0 [ 1099.011713][T11904] ? SMB2_auth_kerberos+0x930/0x930 [ 1099.016912][T11904] SMB2_sess_setup+0x464/0x8a0 [ 1099.021699][T11904] cifs_setup_session+0x5de/0xc90 [ 1099.027506][T11904] cifs_get_smb_ses+0x940/0x1b00 [ 1099.032711][T11904] cifs_mount_get_session+0xef/0x440 [ 1099.038010][T11904] dfs_mount_share+0x1e9/0x7b0 [ 1099.042819][T11904] cifs_mount+0xbc/0x650 [ 1099.047061][T11904] ? preempt_schedule_thunk+0x1a/0x30 [ 1099.052474][T11904] ? cifs_is_path_remote+0x6f0/0x6f0 [ 1099.057752][T11904] ? smb3_update_mnt_flags+0x52f/0xc10 [ 1099.063258][T11904] ? cifs_setup_cifs_sb+0x52f/0x840 [ 1099.068482][T11904] cifs_smb3_do_mount+0x2e5/0x710 [ 1099.073587][T11904] ? cifs_sb_deactive+0x80/0x80 [ 1099.078469][T11904] ? vfs_parse_fs_string+0x10f/0x170 [ 1099.083876][T11904] smb3_get_tree+0x5a5/0xa90 [ 1099.088562][T11904] vfs_get_tree+0x8c/0x280 [ 1099.093014][T11904] do_new_mount+0x24a/0xa40 [ 1099.097549][T11904] __se_sys_mount+0x2e7/0x3d0 [ 1099.102289][T11904] ? __x64_sys_mount+0xc0/0xc0 [ 1099.107105][T11904] ? lockdep_hardirqs_on+0x98/0x150 [ 1099.112376][T11904] ? __x64_sys_mount+0x20/0xc0 [ 1099.117164][T11904] do_syscall_64+0x55/0xb0 [ 1099.121640][T11904] ? clear_bhb_loop+0x40/0x90 [ 1099.126340][T11904] ? clear_bhb_loop+0x40/0x90 [ 1099.132548][T11904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1099.138468][T11904] RIP: 0033:0x7f4c1099e159 [ 1099.143093][T11904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.162767][T11904] RSP: 002b:00007f4c11889028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1099.171280][T11904] RAX: ffffffffffffffda RBX: 00007f4c10c25fa0 RCX: 00007f4c1099e159 [ 1099.179363][T11904] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000500 [ 1099.187363][T11904] RBP: 00007f4c10a3503b R08: 0000200000000300 R09: 0000000000000000 [ 1099.195393][T11904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1099.203438][T11904] R13: 00007f4c10c26038 R14: 00007f4c10c25fa0 R15: 00007fff3d2db108 [ 1099.211500][T11904] [ 1099.214535][T11904] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1099.221819][T11904] CPU: 1 PID: 11904 Comm: syz.3.1553 Not tainted syzkaller #0 [ 1099.229295][T11904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1099.239361][T11904] Call Trace: [ 1099.242650][T11904] [ 1099.245591][T11904] dump_stack_lvl+0x18c/0x250 [ 1099.250310][T11904] ? show_regs_print_info+0x20/0x20 [ 1099.255529][T11904] ? load_image+0x420/0x420 [ 1099.260063][T11904] panic+0x2ca/0x720 [ 1099.264011][T11904] ? bpf_jit_dump+0xd0/0xd0 [ 1099.268548][T11904] __warn+0x2e0/0x470 [ 1099.272547][T11904] ? smb2_add_credits+0x1365/0x2600 [ 1099.277768][T11904] ? smb2_add_credits+0x1365/0x2600 [ 1099.282985][T11904] report_bug+0x2be/0x4f0 [ 1099.287334][T11904] ? smb2_add_credits+0x1365/0x2600 [ 1099.292558][T11904] ? smb2_add_credits+0x1365/0x2600 [ 1099.297787][T11904] ? smb2_add_credits+0x1367/0x2600 [ 1099.303002][T11904] handle_bug+0xcf/0x120 [ 1099.307266][T11904] exc_invalid_op+0x1a/0x50 [ 1099.311783][T11904] asm_exc_invalid_op+0x1a/0x20 [ 1099.316645][T11904] RIP: 0010:smb2_add_credits+0x1365/0x2600 [ 1099.322485][T11904] Code: 03 42 80 3c 28 00 74 08 4c 89 e7 e8 b5 b1 3c ff 49 8b 34 24 48 c7 c7 a0 21 f7 8a e8 35 f1 e0 07 e9 eb f9 ff ff e8 1b 30 e4 fe <0f> 0b e9 d9 ef ff ff e8 0f 30 e4 fe c6 05 5e be d3 0b 01 48 c7 c7 [ 1099.342103][T11904] RSP: 0018:ffffc90003d2f380 EFLAGS: 00010287 [ 1099.348186][T11904] RAX: ffffffff82a35255 RBX: ffff888026d982c0 RCX: 0000000000080000 [ 1099.356166][T11904] RDX: ffffc9000da04000 RSI: 000000000001107c RDI: 000000000001107d [ 1099.364144][T11904] RBP: 0000000000002000 R08: 0000000000000003 R09: 0000000000000004 [ 1099.372123][T11904] R10: dffffc0000000000 R11: fffff520007a5e60 R12: 1ffff11004db3058 [ 1099.380105][T11904] R13: dffffc0000000000 R14: ffff888026d98000 R15: 0000000000000000 [ 1099.388095][T11904] ? smb2_add_credits+0x1365/0x2600 [ 1099.393337][T11904] compound_send_recv+0x1254/0x3040 [ 1099.398553][T11904] ? stack_trace_save+0x100/0x100 [ 1099.403607][T11904] ? stack_trace_save+0xaa/0x100 [ 1099.408557][T11904] ? stack_trace_snprint+0xf0/0xf0 [ 1099.413688][T11904] ? cifs_pick_channel+0x320/0x320 [ 1099.418823][T11904] ? kasan_set_track+0x5f/0x70 [ 1099.423598][T11904] ? __kasan_kmalloc+0x8f/0xa0 [ 1099.428373][T11904] ? __kmalloc+0xb7/0x240 [ 1099.432732][T11904] ? build_ntlmssp_smb3_negotiate_blob+0x51/0x670 [ 1099.439169][T11904] ? cifs_smb3_do_mount+0x2e5/0x710 [ 1099.444389][T11904] ? smb3_get_tree+0x5a5/0xa90 [ 1099.449172][T11904] ? vfs_get_tree+0x8c/0x280 [ 1099.453778][T11904] ? do_new_mount+0x24a/0xa40 [ 1099.458469][T11904] ? __se_sys_mount+0x2e7/0x3d0 [ 1099.463327][T11904] ? do_syscall_64+0x55/0xb0 [ 1099.467927][T11904] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1099.474017][T11904] cifs_send_recv+0x40/0x50 [ 1099.478541][T11904] SMB2_sess_sendreceive+0x258/0x4d0 [ 1099.483864][T11904] ? SMB2_sess_alloc_buffer+0x9b0/0x9b0 [ 1099.489465][T11904] ? build_ntlmssp_smb3_negotiate_blob+0x51/0x670 [ 1099.495907][T11904] ? rcu_is_watching+0x15/0xb0 [ 1099.500697][T11904] ? build_ntlmssp_smb3_negotiate_blob+0xe9/0x670 [ 1099.507155][T11904] SMB2_sess_auth_rawntlmssp_negotiate+0x309/0xb70 [ 1099.513688][T11904] ? SMB2_auth_kerberos+0x930/0x930 [ 1099.518913][T11904] ? SMB2_sess_setup+0x439/0x8a0 [ 1099.523883][T11904] ? SMB2_auth_kerberos+0x930/0x930 [ 1099.529113][T11904] SMB2_sess_setup+0x464/0x8a0 [ 1099.533906][T11904] cifs_setup_session+0x5de/0xc90 [ 1099.538962][T11904] cifs_get_smb_ses+0x940/0x1b00 [ 1099.543944][T11904] cifs_mount_get_session+0xef/0x440 [ 1099.549260][T11904] dfs_mount_share+0x1e9/0x7b0 [ 1099.554052][T11904] cifs_mount+0xbc/0x650 [ 1099.558316][T11904] ? preempt_schedule_thunk+0x1a/0x30 [ 1099.563712][T11904] ? cifs_is_path_remote+0x6f0/0x6f0 [ 1099.569023][T11904] ? smb3_update_mnt_flags+0x52f/0xc10 [ 1099.574512][T11904] ? cifs_setup_cifs_sb+0x52f/0x840 [ 1099.579729][T11904] cifs_smb3_do_mount+0x2e5/0x710 [ 1099.584781][T11904] ? cifs_sb_deactive+0x80/0x80 [ 1099.589652][T11904] ? vfs_parse_fs_string+0x10f/0x170 [ 1099.594984][T11904] smb3_get_tree+0x5a5/0xa90 [ 1099.599624][T11904] vfs_get_tree+0x8c/0x280 [ 1099.604078][T11904] do_new_mount+0x24a/0xa40 [ 1099.608618][T11904] __se_sys_mount+0x2e7/0x3d0 [ 1099.613326][T11904] ? __x64_sys_mount+0xc0/0xc0 [ 1099.618117][T11904] ? lockdep_hardirqs_on+0x98/0x150 [ 1099.623336][T11904] ? __x64_sys_mount+0x20/0xc0 [ 1099.628117][T11904] do_syscall_64+0x55/0xb0 [ 1099.632550][T11904] ? clear_bhb_loop+0x40/0x90 [ 1099.637240][T11904] ? clear_bhb_loop+0x40/0x90 [ 1099.641934][T11904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1099.647843][T11904] RIP: 0033:0x7f4c1099e159 [ 1099.652270][T11904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.671896][T11904] RSP: 002b:00007f4c11889028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1099.680334][T11904] RAX: ffffffffffffffda RBX: 00007f4c10c25fa0 RCX: 00007f4c1099e159 [ 1099.688319][T11904] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000500 [ 1099.696657][T11904] RBP: 00007f4c10a3503b R08: 0000200000000300 R09: 0000000000000000 [ 1099.704639][T11904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1099.712619][T11904] R13: 00007f4c10c26038 R14: 00007f4c10c25fa0 R15: 00007fff3d2db108 [ 1099.720620][T11904] [ 1099.723776][T11904] Kernel Offset: disabled [ 1099.728149][T11904] Rebooting in 86400 seconds..