last executing test programs: 51.977693785s ago: executing program 1 (id=1521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x65c, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x801, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x80001, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x7, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x40f, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0x400, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x50f6, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000bc0)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c00)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000c40)={&(0x7f0000000c80)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000d40)="c2", 0x1}], 0x1}, 0x20004014) 42.807916576s ago: executing program 1 (id=1552): mount$bind(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x808000, 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x42, 0x80) io_submit(r0, 0x1, &(0x7f0000000140)=[0x0]) 41.377544401s ago: executing program 1 (id=1559): socket$inet_tcp(0x2, 0x1, 0x0) inotify_init() socket$inet_sctp(0x2, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x3], 0x0, 0xffffffffffffffff}) 41.091680018s ago: executing program 1 (id=1560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$revoke(0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x9, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) clock_settime(0xfffffffb, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) 40.260490568s ago: executing program 1 (id=1561): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000002c0)={@nfc={0x27, 0x0, 0x1, 0x3}, {0x0, 0x3d}, 0x0, 0x2c}, 0xa0) 39.841823588s ago: executing program 1 (id=1562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x65c, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x801, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x80001, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x7, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x40f, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0x400, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x50f6, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000bc0)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c00)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000c40)={&(0x7f0000000c80)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000d40)="c2", 0x1}], 0x1}, 0x20004014) 24.614339186s ago: executing program 32 (id=1562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x65c, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x801, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x80001, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x7, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x40f, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0x400, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x50f6, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000bc0)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c00)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000c40)={&(0x7f0000000c80)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000d40)="c2", 0x1}], 0x1}, 0x20004014) 11.015651674s ago: executing program 3 (id=1668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000040)=""/16, 0x10}], 0x1, 0x12c, 0x0) 8.914608215s ago: executing program 0 (id=1677): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000004c0)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="0100000003000000640000000000000000000000000000000000000001000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}], 0x1, 0x4000) 7.764421432s ago: executing program 0 (id=1679): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r1, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x143042, 0x51) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c9f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") 7.670832385s ago: executing program 3 (id=1680): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c90002"], 0x22) 7.016497751s ago: executing program 4 (id=1682): openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x141102) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000002980)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c000580080001006674"], 0x90}}, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x8040480) connect(r4, &(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0, 0x31}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x6}}}]}, 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d666f6c6c6f772d6d6173746572"], 0xc8}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000800)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 6.738692988s ago: executing program 0 (id=1684): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x2c, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f00000029c0)=ANY=[], 0x0) 6.139754062s ago: executing program 3 (id=1685): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000004fcffffff0100000008000100030000002400048005cc0300010000000500030000000000050003000000000005000300800000000800020003"], 0x48}}, 0x0) 5.38355195s ago: executing program 2 (id=1687): syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0xb8}, 0x3400c8d4) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000040)=0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x49, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x1ff, 0x7, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x3, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x80000005, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x4, 0xea4, 0x0, 0x1, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x7e7, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f3, 0x5, 0x8, 0x8, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12d, 0x4, 0x1, 0xa, 0x0, 0x7, 0x1c, 0x120000, 0x80000000, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x8, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x8007e, 0x5, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.38327656s ago: executing program 4 (id=1688): r0 = fsopen(&(0x7f0000000740)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000840)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000008c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000940), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000980), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='.\x00', 0x80000, 0x0) getdents64(r5, &(0x7f0000001d40)=""/4128, 0x1020) 5.294630152s ago: executing program 3 (id=1689): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00'}) sendmmsg$sock(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="0100000003000000640000000000000000000000000000000000000001000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}], 0x1, 0x4000) 5.150543935s ago: executing program 3 (id=1690): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2, &(0x7f0000000500)={[], [{@uid_lt}, {@fowner_gt}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq}, {@smackfstransmute}, {@appraise}, {@uid_lt}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048090}, 0x489c) sendmsg$tipc(r1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0xffffffffffffff5f, 0x0, 0x0, 0x0, 0xffffffffffffffb4}, 0x14894) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r7, 0x89b1, &(0x7f0000002880)={'netdevsim0\x00', @ifru_hwaddr}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xfffffc01) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 4.359907654s ago: executing program 4 (id=1691): socket(0x1, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) getpid() bind(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000000a3c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f000000a440), 0x651, 0x0) recvmmsg(r0, &(0x7f000000a480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f000000a4c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000a500)={0x3, 0x6, &(0x7f000000a5c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r2 = mmap$IORING_OFF_CQ_RING(0x0, 0x5, 0x1000000, 0x10, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(0x0, r2) syz_mount_image$hpfs(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x3200041, &(0x7f00000001c0)={[{@eas_no}, {@chkdsk_no}, {@case_asis}, {@check_none}]}, 0x1, 0x9e15, &(0x7f0000000500)="$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") syz_mount_image$msdos(&(0x7f000000a340), &(0x7f000000a380)='.\x00', 0x1a5a438, &(0x7f000000a3c0)=ANY=[], 0xd, 0x0, &(0x7f000000a400)) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4000040) 2.621373907s ago: executing program 2 (id=1692): syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x80}}, 0x0) 2.374190603s ago: executing program 2 (id=1693): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@id, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f0000000240)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10) 1.882843194s ago: executing program 4 (id=1694): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000196c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000019700)={0x2, @pix_mp={0x20, 0xfffffffe, 0x50424752, 0x8, 0x7, [{0x79, 0x4}, {0x7, 0x9}, {0x35b2, 0x9}, {0x3a5, 0x8}, {0x6}, {0x1800000, 0x1}, {0x10001}, {0x6, 0x7}], 0xfd, 0x1, 0x3, 0x0, 0x1}}) 1.786962737s ago: executing program 4 (id=1695): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c90002"], 0x22) 1.473963424s ago: executing program 2 (id=1696): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c000300"], 0x50}}, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf000, 0x10002, 0x0) 1.393361186s ago: executing program 2 (id=1697): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x1, &(0x7f0000000f00)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009e"], 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1, 0xc, &(0x7f0000001000)=ANY=[], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0xc000, 0x0}, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x10}, 0x18) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet6(0xa, 0x3, 0xff) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) capset(&(0x7f0000002640)={0x19980330}, &(0x7f0000002680)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) r4 = openat(0xffffffffffffff9c, &(0x7f00000026c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0xc0185879, 0x0) sendmsg(r3, &(0x7f0000000d80)={0x0, 0x9533, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.343486738s ago: executing program 3 (id=1698): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4000000000000001) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)="306663353a313232373a3f7092c0f0bc085a193376cf620afaf6379a248d1d6534058f", 0x23) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x29, 0x5, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000002100), 0x804000, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000400)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080e5c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$incfs(r3, &(0x7f0000000480)='.pending_reads\x00', 0x80, 0x151) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000300), 0x2950008, &(0x7f0000000340)={[], [{@permit_directio}, {@smackfshat={'smackfshat', 0x3d, 'workdir'}}, {@subj_type={'subj_type', 0x3d, 'lowerdir'}}, {@subj_user={'subj_user', 0x3d, 'workdir'}}, {@uid_lt={'uid<', r7}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, '#-#){\'${}'}}]}) write(r4, 0x0, 0x0) 1.113344593s ago: executing program 0 (id=1699): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000040)=@abs, 0x6e) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f00000000c0)={@loopback, @loopback, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x2, 0x200, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x1c) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmmsg$sock(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x81) sendto$inet6(r4, 0x0, 0x0, 0x24000045, &(0x7f00000005c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) 1.110821383s ago: executing program 4 (id=1700): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048000) bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000640)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000800)=0xb, 0x4) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="3db2c5df06000000e1df44248424f7d7c157be36797b8dc68dcad3a1be90c10f7b36b3c5f8616fed7c240fa05ef1cbe839855bd165fd0264f104b776a9594760fb45c32805ef", 0x46}, {&(0x7f0000000740)="a6a7d88b9e8991bbf4ce36dbb6b207cc8966cad0e944869ec041978d76fb6d3fd0cbb308d0c5ead635a622103d7079b4621869deb42dfeb05ec147b40070e5fda4a702ad5b265274d48ba4db048a69765d2df297c9ecdd67572167c5115eb0f357f1e0cd06c821e94621cec7f0b12dde039e2908868caf43a8030fe8ab8f7f", 0x7f}], 0x2}}], 0x1, 0x2090) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000459bb240580403500000000000010902"], 0x0) sendto$inet(r0, &(0x7f0000000d40)="17", 0x59a, 0x10008095, 0x0, 0x0) 371.459011ms ago: executing program 2 (id=1701): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x98) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)="6fcdc6564281bdcb83fe76ee13669821561956d3e4ed48440a58993e262e69c0ff5a3f00300628171399fe7d2e9efd6e2665f99292c1159f0150d34c3d769caf2f3fe9a2d25ef7e121e4e31202c39ca7459a09bea34ae5e0066e3396c182ff38bea4fee7da4b67f353f7f9763bb7525a233bf8a9f8a3b64c1421d4c2672551a0ae5397e1d6227a748b97fd01d5323512e95a7120bb7e739b08ca9732d4e5ba6555432bfc106521469ba289974de295799fde468570212df18fc7007e07115581cb860200c558", 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) set_mempolicy(0x3, &(0x7f0000000280)=0xfffffffffffffff7, 0x9) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000002c0)={0x1, 0x1, 0xb, 0x17, 0x164, &(0x7f0000000340)}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000300)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 119.726567ms ago: executing program 0 (id=1702): syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x80}}, 0x0) 0s ago: executing program 0 (id=1703): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000400)='./fi', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='tcp\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='ipv4\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='127.0.0.1\n', 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r7, &(0x7f00000006c0)='4420', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) write(r8, &(0x7f0000000740)='1024\n', 0x5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/nvmet/ports/1/subsystems/testsubsys\x00') kernel console output (not intermixed with test programs): page_cache_ra_unbounded+0x750/0x750 [ 553.175704][ T8870] ? folio_add_lru+0x319/0xcf0 [ 553.180489][ T8870] ? folio_add_lru+0x508/0xcf0 [ 553.185273][ T8870] ? filemap_add_folio+0x186/0x3d0 [ 553.190489][ T8870] page_cache_ra_unbounded+0x667/0x750 [ 553.195993][ T8870] f2fs_readdir+0x48b/0xa00 [ 553.200619][ T8870] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 553.205844][ T8870] ? end_current_label_crit_section+0x14b/0x170 [ 553.212187][ T8870] ? iterate_dir+0x10d/0x550 [ 553.216807][ T8870] ? down_read_killable+0x1cc/0x340 [ 553.222030][ T8870] ? fsnotify_perm+0x248/0x550 [ 553.226823][ T8870] iterate_dir+0x213/0x550 [ 553.231273][ T8870] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 553.236507][ T8870] exportfs_get_name+0x41d/0x570 [ 553.241546][ T8870] ? find_acceptable_alias+0x1b0/0x1b0 [ 553.247039][ T8870] ? reconnect_path+0x1f5/0x740 [ 553.251918][ T8870] ? __lock_acquire+0x7ea0/0x7ea0 [ 553.256999][ T8870] ? exportfs_decode_fh+0x70/0x70 [ 553.262048][ T8870] ? f2fs_get_parent+0xec/0x150 [ 553.266933][ T8870] ? up_write+0x1b6/0x410 [ 553.271292][ T8870] reconnect_path+0x297/0x740 [ 553.276002][ T8870] exportfs_decode_fh_raw+0x2a1/0x700 [ 553.281406][ T8870] ? do_handle_open+0x870/0x870 [ 553.286371][ T8870] ? exportfs_encode_fh+0x480/0x480 [ 553.291623][ T8870] ? __lock_acquire+0x7ea0/0x7ea0 [ 553.296675][ T8870] ? do_raw_spin_lock+0x128/0x2f0 [ 553.301729][ T8870] ? __rwlock_init+0x140/0x140 [ 553.306522][ T8870] ? do_handle_open+0x870/0x870 [ 553.311390][ T8870] exportfs_decode_fh+0x36/0x70 [ 553.316262][ T8870] do_handle_open+0x401/0x870 [ 553.320962][ T8870] ? __ia32_compat_sys_open_by_handle_at+0x80/0x80 [ 553.327491][ T8870] ? lockdep_hardirqs_on+0x94/0x140 [ 553.332723][ T8870] do_syscall_64+0x4c/0xa0 [ 553.337164][ T8870] ? clear_bhb_loop+0x60/0xb0 [ 553.341862][ T8870] ? clear_bhb_loop+0x60/0xb0 [ 553.346558][ T8870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.352474][ T8870] RIP: 0033:0x7fda9cf9e559 [ 553.356908][ T8870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.376537][ T8870] RSP: 002b:00007fda9ddae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 553.384977][ T8870] RAX: ffffffffffffffda RBX: 00007fda9d225fa0 RCX: 00007fda9cf9e559 [ 553.392973][ T8870] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 553.400965][ T8870] RBP: 00007fda9d0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 553.408959][ T8870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.416949][ T8870] R13: 00007fda9d226038 R14: 00007fda9d225fa0 R15: 00007ffd3e9d4ba8 [ 553.424956][ T8870] [ 553.480211][ T8901] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1258: couldn't read orphan inode 26 (err -116) [ 553.497183][ T8901] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 553.531428][ T8870] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0 [ 553.546572][ T8870] CPU: 0 PID: 8870 Comm: syz.4.1244 Not tainted syzkaller #0 [ 553.553993][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 553.564068][ T8870] Call Trace: [ 553.567361][ T8870] [ 553.570303][ T8870] dump_stack_lvl+0x188/0x24e [ 553.575011][ T8870] ? show_regs_print_info+0x12/0x12 [ 553.580237][ T8870] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 553.586088][ T8870] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 553.591511][ T8870] f2fs_get_read_data_page+0x40f/0x640 [ 553.597005][ T8870] ? f2fs_reserve_block+0x240/0x240 [ 553.602245][ T8870] f2fs_find_data_page+0x9b/0x3b0 [ 553.607295][ T8870] f2fs_readdir+0x4ba/0xa00 [ 553.611835][ T8870] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 553.617062][ T8870] ? end_current_label_crit_section+0x14b/0x170 [ 553.623336][ T8870] ? iterate_dir+0x10d/0x550 [ 553.627952][ T8870] ? down_read_killable+0x1cc/0x340 [ 553.633170][ T8870] ? fsnotify_perm+0x248/0x550 [ 553.637963][ T8870] iterate_dir+0x213/0x550 [ 553.642405][ T8870] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 553.647624][ T8870] exportfs_get_name+0x41d/0x570 [ 553.652582][ T8870] ? find_acceptable_alias+0x1b0/0x1b0 [ 553.658068][ T8870] ? reconnect_path+0x1f5/0x740 [ 553.662949][ T8870] ? __lock_acquire+0x7ea0/0x7ea0 [ 553.668002][ T8870] ? exportfs_decode_fh+0x70/0x70 [ 553.673053][ T8870] ? f2fs_get_parent+0xec/0x150 [ 553.677943][ T8870] ? up_write+0x1b6/0x410 [ 553.682307][ T8870] reconnect_path+0x297/0x740 [ 553.687015][ T8870] exportfs_decode_fh_raw+0x2a1/0x700 [ 553.692414][ T8870] ? do_handle_open+0x870/0x870 [ 553.697292][ T8870] ? exportfs_encode_fh+0x480/0x480 [ 553.702531][ T8870] ? __lock_acquire+0x7ea0/0x7ea0 [ 553.707576][ T8870] ? do_raw_spin_lock+0x128/0x2f0 [ 553.712620][ T8870] ? __rwlock_init+0x140/0x140 [ 553.717401][ T8870] ? do_handle_open+0x870/0x870 [ 553.722268][ T8870] exportfs_decode_fh+0x36/0x70 [ 553.727145][ T8870] do_handle_open+0x401/0x870 [ 553.731847][ T8870] ? __ia32_compat_sys_open_by_handle_at+0x80/0x80 [ 553.738379][ T8870] ? lockdep_hardirqs_on+0x94/0x140 [ 553.743614][ T8870] do_syscall_64+0x4c/0xa0 [ 553.748049][ T8870] ? clear_bhb_loop+0x60/0xb0 [ 553.752755][ T8870] ? clear_bhb_loop+0x60/0xb0 [ 553.757466][ T8870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.763397][ T8870] RIP: 0033:0x7fda9cf9e559 [ 553.767837][ T8870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.787470][ T8870] RSP: 002b:00007fda9ddae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 553.795918][ T8870] RAX: ffffffffffffffda RBX: 00007fda9d225fa0 RCX: 00007fda9cf9e559 [ 553.803922][ T8870] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 553.811944][ T8870] RBP: 00007fda9d0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 553.819943][ T8870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.827951][ T8870] R13: 00007fda9d226038 R14: 00007fda9d225fa0 R15: 00007ffd3e9d4ba8 [ 553.835969][ T8870] [ 554.016805][ T4435] kworker/u4:10: attempt to access beyond end of device [ 554.016805][ T4435] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 554.451641][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 556.987389][ T5915] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 557.405787][ T8956] rxe_eth0 speed is unknown, defaulting to 1000 [ 558.324198][ T8959] loop4: detected capacity change from 0 to 8192 [ 558.433552][ T8959] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 558.566460][ T8959] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 558.575715][ T8959] REISERFS (device loop4): using ordered data mode [ 558.584622][ T8959] reiserfs: using flush barriers [ 558.618812][ T8962] FAULT_INJECTION: forcing a failure. [ 558.618812][ T8962] name failslab, interval 1, probability 5, space 0, times 9998 [ 558.623666][ T8959] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 558.677010][ T8959] REISERFS (device loop4): checking transaction log (loop4) [ 558.710291][ T8962] CPU: 1 PID: 8962 Comm: syz.2.1276 Not tainted syzkaller #0 [ 558.717729][ T8962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 558.727801][ T8962] Call Trace: [ 558.731093][ T8962] [ 558.734032][ T8962] dump_stack_lvl+0x188/0x24e [ 558.738741][ T8962] ? show_regs_print_info+0x12/0x12 [ 558.743972][ T8962] ? load_image+0x410/0x410 [ 558.748505][ T8962] ? __might_sleep+0xd0/0xd0 [ 558.753119][ T8962] ? __lock_acquire+0x7ea0/0x7ea0 [ 558.758174][ T8962] should_fail_ex+0x390/0x4c0 [ 558.762885][ T8962] should_failslab+0x5/0x20 [ 558.767400][ T8962] slab_pre_alloc_hook+0x59/0x300 [ 558.772445][ T8962] ? __rwlock_init+0x140/0x140 [ 558.777225][ T8962] ? key_user_lookup+0x1b8/0x450 [ 558.782188][ T8962] kmem_cache_alloc+0x56/0x2f0 [ 558.786970][ T8962] ? key_alloc+0x302/0x1030 [ 558.791501][ T8962] key_alloc+0x302/0x1030 [ 558.795863][ T8962] key_create_or_update+0x89b/0xa40 [ 558.801085][ T8962] ? security_key_permission+0x7c/0xa0 [ 558.806661][ T8962] ? key_type_put+0x20/0x20 [ 558.811190][ T8962] ? lookup_user_key_possessed+0x40/0x40 [ 558.816867][ T8962] ? _copy_from_user+0x10b/0x170 [ 558.821840][ T8962] __se_sys_add_key+0x34b/0x410 [ 558.826732][ T8962] ? __x64_sys_add_key+0xc0/0xc0 [ 558.831714][ T8962] ? lockdep_hardirqs_on+0x94/0x140 [ 558.836944][ T8962] ? __x64_sys_add_key+0x1c/0xc0 [ 558.841915][ T8962] do_syscall_64+0x4c/0xa0 [ 558.846355][ T8962] ? clear_bhb_loop+0x60/0xb0 [ 558.851055][ T8962] ? clear_bhb_loop+0x60/0xb0 [ 558.855762][ T8962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 558.861681][ T8962] RIP: 0033:0x7f56aeb9e559 [ 558.866109][ T8962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.885732][ T8962] RSP: 002b:00007f56afb5a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 558.894175][ T8962] RAX: ffffffffffffffda RBX: 00007f56aee25fa0 RCX: 00007f56aeb9e559 [ 558.902170][ T8962] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000080 [ 558.910166][ T8962] RBP: 00007f56aec358b0 R08: fffffffffffffffe R09: 0000000000000000 [ 558.911644][ T8959] REISERFS (device loop4): Using tea hash to sort names [ 558.918136][ T8962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.918173][ T8962] R13: 00007f56aee26038 R14: 00007f56aee25fa0 R15: 00007ffc3194dfd8 [ 558.918203][ T8962] [ 558.955235][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 558.986955][ T8959] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 559.608047][ T8984] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 559.679094][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'. [ 559.697748][ T8984] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 560.184745][ T8980] loop3: detected capacity change from 0 to 32768 [ 560.215819][ T8980] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.1277 (8980) [ 560.310781][ T8980] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 560.362910][ T8980] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 560.364390][ T9002] loop1: detected capacity change from 0 to 2048 [ 560.407795][ T8980] BTRFS info (device loop3): enabling ssd optimizations [ 560.414859][ T8980] BTRFS info (device loop3): not using ssd optimizations [ 560.455789][ T9002] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 560.459370][ T8980] BTRFS info (device loop3): turning off barriers [ 560.507627][ T8980] BTRFS info (device loop3): use no compression [ 560.523387][ T8980] BTRFS info (device loop3): using free space tree [ 560.567074][ T9002] syz.1.1291: attempt to access beyond end of device [ 560.567074][ T9002] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 560.586410][ T9003] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 560.997726][ T9023] delete_channel: no stack [ 561.787813][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'. [ 561.905304][ T9041] FAULT_INJECTION: forcing a failure. [ 561.905304][ T9041] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 561.951471][ T9041] CPU: 0 PID: 9041 Comm: syz.0.1301 Not tainted syzkaller #0 [ 561.958902][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 561.968975][ T9041] Call Trace: [ 561.972267][ T9041] [ 561.975204][ T9041] dump_stack_lvl+0x188/0x24e [ 561.979906][ T9041] ? show_regs_print_info+0x12/0x12 [ 561.985122][ T9041] ? load_image+0x410/0x410 [ 561.989642][ T9041] ? __lock_acquire+0x7ea0/0x7ea0 [ 561.994692][ T9041] should_fail_ex+0x390/0x4c0 [ 561.999404][ T9041] prepare_alloc_pages+0x1e1/0x5b0 [ 562.004544][ T9041] __alloc_pages+0x130/0x4f0 [ 562.009161][ T9041] ? zone_statistics+0x170/0x170 [ 562.014129][ T9041] ? alloc_pages+0x4dd/0x740 [ 562.018827][ T9041] ? lock_chain_count+0x20/0x20 [ 562.023704][ T9041] __get_free_pages+0x8/0x30 [ 562.028330][ T9041] __se_sys_mincore+0x19e/0x720 [ 562.033281][ T9041] ? syscall_enter_from_user_mode+0x21/0x80 [ 562.039204][ T9041] ? lockdep_hardirqs_on+0x94/0x140 [ 562.044440][ T9041] do_syscall_64+0x4c/0xa0 [ 562.048876][ T9041] ? clear_bhb_loop+0x60/0xb0 [ 562.053572][ T9041] ? clear_bhb_loop+0x60/0xb0 [ 562.058265][ T9041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.064171][ T9041] RIP: 0033:0x7f4e04f9e559 [ 562.068599][ T9041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.088227][ T9041] RSP: 002b:00007f4e05df1028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 562.096664][ T9041] RAX: ffffffffffffffda RBX: 00007f4e05225fa0 RCX: 00007f4e04f9e559 [ 562.104655][ T9041] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 562.112642][ T9041] RBP: 00007f4e050358b0 R08: 0000000000000000 R09: 0000000000000000 [ 562.120617][ T9041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.128581][ T9041] R13: 00007f4e05226038 R14: 00007f4e05225fa0 R15: 00007ffeb740a308 [ 562.136556][ T9041] [ 562.140933][ T9044] delete_channel: no stack [ 562.144351][ T4436] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 562.245519][ T4287] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 562.255628][ T4287] CPU: 1 PID: 4287 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 562.263208][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 562.273291][ T4287] Workqueue: hci4 hci_rx_work [ 562.278088][ T4287] Call Trace: [ 562.281374][ T4287] [ 562.284325][ T4287] dump_stack_lvl+0x188/0x24e [ 562.289034][ T4287] ? show_regs_print_info+0x12/0x12 [ 562.294253][ T4287] ? load_image+0x410/0x410 [ 562.298786][ T4287] sysfs_create_dir_ns+0x26a/0x290 [ 562.303995][ T4287] ? __lock_acquire+0x7ea0/0x7ea0 [ 562.309040][ T4287] ? sysfs_warn_dup+0xa0/0xa0 [ 562.313742][ T4287] ? do_raw_spin_unlock+0x11d/0x230 [ 562.318964][ T4287] kobject_add_internal+0x617/0xca0 [ 562.324199][ T4287] kobject_add+0x160/0x230 [ 562.328645][ T4287] ? kobject_init+0x1c0/0x1c0 [ 562.333355][ T4287] ? __raw_spin_lock_init+0x41/0x100 [ 562.338660][ T4287] ? klist_children_get+0x50/0x50 [ 562.343783][ T4287] ? get_device_parent+0x121/0x3e0 [ 562.348989][ T4287] device_add+0x470/0x1050 [ 562.353443][ T4287] hci_conn_add_sysfs+0xd1/0x1e0 [ 562.358488][ T4287] le_conn_complete_evt+0xf93/0x15c0 [ 562.363870][ T4287] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 562.370136][ T4287] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 562.375799][ T4287] ? mutex_unlock+0x10/0x10 [ 562.380323][ T4287] ? skb_pull_data+0xec/0x1f0 [ 562.385060][ T4287] hci_le_enh_conn_complete_evt+0x185/0x460 [ 562.390980][ T4287] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 562.397412][ T4287] ? hci_remote_host_features_evt+0x230/0x230 [ 562.403504][ T4287] hci_event_packet+0x7b3/0x1290 [ 562.408477][ T4287] ? lock_chain_count+0x20/0x20 [ 562.413353][ T4287] ? bis_list+0x280/0x280 [ 562.417709][ T4287] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 562.423626][ T4287] ? kcov_remote_start+0x50f/0x810 [ 562.428792][ T4287] ? lockdep_hardirqs_on+0x94/0x140 [ 562.434019][ T4287] ? hci_send_to_monitor+0x9c/0x4a0 [ 562.439236][ T4287] hci_rx_work+0x3eb/0xd40 [ 562.443667][ T4287] ? _raw_spin_unlock+0x40/0x40 [ 562.448539][ T4287] ? process_one_work+0x7b4/0x1160 [ 562.453758][ T4287] process_one_work+0x8ab/0x1160 [ 562.458735][ T4287] ? worker_detach_from_pool+0x240/0x240 [ 562.464396][ T4287] ? _raw_spin_lock_irq+0xb7/0xf0 [ 562.469440][ T4287] ? _raw_spin_lock_irqsave+0x100/0x100 [ 562.475011][ T4287] ? wq_worker_running+0x97/0x190 [ 562.480054][ T4287] worker_thread+0xaf5/0x12a0 [ 562.484764][ T4287] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 562.490685][ T4287] kthread+0x29d/0x330 [ 562.494771][ T4287] ? worker_clr_flags+0x1a0/0x1a0 [ 562.499813][ T4287] ? kthread_blkcg+0xd0/0xd0 [ 562.504418][ T4287] ret_from_fork+0x1f/0x30 [ 562.508900][ T4287] [ 562.518010][ T4287] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 562.531352][ T4287] Bluetooth: hci4: failed to register connection device [ 562.750996][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.757582][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.806885][ T9059] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 562.815975][ T9059] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 563.719303][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 565.781005][ T9091] loop0: detected capacity change from 0 to 256 [ 565.807325][ T9091] exfat: Deprecated parameter 'utf8' [ 565.843986][ T9091] exfat: Deprecated parameter 'utf8' [ 565.893019][ T9091] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 565.943683][ T8980] syz.3.1277 (8980): drop_caches: 3 [ 566.167456][ T4276] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 566.198502][ T9095] FAULT_INJECTION: forcing a failure. [ 566.198502][ T9095] name failslab, interval 1, probability 5, space 0, times 9997 [ 566.212000][ T9095] CPU: 0 PID: 9095 Comm: syz.1.1319 Not tainted syzkaller #0 [ 566.219397][ T9095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 566.229463][ T9095] Call Trace: [ 566.232747][ T9095] [ 566.235682][ T9095] dump_stack_lvl+0x188/0x24e [ 566.240368][ T9095] ? __wake_up+0x12e/0x1a0 [ 566.244804][ T9095] ? show_regs_print_info+0x12/0x12 [ 566.250008][ T9095] ? load_image+0x410/0x410 [ 566.254506][ T9095] should_fail_ex+0x390/0x4c0 [ 566.259180][ T9095] should_failslab+0x5/0x20 [ 566.263668][ T9095] slab_pre_alloc_hook+0x59/0x300 [ 566.268681][ T9095] ? __lock_acquire+0x7ea0/0x7ea0 [ 566.273703][ T9095] kmem_cache_alloc+0x56/0x2f0 [ 566.278461][ T9095] ? __sigqueue_alloc+0x40c/0x520 [ 566.283561][ T9095] ? __sigqueue_alloc+0x32/0x520 [ 566.288491][ T9095] __sigqueue_alloc+0x40c/0x520 [ 566.293339][ T9095] __send_signal_locked+0x22f/0xde0 [ 566.298532][ T9095] do_notify_parent+0xb24/0xd10 [ 566.303376][ T9095] ? trace_signal_generate+0x260/0x260 [ 566.308829][ T9095] ? __lock_acquire+0x7ea0/0x7ea0 [ 566.313855][ T9095] release_task+0x121c/0x1680 [ 566.318528][ T9095] ? do_exit+0x18d7/0x2570 [ 566.322935][ T9095] ? delayed_put_task_struct+0x2f0/0x2f0 [ 566.328555][ T9095] ? _raw_write_lock_irq+0xb7/0xf0 [ 566.333754][ T9095] ? _raw_write_lock_irqsave+0x100/0x100 [ 566.339395][ T9095] ? _raw_write_unlock_irq+0x1f/0x40 [ 566.344678][ T9095] ? lockdep_hardirqs_on+0x94/0x140 [ 566.349877][ T9095] do_exit+0x18d7/0x2570 [ 566.354127][ T9095] ? put_task_struct+0x80/0x80 [ 566.358903][ T9095] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 566.364890][ T9095] ? lock_chain_count+0x20/0x20 [ 566.369738][ T9095] ? _raw_spin_lock_irq+0xb7/0xf0 [ 566.374756][ T9095] do_group_exit+0x229/0x2e0 [ 566.379342][ T9095] ? lockdep_hardirqs_on+0x94/0x140 [ 566.384535][ T9095] get_signal+0x1259/0x1340 [ 566.389034][ T9095] ? futex_wake+0x426/0x4f0 [ 566.393530][ T9095] arch_do_signal_or_restart+0xc4/0x1310 [ 566.399273][ T9095] ? lock_chain_count+0x20/0x20 [ 566.404159][ T9095] ? do_futex+0x2e2/0x320 [ 566.408498][ T9095] ? get_sigframe_size+0x10/0x10 [ 566.413443][ T9095] ? __ia32_sys_get_robust_list+0x100/0x100 [ 566.419327][ T9095] ? slab_free_freelist_hook+0x133/0x1b0 [ 566.424972][ T9095] ? exit_to_user_mode_loop+0x3b/0x110 [ 566.430510][ T9095] exit_to_user_mode_loop+0x70/0x110 [ 566.435790][ T9095] exit_to_user_mode_prepare+0xee/0x180 [ 566.441331][ T9095] syscall_exit_to_user_mode+0x16/0x40 [ 566.446782][ T9095] do_syscall_64+0x58/0xa0 [ 566.451199][ T9095] ? clear_bhb_loop+0x60/0xb0 [ 566.455952][ T9095] ? clear_bhb_loop+0x60/0xb0 [ 566.460619][ T9095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.466501][ T9095] RIP: 0033:0x7f87f6d9e559 [ 566.470901][ T9095] Code: Unable to access opcode bytes at 0x7f87f6d9e52f. [ 566.477978][ T9095] RSP: 002b:00007f87f4ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 566.486382][ T9095] RAX: 0000000000000001 RBX: 00007f87f7025fa8 RCX: 00007f87f6d9e559 [ 566.494366][ T9095] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f87f7025fac [ 566.502322][ T9095] RBP: 00007f87f7025fa0 R08: 000034bc00a3c0ea R09: 0000000000000000 [ 566.510294][ T9095] R10: 0000000003a3a6ab R11: 0000000000000246 R12: 0000000000000000 [ 566.518259][ T9095] R13: 00007f87f7026038 R14: 00007ffe707b03b0 R15: 00007ffe707b0498 [ 566.526236][ T9095] [ 566.934710][ T9112] loop2: detected capacity change from 0 to 512 [ 567.045082][ T9112] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1324: couldn't read orphan inode 26 (err -116) [ 567.079417][ T9112] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 568.327557][ T47] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 568.526747][ T9113] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 568.550777][ T9135] loop3: detected capacity change from 0 to 4096 [ 568.564320][ T9135] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 568.637209][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 568.678509][ T9135] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 569.024398][ T9143] loop2: detected capacity change from 0 to 4096 [ 569.054550][ T9143] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 569.423309][ T9143] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 569.518231][ T9143] ntfs3: loop2: ino=21, "bus" The size of extended attributes must not exceed 64KiB [ 569.922402][ T9163] loop3: detected capacity change from 0 to 512 [ 570.101634][ T9167] loop2: detected capacity change from 0 to 128 [ 570.157043][ T9167] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 570.169388][ T9167] hpfs: filesystem error: improperly stopped [ 570.175447][ T9167] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 570.183404][ T9167] hpfs: You really don't want any checks? You are crazy... [ 570.191610][ T9167] hpfs: hpfs_map_sector(): read error [ 570.197057][ T9167] hpfs: code page support is disabled [ 570.207295][ T9167] hpfs: hpfs_map_4sectors(): unaligned read [ 570.213628][ T9167] hpfs: hpfs_map_4sectors(): unaligned read [ 570.219638][ T9167] hpfs: filesystem error: unable to find root dir [ 570.320131][ T9163] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1338: couldn't read orphan inode 26 (err -116) [ 570.666903][ T9163] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 572.221648][ T9172] loop4: detected capacity change from 0 to 2048 [ 572.245251][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 572.350218][ T9172] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 572.519660][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 572.847438][ T9183] device syzkaller0 entered promiscuous mode [ 573.337976][ T4412] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.906800][ T4715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 574.605048][ T9212] loop4: detected capacity change from 0 to 128 [ 575.118674][ T9212] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 575.130526][ T9212] hpfs: filesystem error: improperly stopped [ 575.136567][ T9212] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 575.144297][ T9212] hpfs: You really don't want any checks? You are crazy... [ 575.151873][ T9212] hpfs: hpfs_map_sector(): read error [ 575.157295][ T9212] hpfs: code page support is disabled [ 575.163140][ T9212] hpfs: hpfs_map_4sectors(): unaligned read [ 575.169154][ T9212] hpfs: hpfs_map_4sectors(): unaligned read [ 575.175049][ T9212] hpfs: filesystem error: unable to find root dir [ 575.520414][ T9215] loop3: detected capacity change from 0 to 512 [ 575.654356][ T9215] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1352: couldn't read orphan inode 26 (err -116) [ 575.672534][ T9215] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 575.714633][ T9226] loop4: detected capacity change from 0 to 64 [ 576.408583][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 576.560445][ T9236] loop3: detected capacity change from 0 to 256 [ 578.531314][ T9256] loop0: detected capacity change from 0 to 164 [ 579.061312][ T9227] netlink: 'syz.1.1345': attribute type 21 has an invalid length. [ 579.069997][ T9227] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1345'. [ 579.082358][ T9234] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1357'. [ 579.210919][ T9258] loop3: detected capacity change from 0 to 512 [ 579.542190][ T9267] loop1: detected capacity change from 0 to 128 [ 579.825615][ T9268] loop2: detected capacity change from 0 to 128 [ 579.923762][ T4436] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 579.989217][ T9267] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 579.990407][ T9268] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 580.001699][ T9267] hpfs: filesystem error: improperly stopped [ 580.012687][ T9268] hpfs: filesystem error: improperly stopped [ 580.012711][ T9268] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 580.012726][ T9268] hpfs: You really don't want any checks? You are crazy... [ 580.013033][ T9268] hpfs: hpfs_map_sector(): read error [ 580.018786][ T9267] [ 580.024769][ T9268] hpfs: code page support is disabled [ 580.032783][ T9267] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 580.041905][ T9268] hpfs: hpfs_map_4sectors(): unaligned read [ 580.045712][ T9267] [ 580.045720][ T9267] hpfs: You really don't want any checks? You are crazy... [ 580.049764][ T9268] hpfs: hpfs_map_4sectors(): unaligned read [ 580.053707][ T9267] hpfs: hpfs_map_sector(): read error [ 580.061187][ T9268] hpfs: filesystem error: unable to find root dir [ 580.067119][ T9267] hpfs: code page support is disabled [ 580.069384][ T9268] [ 580.103764][ T9267] hpfs: hpfs_map_4sectors(): unaligned read [ 580.109910][ T9267] hpfs: hpfs_map_4sectors(): unaligned read [ 580.116265][ T9267] hpfs: filesystem error: unable to find root dir [ 580.144142][ T9258] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1366: couldn't read orphan inode 26 (err -116) [ 580.181792][ T9258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 580.828359][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 580.969328][ T9292] netlink: 'syz.3.1374': attribute type 21 has an invalid length. [ 580.991754][ T9292] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1374'. [ 581.895101][ T9300] device syzkaller0 entered promiscuous mode [ 582.152854][ T9303] loop3: detected capacity change from 0 to 4096 [ 582.200276][ T9303] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 582.316103][ T9303] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 582.562453][ T9306] FAULT_INJECTION: forcing a failure. [ 582.562453][ T9306] name failslab, interval 1, probability 5, space 0, times 10000 [ 582.576552][ T9306] CPU: 1 PID: 9306 Comm: syz.3.1380 Not tainted syzkaller #0 [ 582.583971][ T9306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 582.594045][ T9306] Call Trace: [ 582.597335][ T9306] [ 582.600273][ T9306] dump_stack_lvl+0x188/0x24e [ 582.604976][ T9306] ? show_regs_print_info+0x12/0x12 [ 582.610200][ T9306] ? load_image+0x410/0x410 [ 582.614741][ T9306] ? __might_sleep+0xd0/0xd0 [ 582.619353][ T9306] ? __lock_acquire+0x7ea0/0x7ea0 [ 582.624416][ T9306] should_fail_ex+0x390/0x4c0 [ 582.629125][ T9306] should_failslab+0x5/0x20 [ 582.633626][ T9306] slab_pre_alloc_hook+0x59/0x300 [ 582.638654][ T9306] ? tomoyo_encode+0x28a/0x550 [ 582.643422][ T9306] __kmem_cache_alloc_node+0x4f/0x270 [ 582.648794][ T9306] ? tomoyo_encode+0x28a/0x550 [ 582.653552][ T9306] __kmalloc+0xa3/0x240 [ 582.657703][ T9306] tomoyo_encode+0x28a/0x550 [ 582.662295][ T9306] tomoyo_realpath_from_path+0x578/0x5c0 [ 582.667936][ T9306] tomoyo_check_open_permission+0x212/0x440 [ 582.673826][ T9306] ? tomoyo_check_open_permission+0x1bf/0x440 [ 582.679892][ T9306] ? tomoyo_check_path_number_acl+0x280/0x280 [ 582.685951][ T9306] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 582.691928][ T9306] ? __lock_acquire+0x7ea0/0x7ea0 [ 582.696967][ T9306] ? __lock_acquire+0x7ea0/0x7ea0 [ 582.701986][ T9306] ? __rwlock_init+0x140/0x140 [ 582.706744][ T9306] ? tomoyo_file_open+0xe9/0x170 [ 582.711677][ T9306] security_file_open+0x5e/0xa0 [ 582.716526][ T9306] do_dentry_open+0x2fd/0x10b0 [ 582.721294][ T9306] ? memcpy+0x3c/0x60 [ 582.725272][ T9306] path_openat+0x2674/0x2f10 [ 582.729869][ T9306] ? kasan_set_track+0x60/0x70 [ 582.734629][ T9306] ? verify_lock_unused+0x140/0x140 [ 582.739842][ T9306] ? do_sys_openat2+0xdd/0x4f0 [ 582.744633][ T9306] ? do_filp_open+0x420/0x420 [ 582.749332][ T9306] do_filp_open+0x1ee/0x420 [ 582.753867][ T9306] ? vfs_tmpfile+0x470/0x470 [ 582.758470][ T9306] ? _raw_spin_unlock+0x24/0x40 [ 582.763315][ T9306] ? alloc_fd+0x590/0x640 [ 582.767650][ T9306] do_sys_openat2+0x14b/0x4f0 [ 582.772327][ T9306] ? do_sys_open+0xe0/0xe0 [ 582.776740][ T9306] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 582.782715][ T9306] ? lock_chain_count+0x20/0x20 [ 582.787565][ T9306] __x64_sys_openat+0x135/0x160 [ 582.792415][ T9306] do_syscall_64+0x4c/0xa0 [ 582.796824][ T9306] ? clear_bhb_loop+0x60/0xb0 [ 582.801493][ T9306] ? clear_bhb_loop+0x60/0xb0 [ 582.806167][ T9306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 582.812059][ T9306] RIP: 0033:0x7f2d7035ed8e [ 582.816467][ T9306] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 582.836070][ T9306] RSP: 002b:00007f2d712e2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 582.844481][ T9306] RAX: ffffffffffffffda RBX: 00007f2d712e36c0 RCX: 00007f2d7035ed8e [ 582.852445][ T9306] RDX: 0000000000000002 RSI: 00007f2d712e2c00 RDI: ffffffffffffff9c [ 582.860411][ T9306] RBP: 00007f2d712e2c00 R08: 0000000000000000 R09: 0000000000000000 [ 582.868373][ T9306] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 582.876362][ T9306] R13: 00007f2d70626038 R14: 00007f2d70625fa0 R15: 00007ffed360dfb8 [ 582.884342][ T9306] [ 582.896558][ T4412] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 582.947162][ T9306] ERROR: Out of memory at tomoyo_realpath_from_path. [ 583.236803][ T9313] loop0: detected capacity change from 0 to 128 [ 583.253894][ T9313] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 583.265863][ T9313] hpfs: filesystem error: improperly stopped [ 583.271980][ T9313] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 583.280424][ T9313] hpfs: You really don't want any checks? You are crazy... [ 583.288871][ T9313] hpfs: hpfs_map_sector(): read error [ 583.294317][ T9313] hpfs: code page support is disabled [ 583.301776][ T9313] hpfs: hpfs_map_4sectors(): unaligned read [ 583.308276][ T9313] hpfs: hpfs_map_4sectors(): unaligned read [ 583.314263][ T9313] hpfs: filesystem error: unable to find root dir [ 584.018665][ T9321] loop3: detected capacity change from 0 to 128 [ 584.041818][ T9321] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 584.053668][ T9321] hpfs: filesystem error: improperly stopped [ 584.059765][ T9321] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 584.067522][ T9321] hpfs: You really don't want any checks? You are crazy... [ 584.075039][ T9321] hpfs: hpfs_map_sector(): read error [ 584.080518][ T9321] hpfs: code page support is disabled [ 584.090246][ T9321] hpfs: hpfs_map_4sectors(): unaligned read [ 584.097243][ T9321] hpfs: hpfs_map_4sectors(): unaligned read [ 584.103151][ T9321] hpfs: filesystem error: unable to find root dir [ 584.641288][ T9325] FAULT_INJECTION: forcing a failure. [ 584.641288][ T9325] name failslab, interval 1, probability 5, space 0, times 9999 [ 584.656078][ T9325] CPU: 0 PID: 9325 Comm: syz.4.1386 Not tainted syzkaller #0 [ 584.663484][ T9325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 584.673548][ T9325] Call Trace: [ 584.676822][ T9325] [ 584.679751][ T9325] dump_stack_lvl+0x188/0x24e [ 584.684444][ T9325] ? show_regs_print_info+0x12/0x12 [ 584.689641][ T9325] ? load_image+0x410/0x410 [ 584.694140][ T9325] ? __might_sleep+0xd0/0xd0 [ 584.698723][ T9325] ? __lock_acquire+0x7ea0/0x7ea0 [ 584.703749][ T9325] should_fail_ex+0x390/0x4c0 [ 584.708440][ T9325] should_failslab+0x5/0x20 [ 584.712938][ T9325] slab_pre_alloc_hook+0x59/0x300 [ 584.717960][ T9325] ? __rwlock_init+0x140/0x140 [ 584.722740][ T9325] kmem_cache_alloc+0x56/0x2f0 [ 584.727512][ T9325] ? key_alloc+0x302/0x1030 [ 584.732026][ T9325] key_alloc+0x302/0x1030 [ 584.736372][ T9325] keyring_alloc+0x41/0xa0 [ 584.740793][ T9325] look_up_user_keyrings+0x459/0x670 [ 584.746080][ T9325] ? key_validate+0xf0/0xf0 [ 584.750581][ T9325] ? lookup_user_key+0xd1/0x1110 [ 584.755518][ T9325] lookup_user_key+0x380/0x1110 [ 584.760368][ T9325] ? __lock_acquire+0x7ea0/0x7ea0 [ 584.765421][ T9325] ? lookup_user_key_possessed+0x40/0x40 [ 584.771050][ T9325] ? preempt_schedule+0xbc/0xd0 [ 584.775920][ T9325] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 584.781900][ T9325] ? preempt_schedule_thunk+0x16/0x18 [ 584.787277][ T9325] keyctl_get_persistent+0x24b/0x780 [ 584.792567][ T9325] ? proc_key_users_show+0x310/0x310 [ 584.797847][ T9325] ? futex_wake+0x426/0x4f0 [ 584.802350][ T9325] ? futex_wake_mark+0x150/0x150 [ 584.807281][ T9325] ? speculation_ctrl_update+0x143/0x5f0 [ 584.812959][ T9325] __se_sys_keyctl+0x59f/0x870 [ 584.817722][ T9325] ? __x64_sys_keyctl+0xc0/0xc0 [ 584.822567][ T9325] ? do_futex+0x2e2/0x320 [ 584.826886][ T9325] ? enable_cpuid+0x80/0x80 [ 584.831389][ T9325] ? __ia32_sys_get_robust_list+0x100/0x100 [ 584.837283][ T9325] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 584.843260][ T9325] ? lock_chain_count+0x20/0x20 [ 584.848123][ T9325] ? lockdep_hardirqs_on+0x94/0x140 [ 584.853321][ T9325] ? __x64_sys_keyctl+0x1c/0xc0 [ 584.858175][ T9325] do_syscall_64+0x4c/0xa0 [ 584.862588][ T9325] ? clear_bhb_loop+0x60/0xb0 [ 584.867257][ T9325] ? clear_bhb_loop+0x60/0xb0 [ 584.871934][ T9325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.877823][ T9325] RIP: 0033:0x7fda9cf9e559 [ 584.882230][ T9325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.901836][ T9325] RSP: 002b:00007fda9ddae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 584.910244][ T9325] RAX: ffffffffffffffda RBX: 00007fda9d225fa0 RCX: 00007fda9cf9e559 [ 584.918204][ T9325] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 584.926165][ T9325] RBP: 00007fda9d0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 584.934125][ T9325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.942088][ T9325] R13: 00007fda9d226038 R14: 00007fda9d225fa0 R15: 00007ffd3e9d4ba8 [ 584.950075][ T9325] [ 584.953189][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.103201][ T9330] FAULT_INJECTION: forcing a failure. [ 585.103201][ T9330] name fail_futex, interval 1, probability 0, space 0, times 1 [ 585.144724][ T9330] CPU: 0 PID: 9330 Comm: syz.0.1389 Not tainted syzkaller #0 [ 585.152157][ T9330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 585.162228][ T9330] Call Trace: [ 585.165510][ T9330] [ 585.168454][ T9330] dump_stack_lvl+0x188/0x24e [ 585.173148][ T9330] ? security_file_alloc+0x30/0x110 [ 585.178363][ T9330] ? alloc_empty_file+0x90/0x180 [ 585.183304][ T9330] ? show_regs_print_info+0x12/0x12 [ 585.188501][ T9330] ? load_image+0x410/0x410 [ 585.193000][ T9330] ? mark_lock+0x94/0x320 [ 585.197329][ T9330] should_fail_ex+0x390/0x4c0 [ 585.202010][ T9330] get_futex_key+0x1b1/0x1000 [ 585.206689][ T9330] ? futex_setup_timer+0xc0/0xc0 [ 585.211629][ T9330] futex_wake+0x123/0x4f0 [ 585.215955][ T9330] ? futex_wake_mark+0x150/0x150 [ 585.220891][ T9330] ? percpu_counter_add_batch+0x135/0x150 [ 585.226624][ T9330] do_futex+0x2e2/0x320 [ 585.230779][ T9330] ? __ia32_sys_get_robust_list+0x100/0x100 [ 585.236667][ T9330] ? __lock_acquire+0x7ea0/0x7ea0 [ 585.241694][ T9330] __se_sys_futex+0x381/0x410 [ 585.246372][ T9330] ? __x64_sys_futex+0xf0/0xf0 [ 585.251134][ T9330] ? __x64_sys_futex+0x1d/0xf0 [ 585.255891][ T9330] do_syscall_64+0x4c/0xa0 [ 585.260302][ T9330] ? clear_bhb_loop+0x60/0xb0 [ 585.264970][ T9330] ? clear_bhb_loop+0x60/0xb0 [ 585.269638][ T9330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.275521][ T9330] RIP: 0033:0x7f4e04f9e559 [ 585.279927][ T9330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.299537][ T9330] RSP: 002b:00007f4e05df10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 585.307944][ T9330] RAX: ffffffffffffffda RBX: 00007f4e05225fa8 RCX: 00007f4e04f9e559 [ 585.315904][ T9330] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4e05225fac [ 585.323866][ T9330] RBP: 00007f4e05225fa0 R08: 00032fab93c0cc55 R09: 0000000000000000 [ 585.331825][ T9330] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 585.339788][ T9330] R13: 00007f4e05226038 R14: 00007ffeb740a220 R15: 00007ffeb740a308 [ 585.347770][ T9330] [ 585.350883][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.802071][ T9339] loop0: detected capacity change from 0 to 4096 [ 585.805929][ T5905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 585.820603][ T9339] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 585.872001][ T9339] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 586.099001][ T9343] FAULT_INJECTION: forcing a failure. [ 586.099001][ T9343] name failslab, interval 1, probability 5, space 0, times 10000 [ 586.146713][ T9343] CPU: 1 PID: 9343 Comm: syz.0.1393 Not tainted syzkaller #0 [ 586.154150][ T9343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 586.164228][ T9343] Call Trace: [ 586.167520][ T9343] [ 586.170459][ T9343] dump_stack_lvl+0x188/0x24e [ 586.175163][ T9343] ? show_regs_print_info+0x12/0x12 [ 586.180390][ T9343] ? load_image+0x410/0x410 [ 586.184929][ T9343] ? __might_sleep+0xd0/0xd0 [ 586.189540][ T9343] ? __lock_acquire+0x7ea0/0x7ea0 [ 586.194601][ T9343] ? kernel_text_address+0x9c/0xd0 [ 586.199787][ T9343] should_fail_ex+0x390/0x4c0 [ 586.204493][ T9343] should_failslab+0x5/0x20 [ 586.209011][ T9343] slab_pre_alloc_hook+0x59/0x300 [ 586.214056][ T9343] ? __get_vm_area_node+0x122/0x330 [ 586.219279][ T9343] __kmem_cache_alloc_node+0x4f/0x270 [ 586.224668][ T9343] ? stack_trace_save+0xa6/0xf0 [ 586.229540][ T9343] ? __get_vm_area_node+0x122/0x330 [ 586.234762][ T9343] kmalloc_node_trace+0x22/0xe0 [ 586.239630][ T9343] __get_vm_area_node+0x122/0x330 [ 586.244676][ T9343] ? kasan_set_track+0x60/0x70 [ 586.249470][ T9343] ? __kasan_kmalloc+0x8e/0xa0 [ 586.254270][ T9343] __vmalloc_node_range+0x357/0x1380 [ 586.259569][ T9343] ? vidtv_mux_init+0x200/0x1950 [ 586.264535][ T9343] ? free_vm_area+0x50/0x50 [ 586.269043][ T9343] ? vidtv_mux_init+0x200/0x1950 [ 586.273976][ T9343] vzalloc+0x75/0x80 [ 586.277872][ T9343] ? vidtv_mux_init+0x200/0x1950 [ 586.282806][ T9343] vidtv_mux_init+0x200/0x1950 [ 586.287568][ T9343] ? trace_contention_end+0x5f/0x170 [ 586.292854][ T9343] vidtv_start_feed+0x368/0x590 [ 586.297704][ T9343] ? vidtv_i2c_func+0x10/0x10 [ 586.302378][ T9343] ? vidtv_stop_feed+0x250/0x250 [ 586.307314][ T9343] ? _raw_spin_unlock_irq+0x1f/0x40 [ 586.312503][ T9343] ? lockdep_hardirqs_on+0x94/0x140 [ 586.317718][ T9343] dmx_ts_feed_start_filtering+0x11c/0x210 [ 586.323524][ T9343] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 586.329413][ T9343] dvb_dmxdev_filter_start+0x422/0x1060 [ 586.334962][ T9343] dvb_demux_do_ioctl+0x48d/0x530 [ 586.339984][ T9343] dvb_usercopy+0x191/0x2b0 [ 586.344479][ T9343] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 586.350019][ T9343] ? dvb_generic_ioctl+0xb0/0xb0 [ 586.354967][ T9343] ? dvb_demux_poll+0x210/0x210 [ 586.359813][ T9343] dvb_demux_ioctl+0x25/0x30 [ 586.364428][ T9343] __se_sys_ioctl+0xfa/0x170 [ 586.369019][ T9343] do_syscall_64+0x4c/0xa0 [ 586.373429][ T9343] ? clear_bhb_loop+0x60/0xb0 [ 586.378098][ T9343] ? clear_bhb_loop+0x60/0xb0 [ 586.382770][ T9343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 586.388654][ T9343] RIP: 0033:0x7f4e04f9e559 [ 586.393062][ T9343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.412658][ T9343] RSP: 002b:00007f4e05df1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.421089][ T9343] RAX: ffffffffffffffda RBX: 00007f4e05225fa0 RCX: 00007f4e04f9e559 [ 586.429055][ T9343] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 586.437016][ T9343] RBP: 00007f4e050358b0 R08: 0000000000000000 R09: 0000000000000000 [ 586.444997][ T9343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.452958][ T9343] R13: 00007f4e05226038 R14: 00007f4e05225fa0 R15: 00007ffeb740a308 [ 586.460939][ T9343] [ 586.584090][ T9341] loop4: detected capacity change from 0 to 32768 [ 586.585279][ T9343] syz.0.1393: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 586.632040][ T9343] CPU: 1 PID: 9343 Comm: syz.0.1393 Not tainted syzkaller #0 [ 586.633081][ T9341] JBD2: Ignoring recovery information on journal [ 586.639480][ T9343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 586.639494][ T9343] Call Trace: [ 586.639502][ T9343] [ 586.639510][ T9343] dump_stack_lvl+0x188/0x24e [ 586.639537][ T9343] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 586.639560][ T9343] ? show_regs_print_info+0x12/0x12 [ 586.639580][ T9343] ? load_image+0x410/0x410 [ 586.639601][ T9343] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 586.639621][ T9343] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 586.695879][ T9343] warn_alloc+0x242/0x330 [ 586.700247][ T9343] ? __get_vm_area_node+0x122/0x330 [ 586.705480][ T9343] ? zone_watermark_ok_safe+0x270/0x270 [ 586.711060][ T9343] ? rcu_is_watching+0x11/0xa0 [ 586.715866][ T9343] ? __get_vm_area_node+0x318/0x330 [ 586.721099][ T9343] ? kasan_set_track+0x60/0x70 [ 586.725895][ T9343] ? __kasan_kmalloc+0x8e/0xa0 [ 586.730694][ T9343] __vmalloc_node_range+0x37c/0x1380 [ 586.736038][ T9343] ? free_vm_area+0x50/0x50 [ 586.740581][ T9343] ? vidtv_mux_init+0x200/0x1950 [ 586.745550][ T9343] vzalloc+0x75/0x80 [ 586.749472][ T9343] ? vidtv_mux_init+0x200/0x1950 [ 586.754433][ T9343] vidtv_mux_init+0x200/0x1950 [ 586.759226][ T9343] ? trace_contention_end+0x5f/0x170 [ 586.764542][ T9343] vidtv_start_feed+0x368/0x590 [ 586.769428][ T9343] ? vidtv_i2c_func+0x10/0x10 [ 586.774140][ T9343] ? vidtv_stop_feed+0x250/0x250 [ 586.779118][ T9343] ? _raw_spin_unlock_irq+0x1f/0x40 [ 586.784340][ T9343] ? lockdep_hardirqs_on+0x94/0x140 [ 586.789578][ T9343] dmx_ts_feed_start_filtering+0x11c/0x210 [ 586.795409][ T9343] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 586.801326][ T9343] dvb_dmxdev_filter_start+0x422/0x1060 [ 586.806909][ T9343] dvb_demux_do_ioctl+0x48d/0x530 [ 586.809901][ T9341] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 586.811937][ T9343] dvb_usercopy+0x191/0x2b0 [ 586.811962][ T9343] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 586.830957][ T9343] ? dvb_generic_ioctl+0xb0/0xb0 [ 586.835942][ T9343] ? dvb_demux_poll+0x210/0x210 [ 586.840816][ T9343] dvb_demux_ioctl+0x25/0x30 [ 586.845431][ T9343] __se_sys_ioctl+0xfa/0x170 [ 586.850050][ T9343] do_syscall_64+0x4c/0xa0 [ 586.854489][ T9343] ? clear_bhb_loop+0x60/0xb0 [ 586.859185][ T9343] ? clear_bhb_loop+0x60/0xb0 [ 586.863888][ T9343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 586.869810][ T9343] RIP: 0033:0x7f4e04f9e559 [ 586.874242][ T9343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.893872][ T9343] RSP: 002b:00007f4e05df1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.902311][ T9343] RAX: ffffffffffffffda RBX: 00007f4e05225fa0 RCX: 00007f4e04f9e559 [ 586.910304][ T9343] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 586.918293][ T9343] RBP: 00007f4e050358b0 R08: 0000000000000000 R09: 0000000000000000 [ 586.926278][ T9343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.934246][ T9343] R13: 00007f4e05226038 R14: 00007f4e05225fa0 R15: 00007ffeb740a308 [ 586.942228][ T9343] [ 586.964241][ T9343] Mem-Info: [ 586.975971][ T9343] active_anon:10922 inactive_anon:63 isolated_anon:0 [ 586.975971][ T9343] active_file:10515 inactive_file:3791 isolated_file:0 [ 586.975971][ T9343] unevictable:768 dirty:262 writeback:0 [ 586.975971][ T9343] slab_reclaimable:21763 slab_unreclaimable:99905 [ 586.975971][ T9343] mapped:34081 shmem:5464 pagetables:989 [ 586.975971][ T9343] sec_pagetables:0 bounce:0 [ 586.975971][ T9343] kernel_misc_reclaimable:0 [ 586.975971][ T9343] free:1351141 free_pcp:8360 free_cma:0 [ 586.990707][ T4286] ocfs2: Unmounting device (7,4) on (node local) [ 587.030629][ T9343] Node 0 active_anon:43688kB inactive_anon:252kB active_file:42060kB inactive_file:15028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136324kB dirty:1048kB writeback:0kB shmem:20320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11944kB pagetables:3956kB sec_pagetables:0kB all_unreclaimable? no [ 587.089659][ T9343] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 587.186556][ T9343] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 587.259657][ T9343] lowmem_reserve[]: 0 2511 2513 2513 2513 [ 587.265485][ T9343] Node 0 DMA32 free:1495124kB boost:0kB min:34556kB low:43192kB high:51828kB reserved_highatomic:0KB active_anon:36788kB inactive_anon:252kB active_file:42060kB inactive_file:14628kB unevictable:1536kB writepending:1048kB present:3129332kB managed:2576776kB mlocked:0kB bounce:0kB free_pcp:24012kB local_pcp:19096kB free_cma:0kB [ 587.336532][ T9343] lowmem_reserve[]: 0 0 1 1 1 [ 587.341328][ T9343] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1680kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 587.368317][ T9343] lowmem_reserve[]: 0 0 0 0 0 [ 587.373640][ T9343] Node 1 Normal free:3897560kB boost:0kB min:55324kB low:69152kB high:82980kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:14816kB local_pcp:7904kB free_cma:0kB [ 587.414219][ T9343] lowmem_reserve[]: 0 0 0 0 0 [ 587.445559][ T9343] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 587.587397][ T9343] Node 0 DMA32: 1069*4kB (UME) 1335*8kB (UME) 1215*16kB (UME) 634*32kB (UME) 511*64kB (UME) 462*128kB (UME) 226*256kB (UME) 116*512kB (UME) 64*1024kB (UM) 43*2048kB (UM) 264*4096kB (UM) = 1498716kB [ 587.800753][ T9343] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 587.927715][ T9343] Node 1 Normal: 266*4kB (UME) 54*8kB (UE) 26*16kB (UME) 83*32kB (UME) 40*64kB (UME) 20*128kB (UME) 11*256kB (UME) 2*512kB (ME) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3897560kB [ 587.956039][ T9343] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 587.969095][ T9343] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 587.982202][ T9343] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 587.997198][ T9343] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 588.034483][ T9343] 18431 total pagecache pages [ 588.054280][ T9343] 2 pages in swap cache [ 588.073009][ T9343] Free swap = 124464kB [ 588.082906][ T9343] Total swap = 124996kB [ 588.097091][ T9343] 2097051 pages RAM [ 588.106602][ T9343] 0 pages HighMem/MovableOnly [ 588.111719][ T9343] 419192 pages reserved [ 588.115894][ T9343] 0 pages cma reserved [ 589.239107][ T4435] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 591.552062][ T5905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 592.046666][ T4285] Bluetooth: hci1: hcon ffff888078cb0000 sent 1 < count 15 [ 592.055752][ T4285] Bluetooth: hci1: hcon ffff8880254d0000 sent 1 < count 6 [ 592.063093][ T4285] Bluetooth: hci1: hcon ffff8880254d0000 sent 0 < count 4 [ 592.501864][ T9328] delete_channel: no stack [ 592.594866][ T4285] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 592.605079][ T4285] CPU: 0 PID: 4285 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 592.612651][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 592.622725][ T4285] Workqueue: hci2 hci_rx_work [ 592.627435][ T4285] Call Trace: [ 592.630727][ T4285] [ 592.633679][ T4285] dump_stack_lvl+0x188/0x24e [ 592.638391][ T4285] ? show_regs_print_info+0x12/0x12 [ 592.643609][ T4285] ? load_image+0x410/0x410 [ 592.648145][ T4285] sysfs_create_dir_ns+0x26a/0x290 [ 592.650495][ T9400] FAULT_INJECTION: forcing a failure. [ 592.650495][ T9400] name failslab, interval 1, probability 5, space 0, times 10000 [ 592.653269][ T4285] ? __lock_acquire+0x7ea0/0x7ea0 [ 592.671245][ T4285] ? sysfs_warn_dup+0xa0/0xa0 [ 592.675933][ T4285] ? do_raw_spin_unlock+0x11d/0x230 [ 592.681135][ T4285] kobject_add_internal+0x617/0xca0 [ 592.686340][ T4285] kobject_add+0x160/0x230 [ 592.690762][ T4285] ? kobject_init+0x1c0/0x1c0 [ 592.695436][ T4285] ? __raw_spin_lock_init+0x41/0x100 [ 592.700712][ T4285] ? klist_children_get+0x50/0x50 [ 592.705730][ T4285] ? get_device_parent+0x121/0x3e0 [ 592.710843][ T4285] device_add+0x470/0x1050 [ 592.715263][ T4285] hci_conn_add_sysfs+0xd1/0x1e0 [ 592.720199][ T4285] le_conn_complete_evt+0xf93/0x15c0 [ 592.725509][ T4285] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 592.731761][ T4285] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 592.737404][ T4285] ? mutex_unlock+0x10/0x10 [ 592.741907][ T4285] ? skb_pull_data+0xec/0x1f0 [ 592.746585][ T4285] hci_le_enh_conn_complete_evt+0x185/0x460 [ 592.752484][ T4285] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 592.758896][ T4285] ? hci_remote_host_features_evt+0x230/0x230 [ 592.764961][ T4285] hci_event_packet+0x7b3/0x1290 [ 592.769901][ T4285] ? lock_chain_count+0x20/0x20 [ 592.774767][ T4285] ? bis_list+0x280/0x280 [ 592.779091][ T4285] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 592.784981][ T4285] ? kcov_remote_start+0x50f/0x810 [ 592.790088][ T4285] ? lockdep_hardirqs_on+0x94/0x140 [ 592.795285][ T4285] ? hci_send_to_monitor+0x9c/0x4a0 [ 592.800486][ T4285] hci_rx_work+0x3eb/0xd40 [ 592.804894][ T4285] ? _raw_spin_unlock+0x40/0x40 [ 592.809745][ T4285] ? process_one_work+0x7b4/0x1160 [ 592.814855][ T4285] process_one_work+0x8ab/0x1160 [ 592.819824][ T4285] ? worker_detach_from_pool+0x240/0x240 [ 592.825453][ T4285] ? _raw_spin_lock_irq+0xb7/0xf0 [ 592.830490][ T4285] ? _raw_spin_lock_irqsave+0x100/0x100 [ 592.836036][ T4285] ? wq_worker_running+0x97/0x190 [ 592.841057][ T4285] worker_thread+0xaf5/0x12a0 [ 592.845754][ T4285] kthread+0x29d/0x330 [ 592.849813][ T4285] ? worker_clr_flags+0x1a0/0x1a0 [ 592.854832][ T4285] ? kthread_blkcg+0xd0/0xd0 [ 592.859416][ T4285] ret_from_fork+0x1f/0x30 [ 592.863840][ T4285] [ 592.876395][ T4285] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 592.889780][ T4285] Bluetooth: hci2: failed to register connection device [ 592.907592][ T9400] CPU: 0 PID: 9400 Comm: syz.3.1410 Not tainted syzkaller #0 [ 592.915008][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 592.925086][ T9400] Call Trace: [ 592.928383][ T9400] [ 592.931325][ T9400] dump_stack_lvl+0x188/0x24e [ 592.936026][ T9400] ? show_regs_print_info+0x12/0x12 [ 592.941246][ T9400] ? load_image+0x410/0x410 [ 592.945771][ T9400] ? __might_sleep+0xd0/0xd0 [ 592.950380][ T9400] ? __lock_acquire+0x7ea0/0x7ea0 [ 592.955434][ T9400] should_fail_ex+0x390/0x4c0 [ 592.960146][ T9400] should_failslab+0x5/0x20 [ 592.964662][ T9400] slab_pre_alloc_hook+0x59/0x300 [ 592.969705][ T9400] ? tomoyo_encode+0x28a/0x550 [ 592.974497][ T9400] __kmem_cache_alloc_node+0x4f/0x270 [ 592.979901][ T9400] ? tomoyo_encode+0x28a/0x550 [ 592.984687][ T9400] __kmalloc+0xa3/0x240 [ 592.988861][ T9400] tomoyo_encode+0x28a/0x550 [ 592.993486][ T9400] tomoyo_realpath_from_path+0x578/0x5c0 [ 592.999158][ T9400] tomoyo_check_open_permission+0x212/0x440 [ 593.005059][ T9400] ? tomoyo_check_open_permission+0x1bf/0x440 [ 593.011128][ T9400] ? tomoyo_check_path_number_acl+0x280/0x280 [ 593.017193][ T9400] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 593.023168][ T9400] ? __lock_acquire+0x7ea0/0x7ea0 [ 593.028210][ T9400] ? __lock_acquire+0x7ea0/0x7ea0 [ 593.033261][ T9400] ? __rwlock_init+0x140/0x140 [ 593.038034][ T9400] ? tomoyo_file_open+0xe9/0x170 [ 593.042991][ T9400] security_file_open+0x5e/0xa0 [ 593.047848][ T9400] do_dentry_open+0x2fd/0x10b0 [ 593.052624][ T9400] ? memcpy+0x3c/0x60 [ 593.056606][ T9400] path_openat+0x2674/0x2f10 [ 593.061204][ T9400] ? kasan_set_track+0x60/0x70 [ 593.065971][ T9400] ? verify_lock_unused+0x140/0x140 [ 593.071172][ T9400] ? do_sys_openat2+0xdd/0x4f0 [ 593.075939][ T9400] ? do_filp_open+0x420/0x420 [ 593.080625][ T9400] do_filp_open+0x1ee/0x420 [ 593.085126][ T9400] ? vfs_tmpfile+0x470/0x470 [ 593.089725][ T9400] ? _raw_spin_unlock+0x24/0x40 [ 593.094568][ T9400] ? alloc_fd+0x590/0x640 [ 593.098901][ T9400] do_sys_openat2+0x14b/0x4f0 [ 593.103576][ T9400] ? do_sys_open+0xe0/0xe0 [ 593.107994][ T9400] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 593.113973][ T9400] ? lock_chain_count+0x20/0x20 [ 593.118827][ T9400] __x64_sys_openat+0x135/0x160 [ 593.123680][ T9400] do_syscall_64+0x4c/0xa0 [ 593.128093][ T9400] ? clear_bhb_loop+0x60/0xb0 [ 593.132763][ T9400] ? clear_bhb_loop+0x60/0xb0 [ 593.137434][ T9400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 593.143319][ T9400] RIP: 0033:0x7f2d7035ed8e [ 593.147726][ T9400] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 593.167326][ T9400] RSP: 002b:00007f2d712e2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 593.175734][ T9400] RAX: ffffffffffffffda RBX: 00007f2d712e36c0 RCX: 00007f2d7035ed8e [ 593.183695][ T9400] RDX: 0000000000000002 RSI: 00007f2d712e2c00 RDI: ffffffffffffff9c [ 593.191656][ T9400] RBP: 00007f2d712e2c00 R08: 0000000000000000 R09: 0000000000000000 [ 593.199617][ T9400] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 593.207579][ T9400] R13: 00007f2d70626038 R14: 00007f2d70625fa0 R15: 00007ffed360dfb8 [ 593.215556][ T9400] [ 593.229769][ T9400] ERROR: Out of memory at tomoyo_realpath_from_path. [ 594.070368][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1417'. [ 594.895969][ T5905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 595.227723][ T9432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1420'. [ 595.261439][ T9432] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1420'. [ 595.383476][ T9433] delete_channel: no stack [ 595.414243][ T9439] loop1: detected capacity change from 0 to 16 [ 595.462551][ T9439] erofs: (device loop1): mounted with root inode @ nid 36. [ 595.583693][ T9441] fuse: Bad value for 'fd' [ 596.586883][ T9451] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 596.597638][ T9451] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 596.607850][ T9451] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 596.617634][ T9451] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 596.628552][ T9451] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 596.734513][ T9450] FAULT_INJECTION: forcing a failure. [ 596.734513][ T9450] name failslab, interval 1, probability 5, space 0, times 10000 [ 596.755111][ T9450] CPU: 1 PID: 9450 Comm: syz.4.1427 Not tainted syzkaller #0 [ 596.762539][ T9450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 596.772607][ T9450] Call Trace: [ 596.775895][ T9450] [ 596.778843][ T9450] dump_stack_lvl+0x188/0x24e [ 596.783543][ T9450] ? show_regs_print_info+0x12/0x12 [ 596.788756][ T9450] ? load_image+0x410/0x410 [ 596.793274][ T9450] ? __might_sleep+0xd0/0xd0 [ 596.797875][ T9450] ? __lock_acquire+0x7ea0/0x7ea0 [ 596.802913][ T9450] ? trace_raw_output_contention_end+0xd0/0xd0 [ 596.809088][ T9450] should_fail_ex+0x390/0x4c0 [ 596.813787][ T9450] should_failslab+0x5/0x20 [ 596.818301][ T9450] slab_pre_alloc_hook+0x59/0x300 [ 596.823336][ T9450] ? vidtv_mux_init+0x59/0x1950 [ 596.828206][ T9450] __kmem_cache_alloc_node+0x4f/0x270 [ 596.833592][ T9450] ? vidtv_mux_init+0x59/0x1950 [ 596.838455][ T9450] kmalloc_trace+0x26/0xe0 [ 596.842879][ T9450] vidtv_mux_init+0x59/0x1950 [ 596.847582][ T9450] ? rcu_is_watching+0x11/0xa0 [ 596.852362][ T9450] ? trace_contention_end+0x5f/0x170 [ 596.857666][ T9450] vidtv_start_feed+0x368/0x590 [ 596.862534][ T9450] ? vidtv_i2c_func+0x10/0x10 [ 596.867221][ T9450] ? vidtv_stop_feed+0x250/0x250 [ 596.872177][ T9450] ? _raw_spin_unlock_irq+0x1f/0x40 [ 596.877390][ T9450] ? lockdep_hardirqs_on+0x94/0x140 [ 596.882619][ T9450] dmx_ts_feed_start_filtering+0x11c/0x210 [ 596.888444][ T9450] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 596.894355][ T9450] dvb_dmxdev_filter_start+0x422/0x1060 [ 596.899928][ T9450] dvb_demux_do_ioctl+0x48d/0x530 [ 596.904966][ T9450] dvb_usercopy+0x191/0x2b0 [ 596.909485][ T9450] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 596.915047][ T9450] ? dvb_generic_ioctl+0xb0/0xb0 [ 596.920026][ T9450] ? dvb_demux_poll+0x210/0x210 [ 596.924892][ T9450] dvb_demux_ioctl+0x25/0x30 [ 596.929493][ T9450] __se_sys_ioctl+0xfa/0x170 [ 596.934104][ T9450] do_syscall_64+0x4c/0xa0 [ 596.938535][ T9450] ? clear_bhb_loop+0x60/0xb0 [ 596.943225][ T9450] ? clear_bhb_loop+0x60/0xb0 [ 596.947915][ T9450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 596.953818][ T9450] RIP: 0033:0x7fda9cf9e559 [ 596.958242][ T9450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.977874][ T9450] RSP: 002b:00007fda9ddae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.986315][ T9450] RAX: ffffffffffffffda RBX: 00007fda9d225fa0 RCX: 00007fda9cf9e559 [ 596.994311][ T9450] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000004 [ 597.002310][ T9450] RBP: 00007fda9d0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 597.010302][ T9450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.018290][ T9450] R13: 00007fda9d226038 R14: 00007fda9d225fa0 R15: 00007ffd3e9d4ba8 [ 597.026305][ T9450] [ 597.029419][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.097417][ T9450] FAULT_INJECTION: forcing a failure. [ 597.097417][ T9450] name failslab, interval 1, probability 5, space 0, times 9999 [ 597.186430][ T9450] CPU: 0 PID: 9450 Comm: syz.4.1427 Not tainted syzkaller #0 [ 597.193871][ T9450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 597.203946][ T9450] Call Trace: [ 597.207237][ T9450] [ 597.210185][ T9450] dump_stack_lvl+0x188/0x24e [ 597.214897][ T9450] ? show_regs_print_info+0x12/0x12 [ 597.220118][ T9450] ? load_image+0x410/0x410 [ 597.224648][ T9450] ? __might_sleep+0xd0/0xd0 [ 597.229256][ T9450] ? __lock_acquire+0x7ea0/0x7ea0 [ 597.234306][ T9450] should_fail_ex+0x390/0x4c0 [ 597.239026][ T9450] should_failslab+0x5/0x20 [ 597.241589][ T9459] syz.3.1429: attempt to access beyond end of device [ 597.241589][ T9459] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 597.243532][ T9450] slab_pre_alloc_hook+0x59/0x300 [ 597.261593][ T9450] ? vidtv_psi_sdt_service_init+0x59/0x270 [ 597.267428][ T9450] __kmem_cache_alloc_node+0x4f/0x270 [ 597.272820][ T9450] ? vidtv_psi_sdt_service_init+0x59/0x270 [ 597.278649][ T9450] kmalloc_trace+0x26/0xe0 [ 597.283079][ T9450] vidtv_psi_sdt_service_init+0x59/0x270 [ 597.286464][ T9459] hfsplus: unable to find HFS+ superblock [ 597.288713][ T9450] ? vidtv_channel_si_init+0x4dd/0x15c0 [ 597.299982][ T9450] vidtv_channel_si_init+0x4f1/0x15c0 [ 597.305401][ T9450] vidtv_mux_init+0x4ff/0x1950 [ 597.310194][ T9450] vidtv_start_feed+0x368/0x590 [ 597.315066][ T9450] ? vidtv_i2c_func+0x10/0x10 [ 597.319753][ T9450] ? vidtv_stop_feed+0x250/0x250 [ 597.324711][ T9450] ? _raw_spin_unlock_irq+0x1f/0x40 [ 597.329926][ T9450] ? lockdep_hardirqs_on+0x94/0x140 [ 597.335152][ T9450] dmx_ts_feed_start_filtering+0x11c/0x210 [ 597.340973][ T9450] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 597.346882][ T9450] dvb_dmxdev_filter_start+0x422/0x1060 [ 597.347095][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 597.352437][ T9450] dvb_demux_do_ioctl+0x48d/0x530 [ 597.352464][ T9450] dvb_usercopy+0x191/0x2b0 [ 597.372458][ T9450] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 597.378020][ T9450] ? dvb_generic_ioctl+0xb0/0xb0 [ 597.382990][ T9450] ? dvb_demux_poll+0x210/0x210 [ 597.387855][ T9450] dvb_demux_ioctl+0x25/0x30 [ 597.392463][ T9450] __se_sys_ioctl+0xfa/0x170 [ 597.397080][ T9450] do_syscall_64+0x4c/0xa0 [ 597.401521][ T9450] ? clear_bhb_loop+0x60/0xb0 [ 597.406219][ T9450] ? clear_bhb_loop+0x60/0xb0 [ 597.410918][ T9450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.416823][ T9450] RIP: 0033:0x7fda9cf9e559 [ 597.421246][ T9450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.440868][ T9450] RSP: 002b:00007fda9ddae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.449302][ T9450] RAX: ffffffffffffffda RBX: 00007fda9d225fa0 RCX: 00007fda9cf9e559 [ 597.457296][ T9450] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000004 [ 597.465283][ T9450] RBP: 00007fda9d0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 597.473270][ T9450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.476710][ T9461] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1430'. [ 597.481233][ T9450] R13: 00007fda9d226038 R14: 00007fda9d225fa0 R15: 00007ffd3e9d4ba8 [ 597.498161][ T9450] [ 599.194234][ T9489] loop4: detected capacity change from 0 to 512 [ 599.346142][ T9489] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.1438: couldn't read orphan inode 26 (err -116) [ 599.406029][ T9489] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 600.080830][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 600.202027][ T9512] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1443'. [ 600.506945][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 602.006008][ T9540] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.1452' sets config #0 [ 602.028821][ T9540] rxe_eth0 speed is unknown, defaulting to 1000 [ 602.176805][ T9540] rxe_eth0 speed is unknown, defaulting to 1000 [ 602.901214][ T9545] loop4: detected capacity change from 0 to 512 [ 603.066800][ T4429] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 603.238533][ T9545] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.1455: couldn't read orphan inode 26 (err -116) [ 603.325059][ T9545] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 603.773797][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 603.945508][ T9556] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 603.954498][ T9556] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 604.154187][ T9560] loop4: detected capacity change from 0 to 256 [ 604.181400][ T9560] exfat: Deprecated parameter 'utf8' [ 604.244128][ T9560] exfat: Deprecated parameter 'utf8' [ 604.315227][ T9560] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 605.851589][ T5919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 606.039050][ T4285] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 606.049972][ T4285] CPU: 1 PID: 4285 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 606.057518][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 606.067559][ T4285] Workqueue: hci0 hci_rx_work [ 606.072225][ T4285] Call Trace: [ 606.075484][ T4285] [ 606.078399][ T4285] dump_stack_lvl+0x188/0x24e [ 606.083066][ T4285] ? show_regs_print_info+0x12/0x12 [ 606.088247][ T4285] ? load_image+0x410/0x410 [ 606.092746][ T4285] sysfs_create_dir_ns+0x26a/0x290 [ 606.097848][ T4285] ? __lock_acquire+0x7ea0/0x7ea0 [ 606.102860][ T4285] ? sysfs_warn_dup+0xa0/0xa0 [ 606.107532][ T4285] ? do_raw_spin_unlock+0x11d/0x230 [ 606.112725][ T4285] kobject_add_internal+0x617/0xca0 [ 606.117930][ T4285] kobject_add+0x160/0x230 [ 606.122335][ T4285] ? kobject_init+0x1c0/0x1c0 [ 606.127020][ T4285] ? __raw_spin_lock_init+0x41/0x100 [ 606.132288][ T4285] ? klist_children_get+0x50/0x50 [ 606.137300][ T4285] ? get_device_parent+0x121/0x3e0 [ 606.142397][ T4285] device_add+0x470/0x1050 [ 606.146805][ T4285] hci_conn_add_sysfs+0xd1/0x1e0 [ 606.151736][ T4285] le_conn_complete_evt+0xf93/0x15c0 [ 606.157014][ T4285] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 606.163254][ T4285] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 606.168875][ T4285] ? mutex_unlock+0x10/0x10 [ 606.173361][ T4285] ? skb_pull_data+0xec/0x1f0 [ 606.178025][ T4285] hci_le_enh_conn_complete_evt+0x185/0x460 [ 606.183901][ T4285] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 606.190298][ T4285] ? hci_remote_host_features_evt+0x230/0x230 [ 606.196359][ T4285] hci_event_packet+0x7b3/0x1290 [ 606.201308][ T4285] ? lock_chain_count+0x20/0x20 [ 606.206146][ T4285] ? bis_list+0x280/0x280 [ 606.210470][ T4285] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 606.216362][ T4285] ? kcov_remote_start+0x50f/0x810 [ 606.221467][ T4285] ? lockdep_hardirqs_on+0x94/0x140 [ 606.226662][ T4285] ? hci_send_to_monitor+0x9c/0x4a0 [ 606.231853][ T4285] hci_rx_work+0x3eb/0xd40 [ 606.236252][ T4285] ? _raw_spin_unlock+0x40/0x40 [ 606.241090][ T4285] ? process_one_work+0x7b4/0x1160 [ 606.246183][ T4285] process_one_work+0x8ab/0x1160 [ 606.251112][ T4285] ? worker_detach_from_pool+0x240/0x240 [ 606.256736][ T4285] ? _raw_spin_lock_irq+0xb7/0xf0 [ 606.261747][ T4285] ? _raw_spin_lock_irqsave+0x100/0x100 [ 606.267275][ T4285] ? wq_worker_running+0x97/0x190 [ 606.272284][ T4285] worker_thread+0xaf5/0x12a0 [ 606.276962][ T4285] kthread+0x29d/0x330 [ 606.281020][ T4285] ? worker_clr_flags+0x1a0/0x1a0 [ 606.286051][ T4285] ? kthread_blkcg+0xd0/0xd0 [ 606.290624][ T4285] ret_from_fork+0x1f/0x30 [ 606.295033][ T4285] [ 606.301424][ T4285] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 606.315147][ T4285] Bluetooth: hci0: failed to register connection device [ 606.939927][ T9587] loop4: detected capacity change from 0 to 512 [ 607.008524][ T9587] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.1469: couldn't read orphan inode 26 (err -116) [ 607.033692][ T9587] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 607.462772][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 607.632654][ T9596] loop4: detected capacity change from 0 to 256 [ 607.655154][ T9596] exfat: Deprecated parameter 'utf8' [ 607.686780][ T9596] exfat: Deprecated parameter 'utf8' [ 607.735350][ T9596] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 608.050731][ T9579] loop3: detected capacity change from 0 to 40427 [ 608.299435][ T9579] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 608.500331][ T9603] loop4: detected capacity change from 0 to 4096 [ 608.924152][ T9579] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 608.936625][ T5917] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 609.033878][ T9579] F2FS-fs (loop3): invalid crc value [ 609.149884][ T9579] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 609.407131][ T9606] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1475'. [ 609.636304][ T9579] F2FS-fs (loop3): Start checkpoint disabled! [ 610.557791][ T9621] device syzkaller0 entered promiscuous mode [ 610.564155][ T9625] loop4: detected capacity change from 0 to 1024 [ 610.757191][ T4436] hfsplus: b-tree write err: -5, ino 25 [ 610.762986][ T4436] hfsplus: b-tree write err: -5, ino 4 [ 610.787976][ T4436] hfsplus: b-tree write err: -5, ino 2 [ 610.986829][ T5917] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.135765][ T4285] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 611.298381][ T9526] Set syz1 is full, maxelem 65536 reached [ 612.725133][ T9653] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1490'. [ 614.587226][ T5891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 614.964378][ T9673] CIFS: Attempting to mount \\127.0.0.1\share [ 615.065940][ T9674] CIFS: VFS: Received Request not response [ 615.072550][ T9674] CIFS: VFS: Bad SMB detected. The Mid=0 [ 615.270021][ T9673] CIFS: VFS: cifs_mount failed w/return code = -5 [ 615.334492][ T9669] loop3: detected capacity change from 0 to 40427 [ 615.362076][ T9669] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 615.369446][ T9669] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 615.402486][ T9669] F2FS-fs (loop3): invalid crc value [ 615.443743][ T9669] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 616.255628][ T9669] F2FS-fs (loop3): Start checkpoint disabled! [ 616.294297][ T9669] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 616.303285][ T9669] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 616.374257][ T5917] kworker/u4:31: attempt to access beyond end of device [ 616.374257][ T5917] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 616.511440][ T5917] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 618.652163][ T9708] loop3: detected capacity change from 0 to 1024 [ 618.771911][ T5917] hfsplus: b-tree write err: -5, ino 25 [ 618.790226][ T5917] hfsplus: b-tree write err: -5, ino 4 [ 618.796287][ T5917] hfsplus: b-tree write err: -5, ino 2 [ 618.900154][ T9712] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1507'. [ 619.718323][ T9716] device syzkaller0 entered promiscuous mode [ 620.937589][ T4715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 620.969509][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.978592][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.012352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.022406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.799325][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.810356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.156830][ T9746] loop1: detected capacity change from 0 to 512 [ 622.386908][ T5891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 622.464379][ T9746] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1518: couldn't read orphan inode 26 (err -116) [ 622.514024][ T9746] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 622.569194][ T9737] loop3: detected capacity change from 0 to 32768 [ 622.663352][ T9737] XFS (loop3): Mounting V5 Filesystem [ 622.720104][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 622.722227][ T9737] XFS (loop3): Ending clean mount [ 622.890559][ T4276] XFS (loop3): Unmounting Filesystem [ 623.028378][ T9766] device syzkaller0 entered promiscuous mode [ 623.358220][ T9775] loop0: detected capacity change from 0 to 8 [ 623.473012][ T9775] SQUASHFS error: lzo decompression failed, data probably corrupt [ 623.486491][ T9775] SQUASHFS error: Failed to read block 0x91: -5 [ 623.493839][ T9775] SQUASHFS error: Unable to read metadata cache entry [8f] [ 623.519231][ T9775] SQUASHFS error: Unable to read inode 0x11f [ 623.729369][ T9785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1529'. [ 624.258643][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.265076][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.828941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.914166][ T9802] FAULT_INJECTION: forcing a failure. [ 624.914166][ T9802] name failslab, interval 1, probability 5, space 0, times 9998 [ 624.982498][ T9802] CPU: 1 PID: 9802 Comm: syz.0.1534 Not tainted syzkaller #0 [ 624.989930][ T9802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 625.000001][ T9802] Call Trace: [ 625.003286][ T9802] [ 625.006230][ T9802] dump_stack_lvl+0x188/0x24e [ 625.010937][ T9802] ? show_regs_print_info+0x12/0x12 [ 625.016149][ T9802] ? load_image+0x410/0x410 [ 625.020668][ T9802] ? __lock_acquire+0x7ea0/0x7ea0 [ 625.025717][ T9802] should_fail_ex+0x390/0x4c0 [ 625.030418][ T9802] should_failslab+0x5/0x20 [ 625.034933][ T9802] slab_pre_alloc_hook+0x59/0x300 [ 625.039974][ T9802] ? key_alloc+0x346/0x1030 [ 625.044490][ T9802] __kmem_cache_alloc_node+0x4f/0x270 [ 625.049881][ T9802] ? key_alloc+0x346/0x1030 [ 625.054396][ T9802] __kmalloc_node_track_caller+0xa0/0x240 [ 625.060133][ T9802] kmemdup+0x27/0x60 [ 625.064049][ T9802] key_alloc+0x346/0x1030 [ 625.068398][ T9802] keyring_alloc+0x41/0xa0 [ 625.072827][ T9802] lookup_user_key+0x4da/0x1110 [ 625.077706][ T9802] ? lookup_user_key_possessed+0x40/0x40 [ 625.083355][ T9802] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 625.089368][ T9802] ? _copy_from_user+0x10b/0x170 [ 625.094323][ T9802] __se_sys_add_key+0x311/0x410 [ 625.099197][ T9802] ? __x64_sys_add_key+0xc0/0xc0 [ 625.104155][ T9802] ? lockdep_hardirqs_on+0x94/0x140 [ 625.109371][ T9802] ? __x64_sys_add_key+0x1c/0xc0 [ 625.114328][ T9802] do_syscall_64+0x4c/0xa0 [ 625.118755][ T9802] ? clear_bhb_loop+0x60/0xb0 [ 625.123416][ T9802] ? clear_bhb_loop+0x60/0xb0 [ 625.128089][ T9802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.133997][ T9802] RIP: 0033:0x7f4e04f9e559 [ 625.138425][ T9802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.158048][ T9802] RSP: 002b:00007f4e05df1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 625.166476][ T9802] RAX: ffffffffffffffda RBX: 00007f4e05225fa0 RCX: 00007f4e04f9e559 [ 625.174455][ T9802] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000080 [ 625.182442][ T9802] RBP: 00007f4e050358b0 R08: fffffffffffffffe R09: 0000000000000000 [ 625.190424][ T9802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.198400][ T9802] R13: 00007f4e05226038 R14: 00007f4e05225fa0 R15: 00007ffeb740a308 [ 625.206398][ T9802] [ 626.746831][ T5909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 626.944679][ T9814] CIFS: Attempting to mount \\127.0.0.1\share [ 627.770727][ T9814] CIFS: VFS: cifs_mount failed w/return code = -112 [ 627.925347][ T9823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1542'. [ 628.028099][ T5919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 629.723348][ T9819] loop3: detected capacity change from 0 to 32768 [ 629.877268][ T9819] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 630.308332][ T9819] overlayfs: upper fs does not support tmpfile. [ 630.380042][ T9819] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 630.525740][ T9819] overlayfs: upper fs missing required features. [ 630.715900][ T4276] ocfs2: Unmounting device (7,3) on (node local) [ 630.790726][ T9841] delete_channel: no stack [ 630.919370][ T9844] loop0: detected capacity change from 0 to 512 [ 631.052195][ T9844] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1549: couldn't read orphan inode 26 (err -116) [ 631.071613][ T9844] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 631.329814][ T9849] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 631.791820][ T9774] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1519'. [ 631.801212][ T9774] device macvlan0 entered promiscuous mode [ 631.807683][ T9774] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 631.816899][ T9774] netlink: 'syz.4.1519': attribute type 2 has an invalid length. [ 631.825860][ T9855] netem: change failed [ 631.969850][ T9865] CIFS: Attempting to mount \\127.0.0.1\share [ 633.150697][ T9865] CIFS: VFS: Error connecting to socket. Aborting operation. [ 633.166676][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.177221][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.184235][ T5913] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.197557][ T9865] CIFS: VFS: cifs_mount failed w/return code = -4 [ 633.860012][ T4436] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 634.964022][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 634.980234][ T9893] FAULT_INJECTION: forcing a failure. [ 634.980234][ T9893] name failslab, interval 1, probability 5, space 0, times 9997 [ 635.037522][ T9893] CPU: 1 PID: 9893 Comm: syz.4.1563 Not tainted syzkaller #0 [ 635.045047][ T9893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 635.055122][ T9893] Call Trace: [ 635.058425][ T9893] [ 635.061371][ T9893] dump_stack_lvl+0x188/0x24e [ 635.066085][ T9893] ? show_regs_print_info+0x12/0x12 [ 635.071313][ T9893] ? load_image+0x410/0x410 [ 635.075832][ T9893] ? __might_sleep+0xd0/0xd0 [ 635.080443][ T9893] ? __lock_acquire+0x7ea0/0x7ea0 [ 635.081441][ T9895] device syzkaller0 entered promiscuous mode [ 635.085517][ T9893] should_fail_ex+0x390/0x4c0 [ 635.096201][ T9893] should_failslab+0x5/0x20 [ 635.100726][ T9893] slab_pre_alloc_hook+0x59/0x300 [ 635.105778][ T9893] kmem_cache_alloc+0x56/0x2f0 [ 635.110556][ T9893] ? security_file_alloc+0x30/0x110 [ 635.115786][ T9893] security_file_alloc+0x30/0x110 [ 635.120839][ T9893] __alloc_file+0xc2/0x230 [ 635.125280][ T9893] alloc_empty_file+0x90/0x180 [ 635.130066][ T9893] path_openat+0x11c/0x2f10 [ 635.134606][ T9893] ? kasan_set_track+0x60/0x70 [ 635.139398][ T9893] ? verify_lock_unused+0x140/0x140 [ 635.140852][ T9901] loop0: detected capacity change from 0 to 128 [ 635.144601][ T9893] ? do_sys_openat2+0xdd/0x4f0 [ 635.144629][ T9893] ? __x64_sys_openat+0x135/0x160 [ 635.144652][ T9893] ? do_syscall_64+0x4c/0xa0 [ 635.165212][ T9893] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.171285][ T9893] ? do_filp_open+0x420/0x420 [ 635.175967][ T9893] do_filp_open+0x1ee/0x420 [ 635.180467][ T9893] ? vfs_tmpfile+0x470/0x470 [ 635.185063][ T9893] ? _raw_spin_unlock+0x24/0x40 [ 635.189904][ T9893] ? alloc_fd+0x590/0x640 [ 635.194238][ T9893] do_sys_openat2+0x14b/0x4f0 [ 635.198917][ T9893] ? do_sys_open+0xe0/0xe0 [ 635.203331][ T9893] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 635.209308][ T9893] ? lock_chain_count+0x20/0x20 [ 635.214156][ T9893] __x64_sys_openat+0x135/0x160 [ 635.219010][ T9893] do_syscall_64+0x4c/0xa0 [ 635.223421][ T9893] ? clear_bhb_loop+0x60/0xb0 [ 635.228088][ T9893] ? clear_bhb_loop+0x60/0xb0 [ 635.232760][ T9893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.238645][ T9893] RIP: 0033:0x7fda9cf5ed8e [ 635.243057][ T9893] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 635.262661][ T9893] RSP: 002b:00007fda9ddadb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 635.271070][ T9893] RAX: ffffffffffffffda RBX: 00007fda9ddae6c0 RCX: 00007fda9cf5ed8e [ 635.279031][ T9893] RDX: 0000000000000002 RSI: 00007fda9ddadc00 RDI: ffffffffffffff9c [ 635.286993][ T9893] RBP: 00007fda9ddadc00 R08: 0000000000000000 R09: 0000000000000000 [ 635.294952][ T9893] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 635.302913][ T9893] R13: 00007fda9d226038 R14: 00007fda9d225fa0 R15: 00007ffd3e9d4ba8 [ 635.310887][ T9893] [ 635.368942][ T9901] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 635.446963][ T9901] FAT-fs (loop0): error, clusters badly computed (3 != 1) [ 635.454552][ T9901] FAT-fs (loop0): Filesystem has been set read-only [ 635.563350][ T4271] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 636.838464][ T9916] loop3: detected capacity change from 0 to 2048 [ 637.134273][ T9916] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 637.390037][ T9919] CIFS: Attempting to mount \\127.0.0.1\share [ 638.517441][ T9919] CIFS: VFS: Error connecting to socket. Aborting operation. [ 638.526903][ T9919] CIFS: VFS: cifs_mount failed w/return code = -4 [ 638.615015][ T9929] Line length is too long: Should be less than 4094 [ 638.914421][ T5891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 638.990979][ T9935] FAULT_INJECTION: forcing a failure. [ 638.990979][ T9935] name failslab, interval 1, probability 5, space 0, times 9996 [ 639.004468][ T9935] CPU: 0 PID: 9935 Comm: syz.3.1576 Not tainted syzkaller #0 [ 639.011885][ T9935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 639.021960][ T9935] Call Trace: [ 639.025256][ T9935] [ 639.028202][ T9935] dump_stack_lvl+0x188/0x24e [ 639.032906][ T9935] ? show_regs_print_info+0x12/0x12 [ 639.038128][ T9935] ? load_image+0x410/0x410 [ 639.042642][ T9935] ? __might_sleep+0xd0/0xd0 [ 639.047231][ T9935] ? __lock_acquire+0x7ea0/0x7ea0 [ 639.052269][ T9935] should_fail_ex+0x390/0x4c0 [ 639.056962][ T9935] should_failslab+0x5/0x20 [ 639.059595][ T9939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1575'. [ 639.061466][ T9935] slab_pre_alloc_hook+0x59/0x300 [ 639.075454][ T9935] kmem_cache_alloc+0x56/0x2f0 [ 639.080238][ T9935] ? getname_flags+0xb7/0x500 [ 639.084933][ T9935] getname_flags+0xb7/0x500 [ 639.089441][ T9935] do_sys_openat2+0xdd/0x4f0 [ 639.094028][ T9935] ? do_sys_open+0xe0/0xe0 [ 639.098458][ T9935] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 639.104435][ T9935] ? lock_chain_count+0x20/0x20 [ 639.109288][ T9935] __x64_sys_openat+0x135/0x160 [ 639.114141][ T9935] do_syscall_64+0x4c/0xa0 [ 639.118556][ T9935] ? clear_bhb_loop+0x60/0xb0 [ 639.123228][ T9935] ? clear_bhb_loop+0x60/0xb0 [ 639.127918][ T9935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 639.133804][ T9935] RIP: 0033:0x7f2d7035ed8e [ 639.138215][ T9935] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 639.157822][ T9935] RSP: 002b:00007f2d712e2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 639.166228][ T9935] RAX: ffffffffffffffda RBX: 00007f2d712e36c0 RCX: 00007f2d7035ed8e [ 639.174191][ T9935] RDX: 0000000000000002 RSI: 00007f2d712e2c00 RDI: ffffffffffffff9c [ 639.182152][ T9935] RBP: 00007f2d712e2c00 R08: 0000000000000000 R09: 0000000000000000 [ 639.190114][ T9935] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 639.198076][ T9935] R13: 00007f2d70626038 R14: 00007f2d70625fa0 R15: 00007ffed360dfb8 [ 639.206050][ T9935] [ 639.236562][ T9937] FAULT_INJECTION: forcing a failure. [ 639.236562][ T9937] name failslab, interval 1, probability 5, space 0, times 9996 [ 639.276253][ T9937] CPU: 0 PID: 9937 Comm: syz.4.1574 Not tainted syzkaller #0 [ 639.283696][ T9937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 639.293777][ T9937] Call Trace: [ 639.297076][ T9937] [ 639.300023][ T9937] dump_stack_lvl+0x188/0x24e [ 639.304734][ T9937] ? show_regs_print_info+0x12/0x12 [ 639.309960][ T9937] ? load_image+0x410/0x410 [ 639.314483][ T9937] ? __might_sleep+0xd0/0xd0 [ 639.319089][ T9937] ? __lock_acquire+0x7ea0/0x7ea0 [ 639.324146][ T9937] should_fail_ex+0x390/0x4c0 [ 639.328858][ T9937] should_failslab+0x5/0x20 [ 639.333380][ T9937] slab_pre_alloc_hook+0x59/0x300 [ 639.338426][ T9937] ? assoc_array_insert+0x441/0x3080 [ 639.343794][ T9937] __kmem_cache_alloc_node+0x4f/0x270 [ 639.349166][ T9937] ? assoc_array_insert+0x441/0x3080 [ 639.354444][ T9937] kmalloc_trace+0x26/0xe0 [ 639.358854][ T9937] assoc_array_insert+0x441/0x3080 [ 639.363963][ T9937] ? __key_link_lock+0x97/0xb0 [ 639.368723][ T9937] ? mutex_lock_nested+0x10/0x10 [ 639.373662][ T9937] ? rwsem_write_trylock+0x135/0x1c0 [ 639.378941][ T9937] ? key_set_index_key+0x302/0x480 [ 639.384056][ T9937] __key_link_begin+0xd2/0x1e0 [ 639.388822][ T9937] key_create_or_update+0x4d8/0xa40 [ 639.394012][ T9937] ? security_key_permission+0x7c/0xa0 [ 639.399470][ T9937] ? key_type_put+0x20/0x20 [ 639.403967][ T9937] ? lookup_user_key_possessed+0x40/0x40 [ 639.409604][ T9937] ? _copy_from_user+0x10b/0x170 [ 639.414540][ T9937] __se_sys_add_key+0x34b/0x410 [ 639.419399][ T9937] ? __x64_sys_add_key+0xc0/0xc0 [ 639.424338][ T9937] ? lockdep_hardirqs_on+0x94/0x140 [ 639.429533][ T9937] ? __x64_sys_add_key+0x1c/0xc0 [ 639.434466][ T9937] do_syscall_64+0x4c/0xa0 [ 639.438877][ T9937] ? clear_bhb_loop+0x60/0xb0 [ 639.443546][ T9937] ? clear_bhb_loop+0x60/0xb0 [ 639.448218][ T9937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 639.454103][ T9937] RIP: 0033:0x7fda9cf9e559 [ 639.458510][ T9937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.478110][ T9937] RSP: 002b:00007fda9ddae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 639.486520][ T9937] RAX: ffffffffffffffda RBX: 00007fda9d225fa0 RCX: 00007fda9cf9e559 [ 639.494481][ T9937] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000080 [ 639.502444][ T9937] RBP: 00007fda9d0358b0 R08: fffffffffffffffe R09: 0000000000000000 [ 639.510405][ T9937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.518365][ T9937] R13: 00007fda9d226038 R14: 00007fda9d225fa0 R15: 00007ffd3e9d4ba8 [ 639.526345][ T9937] [ 639.557143][ T5891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.213762][ T9956] FAULT_INJECTION: forcing a failure. [ 640.213762][ T9956] name failslab, interval 1, probability 5, space 0, times 9994 [ 640.327787][ T9956] CPU: 0 PID: 9956 Comm: syz.0.1582 Not tainted syzkaller #0 [ 640.335221][ T9956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 640.345287][ T9956] Call Trace: [ 640.348571][ T9956] [ 640.351507][ T9956] dump_stack_lvl+0x188/0x24e [ 640.356204][ T9956] ? show_regs_print_info+0x12/0x12 [ 640.361413][ T9956] ? load_image+0x410/0x410 [ 640.365926][ T9956] ? __might_sleep+0xd0/0xd0 [ 640.370530][ T9956] ? __lock_acquire+0x7ea0/0x7ea0 [ 640.375573][ T9956] should_fail_ex+0x390/0x4c0 [ 640.380273][ T9956] should_failslab+0x5/0x20 [ 640.384786][ T9956] slab_pre_alloc_hook+0x59/0x300 [ 640.389820][ T9956] ? preempt_schedule_common+0xa5/0xd0 [ 640.395295][ T9956] ? key_alloc+0x346/0x1030 [ 640.399810][ T9956] __kmem_cache_alloc_node+0x4f/0x270 [ 640.405196][ T9956] ? key_alloc+0x346/0x1030 [ 640.409707][ T9956] __kmalloc_node_track_caller+0xa0/0x240 [ 640.415443][ T9956] kmemdup+0x27/0x60 [ 640.419358][ T9956] key_alloc+0x346/0x1030 [ 640.423720][ T9956] keyring_alloc+0x41/0xa0 [ 640.428172][ T9956] join_session_keyring+0x137/0x440 [ 640.433406][ T9956] lookup_user_key+0x253/0x1110 [ 640.438297][ T9956] ? lookup_user_key_possessed+0x40/0x40 [ 640.443957][ T9956] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 640.449976][ T9956] ? futex_unqueue+0xc7/0xf0 [ 640.454590][ T9956] ? futex_wait+0x4a3/0x5c0 [ 640.459125][ T9956] keyctl_get_persistent+0x24b/0x780 [ 640.464447][ T9956] ? futex_wait_setup+0x270/0x270 [ 640.469488][ T9956] ? proc_key_users_show+0x310/0x310 [ 640.474812][ T9956] __se_sys_keyctl+0x59f/0x870 [ 640.479602][ T9956] ? __x64_sys_keyctl+0xc0/0xc0 [ 640.484467][ T9956] ? do_futex+0x310/0x320 [ 640.488807][ T9956] ? enable_cpuid+0x80/0x80 [ 640.493328][ T9956] ? __ia32_sys_get_robust_list+0x100/0x100 [ 640.499243][ T9956] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 640.505243][ T9956] ? lock_chain_count+0x20/0x20 [ 640.510114][ T9956] ? lockdep_hardirqs_on+0x94/0x140 [ 640.515333][ T9956] ? __x64_sys_keyctl+0x1c/0xc0 [ 640.520206][ T9956] do_syscall_64+0x4c/0xa0 [ 640.524636][ T9956] ? clear_bhb_loop+0x60/0xb0 [ 640.529328][ T9956] ? clear_bhb_loop+0x60/0xb0 [ 640.534021][ T9956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 640.539929][ T9956] RIP: 0033:0x7f4e04f9e559 [ 640.544358][ T9956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.563982][ T9956] RSP: 002b:00007f4e05df1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 640.572418][ T9956] RAX: ffffffffffffffda RBX: 00007f4e05225fa0 RCX: 00007f4e04f9e559 [ 640.580405][ T9956] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 640.588387][ T9956] RBP: 00007f4e050358b0 R08: 0000000000000000 R09: 0000000000000000 [ 640.596363][ T9956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.604345][ T9956] R13: 00007f4e05226038 R14: 00007f4e05225fa0 R15: 00007ffeb740a308 [ 640.612352][ T9956] [ 640.832216][ T9961] FAULT_INJECTION: forcing a failure. [ 640.832216][ T9961] name failslab, interval 1, probability 5, space 0, times 9993 [ 640.852716][ T9961] CPU: 0 PID: 9961 Comm: syz.0.1584 Not tainted syzkaller #0 [ 640.860149][ T9961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 640.870221][ T9961] Call Trace: [ 640.873513][ T9961] [ 640.876453][ T9961] dump_stack_lvl+0x188/0x24e [ 640.881161][ T9961] ? show_regs_print_info+0x12/0x12 [ 640.886383][ T9961] ? load_image+0x410/0x410 [ 640.890909][ T9961] ? __might_sleep+0xd0/0xd0 [ 640.895522][ T9961] ? __lock_acquire+0x7ea0/0x7ea0 [ 640.900575][ T9961] should_fail_ex+0x390/0x4c0 [ 640.905283][ T9961] should_failslab+0x5/0x20 [ 640.909802][ T9961] slab_pre_alloc_hook+0x59/0x300 [ 640.914844][ T9961] ? kvm_create_vm_debugfs+0x5ab/0x980 [ 640.920416][ T9961] __kmem_cache_alloc_node+0x4f/0x270 [ 640.925812][ T9961] ? kvm_create_vm_debugfs+0x5ab/0x980 [ 640.930485][ T9963] CIFS: Attempting to mount \\127.0.0.1\share [ 640.931276][ T9961] kmalloc_trace+0x26/0xe0 [ 640.931303][ T9961] kvm_create_vm_debugfs+0x5ab/0x980 [ 640.947084][ T9961] ? hardware_enable_all+0x120/0x120 [ 640.952400][ T9961] ? __raw_spin_lock_init+0x41/0x100 [ 640.957708][ T9961] kvm_dev_ioctl+0x13ff/0x17f0 [ 640.962501][ T9961] ? hardware_enable_nolock+0x220/0x220 [ 640.968070][ T9961] ? bpf_lsm_file_ioctl+0x5/0x10 [ 640.973035][ T9961] ? security_file_ioctl+0x7c/0xa0 [ 640.978163][ T9961] ? hardware_enable_nolock+0x220/0x220 [ 640.983727][ T9961] __se_sys_ioctl+0xfa/0x170 [ 640.988343][ T9961] do_syscall_64+0x4c/0xa0 [ 640.992781][ T9961] ? clear_bhb_loop+0x60/0xb0 [ 640.997476][ T9961] ? clear_bhb_loop+0x60/0xb0 [ 641.002173][ T9961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.008086][ T9961] RIP: 0033:0x7f4e04f9e559 [ 641.012521][ T9961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.032152][ T9961] RSP: 002b:00007f4e05df1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.040675][ T9961] RAX: ffffffffffffffda RBX: 00007f4e05225fa0 RCX: 00007f4e04f9e559 [ 641.048649][ T9961] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 641.056640][ T9961] RBP: 00007f4e050358b0 R08: 0000000000000000 R09: 0000000000000000 [ 641.064635][ T9961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.072625][ T9961] R13: 00007f4e05226038 R14: 00007f4e05225fa0 R15: 00007ffeb740a308 [ 641.080634][ T9961] [ 641.482311][ T9974] FAULT_INJECTION: forcing a failure. [ 641.482311][ T9974] name failslab, interval 1, probability 5, space 0, times 9992 [ 641.496995][ T9974] CPU: 0 PID: 9974 Comm: syz.0.1589 Not tainted syzkaller #0 [ 641.504413][ T9974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 641.514485][ T9974] Call Trace: [ 641.517786][ T9974] [ 641.520707][ T9974] dump_stack_lvl+0x188/0x24e [ 641.525399][ T9974] ? show_regs_print_info+0x12/0x12 [ 641.530599][ T9974] ? load_image+0x410/0x410 [ 641.535111][ T9974] ? __might_sleep+0xd0/0xd0 [ 641.539699][ T9974] ? __lock_acquire+0x7ea0/0x7ea0 [ 641.544762][ T9974] should_fail_ex+0x390/0x4c0 [ 641.549450][ T9974] should_failslab+0x5/0x20 [ 641.553960][ T9974] slab_pre_alloc_hook+0x59/0x300 [ 641.558980][ T9974] kmem_cache_alloc+0x56/0x2f0 [ 641.563731][ T9974] ? getname_flags+0xb7/0x500 [ 641.568415][ T9974] getname_flags+0xb7/0x500 [ 641.572925][ T9974] do_sys_openat2+0xdd/0x4f0 [ 641.577515][ T9974] ? do_sys_open+0xe0/0xe0 [ 641.581922][ T9974] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 641.587909][ T9974] ? lock_chain_count+0x20/0x20 [ 641.592788][ T9974] __x64_sys_openat+0x135/0x160 [ 641.597653][ T9974] do_syscall_64+0x4c/0xa0 [ 641.602059][ T9974] ? clear_bhb_loop+0x60/0xb0 [ 641.606739][ T9974] ? clear_bhb_loop+0x60/0xb0 [ 641.611430][ T9974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.617331][ T9974] RIP: 0033:0x7f4e04f5ed8e [ 641.621731][ T9974] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 641.641351][ T9974] RSP: 002b:00007f4e05dcfb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 641.649768][ T9974] RAX: ffffffffffffffda RBX: 00007f4e05dd06c0 RCX: 00007f4e04f5ed8e [ 641.657749][ T9974] RDX: 0000000000000002 RSI: 00007f4e05dcfc00 RDI: ffffffffffffff9c [ 641.665720][ T9974] RBP: 00007f4e05dcfc00 R08: 0000000000000000 R09: 0000000000000000 [ 641.673716][ T9974] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 641.681684][ T9974] R13: 00007f4e05226128 R14: 00007f4e05226090 R15: 00007ffeb740a308 [ 641.689669][ T9974] [ 641.724509][ T9963] CIFS: VFS: Error connecting to socket. Aborting operation. [ 641.748239][ T9963] CIFS: VFS: cifs_mount failed w/return code = -4 [ 643.267249][ T9983] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 643.661736][T10007] FAULT_INJECTION: forcing a failure. [ 643.661736][T10007] name failslab, interval 1, probability 5, space 0, times 9991 [ 643.756073][T10007] CPU: 1 PID: 10007 Comm: syz.4.1601 Not tainted syzkaller #0 [ 643.763598][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 643.773674][T10007] Call Trace: [ 643.776966][T10007] [ 643.779908][T10007] dump_stack_lvl+0x188/0x24e [ 643.784612][T10007] ? show_regs_print_info+0x12/0x12 [ 643.789839][T10007] ? load_image+0x410/0x410 [ 643.794374][T10007] ? __might_sleep+0xd0/0xd0 [ 643.798983][T10007] ? __lock_acquire+0x7ea0/0x7ea0 [ 643.804038][T10007] should_fail_ex+0x390/0x4c0 [ 643.808741][T10007] should_failslab+0x5/0x20 [ 643.813272][T10007] slab_pre_alloc_hook+0x59/0x300 [ 643.818314][T10007] ? vidtv_psi_sdt_table_init+0x52/0x2b0 [ 643.823965][T10007] __kmem_cache_alloc_node+0x4f/0x270 [ 643.829357][T10007] ? vidtv_psi_sdt_table_init+0x52/0x2b0 [ 643.835014][T10007] kmalloc_trace+0x26/0xe0 [ 643.839445][T10007] vidtv_psi_sdt_table_init+0x52/0x2b0 [ 643.844926][T10007] vidtv_channel_si_init+0xce/0x15c0 [ 643.850235][T10007] ? vidtv_channel_s302m_init+0x63a/0x830 [ 643.855992][T10007] vidtv_mux_init+0x4ff/0x1950 [ 643.860797][T10007] vidtv_start_feed+0x368/0x590 [ 643.865672][T10007] ? vidtv_i2c_func+0x10/0x10 [ 643.870365][T10007] ? vidtv_stop_feed+0x250/0x250 [ 643.875323][T10007] ? _raw_spin_unlock_irq+0x1f/0x40 [ 643.880532][T10007] ? lockdep_hardirqs_on+0x94/0x140 [ 643.885770][T10007] dmx_ts_feed_start_filtering+0x11c/0x210 [ 643.891592][T10007] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 643.897505][T10007] dvb_dmxdev_filter_start+0x422/0x1060 [ 643.903087][T10007] dvb_demux_do_ioctl+0x48d/0x530 [ 643.908135][T10007] dvb_usercopy+0x191/0x2b0 [ 643.912654][T10007] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 643.918215][T10007] ? dvb_generic_ioctl+0xb0/0xb0 [ 643.923187][T10007] ? dvb_demux_poll+0x210/0x210 [ 643.928057][T10007] dvb_demux_ioctl+0x25/0x30 [ 643.932662][T10007] __se_sys_ioctl+0xfa/0x170 [ 643.937275][T10007] do_syscall_64+0x4c/0xa0 [ 643.941711][T10007] ? clear_bhb_loop+0x60/0xb0 [ 643.946403][T10007] ? clear_bhb_loop+0x60/0xb0 [ 643.951098][T10007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.957008][T10007] RIP: 0033:0x7fda9cf9e559 [ 643.961436][T10007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.981057][T10007] RSP: 002b:00007fda9dd8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 643.989497][T10007] RAX: ffffffffffffffda RBX: 00007fda9d226090 RCX: 00007fda9cf9e559 [ 643.997483][T10007] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 644.005467][T10007] RBP: 00007fda9d0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 644.013458][T10007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.021449][T10007] R13: 00007fda9d226128 R14: 00007fda9d226090 R15: 00007ffd3e9d4ba8 [ 644.029464][T10007] [ 644.631456][ T4285] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 644.667833][ T5913] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.679278][ T9322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 646.853484][T10046] loop4: detected capacity change from 0 to 256 [ 646.919722][T10046] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 647.042986][T10049] FAULT_INJECTION: forcing a failure. [ 647.042986][T10049] name failslab, interval 1, probability 5, space 0, times 10000 [ 647.121942][T10049] CPU: 1 PID: 10049 Comm: syz.3.1616 Not tainted syzkaller #0 [ 647.129479][T10049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 647.139560][T10049] Call Trace: [ 647.142862][T10049] [ 647.145805][T10049] dump_stack_lvl+0x188/0x24e [ 647.150509][T10049] ? show_regs_print_info+0x12/0x12 [ 647.155727][T10049] ? load_image+0x410/0x410 [ 647.160243][T10049] ? __might_sleep+0xd0/0xd0 [ 647.164846][T10049] ? __lock_acquire+0x7ea0/0x7ea0 [ 647.169894][T10049] should_fail_ex+0x390/0x4c0 [ 647.174610][T10049] should_failslab+0x5/0x20 [ 647.179133][T10049] slab_pre_alloc_hook+0x59/0x300 [ 647.184185][T10049] ? tomoyo_encode+0x28a/0x550 [ 647.188977][T10049] __kmem_cache_alloc_node+0x4f/0x270 [ 647.194381][T10049] ? tomoyo_encode+0x28a/0x550 [ 647.199170][T10049] __kmalloc+0xa3/0x240 [ 647.203343][T10049] tomoyo_encode+0x28a/0x550 [ 647.207959][T10049] tomoyo_realpath_from_path+0x578/0x5c0 [ 647.213633][T10049] tomoyo_check_open_permission+0x212/0x440 [ 647.219548][T10049] ? tomoyo_check_open_permission+0x1bf/0x440 [ 647.225637][T10049] ? tomoyo_check_path_number_acl+0x280/0x280 [ 647.231732][T10049] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 647.237741][T10049] ? __lock_acquire+0x7ea0/0x7ea0 [ 647.242810][T10049] ? __lock_acquire+0x7ea0/0x7ea0 [ 647.247853][T10049] ? __rwlock_init+0x140/0x140 [ 647.252632][T10049] ? tomoyo_file_open+0xe9/0x170 [ 647.257596][T10049] security_file_open+0x5e/0xa0 [ 647.262468][T10049] do_dentry_open+0x2fd/0x10b0 [ 647.267263][T10049] ? memcpy+0x3c/0x60 [ 647.271263][T10049] path_openat+0x2674/0x2f10 [ 647.275889][T10049] ? kasan_set_track+0x60/0x70 [ 647.280689][T10049] ? verify_lock_unused+0x140/0x140 [ 647.285913][T10049] ? do_sys_openat2+0xdd/0x4f0 [ 647.290697][T10049] ? do_filp_open+0x420/0x420 [ 647.295409][T10049] do_filp_open+0x1ee/0x420 [ 647.299929][T10049] ? vfs_tmpfile+0x470/0x470 [ 647.304557][T10049] ? _raw_spin_unlock+0x24/0x40 [ 647.309447][T10049] ? alloc_fd+0x590/0x640 [ 647.313802][T10049] do_sys_openat2+0x14b/0x4f0 [ 647.318501][T10049] ? do_sys_open+0xe0/0xe0 [ 647.322932][T10049] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 647.328936][T10049] ? lock_chain_count+0x20/0x20 [ 647.333814][T10049] __x64_sys_openat+0x135/0x160 [ 647.338696][T10049] do_syscall_64+0x4c/0xa0 [ 647.343126][T10049] ? clear_bhb_loop+0x60/0xb0 [ 647.347816][T10049] ? clear_bhb_loop+0x60/0xb0 [ 647.352507][T10049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.358415][T10049] RIP: 0033:0x7f2d7035ed8e [ 647.362840][T10049] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 647.382465][T10049] RSP: 002b:00007f2d712e2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 647.390909][T10049] RAX: ffffffffffffffda RBX: 00007f2d712e36c0 RCX: 00007f2d7035ed8e [ 647.398902][T10049] RDX: 0000000000000002 RSI: 00007f2d712e2c00 RDI: ffffffffffffff9c [ 647.406887][T10049] RBP: 00007f2d712e2c00 R08: 0000000000000000 R09: 0000000000000000 [ 647.414874][T10049] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 647.422893][T10049] R13: 00007f2d70626038 R14: 00007f2d70625fa0 R15: 00007ffed360dfb8 [ 647.430900][T10049] [ 647.444460][T10049] ERROR: Out of memory at tomoyo_realpath_from_path. [ 647.699016][T10057] CIFS: Attempting to mount \\127.0.0.1\share [ 647.757292][T10057] CIFS: VFS: Error connecting to socket. Aborting operation. [ 647.817304][T10057] CIFS: VFS: cifs_mount failed w/return code = -111 [ 647.868085][ T4285] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 647.880576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.882667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.892201][ T4285] CPU: 0 PID: 4285 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 647.904778][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 647.914837][ T4285] Workqueue: hci3 hci_rx_work [ 647.919517][ T4285] Call Trace: [ 647.922790][ T4285] [ 647.925715][ T4285] dump_stack_lvl+0x188/0x24e [ 647.930393][ T4285] ? show_regs_print_info+0x12/0x12 [ 647.935585][ T4285] ? load_image+0x410/0x410 [ 647.940087][ T4285] sysfs_create_dir_ns+0x26a/0x290 [ 647.945198][ T4285] ? __lock_acquire+0x7ea0/0x7ea0 [ 647.950218][ T4285] ? sysfs_warn_dup+0xa0/0xa0 [ 647.954891][ T4285] ? do_raw_spin_unlock+0x11d/0x230 [ 647.960082][ T4285] kobject_add_internal+0x617/0xca0 [ 647.965371][ T4285] kobject_add+0x160/0x230 [ 647.969788][ T4285] ? kobject_init+0x1c0/0x1c0 [ 647.974463][ T4285] ? __raw_spin_lock_init+0x41/0x100 [ 647.979738][ T4285] ? klist_children_get+0x50/0x50 [ 647.984756][ T4285] ? get_device_parent+0x121/0x3e0 [ 647.989875][ T4285] device_add+0x470/0x1050 [ 647.994291][ T4285] hci_conn_add_sysfs+0xd1/0x1e0 [ 647.999228][ T4285] le_conn_complete_evt+0xf93/0x15c0 [ 648.004513][ T4285] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 648.010749][ T4285] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 648.016391][ T4285] ? mutex_unlock+0x10/0x10 [ 648.020887][ T4285] ? skb_pull_data+0xec/0x1f0 [ 648.025562][ T4285] hci_le_enh_conn_complete_evt+0x185/0x460 [ 648.031447][ T4285] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 648.037857][ T4285] ? hci_remote_host_features_evt+0x230/0x230 [ 648.043922][ T4285] hci_event_packet+0x7b3/0x1290 [ 648.048862][ T4285] ? lock_chain_count+0x20/0x20 [ 648.053723][ T4285] ? bis_list+0x280/0x280 [ 648.058048][ T4285] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 648.063936][ T4285] ? kcov_remote_start+0x50f/0x810 [ 648.069041][ T4285] ? lockdep_hardirqs_on+0x94/0x140 [ 648.074243][ T4285] ? hci_send_to_monitor+0x9c/0x4a0 [ 648.079442][ T4285] hci_rx_work+0x3eb/0xd40 [ 648.083852][ T4285] ? _raw_spin_unlock+0x40/0x40 [ 648.088698][ T4285] ? process_one_work+0x7b4/0x1160 [ 648.093806][ T4285] process_one_work+0x8ab/0x1160 [ 648.098749][ T4285] ? worker_detach_from_pool+0x240/0x240 [ 648.104376][ T4285] ? _raw_spin_lock_irq+0xb7/0xf0 [ 648.109389][ T4285] ? _raw_spin_lock_irqsave+0x100/0x100 [ 648.114926][ T4285] ? wq_worker_running+0x97/0x190 [ 648.119943][ T4285] worker_thread+0xaf5/0x12a0 [ 648.124638][ T4285] kthread+0x29d/0x330 [ 648.128696][ T4285] ? worker_clr_flags+0x1a0/0x1a0 [ 648.133719][ T4285] ? kthread_blkcg+0xd0/0xd0 [ 648.138300][ T4285] ret_from_fork+0x1f/0x30 [ 648.142724][ T4285] [ 648.154283][ T4285] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 648.167640][ T4285] Bluetooth: hci3: failed to register connection device [ 648.584179][T10081] loop0: detected capacity change from 0 to 164 [ 649.849836][T10095] CIFS: Attempting to mount \\127.0.0.1\share [ 650.434113][ T4436] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 650.455456][ T5909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 650.628371][T10095] CIFS: VFS: Error connecting to socket. Aborting operation. [ 650.690410][T10095] CIFS: VFS: cifs_mount failed w/return code = -4 [ 652.920123][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 653.235569][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 653.377055][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 653.565314][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 653.573917][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 653.644295][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 653.758874][ T5915] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.524551][ T126] libceph: connect (1)[c::]:6789 error -101 [ 654.570020][ T126] libceph: mon0 (1)[c::]:6789 connect error [ 655.638050][ T9322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 655.698601][T10139] ceph: No mds server is up or the cluster is laggy [ 655.699949][ T126] libceph: connect (1)[c::]:6789 error -101 [ 655.716466][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 655.728318][ T126] libceph: mon0 (1)[c::]:6789 connect error [ 655.746989][T10123] rxe_eth0 speed is unknown, defaulting to 1000 [ 655.929734][ T5915] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.986696][ T5338] libceph: connect (1)[c::]:6789 error -101 [ 655.995267][ T5338] libceph: mon0 (1)[c::]:6789 connect error [ 656.149427][ T4287] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 656.187760][ T9322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 656.214069][ T5915] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.962800][ T5915] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.459864][T10163] loop0: detected capacity change from 0 to 164 [ 658.094153][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 658.528628][T10123] chnl_net:caif_netlink_parms(): no params data found [ 660.106470][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 660.280614][T10123] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.308578][T10198] FAULT_INJECTION: forcing a failure. [ 660.308578][T10198] name failslab, interval 1, probability 5, space 0, times 9999 [ 660.322186][T10123] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.383970][T10123] device bridge_slave_0 entered promiscuous mode [ 660.421592][T10198] CPU: 0 PID: 10198 Comm: syz.3.1657 Not tainted syzkaller #0 [ 660.429117][T10198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 660.439185][T10198] Call Trace: [ 660.442478][T10198] [ 660.445416][T10198] dump_stack_lvl+0x188/0x24e [ 660.450118][T10198] ? show_regs_print_info+0x12/0x12 [ 660.455335][T10198] ? load_image+0x410/0x410 [ 660.459850][T10198] ? __might_sleep+0xd0/0xd0 [ 660.464453][T10198] ? __lock_acquire+0x7ea0/0x7ea0 [ 660.469498][T10198] should_fail_ex+0x390/0x4c0 [ 660.474197][T10198] should_failslab+0x5/0x20 [ 660.478713][T10198] slab_pre_alloc_hook+0x59/0x300 [ 660.483758][T10198] ? __lock_acquire+0x7ea0/0x7ea0 [ 660.488798][T10198] ? security_prepare_creds+0x47/0x130 [ 660.494277][T10198] __kmem_cache_alloc_node+0x4f/0x270 [ 660.499671][T10198] ? security_prepare_creds+0x47/0x130 [ 660.505143][T10198] __kmalloc+0xa3/0x240 [ 660.509316][T10198] security_prepare_creds+0x47/0x130 [ 660.514620][T10198] prepare_creds+0x450/0x610 [ 660.519244][T10198] lookup_user_key+0x337/0x1110 [ 660.524122][T10198] ? lookup_user_key_possessed+0x40/0x40 [ 660.529778][T10198] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 660.535788][T10198] ? _copy_from_user+0x10b/0x170 [ 660.540746][T10198] __se_sys_add_key+0x311/0x410 [ 660.545616][T10198] ? __x64_sys_add_key+0xc0/0xc0 [ 660.550578][T10198] ? lockdep_hardirqs_on+0x94/0x140 [ 660.555807][T10198] ? __x64_sys_add_key+0x1c/0xc0 [ 660.560774][T10198] do_syscall_64+0x4c/0xa0 [ 660.565221][T10198] ? clear_bhb_loop+0x60/0xb0 [ 660.569919][T10198] ? clear_bhb_loop+0x60/0xb0 [ 660.574614][T10198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.580526][T10198] RIP: 0033:0x7f2d7039e559 [ 660.584960][T10198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.604600][T10198] RSP: 002b:00007f2d712e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 660.613034][T10198] RAX: ffffffffffffffda RBX: 00007f2d70625fa0 RCX: 00007f2d7039e559 [ 660.621020][T10198] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000080 [ 660.629024][T10198] RBP: 00007f2d704358b0 R08: fffffffffffffffe R09: 0000000000000000 [ 660.637008][T10198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.644987][T10198] R13: 00007f2d70626038 R14: 00007f2d70625fa0 R15: 00007ffed360dfb8 [ 660.652990][T10198] [ 660.779135][T10123] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.791907][T10123] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.818870][T10123] device bridge_slave_1 entered promiscuous mode [ 660.875542][T10123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.918277][T10123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.037701][T10209] CIFS: Attempting to mount \\127.0.0.1\share [ 661.157560][T10123] team0: Port device team_slave_0 added [ 661.213527][T10123] team0: Port device team_slave_1 added [ 661.308337][ T5905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 661.314325][T10123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.365445][T10123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.485415][T10123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.597358][T10123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.606772][T10123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.723089][T10123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.834573][T10209] CIFS: VFS: cifs_mount failed w/return code = -112 [ 661.921566][T10123] device hsr_slave_0 entered promiscuous mode [ 661.951028][ T5905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 661.985420][T10123] device hsr_slave_1 entered promiscuous mode [ 661.994746][T10123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 662.046479][T10123] Cannot create hsr debugfs directory [ 662.186457][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 662.235238][ T4287] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 662.245397][ T4287] CPU: 0 PID: 4287 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 662.252941][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 662.262987][ T4287] Workqueue: hci1 hci_rx_work [ 662.267663][ T4287] Call Trace: [ 662.270923][ T4287] [ 662.273839][ T4287] dump_stack_lvl+0x188/0x24e [ 662.278519][ T4287] ? show_regs_print_info+0x12/0x12 [ 662.283708][ T4287] ? load_image+0x410/0x410 [ 662.288206][ T4287] sysfs_create_dir_ns+0x26a/0x290 [ 662.293332][ T4287] ? __lock_acquire+0x7ea0/0x7ea0 [ 662.298349][ T4287] ? sysfs_warn_dup+0xa0/0xa0 [ 662.303039][ T4287] ? do_raw_spin_unlock+0x11d/0x230 [ 662.308243][ T4287] kobject_add_internal+0x617/0xca0 [ 662.313475][ T4287] kobject_add+0x160/0x230 [ 662.317914][ T4287] ? kobject_init+0x1c0/0x1c0 [ 662.322587][ T4287] ? __raw_spin_lock_init+0x41/0x100 [ 662.327870][ T4287] ? klist_children_get+0x50/0x50 [ 662.332906][ T4287] ? get_device_parent+0x121/0x3e0 [ 662.338018][ T4287] device_add+0x470/0x1050 [ 662.342430][ T4287] hci_conn_add_sysfs+0xd1/0x1e0 [ 662.347358][ T4287] le_conn_complete_evt+0xf93/0x15c0 [ 662.352640][ T4287] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 662.358871][ T4287] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 662.364518][ T4287] ? mutex_unlock+0x10/0x10 [ 662.369015][ T4287] ? skb_pull_data+0xec/0x1f0 [ 662.373677][ T4287] hci_le_enh_conn_complete_evt+0x185/0x460 [ 662.379586][ T4287] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 662.385998][ T4287] ? hci_remote_host_features_evt+0x230/0x230 [ 662.392058][ T4287] hci_event_packet+0x7b3/0x1290 [ 662.397015][ T4287] ? lock_chain_count+0x20/0x20 [ 662.401854][ T4287] ? bis_list+0x280/0x280 [ 662.406165][ T4287] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 662.412057][ T4287] ? kcov_remote_start+0x50f/0x810 [ 662.417156][ T4287] ? lockdep_hardirqs_on+0x94/0x140 [ 662.422343][ T4287] ? hci_send_to_monitor+0x9c/0x4a0 [ 662.427531][ T4287] hci_rx_work+0x3eb/0xd40 [ 662.431965][ T4287] ? _raw_spin_unlock+0x40/0x40 [ 662.436817][ T4287] ? process_one_work+0x7b4/0x1160 [ 662.441917][ T4287] process_one_work+0x8ab/0x1160 [ 662.446866][ T4287] ? worker_detach_from_pool+0x240/0x240 [ 662.452488][ T4287] ? _raw_spin_lock_irq+0xb7/0xf0 [ 662.457500][ T4287] ? _raw_spin_lock_irqsave+0x100/0x100 [ 662.463034][ T4287] ? wq_worker_running+0x97/0x190 [ 662.468047][ T4287] worker_thread+0xaf5/0x12a0 [ 662.472716][ T4287] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 662.478600][ T4287] kthread+0x29d/0x330 [ 662.482653][ T4287] ? worker_clr_flags+0x1a0/0x1a0 [ 662.487667][ T4287] ? kthread_blkcg+0xd0/0xd0 [ 662.492241][ T4287] ret_from_fork+0x1f/0x30 [ 662.496657][ T4287] [ 662.510921][ T4287] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 662.524598][ T4287] Bluetooth: hci1: failed to register connection device [ 663.161749][T10226] loop3: detected capacity change from 0 to 128 [ 663.338460][T10226] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 663.417350][T10226] FAT-fs (loop3): Filesystem has been set read-only [ 663.436061][T10226] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 52) [ 663.474342][T10226] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 52) [ 664.012416][T10242] FAULT_INJECTION: forcing a failure. [ 664.012416][T10242] name failslab, interval 1, probability 5, space 0, times 9998 [ 664.062434][T10242] CPU: 0 PID: 10242 Comm: syz.0.1670 Not tainted syzkaller #0 [ 664.069949][T10242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 664.080003][T10242] Call Trace: [ 664.083279][T10242] [ 664.086203][T10242] dump_stack_lvl+0x188/0x24e [ 664.090890][T10242] ? show_regs_print_info+0x12/0x12 [ 664.096085][T10242] ? load_image+0x410/0x410 [ 664.100583][T10242] ? __might_sleep+0xd0/0xd0 [ 664.105182][T10242] ? __lock_acquire+0x7ea0/0x7ea0 [ 664.110232][T10242] should_fail_ex+0x390/0x4c0 [ 664.114929][T10242] should_failslab+0x5/0x20 [ 664.119431][T10242] slab_pre_alloc_hook+0x59/0x300 [ 664.124455][T10242] ? assoc_array_insert+0x8f/0x3080 [ 664.129648][T10242] __kmem_cache_alloc_node+0x4f/0x270 [ 664.135035][T10242] ? assoc_array_insert+0x8f/0x3080 [ 664.140245][T10242] kmalloc_trace+0x26/0xe0 [ 664.144671][T10242] assoc_array_insert+0x8f/0x3080 [ 664.149710][T10242] ? __key_link_lock+0x97/0xb0 [ 664.154487][T10242] ? mutex_lock_nested+0x10/0x10 [ 664.159422][T10242] ? rwsem_write_trylock+0x135/0x1c0 [ 664.164706][T10242] ? clear_nonspinnable+0x60/0x60 [ 664.169732][T10242] ? key_set_index_key+0x302/0x480 [ 664.174855][T10242] ? memcpy+0x3c/0x60 [ 664.178834][T10242] __key_link_begin+0xd2/0x1e0 [ 664.183596][T10242] key_create_or_update+0x4d8/0xa40 [ 664.188787][T10242] ? security_key_permission+0x7c/0xa0 [ 664.194240][T10242] ? key_type_put+0x20/0x20 [ 664.198741][T10242] ? lookup_user_key_possessed+0x40/0x40 [ 664.204382][T10242] ? _copy_from_user+0x10b/0x170 [ 664.209316][T10242] __se_sys_add_key+0x34b/0x410 [ 664.214164][T10242] ? __x64_sys_add_key+0xc0/0xc0 [ 664.219099][T10242] ? lockdep_hardirqs_on+0x94/0x140 [ 664.224291][T10242] ? __x64_sys_add_key+0x1c/0xc0 [ 664.229221][T10242] do_syscall_64+0x4c/0xa0 [ 664.233632][T10242] ? clear_bhb_loop+0x60/0xb0 [ 664.238302][T10242] ? clear_bhb_loop+0x60/0xb0 [ 664.242974][T10242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 664.248858][T10242] RIP: 0033:0x7f4e04f9e559 [ 664.253266][T10242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.272867][T10242] RSP: 002b:00007f4e05df1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 664.281275][T10242] RAX: ffffffffffffffda RBX: 00007f4e05225fa0 RCX: 00007f4e04f9e559 [ 664.289238][T10242] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000080 [ 664.297201][T10242] RBP: 00007f4e050358b0 R08: fffffffffffffffe R09: 0000000000000000 [ 664.305163][T10242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.313124][T10242] R13: 00007f4e05226038 R14: 00007f4e05225fa0 R15: 00007ffeb740a308 [ 664.321098][T10242] [ 664.798404][ T5915] device hsr_slave_0 left promiscuous mode [ 664.820661][T10252] CIFS: Attempting to mount \\127.0.0.1\share [ 664.875073][ T5915] device hsr_slave_1 left promiscuous mode [ 664.885434][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.994898][T10254] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 665.077946][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.092320][T10252] CIFS: VFS: cifs_mount failed w/return code = -112 [ 665.112246][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.138156][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.186223][ T5915] device bridge_slave_1 left promiscuous mode [ 665.207406][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.506702][ T5915] device bridge_slave_0 left promiscuous mode [ 665.512913][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.814276][ T5915] device veth1_macvtap left promiscuous mode [ 665.850901][ T5915] device veth0_macvtap left promiscuous mode [ 665.870897][ T5915] device veth1_vlan left promiscuous mode [ 665.901569][ T5915] device veth0_vlan left promiscuous mode [ 667.066807][ T5905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 667.182246][T10289] loop0: detected capacity change from 0 to 164 [ 667.300358][ T4287] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 667.707102][ T9322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 670.194894][T10319] loop3: detected capacity change from 0 to 1024 [ 670.227496][T10319] ext4: Unknown parameter 'uid<00000000000000000000' [ 670.961935][T10330] overlayfs: missing 'lowerdir' [ 672.581664][ T5915] team0 (unregistering): Port device team_slave_1 removed [ 672.636580][ T5915] team0 (unregistering): Port device team_slave_0 removed [ 672.687086][ T5915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.742408][ T5915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.828370][ T5905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 672.919051][ T4287] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 673.099338][ T5915] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 673.108513][ T5915] bond0 (unregistering): Released all slaves [ 673.220192][T10123] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 673.259823][T10123] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 673.302401][T10123] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 673.359331][T10123] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 673.496872][ T5897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 674.281633][T10123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.340523][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 674.363247][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 674.420628][T10123] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.597043][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 674.628360][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 674.655156][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.662343][ T5917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.706941][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 674.736230][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 674.757423][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 674.781236][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.784088][T10370] nvmet: adding nsid 1 to subsystem testsubsys [ 674.788382][ T5917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.809318][T10370] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 674.821155][T10370] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 674.829557][T10370] CPU: 1 PID: 10370 Comm: syz.0.1703 Not tainted syzkaller #0 [ 674.837007][T10370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 674.847053][T10370] RIP: 0010:strlen+0x25/0x60 [ 674.851645][T10370] Code: da 0f 1f 40 00 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 674.871249][T10370] RSP: 0018:ffffc90003b179c0 EFLAGS: 00010246 [ 674.877308][T10370] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 674.885266][T10370] RDX: ffffc9000cab9000 RSI: 00000000000006de RDI: 0000000000000000 [ 674.893242][T10370] RBP: ffffc90003b17af8 R08: ffffffff8f00d22f R09: 1ffffffff1e01a45 [ 674.901205][T10370] R10: dffffc0000000000 R11: fffffbfff1e01a46 R12: 1ffff92000762f48 [ 674.909185][T10370] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 674.917151][T10370] FS: 00007f4e05df16c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 674.926074][T10370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 674.932681][T10370] CR2: 000000110c378328 CR3: 0000000068cf7000 CR4: 00000000003506e0 [ 674.940646][T10370] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 674.948620][T10370] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 674.956579][T10370] Call Trace: [ 674.960037][T10370] [ 674.962962][T10370] getname_kernel+0x24/0x2f0 [ 674.967565][T10370] filp_open+0x84/0x1e0 [ 674.971728][T10370] ? file_open_name+0x1b0/0x1b0 [ 674.976615][T10370] ? nvmet_ns_enable+0x49/0x8c0 [ 674.981571][T10370] ? mutex_lock_nested+0x10/0x10 [ 674.986510][T10370] nvmet_file_ns_enable+0x70/0x330 [ 674.991659][T10370] ? rwsem_write_trylock+0x135/0x1c0 [ 674.996944][T10370] nvmet_ns_enable+0xf0/0x8c0 [ 675.001622][T10370] nvmet_ns_enable_store+0xd4/0x170 [ 675.006812][T10370] ? nvmet_ns_enable_show+0x60/0x60 [ 675.012001][T10370] ? down_read+0x1a8/0x2d0 [ 675.016412][T10370] configfs_write_iter+0x30b/0x400 [ 675.021517][T10370] ? nvmet_ns_enable_show+0x60/0x60 [ 675.026703][T10370] vfs_write+0x482/0x9a0 [ 675.030949][T10370] ? file_end_write+0x250/0x250 [ 675.035797][T10370] ? __fget_files+0x3fc/0x460 [ 675.040470][T10370] ? __fdget_pos+0x2ae/0x360 [ 675.045053][T10370] ? ksys_write+0x70/0x260 [ 675.049463][T10370] ksys_write+0x14d/0x260 [ 675.053809][T10370] ? __ia32_sys_read+0x80/0x80 [ 675.058566][T10370] ? lockdep_hardirqs_on+0x94/0x140 [ 675.063760][T10370] do_syscall_64+0x4c/0xa0 [ 675.068166][T10370] ? clear_bhb_loop+0x60/0xb0 [ 675.072833][T10370] ? clear_bhb_loop+0x60/0xb0 [ 675.077497][T10370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 675.083377][T10370] RIP: 0033:0x7f4e04f9e559 [ 675.087778][T10370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.107374][T10370] RSP: 002b:00007f4e05df1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 675.115775][T10370] RAX: ffffffffffffffda RBX: 00007f4e05225fa0 RCX: 00007f4e04f9e559 [ 675.123734][T10370] RDX: 0000000000000002 RSI: 0000200000000480 RDI: 0000000000000006 [ 675.131693][T10370] RBP: 00007f4e050358b0 R08: 0000000000000000 R09: 0000000000000000 [ 675.139658][T10370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.147615][T10370] R13: 00007f4e05226038 R14: 00007f4e05225fa0 R15: 00007ffeb740a308 [ 675.155577][T10370] [ 675.158595][T10370] Modules linked in: [ 675.177308][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 675.186122][T10370] ---[ end trace 0000000000000000 ]--- [ 675.205979][T10370] RIP: 0010:strlen+0x25/0x60 [ 675.207140][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 675.212506][T10370] Code: da 0f 1f 40 00 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 675.251179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 675.264504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 675.269367][T10370] RSP: 0018:ffffc90003b179c0 EFLAGS: 00010246 [ 675.279232][T10370] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 675.291098][T10370] RDX: ffffc9000cab9000 RSI: 00000000000006de RDI: 0000000000000000 [ 675.301301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 675.309507][T10370] RBP: ffffc90003b17af8 R08: ffffffff8f00d22f R09: 1ffffffff1e01a45 [ 675.309527][T10370] R10: dffffc0000000000 R11: fffffbfff1e01a46 R12: 1ffff92000762f48 [ 675.309541][T10370] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 675.309554][T10370] FS: 00007f4e05df16c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 675.334813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 675.354559][T10376] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 675.377230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 675.393064][ T9322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 675.399309][T10376] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 675.417848][T10370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 675.422074][ T9322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 675.431073][T10370] CR2: 00007f62aad606c8 CR3: 0000000068cf7000 CR4: 00000000003506e0 [ 675.449159][T10123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 675.460370][T10370] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 675.470435][T10123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 675.482500][T10370] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 675.490966][ T9322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 675.506085][T10370] Kernel panic - not syncing: Fatal exception [ 675.509643][ T9322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 675.520132][T10370] Kernel Offset: disabled [ 675.524446][T10370] Rebooting in 86400 seconds..