last executing test programs: 17.479539512s ago: executing program 2 (id=372): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x100102, 0x40) sendfile(r0, r0, 0x0, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r1, 0x5) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0x0, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]}) write$P9_RSTATu(r4, 0x0, 0x6e) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x10001, 0x0, 0x2, 0x0, 0x0, 0x3, 0x4}}) r6 = socket(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10023}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r7}}}}]}, 0x38}}, 0x0) 15.497562331s ago: executing program 4 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='Y\x00', 0x1) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)='5', 0x1) r1 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='1\x00', 0x1) close(r1) r2 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r2, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x3, 0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 14.739380849s ago: executing program 2 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsopen(0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r6 = fsmount(r3, 0x1, 0x0) fchdir(r6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000240)=""/133, 0x85, 0x4640) 14.663642611s ago: executing program 0 (id=381): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$eJzs3c9vG1kdAPDvTOImm3U3XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSNwoil1HcVKa0ENy5I5EJU7wJ3DjgNQTB27c4MalHJAqqEANUg9GM54mJoljs03iJv58pPHMe+P4+57t957nJc4LYGhdjYjtiLgUEZ9ExGSRnxRb3Gxv2f2ePrm/sPvk/kISrdbH/0jy81ledPxM5tXiMccj4offi/hJcjhuc3NrZb5Wq64V6an1+upUc3Pr+nJa5MzOzcxNv3/jvdkTq+ub9d8+/u7yhz/6/e++9OhP29/8WVas8s8v5+c663GS2lUvRbkjbzQiPjyNYAMyWrx/OH+y1vaZiHgrb/+TMZK/mv05olkDAOdAqzUZrcnONABw0WXX/+VI0koxF1CONK1U2nN4b8REWms019+ZbGzcWYx8DutKlNLby7XqdDFXeCVKSZaeyY/307MH0jci4vWI+MXYK3m6stCoLQ7ygw8ADLFXD4z//x5rj/8AwAU3PugCAABnzvgPAMPH+A8Aw+f/GP/7/3YgAPBSc/0PAMPH+A8Aw6fn+L9zNuUAAM7EDz76KNtau8X/v168u7nx7fLd64vV5kqlvrFQWWisrVaWGo2lWrWy0Gr1erxao7E68+5esrm5dave2Lizfmu5Pr9UvVUtnXJ9AIDeXn/z4V+SiNj+1iv5Fh1rORir4WJLB10AYGBGBl0AYGB8nweGVx/X+KYB4ILrtZZn1z8RemDxVzivrn3e/D8MK/P/MLw+3fz/d068HMDZM/8Pw6vVSqz5DwBDxhw/8EK//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVc63JK3ka4FvZ7dppRJxOSKuRCm5vVyrTkfEaxHx57HSWJaeGXShAYAXlP49Kdb/ujb5dvng2UvJf8byfUT89Fcf//Le/Pr62kyW/8+9/PUHRf7spUFUAADodPNwVnucLvYdF/JPn9xfeL6dZREff9BeXDSLu1ts7TOjMZrvx6MUERP/Sop0W/Z5ZeQE4m/vRMTn9ut/ryNCOZ8Daa98ejB+FvvyKcTff/4Pxk//J36an8v2pfy5+OwJlAWGzcMP2v1k0fayJla0vzSu5vuj2/943kO9uOf93+6h/i/d6/9GDsVP8jZ/dS99fEkev/uH7x/KbE22z+1EfGH0qPjJXvykS//7dp91/OsXv/xWt3OtX0dci6Pjt9XzbnZqvb461dzcur5cn1+qLlXvzM7OzcxNv3/jvdmpfI66ffvHAw//rFjm/rWuz81OxESX+OM96v+1Puv/m2ef/Pgrx8T/xlePfv3fOCZ+NiZ+vc/48xM3uy7fncVf7FL/Xq//O33Gf/S3rcU+7woAnIHm5tbKfK1WXetxkH3W7HUfB+fzILYjXoJi9DpIi7fsy1KeC35wTKeRnlHnBJyq/UY/6JIAAAAAAAAAAAAAAADdNDe3VsbidL9ONOg6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9NwAA//8tM9Id") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r4, 0x10e, 0xa, 0x0, &(0x7f0000000280)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f00000002c0)='M', 0x1) recvmsg$unix(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x20040050) 13.826565831s ago: executing program 4 (id=383): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$kcm(0x21, 0x2, 0xa) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000640)='./mnt\x00', 0x840, &(0x7f0000000680)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000009c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000ac0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000b00), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000b40)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000b80)=0x20, 0x4) write$binfmt_misc(r4, &(0x7f0000000bc0), 0x6) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xd, "aa"}], 0x18}, 0x0) splice(r0, &(0x7f0000000540)=0x7, 0xffffffffffffffff, &(0x7f00000005c0)=0x7, 0x200, 0xc) syz_emit_ethernet(0x6a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd605abc8000343c00fc0000000000000000000000000000ffff0200000000000000000000000000010003000000000000c910ff"], 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x4) write(r5, &(0x7f0000000100)='3', 0x1) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', &(0x7f0000000200), &(0x7f0000000240)='./sys/class/video4linux/video0/dev_debug\x00', 0x29, 0x1) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb70b, 0x58f}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000001c0)={0x0, 0x3, 0x8, r5, 0x0, &(0x7f0000000180)={0x9b090b, 0xf64, '\x00', @value64=0x10001}}) 13.803966632s ago: executing program 2 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r7 = fsmount(r4, 0x1, 0x0) fchdir(r7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000240)=""/133, 0x85, 0x4640) 12.463040885s ago: executing program 2 (id=386): munmap$binder(0x0, 0xffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xcbfba000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000000700)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nRp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x8f\x02\xc5 \x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x04\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xa0\xc3\x1d\x19\xf5\x00'/439, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0xa) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xa, 0x11, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0xff64000) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 11.558323997s ago: executing program 4 (id=388): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@acl}, {@heartbeat_none}, {@err_cont}, {@coherency_full}, {@resv_level}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4444, &(0x7f0000004480)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f00000000c0)) 8.879586752s ago: executing program 3 (id=391): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x100102, 0x40) sendfile(r0, r0, 0x0, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setpriority(0x0, r1, 0x5) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0x0, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]}) write$P9_RSTATu(r4, 0x0, 0x6e) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x10001, 0x0, 0x2, 0x0, 0x0, 0x3, 0x4}}) r6 = socket(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10023}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r7}}}}]}, 0x38}}, 0x0) 8.050153523s ago: executing program 4 (id=392): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='Y\x00', 0x1) close(r0) write(0xffffffffffffffff, &(0x7f0000000240)='100', 0x3) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='0', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='5', 0x1) close(r2) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1\x00', 0x1) close(r3) r4 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r4, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x3, 0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 7.413315258s ago: executing program 0 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsopen(0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r6 = fsmount(r3, 0x1, 0x0) fchdir(r6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000240)=""/133, 0x85, 0x4640) 7.409202028s ago: executing program 3 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsopen(0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r6 = fsmount(r3, 0x1, 0x0) fchdir(r6) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000240)=""/133, 0x85, 0x4640) 7.384586649s ago: executing program 1 (id=396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r7 = fsmount(r4, 0x1, 0x0) fchdir(r7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000240)=""/133, 0x85, 0x4640) 6.422171263s ago: executing program 3 (id=397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r7 = fsmount(r4, 0x1, 0x0) fchdir(r7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000240)=""/133, 0x85, 0x4640) 5.31440214s ago: executing program 3 (id=398): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa0880c, &(0x7f0000000780)=ANY=[], 0x5, 0x2fc, &(0x7f0000000480)="$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") 5.31035513s ago: executing program 1 (id=408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r6 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000240)=""/133, 0x85, 0x4640) 5.057533346s ago: executing program 2 (id=399): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@part={'part', 0x3d, 0x10ffff}}, {@umask={'umask', 0x3d, 0x4ffff}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}]}, 0x4, 0x343, &(0x7f0000000240)="$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") openat(0xffffffffffffff9c, &(0x7f0000001980)='./file0\x00', 0x101400, 0x0) 5.032018486s ago: executing program 0 (id=400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsopen(0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) r6 = fsmount(r3, 0x1, 0x0) fchdir(r6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000240)=""/133, 0x85, 0x4640) 5.019659697s ago: executing program 4 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='Y\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='100', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='5', 0x1) close(r3) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1\x00', 0x1) close(r4) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x3, 0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 3.962322703s ago: executing program 1 (id=402): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) 3.795295397s ago: executing program 0 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$kcm(0x21, 0x2, 0xa) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000640)='./mnt\x00', 0x840, &(0x7f0000000680)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000009c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000ac0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000b00), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000b40)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000b80)=0x20, 0x4) write$binfmt_misc(r4, &(0x7f0000000bc0), 0x6) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xd, "aa"}], 0x18}, 0x0) splice(r0, &(0x7f0000000540)=0x7, 0xffffffffffffffff, &(0x7f00000005c0)=0x7, 0x200, 0xc) syz_emit_ethernet(0x6a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd605abc8000343c00fc0000000000000000000000000000ffff0200000000000000000000000000010003000000000000c910ff"], 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x4) write(r5, &(0x7f0000000100)='3', 0x1) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', &(0x7f0000000200), &(0x7f0000000240)='./sys/class/video4linux/video0/dev_debug\x00', 0x29, 0x1) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb70b, 0x58f}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000001c0)={0x0, 0x3, 0x8, r5, 0x0, &(0x7f0000000180)={0x9b090b, 0xf64, '\x00', @value64=0x10001}}) 3.752725678s ago: executing program 4 (id=404): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r4, 0x10e, 0xa, 0x0, &(0x7f0000000280)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f00000002c0)='M', 0x1) recvmsg$unix(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x20040050) 3.751037888s ago: executing program 3 (id=405): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4004, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x2000000, @desc3}, 0x10, 0x0, '\x00', @d}) 3.68357873s ago: executing program 2 (id=406): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x100102, 0x40) sendfile(r0, r0, 0x0, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setpriority(0x0, r1, 0x5) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0x0, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]}) write$P9_RSTATu(r4, 0x0, 0x6e) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x10001, 0x0, 0x2, 0x0, 0x0, 0x3, 0x4}}) r6 = socket(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10023}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r7}}}}]}, 0x38}}, 0x0) 2.668601014s ago: executing program 1 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsopen(0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r6 = fsmount(r3, 0x1, 0x0) fchdir(r6) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000240)=""/133, 0x85, 0x4640) 1.682037519s ago: executing program 0 (id=409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r7 = fsmount(r4, 0x1, 0x0) fchdir(r7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000240)=""/133, 0x85, 0x4640) 1.597249441s ago: executing program 3 (id=410): munmap$binder(0x0, 0xffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xcbfba000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000000700)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nRp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x8f\x02\xc5 \x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x04\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xa0\xc3\x1d\x19\xf5\x00'/439, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0xa) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xa, 0x11, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0xff64000) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 1.185883541s ago: executing program 1 (id=411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsopen(0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r6 = fsmount(r3, 0x1, 0x0) fchdir(r6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000240)=""/133, 0x85, 0x4640) 154.594606ms ago: executing program 1 (id=412): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='Y\x00', 0x1) close(r0) write(0xffffffffffffffff, &(0x7f0000000240)='100', 0x3) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='0', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='5', 0x1) close(r2) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1\x00', 0x1) close(r3) r4 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r4, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x3, 0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 0s ago: executing program 0 (id=413): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) kernel console output (not intermixed with test programs): ufacturer: syz [ 92.281072][ T4371] FAT-fs (loop3): Directory bread(block 1061) failed [ 92.288159][ T2283] usb 2-1: SerialNumber: syz [ 92.302649][ T4371] FAT-fs (loop3): Directory bread(block 1062) failed [ 92.310190][ T4371] FAT-fs (loop3): Directory bread(block 1063) failed [ 92.343763][ T4197] usb 5-1: unable to get BOS descriptor or descriptor too short [ 92.351646][ T4371] FAT-fs (loop3): Directory bread(block 1064) failed [ 92.358371][ T4371] FAT-fs (loop3): Directory bread(block 1065) failed [ 92.591884][ T4197] usb 5-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 92.613520][ T4197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.629598][ T4381] loop1: detected capacity change from 0 to 128 [ 92.641723][ T2283] usb 2-1: 0:2 : does not exist [ 92.647305][ T2283] usb 2-1: unit 119 not found! [ 92.665060][ T4197] usb 5-1: Product: syz [ 92.681221][ T4381] ======================================================= [ 92.681221][ T4381] WARNING: The mand mount option has been deprecated and [ 92.681221][ T4381] and is ignored by this kernel. Remove the mand [ 92.681221][ T4381] option from the mount to silence this warning. [ 92.681221][ T4381] ======================================================= [ 92.751377][ T4197] usb 5-1: Manufacturer: syz [ 92.774185][ T4197] usb 5-1: SerialNumber: syz [ 92.784150][ T4381] EXT4-fs (loop1): Test dummy encryption mode enabled [ 92.811614][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.849365][ T4381] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 92.866247][ T2283] usb 2-1: USB disconnect, device number 2 [ 92.878469][ T4384] futex_wake_op: syz.3.17 tries to shift op by 144; fix this program [ 92.920103][ T4381] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.248823][ T7] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 60, changing to 7 [ 93.334778][ T7] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 93.581490][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 93.591489][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 93.611484][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.621486][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.631492][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.641479][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 93.651484][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 93.691489][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 93.701484][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 93.711484][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 94.482200][ T7] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 94.536340][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.655458][ T7] usb 1-1: Product: syz [ 94.714785][ T7] usb 1-1: Manufacturer: syz [ 94.758624][ T7] usb 1-1: SerialNumber: syz [ 94.934712][ T4197] usb 5-1: USB disconnect, device number 2 [ 94.995778][ T4352] udevd[4352]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.381918][ T4281] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.481658][ T1109] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.371150][ T26] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.208971][ T4433] syz.4.26: vmalloc error: size 8192, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 97.278734][ T4433] CPU: 1 PID: 4433 Comm: syz.4.26 Not tainted syzkaller #0 [ 97.285990][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.296078][ T4433] Call Trace: [ 97.299375][ T4433] [ 97.302310][ T4433] dump_stack_lvl+0x188/0x250 [ 97.307028][ T4433] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 97.312809][ T4433] ? show_regs_print_info+0x20/0x20 [ 97.318194][ T4433] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 97.323876][ T4433] warn_alloc+0x245/0x320 [ 97.328227][ T4433] ? zone_watermark_ok_safe+0x250/0x250 [ 97.333780][ T4433] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 97.339778][ T4433] ? __get_vm_area_node+0x2b5/0x2d0 [ 97.344991][ T4433] __vmalloc_node_range+0x2b1/0x8b0 [ 97.350201][ T4433] ? dvb_demux_do_ioctl+0x2ad/0x530 [ 97.355420][ T4433] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 97.361068][ T4433] ? dvb_dmxdev_filter_start+0x107/0x1060 [ 97.366801][ T4433] vmalloc+0x75/0x80 [ 97.370712][ T4433] ? dvb_dmxdev_filter_start+0x107/0x1060 [ 97.376450][ T4433] dvb_dmxdev_filter_start+0x107/0x1060 [ 97.382022][ T4433] dvb_demux_do_ioctl+0x48d/0x530 [ 97.387054][ T4433] dvb_usercopy+0x191/0x2b0 [ 97.391570][ T4433] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 97.397122][ T4433] ? dvb_generic_ioctl+0xb0/0xb0 [ 97.402097][ T4433] ? dvb_demux_poll+0x210/0x210 [ 97.406971][ T4433] dvb_demux_ioctl+0x25/0x30 [ 97.411576][ T4433] __se_sys_ioctl+0xfa/0x170 [ 97.416175][ T4433] do_syscall_64+0x4c/0xa0 [ 97.420601][ T4433] ? clear_bhb_loop+0x30/0x80 [ 97.425282][ T4433] ? clear_bhb_loop+0x30/0x80 [ 97.429967][ T4433] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.435879][ T4433] RIP: 0033:0x7fa408374559 [ 97.440314][ T4433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.459940][ T4433] RSP: 002b:00007fa4065cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.468384][ T4433] RAX: ffffffffffffffda RBX: 00007fa4085fbfa0 RCX: 00007fa408374559 [ 97.476366][ T4433] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000004 [ 97.484349][ T4433] RBP: 00007fa40840b8b0 R08: 0000000000000000 R09: 0000000000000000 [ 97.492322][ T4433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.500295][ T4433] R13: 00007fa4085fc038 R14: 00007fa4085fbfa0 R15: 00007ffd409117f8 [ 97.508287][ T4433] [ 97.621091][ T4433] Mem-Info: [ 97.648747][ T4433] active_anon:291 inactive_anon:7192 isolated_anon:0 [ 97.648747][ T4433] active_file:4553 inactive_file:39598 isolated_file:0 [ 97.648747][ T4433] unevictable:768 dirty:4742 writeback:0 [ 97.648747][ T4433] slab_reclaimable:20756 slab_unreclaimable:95601 [ 97.648747][ T4433] mapped:29719 shmem:1637 pagetables:707 bounce:0 [ 97.648747][ T4433] kernel_misc_reclaimable:0 [ 97.648747][ T4433] free:1376803 free_pcp:8592 free_cma:0 [ 97.809966][ T4433] Node 0 active_anon:1132kB inactive_anon:28256kB active_file:18012kB inactive_file:159692kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118876kB dirty:20264kB writeback:0kB shmem:4468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10780kB pagetables:2828kB all_unreclaimable? no [ 98.172662][ T4433] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 98.441659][ T4281] usb 2-1: device descriptor read/all, error -71 [ 98.540809][ T4433] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.654235][ T7] disable ehci-hcd to run US-144 [ 98.662649][ T7] disable ehci-hcd to run US-144 [ 98.663623][ T4430] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.672436][ T7] usb 1-1: USB disconnect, device number 2 [ 98.705156][ T4433] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 98.710967][ T4433] Node 0 DMA32 free:1566432kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1092kB inactive_anon:28356kB active_file:18012kB inactive_file:163188kB unevictable:1536kB writepending:23744kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:22192kB local_pcp:16976kB free_cma:0kB [ 98.763186][ T1109] usb 3-1: device descriptor read/all, error -71 [ 98.776776][ T4433] lowmem_reserve[]: 0 0 0 0 0 [ 98.809919][ T4433] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.850218][ T4444] loop1: detected capacity change from 0 to 164 [ 98.910112][ T4433] lowmem_reserve[]: 0 0 0 0 0 [ 98.915514][ T4433] Node 1 Normal free:3914896kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:11852kB local_pcp:7480kB free_cma:0kB [ 98.964199][ T4451] loop3: detected capacity change from 0 to 512 [ 99.016336][ T4444] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=82 [ 99.025945][ T4433] lowmem_reserve[]: 0 0 0 0 0 [ 99.030685][ T4433] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 99.076705][ T4433] Node 0 DMA32: 2*4kB (UM) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 0*64kB 2*128kB (UM) 2*256kB (UM) 2*512kB (UE) 2*1024kB (ME) 3*2048kB (UME) 377*4096kB (M) = 1554280kB [ 99.114588][ T4433] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 99.140275][ T4451] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 99.197629][ T4433] Node 1 Normal: 81*4kB (UME) 26*8kB (UE) 13*16kB (UME) 54*32kB (UE) 28*64kB (UME) 20*128kB (UME) 6*256kB (UME) 2*512kB (UE) 0*1024kB 1*2048kB (M) 953*4096kB (UM) = 3914916kB [ 99.220535][ T4433] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.232370][ T1109] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 99.241533][ T4433] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.250841][ T4433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.264385][ T4451] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.282014][ T4433] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.291345][ T4433] 47061 total pagecache pages [ 99.351564][ T4433] 0 pages in swap cache [ 99.355770][ T4433] Swap cache stats: add 0, delete 0, find 0/0 [ 99.409748][ T4433] Free swap = 124996kB [ 99.424824][ T4433] Total swap = 124996kB [ 99.429029][ T4433] 2097051 pages RAM [ 99.463711][ T4433] 0 pages HighMem/MovableOnly [ 99.492382][ T4433] 415313 pages reserved [ 99.496585][ T4433] 0 pages cma reserved [ 99.602667][ T4281] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 99.661852][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.702462][ T1109] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 99.721823][ T1109] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 99.751531][ T1109] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.857089][ T1109] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.891646][ T1109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 99.899676][ T1109] usb 3-1: SerialNumber: syz [ 99.951811][ T4447] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 99.958956][ T4447] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 99.966563][ T4281] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 99.991849][ T4281] usb 2-1: config 0 has no interface number 0 [ 100.003356][ T4281] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 100.034922][ T4281] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 100.058814][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 100.104508][ T7] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 100.170542][ T7] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 100.229048][ T7] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.261874][ T4281] usb 2-1: New USB device found, idVendor=0499, idProduct=ebb7, bcdDevice=68.2f [ 100.284754][ T4281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.301639][ T7] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 100.332460][ T1109] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 100.363485][ T4281] usb 2-1: Product: syz [ 100.371344][ T1109] usb 3-1: USB disconnect, device number 3 [ 100.388876][ T7] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 100.401380][ T4281] usb 2-1: Manufacturer: syz [ 100.440549][ T4281] usb 2-1: SerialNumber: syz [ 100.449508][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.460735][ T4281] usb 2-1: config 0 descriptor?? [ 100.491922][ T4461] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 100.518700][ T7] ims_pcu 1-1:1.0: Max IN packet size is too small (0) [ 100.547193][ T7] ims_pcu: probe of 1-1:1.0 failed with error -22 [ 100.582162][ T4336] udevd[4336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.743965][ T4278] usb 1-1: USB disconnect, device number 3 [ 100.781788][ T4476] ERROR: Out of memory at tomoyo_realpath_from_path. [ 100.858016][ T4281] usb 2-1: USB disconnect, device number 4 [ 100.925619][ T4336] udevd[4336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.790095][ T4487] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.040572][ T4487] sched: RT throttling activated [ 102.049450][ T1111] cfg80211: failed to load regulatory.db [ 102.510919][ T4494] loop1: detected capacity change from 0 to 128 [ 102.520986][ T4493] loop0: detected capacity change from 0 to 512 [ 102.533848][ T4496] loop2: detected capacity change from 0 to 256 [ 103.045928][ T4493] EXT4-fs (loop0): Test dummy encryption mode enabled [ 103.183695][ T4493] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.430928][ T4493] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 104.814468][ T4508] loop2: detected capacity change from 0 to 512 [ 104.927323][ T4513] loop4: detected capacity change from 0 to 512 [ 106.238781][ T4515] loop3: detected capacity change from 0 to 2048 [ 106.287793][ T4508] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 106.357676][ T4508] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.573490][ T4513] EXT4-fs (loop4): inline encryption not supported [ 106.580840][ T4513] EXT4-fs (loop4): inline encryption not supported [ 106.677493][ T4513] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 106.729285][ T4513] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 106.815034][ T4513] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 106.897562][ T4513] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 106.916973][ T4513] EXT4-fs (loop4): orphan cleanup on readonly fs [ 106.938729][ T4513] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.47: bg 0: block 34: padding at end of block bitmap is not set [ 106.963138][ T4281] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.970877][ T4513] EXT4-fs (loop4): Remounting filesystem read-only [ 106.977911][ T4513] Quota error (device loop4): write_blk: dquota write failed [ 106.986713][ T4513] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 106.999437][ T4513] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.47: Failed to acquire dquot type 1 [ 107.021922][ T4513] EXT4-fs (loop4): Remounting filesystem read-only [ 107.047101][ T4513] EXT4-fs (loop4): 1 truncate cleaned up [ 107.067805][ T4513] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,lazytime,nodioread_nolock,discard,max_dir_size_kb=0x0000000000000001,inlinecrypt,errors=remount-ro,nodioread_nolock,inode_readahead_blks=0x0000000000001000,inlinecrypt,noblock_validity,. Quota mode: writeback. [ 107.141821][ T1111] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.211673][ T4281] usb 4-1: Using ep0 maxpacket: 32 [ 107.581800][ T1111] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.724381][ T1111] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.924453][ T1111] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.947292][ T4281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 107.958650][ T4281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.968380][ T4281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 107.988072][ T1111] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 108.030445][ T1111] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 108.053298][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.141867][ T4281] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 108.143269][ T1111] cxacru 1-1:1.0: cxacru_bind: interface has incorrect endpoints [ 108.167525][ T4281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.171614][ T1111] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 108.191565][ T4281] usb 4-1: Product: syz [ 108.199122][ T4281] usb 4-1: Manufacturer: syz [ 108.199976][ T4537] loop4: detected capacity change from 0 to 512 [ 108.216163][ T4281] usb 4-1: SerialNumber: syz [ 108.227971][ T4281] usb 4-1: config 0 descriptor?? [ 108.274277][ T4537] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.304587][ T4537] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.352159][ T2283] usb 1-1: USB disconnect, device number 4 [ 108.421129][ T4537] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.54: corrupted in-inode xattr [ 108.459917][ T4537] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.54: couldn't read orphan inode 15 (err -117) [ 108.492094][ T4537] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 108.521040][ T4197] usb 4-1: USB disconnect, device number 3 [ 108.628899][ T4545] capability: warning: `syz.1.57' uses deprecated v2 capabilities in a way that may be insecure [ 108.755232][ T4553] loop4: detected capacity change from 0 to 8 [ 108.978407][ T4553] SQUASHFS error: zlib decompression failed, data probably corrupt [ 109.104270][ T4553] SQUASHFS error: Failed to read block 0x9b: -5 [ 109.205154][ T4553] SQUASHFS error: Unable to read metadata cache entry [99] [ 109.302897][ T4553] SQUASHFS error: Unable to read inode 0x127 [ 109.531566][ T1109] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.653040][ T4561] loop1: detected capacity change from 0 to 128 [ 109.688158][ T4561] EXT4-fs (loop1): Test dummy encryption mode enabled [ 109.760213][ T4561] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 109.802999][ T4197] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.024958][ T4561] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.111696][ T4197] usb 4-1: Using ep0 maxpacket: 8 [ 110.252439][ T4197] usb 4-1: config 14 has an invalid interface number: 199 but max is 0 [ 110.303592][ T4197] usb 4-1: config 14 has no interface number 0 [ 110.356090][ T1109] usb 3-1: Using ep0 maxpacket: 32 [ 110.471838][ T1109] usb 3-1: config 4 has an invalid interface number: 53 but max is 0 [ 110.488530][ T1109] usb 3-1: config 4 has no interface number 0 [ 110.531671][ T1109] usb 3-1: config 4 interface 53 altsetting 96 endpoint 0xB has an invalid bInterval 253, changing to 11 [ 110.563736][ T1109] usb 3-1: config 4 interface 53 has no altsetting 0 [ 110.813663][ T4197] usb 4-1: New USB device found, idVendor=5bfe, idProduct=a243, bcdDevice=3a.07 [ 110.841519][ T4197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.849578][ T4197] usb 4-1: Product: syz [ 110.872125][ T4197] usb 4-1: Manufacturer: syz [ 110.876753][ T4197] usb 4-1: SerialNumber: syz [ 111.093984][ T4573] loop4: detected capacity change from 0 to 512 [ 111.272516][ T4197] cdc_acm 4-1:14.199: invalid descriptor buffer length [ 111.293842][ T4197] usb 4-1: USB disconnect, device number 4 [ 111.321784][ T1109] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice=a5.7e [ 111.355032][ T4573] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 111.402037][ T1109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.494557][ T4573] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.505187][ T1109] usb 3-1: Product: syz [ 111.509745][ T1109] usb 3-1: Manufacturer: syz [ 111.521595][ T1109] usb 3-1: SerialNumber: syz [ 111.626189][ T1109] usb 3-1: can't set config #4, error -71 [ 111.636276][ T1109] usb 3-1: USB disconnect, device number 4 [ 111.905020][ T4589] loop2: detected capacity change from 0 to 1024 [ 111.958923][ T4589] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 112.009125][ T4589] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 112.009125][ T4589] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 112.009125][ T4589] [ 112.070805][ T4589] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 112.101558][ T4589] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 112.122604][ T4589] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: comm syz.2.72: inode #1: comm syz.2.72: iget: illegal inode # [ 112.155845][ T4589] EXT4-fs (loop2): no journal found [ 112.334349][ T4593] ERROR: Out of memory at tomoyo_realpath_from_path. [ 112.351982][ T4593] syz.1.83: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 112.457753][ T4593] CPU: 1 PID: 4593 Comm: syz.1.83 Not tainted syzkaller #0 [ 112.465002][ T4593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.475506][ T4593] Call Trace: [ 112.478795][ T4593] [ 112.481728][ T4593] dump_stack_lvl+0x188/0x250 [ 112.486420][ T4593] ? rcu_lock_release+0x5/0x20 [ 112.491192][ T4593] ? show_regs_print_info+0x20/0x20 [ 112.496400][ T4593] ? load_image+0x410/0x410 [ 112.500921][ T4593] warn_alloc+0x245/0x320 [ 112.505262][ T4593] ? zone_watermark_ok_safe+0x250/0x250 [ 112.510817][ T4593] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 112.516800][ T4593] ? __get_vm_area_node+0x119/0x2d0 [ 112.522027][ T4593] __vmalloc_node_range+0x2b1/0x8b0 [ 112.527246][ T4593] ? vidtv_mux_init+0x200/0x1950 [ 112.532196][ T4593] vzalloc+0x75/0x80 [ 112.536098][ T4593] ? vidtv_mux_init+0x200/0x1950 [ 112.541039][ T4593] vidtv_mux_init+0x200/0x1950 [ 112.545810][ T4593] ? __mutex_lock_common+0x435/0x2400 [ 112.551193][ T4593] vidtv_start_feed+0x368/0x590 [ 112.556142][ T4593] ? vidtv_i2c_func+0x10/0x10 [ 112.560823][ T4593] ? vidtv_stop_feed+0x250/0x250 [ 112.565769][ T4593] ? _raw_spin_unlock_irq+0x1f/0x40 [ 112.570970][ T4593] ? lockdep_hardirqs_on+0x94/0x140 [ 112.576179][ T4593] dmx_ts_feed_start_filtering+0x11c/0x210 [ 112.581995][ T4593] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 112.587899][ T4593] dvb_dmxdev_filter_start+0x422/0x1060 [ 112.593460][ T4593] dvb_demux_do_ioctl+0x48d/0x530 [ 112.598495][ T4593] dvb_usercopy+0x191/0x2b0 [ 112.603091][ T4593] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 112.608654][ T4593] ? dvb_generic_ioctl+0xb0/0xb0 [ 112.613627][ T4593] ? dvb_demux_poll+0x210/0x210 [ 112.618487][ T4593] dvb_demux_ioctl+0x25/0x30 [ 112.623083][ T4593] __se_sys_ioctl+0xfa/0x170 [ 112.627681][ T4593] do_syscall_64+0x4c/0xa0 [ 112.632105][ T4593] ? clear_bhb_loop+0x30/0x80 [ 112.636785][ T4593] ? clear_bhb_loop+0x30/0x80 [ 112.641461][ T4593] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.647355][ T4593] RIP: 0033:0x7ffa3ca18559 [ 112.651770][ T4593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.671377][ T4593] RSP: 002b:00007ffa3ac70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.679804][ T4593] RAX: ffffffffffffffda RBX: 00007ffa3cc9ffa0 RCX: 00007ffa3ca18559 [ 112.687782][ T4593] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 112.695775][ T4593] RBP: 00007ffa3caaf8b0 R08: 0000000000000000 R09: 0000000000000000 [ 112.703756][ T4593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.711729][ T4593] R13: 00007ffa3cca0038 R14: 00007ffa3cc9ffa0 R15: 00007fffe60fe858 [ 112.719740][ T4593] [ 112.899014][ T4593] Mem-Info: [ 112.918340][ T4593] active_anon:293 inactive_anon:12988 isolated_anon:0 [ 112.918340][ T4593] active_file:4665 inactive_file:46560 isolated_file:0 [ 112.918340][ T4593] unevictable:768 dirty:294 writeback:0 [ 112.918340][ T4593] slab_reclaimable:20931 slab_unreclaimable:97973 [ 112.918340][ T4593] mapped:35681 shmem:7440 pagetables:702 bounce:0 [ 112.918340][ T4593] kernel_misc_reclaimable:0 [ 112.918340][ T4593] free:1361715 free_pcp:4914 free_cma:0 [ 112.960836][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.526699][ T4593] Node 0 active_anon:1140kB inactive_anon:47272kB active_file:18460kB inactive_file:186376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142664kB dirty:2108kB writeback:500kB shmem:27680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10740kB pagetables:2696kB all_unreclaimable? no [ 113.561636][ T4593] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 113.591392][ T4593] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.618144][ T4593] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 113.625815][ T4593] Node 0 DMA32 free:1512356kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1140kB inactive_anon:47272kB active_file:18460kB inactive_file:186376kB unevictable:1536kB writepending:1868kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:13676kB local_pcp:7676kB free_cma:0kB [ 113.659978][ T4593] lowmem_reserve[]: 0 0 0 0 0 [ 113.664982][ T4593] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.701901][ T4593] lowmem_reserve[]: 0 0 0 0 0 [ 113.716960][ T4593] Node 1 Normal free:3916912kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:8kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:9836kB local_pcp:6220kB free_cma:0kB [ 113.796235][ T4593] lowmem_reserve[]: 0 0 0 0 0 [ 113.801033][ T4593] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 113.851549][ T4593] Node 0 DMA32: 3*4kB (UME) 31*8kB (M) 155*16kB (M) 431*32kB (M) 317*64kB (M) 40*128kB (UME) 14*256kB (UME) 7*512kB (M) 4*1024kB (ME) 5*2048kB (UME) 353*4096kB (M) = 1509332kB [ 113.899846][ T4593] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 113.932351][ T4593] Node 1 Normal: 105*4kB (UME) 34*8kB (UE) 13*16kB (UME) 66*32kB (UE) 35*64kB (UME) 22*128kB (UME) 7*256kB (UME) 3*512kB (UE) 0*1024kB 1*2048kB (M) 953*4096kB (UM) = 3916932kB [ 114.001553][ T4593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.031578][ T4593] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.040906][ T4593] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.086730][ T4593] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.098219][ T4593] 54164 total pagecache pages [ 114.103948][ T4593] 0 pages in swap cache [ 114.108716][ T4593] Swap cache stats: add 0, delete 0, find 0/0 [ 114.139095][ T4593] Free swap = 124996kB [ 114.150496][ T4593] Total swap = 124996kB [ 114.166536][ T4593] 2097051 pages RAM [ 114.181577][ T4593] 0 pages HighMem/MovableOnly [ 114.197803][ T4593] 415313 pages reserved [ 114.217482][ T4593] 0 pages cma reserved [ 114.225998][ T4604] loop2: detected capacity change from 0 to 4096 [ 114.260570][ T4604] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 115.038904][ T4604] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 115.064564][ T4604] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 115.112206][ T4604] ntfs3: loop2: Failed to load $BadClus. [ 115.120263][ T4604] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 115.146093][ T4604] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 115.152641][ T4622] loop1: detected capacity change from 0 to 128 [ 115.333846][ T4622] EXT4-fs (loop1): Test dummy encryption mode enabled [ 115.839026][ T4622] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 115.860389][ T4622] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.959409][ T4631] binder: 4630:4631 ioctl 4018620d 0 returned -22 [ 117.036935][ T4644] loop4: detected capacity change from 0 to 128 [ 117.158811][ T4647] loop1: detected capacity change from 0 to 256 [ 117.268812][ T4653] loop3: detected capacity change from 0 to 128 [ 117.365497][ T4653] EXT4-fs (loop3): Test dummy encryption mode enabled [ 118.373489][ T4653] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 118.630262][ T4653] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.641346][ T4662] loop2: detected capacity change from 0 to 4096 [ 118.664191][ T4662] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 118.797925][ T4674] loop1: detected capacity change from 0 to 128 [ 119.636444][ T4197] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.796967][ T4674] EXT4-fs (loop1): Test dummy encryption mode enabled [ 119.980651][ T4674] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 119.997640][ T4197] usb 5-1: Using ep0 maxpacket: 16 [ 120.010961][ T4674] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.719348][ T4689] rxe_eth0 speed is unknown, defaulting to 1000 [ 121.422126][ T4197] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 121.433441][ T4197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.446937][ T4197] usb 5-1: Product: syz [ 121.451213][ T4197] usb 5-1: Manufacturer: syz [ 121.765396][ T4197] usb 5-1: SerialNumber: syz [ 121.925529][ T4197] r8152-cfgselector 5-1: config 0 descriptor?? [ 122.100384][ T4197] r8152-cfgselector 5-1: can't set config #0, error -71 [ 122.124510][ T4702] libceph: secret too big 32 [ 122.165289][ T4703] ERROR: Out of memory at tomoyo_realpath_from_path. [ 122.172239][ T4197] r8152-cfgselector 5-1: Unknown version 0x0000 [ 122.186871][ T4706] loop1: detected capacity change from 0 to 8 [ 122.195691][ T4197] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 122.227461][ T4706] squashfs image failed sanity check [ 122.317824][ T4714] loop3: detected capacity change from 0 to 128 [ 122.339613][ T4707] nvme nvme0: failed to connect socket: -111 [ 122.535871][ T4718] loop2: detected capacity change from 0 to 64 [ 122.600803][ T4714] EXT4-fs (loop3): Test dummy encryption mode enabled [ 122.652403][ T4278] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.878779][ T4714] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 123.027341][ T4714] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.052819][ T4724] loop4: detected capacity change from 0 to 128 [ 123.201003][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 123.221660][ T4278] usb 2-1: config 1 has an invalid descriptor of length 51, skipping remainder of the config [ 123.232415][ T4278] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 123.244584][ T4724] FAT-fs (loop4): Filesystem has been set read-only [ 123.254484][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 123.561257][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 123.587099][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 123.597405][ T4278] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 89, changing to 10 [ 123.609087][ T4278] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 33137, setting to 1024 [ 123.631055][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 123.639912][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 123.654381][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 123.667165][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 123.681204][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 123.694519][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 123.713111][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 123.736066][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 124.342668][ T4734] rxe_eth0 speed is unknown, defaulting to 1000 [ 124.566894][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 124.588693][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 124.615287][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 124.631626][ T4278] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 124.641140][ T4278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.653758][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 124.656109][ T4278] usb 2-1: Product: syz [ 124.666645][ T4278] usb 2-1: Manufacturer: syz [ 124.671242][ T4278] usb 2-1: SerialNumber: syz [ 124.676325][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 124.704707][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 124.710359][ T4736] loop0: detected capacity change from 0 to 1024 [ 124.713601][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 124.756941][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 124.771988][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 124.790748][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 124.800160][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 124.810289][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 124.851673][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 124.853109][ T4740] warn_alloc: 1 callbacks suppressed [ 124.853122][ T4740] syz.2.121: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 124.865988][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 124.887925][ T4740] ,cpuset=syz2,mems_allowed=0-1 [ 124.907779][ T4740] CPU: 1 PID: 4740 Comm: syz.2.121 Not tainted syzkaller #0 [ 124.915119][ T4740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.925187][ T4740] Call Trace: [ 124.928183][ T4736] hfsplus: trying to free free bnode 0(1) [ 124.928495][ T4740] [ 124.928517][ T4740] dump_stack_lvl+0x188/0x250 [ 124.942093][ T4740] ? rcu_lock_release+0x5/0x20 [ 124.945561][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 124.946875][ T4740] ? show_regs_print_info+0x20/0x20 [ 124.946905][ T4740] ? load_image+0x410/0x410 [ 124.960596][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 124.964969][ T4740] warn_alloc+0x245/0x320 [ 124.965000][ T4740] ? zone_watermark_ok_safe+0x250/0x250 [ 124.965021][ T4740] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 124.965036][ T4740] ? __get_vm_area_node+0x119/0x2d0 [ 124.965068][ T4740] __vmalloc_node_range+0x2b1/0x8b0 [ 124.965095][ T4740] ? vidtv_mux_init+0x200/0x1950 [ 124.985387][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 124.989308][ T4740] vzalloc+0x75/0x80 [ 124.989338][ T4740] ? vidtv_mux_init+0x200/0x1950 [ 124.997328][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 125.000066][ T4740] vidtv_mux_init+0x200/0x1950 [ 125.000098][ T4740] ? __mutex_lock_common+0x435/0x2400 [ 125.009564][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 125.013429][ T4740] vidtv_start_feed+0x368/0x590 [ 125.013463][ T4740] ? vidtv_i2c_func+0x10/0x10 [ 125.013478][ T4740] ? vidtv_stop_feed+0x250/0x250 [ 125.013500][ T4740] ? _raw_spin_unlock_irq+0x1f/0x40 [ 125.013518][ T4740] ? lockdep_hardirqs_on+0x94/0x140 [ 125.013549][ T4740] dmx_ts_feed_start_filtering+0x11c/0x210 [ 125.013569][ T4740] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 125.013588][ T4740] dvb_dmxdev_filter_start+0x422/0x1060 [ 125.013617][ T4740] dvb_demux_do_ioctl+0x48d/0x530 [ 125.013639][ T4740] dvb_usercopy+0x191/0x2b0 [ 125.013656][ T4740] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 125.013674][ T4740] ? dvb_generic_ioctl+0xb0/0xb0 [ 125.013706][ T4740] ? dvb_demux_poll+0x210/0x210 [ 125.013721][ T4740] dvb_demux_ioctl+0x25/0x30 [ 125.013738][ T4740] __se_sys_ioctl+0xfa/0x170 [ 125.039348][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 125.041412][ T4740] do_syscall_64+0x4c/0xa0 [ 125.041442][ T4740] ? clear_bhb_loop+0x30/0x80 [ 125.041460][ T4740] ? clear_bhb_loop+0x30/0x80 [ 125.041478][ T4740] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.041504][ T4740] RIP: 0033:0x7f54b9426559 [ 125.041519][ T4740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.041532][ T4740] RSP: 002b:00007f54b767e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.041554][ T4740] RAX: ffffffffffffffda RBX: 00007f54b96adfa0 RCX: 00007f54b9426559 [ 125.041565][ T4740] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000004 [ 125.041575][ T4740] RBP: 00007f54b94bd8b0 R08: 0000000000000000 R09: 0000000000000000 [ 125.041584][ T4740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.041594][ T4740] R13: 00007f54b96ae038 R14: 00007f54b96adfa0 R15: 00007ffc536de548 [ 125.058871][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 125.059657][ T4740] [ 125.059701][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.064948][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 125.079351][ T4740] Mem-Info: [ 125.088832][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 125.128198][ T4740] active_anon:293 inactive_anon:6300 isolated_anon:0 [ 125.128198][ T4740] active_file:4720 inactive_file:46597 isolated_file:0 [ 125.128198][ T4740] unevictable:768 dirty:250 writeback:0 [ 125.128198][ T4740] slab_reclaimable:20987 slab_unreclaimable:98380 [ 125.128198][ T4740] mapped:29985 shmem:1792 pagetables:689 bounce:0 [ 125.128198][ T4740] kernel_misc_reclaimable:0 [ 125.128198][ T4740] free:1360316 free_pcp:11437 free_cma:0 [ 125.159232][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 125.172606][ T4740] Node 0 active_anon:1140kB inactive_anon:24688kB active_file:18680kB inactive_file:186388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119940kB dirty:992kB writeback:0kB shmem:5088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10736kB pagetables:2756kB all_unreclaimable? no [ 125.186792][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 125.195387][ T4740] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 125.198843][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 125.215070][ T4740] Node 0 [ 125.228009][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 125.271181][ T4740] DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.311103][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.327056][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 125.351029][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.352518][ T4278] usb 2-1: 0:2 : does not exist [ 125.372834][ T4740] lowmem_reserve[]: [ 125.388762][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.390078][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 125.434504][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.434666][ T4740] 0 2523 2524 2524 2524 [ 125.434713][ T4740] Node 0 DMA32 free:1507604kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1164kB inactive_anon:24268kB active_file:18688kB inactive_file:186372kB unevictable:1536kB writepending:1008kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:36952kB local_pcp:15592kB free_cma:0kB [ 125.434761][ T4740] lowmem_reserve[]: 0 0 0 0 0 [ 125.434801][ T4740] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.434846][ T4740] lowmem_reserve[]: 0 0 0 0 0 [ 125.434889][ T4740] Node 1 Normal free:3918192kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:8kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:8576kB local_pcp:2860kB free_cma:0kB [ 125.434941][ T4740] lowmem_reserve[]: 0 0 0 0 0 [ 125.434984][ T4740] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 125.435132][ T4740] Node 0 DMA32: 197*4kB (UME) 86*8kB (UME) 153*16kB (UME) 414*32kB (UME) 330*64kB (UME) 43*128kB (UME) 14*256kB (UME) 8*512kB (UM) 4*1024kB (ME) 5*2048kB (UME) 352*4096kB (M) [ 125.457464][ T4278] usb 2-1: USB disconnect, device number 5 [ 125.520014][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.550646][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.554871][ T4740] = 1507604kB [ 125.561993][ T4724] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 125.850679][ T4740] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 126.225228][ T25] audit: type=1800 audit(1792045089.357:2): pid=4724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.116" name="file1" dev="loop4" ino=1048628 res=0 errno=0 [ 126.242815][ T4740] Node 1 Normal: 124*4kB (UME) 36*8kB (UE) 12*16kB (UME) 79*32kB (UE) 37*64kB (UME) 21*128kB (UME) 8*256kB (UM) 2*512kB (U) 1*1024kB (E) 1*2048kB (M) 953*4096kB (UM) = 3918192kB [ 126.273126][ T4724] syz.4.116 (4724) used greatest stack depth: 20432 bytes left [ 126.291327][ T4740] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.321146][ T4740] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.342216][ T4740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.355458][ T4740] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.366287][ T4750] loop1: detected capacity change from 0 to 8 [ 126.373102][ T4740] 52973 total pagecache pages [ 126.377794][ T4740] 0 pages in swap cache [ 126.382139][ T4740] Swap cache stats: add 0, delete 0, find 0/0 [ 126.388454][ T4740] Free swap = 124996kB [ 126.392715][ T4740] Total swap = 124996kB [ 126.432210][ T4750] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 126.447813][ T4740] 2097051 pages RAM [ 126.457617][ T4752] loop3: detected capacity change from 0 to 256 [ 126.477850][ T4740] 0 pages HighMem/MovableOnly [ 126.490195][ T4740] 415313 pages reserved [ 126.507542][ T4740] 0 pages cma reserved [ 127.359994][ T1111] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.931606][ T1111] usb 1-1: Using ep0 maxpacket: 32 [ 128.022363][ T4767] loop1: detected capacity change from 0 to 4096 [ 128.052284][ T1111] usb 1-1: config 5 has an invalid interface number: 40 but max is 0 [ 128.091285][ T1111] usb 1-1: config 5 has no interface number 0 [ 128.112409][ T1111] usb 1-1: config 5 interface 40 has no altsetting 0 [ 128.291070][ T4767] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 128.399749][ T4777] ubi0: attaching mtd0 [ 128.413073][ T4777] ubi0: scanning is finished [ 128.417748][ T4777] ubi0: empty MTD device detected [ 128.499626][ T4777] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 128.545292][ T1111] usb 1-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=14.32 [ 128.569333][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.641608][ T1111] usb 1-1: Product: syz [ 128.645869][ T1111] usb 1-1: Manufacturer: syz [ 128.702380][ T1111] usb 1-1: SerialNumber: syz [ 128.819354][ T4781] loop2: detected capacity change from 0 to 256 [ 129.908630][ T4791] rxe_eth0 speed is unknown, defaulting to 1000 [ 130.484335][ T4793] ERROR: Out of memory at tomoyo_realpath_from_path. [ 130.541778][ T1111] rtsx_usb: probe of 1-1:5.40 failed with error -22 [ 130.604608][ T1111] usb 1-1: USB disconnect, device number 5 [ 132.138639][ T4810] loop2: detected capacity change from 0 to 512 [ 132.293732][ T4817] loop1: detected capacity change from 0 to 256 [ 132.302179][ T4810] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 132.323663][ T4810] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.294914][ T4832] loop2: detected capacity change from 0 to 64 [ 134.302997][ T4835] loop1: detected capacity change from 0 to 256 [ 134.568028][ T4837] loop0: detected capacity change from 0 to 4096 [ 134.637269][ T4841] loop2: detected capacity change from 0 to 64 [ 134.714662][ T4841] hfs: file_umask requires a value [ 134.720530][ T4841] hfs: unable to parse mount options [ 134.739096][ T4837] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 134.771307][ T4839] loop1: detected capacity change from 0 to 4096 [ 134.779994][ T4837] NILFS (loop0): mounting unchecked fs [ 134.826054][ T4352] udevd[4352]: incorrect nilfs2 checksum on /dev/loop0 [ 134.860677][ T4837] NILFS (loop0): recovery cancelled because norecovery option was specified for a read/write mount [ 135.035241][ T4839] ntfs: (device loop1): parse_options(): NLS character set is]9-5 not found. Using previous one cp866. [ 135.091755][ T4839] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 135.098810][ T4846] loop4: detected capacity change from 0 to 764 [ 135.133573][ T4839] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 135.203252][ T4839] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 135.281630][ T4839] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 135.311711][ T4839] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 135.334445][ T4839] ntfs: volume version 3.1. [ 135.361508][ T4839] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 135.410842][ T4848] loop0: detected capacity change from 0 to 256 [ 135.449339][ T4850] loop4: detected capacity change from 0 to 256 [ 135.452776][ T4839] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 135.534368][ T4839] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 135.593790][ T4839] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 135.704927][ T4854] loop4: detected capacity change from 0 to 64 [ 136.577584][ T4844] loop2: detected capacity change from 0 to 32768 [ 136.695847][ T4844] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.158 (4844) [ 136.938607][ T4844] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 136.955367][ T4844] BTRFS info (device loop2): using free space tree [ 136.963890][ T4844] BTRFS info (device loop2): has skinny extents [ 137.032500][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 137.225458][ T4844] BTRFS info (device loop2): enabling ssd optimizations [ 137.275386][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.475304][ T7] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 137.484943][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.540948][ T4901] ERROR: Out of memory at tomoyo_realpath_from_path. [ 137.570840][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 137.581733][ T7] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 137.622405][ T7] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 137.648208][ T7] usb 1-1: Manufacturer: syz [ 137.678463][ T7] usb 1-1: config 0 descriptor?? [ 137.734337][ T7] igorplugusb 1-1:0.0: incorrect number of endpoints [ 137.745808][ T21] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 137.764508][ T4905] FAT-fs (loop3): Directory bread(block 64) failed [ 137.778963][ T4905] FAT-fs (loop3): Directory bread(block 65) failed [ 137.788900][ T4905] FAT-fs (loop3): Directory bread(block 66) failed [ 137.802140][ T4905] FAT-fs (loop3): Directory bread(block 67) failed [ 137.818238][ T4905] FAT-fs (loop3): Directory bread(block 68) failed [ 137.833862][ T4905] FAT-fs (loop3): Directory bread(block 69) failed [ 137.847642][ T4905] FAT-fs (loop3): Directory bread(block 70) failed [ 137.856298][ T4905] FAT-fs (loop3): Directory bread(block 71) failed [ 137.870636][ T4905] FAT-fs (loop3): Directory bread(block 72) failed [ 137.878756][ T4905] FAT-fs (loop3): Directory bread(block 73) failed [ 137.953278][ T21] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 137.973789][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.985423][ T21] usb 5-1: Product: syz [ 137.997890][ T21] usb 5-1: Manufacturer: syz [ 138.004752][ T21] usb 5-1: SerialNumber: syz [ 138.012553][ T21] r8152-cfgselector 5-1: config 0 descriptor?? [ 138.026348][ T4335] usb 1-1: USB disconnect, device number 6 [ 138.042222][ T4197] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 138.162567][ T4918] exfat: Deprecated parameter 'utf8' [ 138.168578][ T4918] exfat: Deprecated parameter 'utf8' [ 138.175084][ T4918] exfat: Deprecated parameter 'namecase' [ 138.239960][ T4918] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 138.351830][ T4197] usb 2-1: Using ep0 maxpacket: 16 [ 138.541889][ T4197] usb 2-1: unable to get BOS descriptor or descriptor too short [ 138.592093][ T21] r8152-cfgselector 5-1: Unknown version 0x0000 [ 138.752614][ T4197] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.775656][ T21] r8152-cfgselector 5-1: USB disconnect, device number 4 [ 139.103636][ T4197] usb 2-1: config 1 interface 0 has no altsetting 0 [ 139.325379][ T4916] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 139.348919][ T4938] set_capacity_and_notify: 5 callbacks suppressed [ 139.348951][ T4938] loop0: detected capacity change from 0 to 128 [ 139.371815][ T4197] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 139.385435][ T4197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.400697][ T4935] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 139.413643][ T4197] usb 2-1: Product: syz [ 139.418013][ T4197] usb 2-1: Manufacturer: syz [ 139.423264][ T4935] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.434755][ T4197] usb 2-1: SerialNumber: syz [ 139.438780][ T4938] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 139.498195][ T4938] FAT-fs (loop0): Filesystem has been set read-only [ 139.772366][ T4916] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.842456][ T4946] loop4: detected capacity change from 0 to 256 [ 139.857401][ T4916] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.911332][ T4946] FAT-fs (loop4): Directory bread(block 1285) failed [ 139.935779][ T4916] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 139.969911][ T4946] FAT-fs (loop4): Directory bread(block 1286) failed [ 139.977252][ T4946] FAT-fs (loop4): Directory bread(block 1287) failed [ 139.988960][ T4197] snd-ua101 2-1:1.1: invalid num_altsetting [ 139.996842][ T4946] FAT-fs (loop4): Directory bread(block 1288) failed [ 139.999953][ T4947] warn_alloc: 1 callbacks suppressed [ 139.999982][ T4947] syz.0.186: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 140.013509][ T4197] usb 2-1: USB disconnect, device number 6 [ 140.039811][ T4946] FAT-fs (loop4): Directory bread(block 1285) failed [ 140.050950][ T4946] FAT-fs (loop4): Directory bread(block 1286) failed [ 140.059449][ T4947] ,cpuset=syz0,mems_allowed=0-1 [ 140.060426][ T4916] usb 3-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 140.065796][ T4946] FAT-fs (loop4): Directory bread(block 1287) failed [ 140.085800][ T4947] CPU: 1 PID: 4947 Comm: syz.0.186 Not tainted syzkaller #0 [ 140.095320][ T4947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.106577][ T4947] Call Trace: [ 140.110167][ T4947] [ 140.113147][ T4947] dump_stack_lvl+0x188/0x250 [ 140.118547][ T4916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.118583][ T4947] ? rcu_lock_release+0x5/0x20 [ 140.133576][ T4947] ? show_regs_print_info+0x20/0x20 [ 140.139022][ T4947] ? load_image+0x410/0x410 [ 140.143739][ T4947] warn_alloc+0x245/0x320 [ 140.148434][ T4947] ? zone_watermark_ok_safe+0x250/0x250 [ 140.154016][ T4947] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 140.160755][ T4947] ? __get_vm_area_node+0x119/0x2d0 [ 140.166824][ T4947] __vmalloc_node_range+0x2b1/0x8b0 [ 140.172324][ T4947] ? vidtv_mux_init+0x200/0x1950 [ 140.177305][ T4947] vzalloc+0x75/0x80 [ 140.181408][ T4947] ? vidtv_mux_init+0x200/0x1950 [ 140.186371][ T4947] vidtv_mux_init+0x200/0x1950 [ 140.191238][ T4947] ? __mutex_lock_common+0x435/0x2400 [ 140.196141][ T4916] pegasus 3-1:1.0: Missing or invalid endpoints [ 140.196641][ T4947] vidtv_start_feed+0x368/0x590 [ 140.208694][ T4947] ? vidtv_i2c_func+0x10/0x10 [ 140.213802][ T4947] ? vidtv_stop_feed+0x250/0x250 [ 140.218779][ T4947] ? _raw_spin_unlock_irq+0x1f/0x40 [ 140.224350][ T4947] ? lockdep_hardirqs_on+0x94/0x140 [ 140.230106][ T4947] dmx_ts_feed_start_filtering+0x11c/0x210 [ 140.236189][ T4947] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 140.242862][ T4947] dvb_dmxdev_filter_start+0x422/0x1060 [ 140.248953][ T4947] dvb_demux_do_ioctl+0x48d/0x530 [ 140.254112][ T4947] dvb_usercopy+0x191/0x2b0 [ 140.258963][ T4947] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 140.264550][ T4947] ? dvb_generic_ioctl+0xb0/0xb0 [ 140.270515][ T4947] ? dvb_demux_poll+0x210/0x210 [ 140.277034][ T4947] dvb_demux_ioctl+0x25/0x30 [ 140.283171][ T4947] __se_sys_ioctl+0xfa/0x170 [ 140.288005][ T4947] do_syscall_64+0x4c/0xa0 [ 140.293424][ T4947] ? clear_bhb_loop+0x30/0x80 [ 140.299738][ T4947] ? clear_bhb_loop+0x30/0x80 [ 140.305249][ T4947] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.311554][ T4947] RIP: 0033:0x7f44d41fc559 [ 140.316793][ T4947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.338289][ T4947] RSP: 002b:00007f44d2454028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.347182][ T4947] RAX: ffffffffffffffda RBX: 00007f44d4483fa0 RCX: 00007f44d41fc559 [ 140.356194][ T4947] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000004 [ 140.365065][ T4947] RBP: 00007f44d42938b0 R08: 0000000000000000 R09: 0000000000000000 [ 140.374555][ T4947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.385027][ T4947] R13: 00007f44d4484038 R14: 00007f44d4483fa0 R15: 00007ffc8d7ee438 [ 140.396797][ T4947] [ 140.401780][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.406216][ T4916] usb 3-1: USB disconnect, device number 5 [ 140.418327][ T4946] FAT-fs (loop4): Directory bread(block 1288) failed [ 140.427662][ T4946] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 140.578433][ T4950] loop1: detected capacity change from 0 to 4096 [ 140.615684][ T4947] Mem-Info: [ 140.619980][ T4947] active_anon:347 inactive_anon:6678 isolated_anon:0 [ 140.619980][ T4947] active_file:12783 inactive_file:40563 isolated_file:0 [ 140.619980][ T4947] unevictable:768 dirty:236 writeback:0 [ 140.619980][ T4947] slab_reclaimable:20813 slab_unreclaimable:99319 [ 140.619980][ T4947] mapped:30090 shmem:2177 pagetables:645 bounce:0 [ 140.619980][ T4947] kernel_misc_reclaimable:0 [ 140.619980][ T4947] free:1359949 free_pcp:8672 free_cma:0 [ 141.899104][ T4950] ntfs: volume version 3.1. [ 141.921898][ T4947] Node 0 active_anon:1480kB inactive_anon:101680kB active_file:58956kB inactive_file:154196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120300kB dirty:952kB writeback:0kB shmem:82200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11020kB pagetables:2528kB all_unreclaimable? no [ 141.926040][ T4950] __ntfs_error: 7 callbacks suppressed [ 141.926060][ T4950] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 141.958381][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.958522][ T4947] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 142.026966][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.039951][ T4950] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 142.068821][ T4950] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 142.085106][ T4950] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 142.108828][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.120985][ T4950] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 142.137970][ T4950] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 142.158851][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.223610][ T4947] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.276193][ T4950] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 142.292553][ T4950] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 142.382289][ T4947] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 142.389848][ T4947] Node 0 DMA32 free:1445612kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1480kB inactive_anon:83180kB active_file:58956kB inactive_file:154196kB unevictable:1536kB writepending:952kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:23100kB local_pcp:1668kB free_cma:0kB [ 142.426959][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.439757][ T4950] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 142.456607][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.470201][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.493429][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.997760][ T4950] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x2, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 143.025268][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.055177][ T4947] lowmem_reserve[]: 0 0 0 0 0 [ 143.217774][ T4947] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 143.250678][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.267817][ T4947] lowmem_reserve[]: 0 0 0 0 0 [ 143.274540][ T4947] Node 1 Normal free:3919948kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:6928kB local_pcp:4488kB free_cma:0kB [ 143.307335][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.718537][ T4947] lowmem_reserve[]: 0 0 0 0 0 [ 143.756242][ T4947] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 143.789848][ T4947] Node 0 DMA32: 4*4kB (UME) 304*8kB (ME) 161*16kB (UM) 70*32kB (UME) 27*64kB (UME) 19*128kB (UME) 19*256kB (UME) 18*512kB (M) 10*1024kB (ME) 5*2048kB (ME) 342*4096kB (M) = 1446816kB [ 143.823162][ T4947] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 143.851672][ T4947] Node 1 Normal: 134*4kB (UME) 39*8kB (UE) 15*16kB (UME) 113*32kB (UE) 46*64kB (UME) 21*128kB (UME) 8*256kB (UM) 2*512kB (U) 1*1024kB (E) 1*2048kB (M) 953*4096kB (UM) = 3919968kB [ 143.950471][ T4947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.021525][ T4947] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.074124][ T4947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.111715][ T4947] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.127008][ T4976] loop4: detected capacity change from 0 to 1024 [ 144.205215][ T4976] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 144.207762][ T4980] loop2: detected capacity change from 0 to 512 [ 144.224814][ T4976] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 144.237949][ T4947] 57350 total pagecache pages [ 144.251554][ T4947] 0 pages in swap cache [ 144.256988][ T4947] Swap cache stats: add 0, delete 0, find 0/0 [ 144.282157][ T4976] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 144.301603][ T4976] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.324690][ T4947] Free swap = 124996kB [ 144.351237][ T4947] Total swap = 124996kB [ 144.357786][ T4976] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 144.393009][ T4947] 2097051 pages RAM [ 144.400470][ T4947] 0 pages HighMem/MovableOnly [ 144.461569][ T4197] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 144.470389][ T4947] 415313 pages reserved [ 144.470408][ T4947] 0 pages cma reserved [ 144.515862][ T4980] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 144.614268][ T4980] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.791545][ T4197] usb 2-1: Using ep0 maxpacket: 32 [ 145.622233][ T4197] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 145.700264][ T4197] usb 2-1: config 0 has no interface number 0 [ 145.797628][ T4197] usb 2-1: config 0 interface 132 has no altsetting 0 [ 145.830751][ T4999] loop4: detected capacity change from 0 to 128 [ 147.013908][ T4999] EXT4-fs (loop4): Test dummy encryption mode enabled [ 147.100853][ T4999] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 147.130923][ T5003] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.143541][ T5009] capability: warning: `syz.1.206' uses 32-bit capabilities (legacy support in use) [ 147.164488][ T4999] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 147.184376][ T4197] usb 2-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 147.201854][ T4197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.231815][ T4197] usb 2-1: config 0 descriptor?? [ 147.961732][ T4197] usb 2-1: can't set config #0, error -71 [ 148.029391][ T4197] usb 2-1: USB disconnect, device number 7 [ 148.409300][ T5021] rxe_eth0 speed is unknown, defaulting to 1000 [ 149.366826][ T5029] loop4: detected capacity change from 0 to 512 [ 149.493651][ T5029] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 149.531768][ T5029] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.534842][ T5037] loop0: detected capacity change from 0 to 512 [ 149.611633][ T1109] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 149.630461][ T5037] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 149.747119][ T5037] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.772452][ T1109] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 151.840860][ T1109] usb 3-1: config 0 has no interface number 0 [ 151.890395][ T1109] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 151.949405][ T1109] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 152.122106][ T1109] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 152.142840][ T1109] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 152.190117][ T1109] usb 3-1: Manufacturer: syz [ 152.233682][ T1109] usb 3-1: SerialNumber: syz [ 152.302248][ T1109] usb 3-1: config 0 descriptor?? [ 152.331723][ T1109] usb 3-1: can't set config #0, error -71 [ 152.381351][ T1109] usb 3-1: USB disconnect, device number 6 [ 153.010473][ T5067] loop3: detected capacity change from 0 to 128 [ 153.042251][ T5052] loop0: detected capacity change from 0 to 32768 [ 153.139838][ T5067] EXT4-fs (loop3): Test dummy encryption mode enabled [ 153.238725][ T5067] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 153.352624][ T5052] jfs: Unrecognized mount option "0000000000000000000318446744073709551615܇$|춹Ssh5S&8piFW.Mʈ(+8 [ 153.352624][ T5052] _)};KoH;1}SN-̭Y-0QmH؝}K!#׀5 [ 161.804068][ T5172] dump_stack_lvl+0x188/0x250 [ 161.809454][ T5172] ? rcu_lock_release+0x5/0x20 [ 161.814547][ T5172] ? show_regs_print_info+0x20/0x20 [ 161.820333][ T5172] ? load_image+0x410/0x410 [ 161.825365][ T5172] warn_alloc+0x245/0x320 [ 161.830495][ T5172] ? zone_watermark_ok_safe+0x250/0x250 [ 161.837728][ T5172] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 161.845342][ T5172] ? __get_vm_area_node+0x119/0x2d0 [ 161.852337][ T5172] __vmalloc_node_range+0x2b1/0x8b0 [ 161.858767][ T5172] ? vidtv_s302m_encoder_init+0x174/0x770 [ 161.865582][ T5172] vzalloc+0x75/0x80 [ 161.869507][ T5172] ? vidtv_s302m_encoder_init+0x174/0x770 [ 161.875637][ T5172] vidtv_s302m_encoder_init+0x174/0x770 [ 161.882177][ T5172] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 161.888659][ T5172] vidtv_channel_s302m_init+0x357/0x830 [ 161.894564][ T5172] vidtv_channels_init+0x41/0x90 [ 161.899560][ T5172] vidtv_mux_init+0x4d0/0x1950 [ 161.905149][ T5172] ? __mutex_lock_common+0x435/0x2400 [ 161.911135][ T5172] vidtv_start_feed+0x368/0x590 [ 161.916835][ T5172] ? vidtv_i2c_func+0x10/0x10 [ 161.921805][ T5164] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.921984][ T5172] ? vidtv_stop_feed+0x250/0x250 [ 161.937973][ T5172] ? _raw_spin_unlock_irq+0x1f/0x40 [ 161.943516][ T5172] ? lockdep_hardirqs_on+0x94/0x140 [ 161.950245][ T5172] dmx_ts_feed_start_filtering+0x11c/0x210 [ 161.956873][ T5172] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 161.964061][ T5172] dvb_dmxdev_filter_start+0x422/0x1060 [ 161.969659][ T5172] dvb_demux_do_ioctl+0x48d/0x530 [ 161.974851][ T5172] dvb_usercopy+0x191/0x2b0 [ 161.979386][ T5172] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 161.985787][ T5172] ? dvb_generic_ioctl+0xb0/0xb0 [ 161.991026][ T5172] ? dvb_demux_poll+0x210/0x210 [ 161.995883][ T5172] dvb_demux_ioctl+0x25/0x30 [ 162.000498][ T5172] __se_sys_ioctl+0xfa/0x170 [ 162.005087][ T5172] do_syscall_64+0x4c/0xa0 [ 162.009496][ T5172] ? clear_bhb_loop+0x30/0x80 [ 162.014253][ T5172] ? clear_bhb_loop+0x30/0x80 [ 162.019025][ T5172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.024917][ T5172] RIP: 0033:0x7ffa3ca18559 [ 162.029526][ T5172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.052669][ T5172] RSP: 002b:00007ffa3ac70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.063691][ T5172] RAX: ffffffffffffffda RBX: 00007ffa3cc9ffa0 RCX: 00007ffa3ca18559 [ 162.074157][ T5172] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 162.083635][ T5172] RBP: 00007ffa3caaf8b0 R08: 0000000000000000 R09: 0000000000000000 [ 162.094147][ T5172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.105930][ T5172] R13: 00007ffa3cca0038 R14: 00007ffa3cc9ffa0 R15: 00007fffe60fe858 [ 162.116071][ T5172] [ 162.121139][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.172129][ T5172] Mem-Info: [ 162.176584][ T5172] active_anon:379 inactive_anon:6949 isolated_anon:0 [ 162.176584][ T5172] active_file:14835 inactive_file:40431 isolated_file:0 [ 162.176584][ T5172] unevictable:768 dirty:191 writeback:0 [ 162.176584][ T5172] slab_reclaimable:21041 slab_unreclaimable:98002 [ 162.176584][ T5172] mapped:30311 shmem:2532 pagetables:656 bounce:0 [ 162.176584][ T5172] kernel_misc_reclaimable:0 [ 162.176584][ T5172] free:1355591 free_pcp:9378 free_cma:0 [ 162.232916][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.963996][ T5172] Node 0 active_anon:1544kB inactive_anon:34212kB active_file:59212kB inactive_file:161756kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124096kB dirty:764kB writeback:0kB shmem:10768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11348kB pagetables:2652kB all_unreclaimable? no [ 163.073790][ T5169] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 163.101595][ T5172] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 163.145548][ T5172] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 163.181297][ T5169] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.202362][ T5172] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 163.368512][ T5172] Node 0 DMA32 free:1484864kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1456kB inactive_anon:46024kB active_file:59160kB inactive_file:161776kB unevictable:1536kB writepending:768kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:13976kB local_pcp:2184kB free_cma:0kB [ 163.406595][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.447791][ T5172] lowmem_reserve[]: 0 0 0 0 0 [ 163.501571][ T5172] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 163.636324][ T5172] lowmem_reserve[]: 0 0 0 0 0 [ 163.653245][ T5172] Node 1 Normal free:3921208kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:5700kB local_pcp:2472kB free_cma:0kB [ 163.742606][ T5193] ubi0: attaching mtd0 [ 163.752639][ T5193] ubi0: scanning is finished [ 163.850863][ T5193] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 164.099206][ T5172] lowmem_reserve[]: 0 0 0 0 0 [ 164.107670][ T5172] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 164.123556][ T5172] Node 0 DMA32: 418*4kB (UME) 183*8kB (UME) 289*16kB (UME) 392*32kB (UME) 395*64kB (UM) 64*128kB (UME) 29*256kB (UME) 18*512kB (UM) 10*1024kB (UME) 3*2048kB (ME) 340*4096kB (M) = 1479440kB [ 164.146599][ T5172] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 164.187316][ T5172] Node 1 Normal: 151*4kB (UME) 44*8kB (UE) 15*16kB (UME) 131*32kB (UE) 53*64kB (UME) 22*128kB (UME) 8*256kB (UM) 2*512kB (U) 1*1024kB (E) 1*2048kB (M) 953*4096kB (UM) = 3921228kB [ 164.204659][ T5199] loop2: detected capacity change from 0 to 256 [ 164.215534][ T5201] loop4: detected capacity change from 0 to 128 [ 164.231168][ T5172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.258756][ T5172] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.269361][ T5172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.302052][ T5201] EXT4-fs (loop4): Test dummy encryption mode enabled [ 164.502066][ T5172] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.522223][ T5172] 62676 total pagecache pages [ 164.616300][ T5172] 0 pages in swap cache [ 164.670678][ T5172] Swap cache stats: add 0, delete 0, find 0/0 [ 164.694324][ T5172] Free swap = 124996kB [ 164.706680][ T5172] Total swap = 124996kB [ 164.716317][ T5172] 2097051 pages RAM [ 164.721049][ T5172] 0 pages HighMem/MovableOnly [ 164.727807][ T5172] 415313 pages reserved [ 164.733545][ T5172] 0 pages cma reserved [ 164.892167][ T5201] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 164.896302][ T5199] FAT-fs (loop2): Directory bread(block 64) failed [ 164.927333][ T5199] FAT-fs (loop2): Directory bread(block 65) failed [ 164.936872][ T5199] FAT-fs (loop2): Directory bread(block 66) failed [ 164.955578][ T5199] FAT-fs (loop2): Directory bread(block 67) failed [ 164.966924][ T5199] FAT-fs (loop2): Directory bread(block 68) failed [ 164.993374][ T5199] FAT-fs (loop2): Directory bread(block 69) failed [ 165.008675][ T5199] FAT-fs (loop2): Directory bread(block 70) failed [ 165.022026][ T5201] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.043989][ T5199] FAT-fs (loop2): Directory bread(block 71) failed [ 165.065877][ T5212] loop1: detected capacity change from 0 to 512 [ 165.112252][ T5199] FAT-fs (loop2): Directory bread(block 72) failed [ 165.136638][ T5214] loop3: detected capacity change from 0 to 512 [ 165.182243][ T5199] FAT-fs (loop2): Directory bread(block 73) failed [ 165.691359][ T5212] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 165.711553][ T5212] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.141522][ T5214] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 166.459159][ T5214] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.590136][ T5230] loop0: detected capacity change from 0 to 512 [ 166.712120][ T5230] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 166.949082][ T5238] rxe_eth0 speed is unknown, defaulting to 1000 [ 167.601747][ T5230] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.833887][ T5243] loop2: detected capacity change from 0 to 128 [ 167.890696][ T5247] loop3: detected capacity change from 0 to 512 [ 167.903606][ T5243] EXT4-fs (loop2): Test dummy encryption mode enabled [ 168.048520][ T5243] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 168.082891][ T5243] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.295853][ T5250] ubi0: attaching mtd0 [ 168.311061][ T5250] ubi0: scanning is finished [ 168.663327][ T5250] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 168.837940][ T5247] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 168.892420][ T5256] ERROR: Out of memory at tomoyo_realpath_from_path. [ 168.997569][ T5247] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.157722][ T5266] Zero length message leads to an empty skb [ 169.832115][ T5271] loop1: detected capacity change from 0 to 128 [ 170.160048][ T5280] loop0: detected capacity change from 0 to 512 [ 170.222866][ T5271] EXT4-fs (loop1): Test dummy encryption mode enabled [ 170.300203][ T5271] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 170.352533][ T5280] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 170.413733][ T5271] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.446099][ T5280] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.508169][ T5295] loop2: detected capacity change from 0 to 512 [ 171.600041][ T5299] loop0: detected capacity change from 0 to 128 [ 171.843569][ T5302] rxe_eth0 speed is unknown, defaulting to 1000 [ 172.527914][ T5299] EXT4-fs (loop0): Test dummy encryption mode enabled [ 172.684741][ T5307] loop1: detected capacity change from 0 to 256 [ 172.734249][ T5299] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 172.734473][ T5295] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 172.770872][ T5295] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.826607][ T5311] ubi0: attaching mtd0 [ 172.839093][ T5311] ubi0: scanning is finished [ 172.903233][ T5299] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.098391][ T5311] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 173.196770][ T5307] exfat: Deprecated parameter 'utf8' [ 173.308505][ T5315] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.278'. [ 173.331195][ T5307] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 173.993269][ T5322] ERROR: Out of memory at tomoyo_realpath_from_path. [ 174.031334][ T5325] ERROR: Out of memory at tomoyo_realpath_from_path. [ 174.347467][ T5335] loop4: detected capacity change from 0 to 512 [ 174.394583][ T5332] loop0: detected capacity change from 0 to 128 [ 174.513798][ T5335] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 174.531057][ T5332] EXT4-fs (loop0): Test dummy encryption mode enabled [ 174.593784][ T5335] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.614231][ T5332] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 174.637130][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.685617][ T5332] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.272920][ T5362] ubi0: attaching mtd0 [ 177.283180][ T5362] ubi0: scanning is finished [ 177.608116][ T5362] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 177.895039][ T5367] syz.4.292: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 177.917892][ T5369] loop1: detected capacity change from 0 to 128 [ 177.931886][ T5367] CPU: 1 PID: 5367 Comm: syz.4.292 Not tainted syzkaller #0 [ 177.941576][ T5367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.953879][ T5367] Call Trace: [ 177.957924][ T5367] [ 177.961350][ T5367] dump_stack_lvl+0x188/0x250 [ 177.967300][ T5367] ? rcu_lock_release+0x5/0x20 [ 177.973157][ T5367] ? show_regs_print_info+0x20/0x20 [ 177.984330][ T5367] ? load_image+0x410/0x410 [ 177.990891][ T5367] warn_alloc+0x245/0x320 [ 177.998255][ T5367] ? zone_watermark_ok_safe+0x250/0x250 [ 178.006480][ T5367] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 178.014628][ T5367] ? __get_vm_area_node+0x119/0x2d0 [ 178.021945][ T5367] __vmalloc_node_range+0x2b1/0x8b0 [ 178.027719][ T5367] ? vidtv_mux_init+0x200/0x1950 [ 178.033653][ T5367] vzalloc+0x75/0x80 [ 178.038338][ T5367] ? vidtv_mux_init+0x200/0x1950 [ 178.046383][ T5367] vidtv_mux_init+0x200/0x1950 [ 178.052056][ T5367] ? __mutex_lock_common+0x435/0x2400 [ 178.059356][ T5367] vidtv_start_feed+0x368/0x590 [ 178.065563][ T5367] ? vidtv_i2c_func+0x10/0x10 [ 178.070659][ T5367] ? vidtv_stop_feed+0x250/0x250 [ 178.076106][ T5367] ? _raw_spin_unlock_irq+0x1f/0x40 [ 178.081694][ T5367] ? lockdep_hardirqs_on+0x94/0x140 [ 178.087379][ T5367] dmx_ts_feed_start_filtering+0x11c/0x210 [ 178.095969][ T5367] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 178.102698][ T5367] dvb_dmxdev_filter_start+0x422/0x1060 [ 178.110475][ T5367] dvb_demux_do_ioctl+0x48d/0x530 [ 178.116974][ T5367] dvb_usercopy+0x191/0x2b0 [ 178.121605][ T5367] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 178.128402][ T5367] ? dvb_generic_ioctl+0xb0/0xb0 [ 178.134796][ T5367] ? dvb_demux_poll+0x210/0x210 [ 178.140131][ T5367] dvb_demux_ioctl+0x25/0x30 [ 178.144986][ T5367] __se_sys_ioctl+0xfa/0x170 [ 178.151017][ T5367] do_syscall_64+0x4c/0xa0 [ 178.157143][ T5367] ? clear_bhb_loop+0x30/0x80 [ 178.162650][ T5367] ? clear_bhb_loop+0x30/0x80 [ 178.168256][ T5367] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.175694][ T5367] RIP: 0033:0x7fa408374559 [ 178.181441][ T5367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.204621][ T5367] RSP: 002b:00007fa4065cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.215165][ T5367] RAX: ffffffffffffffda RBX: 00007fa4085fbfa0 RCX: 00007fa408374559 [ 178.225363][ T5367] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 178.236565][ T5367] RBP: 00007fa40840b8b0 R08: 0000000000000000 R09: 0000000000000000 [ 178.246027][ T5367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.255225][ T5367] R13: 00007fa4085fc038 R14: 00007fa4085fbfa0 R15: 00007ffd409117f8 [ 178.263673][ T5367] [ 178.287244][ T5367] Mem-Info: [ 178.291292][ T5367] active_anon:912 inactive_anon:9088 isolated_anon:0 [ 178.291292][ T5367] active_file:14853 inactive_file:40420 isolated_file:0 [ 178.291292][ T5367] unevictable:768 dirty:83 writeback:0 [ 178.291292][ T5367] slab_reclaimable:20912 slab_unreclaimable:99729 [ 178.291292][ T5367] mapped:32968 shmem:5134 pagetables:638 bounce:0 [ 178.291292][ T5367] kernel_misc_reclaimable:0 [ 178.291292][ T5367] free:1348281 free_pcp:11862 free_cma:0 [ 178.335228][ T5369] EXT4-fs (loop1): Test dummy encryption mode enabled [ 178.350055][ T5367] Node 0 active_anon:1316kB inactive_anon:35840kB active_file:59212kB inactive_file:161680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131872kB dirty:332kB writeback:0kB shmem:16256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11264kB pagetables:2652kB all_unreclaimable? no [ 178.389842][ T5367] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 178.469273][ T5367] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.504513][ T5369] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 178.519676][ T5367] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 178.539725][ T5369] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.631133][ T5381] loop3: detected capacity change from 0 to 512 [ 178.709886][ T5367] Node 0 DMA32 free:1474644kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1440kB inactive_anon:35764kB active_file:59216kB inactive_file:161704kB unevictable:1536kB writepending:332kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:26980kB local_pcp:6512kB free_cma:0kB [ 178.735504][ T5384] loop2: detected capacity change from 0 to 512 [ 178.757655][ T5367] lowmem_reserve[]: 0 0 0 0 0 [ 178.776467][ T5367] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.895118][ T5367] lowmem_reserve[]: 0 0 0 0 0 [ 178.913554][ T5367] Node 1 Normal free:3921988kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:4972kB local_pcp:2472kB free_cma:0kB [ 179.432426][ T5381] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 179.499367][ T5367] lowmem_reserve[]: 0 0 0 0 0 [ 179.505660][ T5367] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 179.523162][ T5367] Node 0 DMA32: 1055*4kB (ME) 838*8kB (ME) 525*16kB (ME) 448*32kB (UME) 378*64kB (UME) 69*128kB (UME) 29*256kB (UME) 16*512kB (UM) 9*1024kB (UME) 4*2048kB (UME) 338*4096kB (M) = 1484156kB [ 179.548528][ T5381] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.595398][ T5367] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 179.686803][ T5367] Node 1 Normal: 161*4kB (UME) 44*8kB (UE) 16*16kB (UME) 139*32kB (UE) 58*64kB (UME) 23*128kB (UME) 8*256kB (UM) 2*512kB (U) 1*1024kB (E) 1*2048kB (M) 953*4096kB (UM) = 3921988kB [ 179.736633][ T5367] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.751855][ T5367] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.766143][ T5367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.787485][ T5367] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.814580][ T5367] 57678 total pagecache pages [ 179.824777][ T5367] 0 pages in swap cache [ 179.875704][ T5367] Swap cache stats: add 0, delete 0, find 0/0 [ 179.910472][ T5367] Free swap = 124996kB [ 179.927861][ T5384] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 179.960687][ T5384] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.975015][ T5367] Total swap = 124996kB [ 179.979903][ T5367] 2097051 pages RAM [ 180.534356][ T5367] 0 pages HighMem/MovableOnly [ 180.608896][ T5367] 415313 pages reserved [ 180.618136][ T5367] 0 pages cma reserved [ 180.836836][ T5416] ubi0: attaching mtd0 [ 180.847054][ T5416] ubi0: scanning is finished [ 181.265935][ T5416] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 182.167653][ T5425] loop0: detected capacity change from 0 to 512 [ 182.310632][ T5425] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 182.526390][ T5425] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.954303][ T5452] loop1: detected capacity change from 0 to 128 [ 183.735143][ T5452] EXT4-fs (loop1): Test dummy encryption mode enabled [ 183.768991][ T5454] rxe_eth0 speed is unknown, defaulting to 1000 [ 183.873592][ T5452] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 183.900345][ T5452] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.083616][ T5441] loop3: detected capacity change from 0 to 40427 [ 184.459425][ T5441] F2FS-fs (loop3): invalid crc value [ 184.569501][ T5459] loop4: detected capacity change from 0 to 512 [ 184.586602][ T5441] F2FS-fs (loop3): Found nat_bits in checkpoint [ 184.926877][ T5459] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 185.098492][ T5459] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.161990][ T5470] loop1: detected capacity change from 0 to 128 [ 185.183355][ T5441] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 185.271719][ T5470] EXT4-fs (loop1): Test dummy encryption mode enabled [ 185.416021][ T5470] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 185.456152][ T5470] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.782008][ T5491] loop2: detected capacity change from 0 to 512 [ 188.136734][ T5491] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 188.692005][ T5491] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.764552][ T5506] loop4: detected capacity change from 0 to 1024 [ 189.095041][ T5513] rxe_eth0 speed is unknown, defaulting to 1000 [ 189.785819][ T5506] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 190.521937][ T5506] EXT4-fs error (device loop4): ext4_get_first_dir_block:3621: inode #11: comm syz.4.323: directory missing '..' [ 190.560157][ T5521] loop3: detected capacity change from 0 to 256 [ 190.618599][ T5523] loop1: detected capacity change from 0 to 512 [ 190.805120][ T5521] xfs: Unexpected value for 'norecovery' [ 190.874968][ T5528] loop4: detected capacity change from 0 to 512 [ 191.354157][ T5523] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 191.506330][ T5523] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.522290][ T5528] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 191.623130][ T5528] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.257435][ T5540] loop0: detected capacity change from 0 to 128 [ 192.560838][ T5540] EXT4-fs (loop0): Test dummy encryption mode enabled [ 193.404407][ T5540] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 193.498542][ T5545] warn_alloc: 1 callbacks suppressed [ 193.499315][ T5545] syz.1.333: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 193.733233][ T5540] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.745408][ T5545] CPU: 0 PID: 5545 Comm: syz.1.333 Not tainted syzkaller #0 [ 193.753929][ T5545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.764956][ T5545] Call Trace: [ 193.768261][ T5545] [ 193.771478][ T5545] dump_stack_lvl+0x188/0x250 [ 193.776472][ T5545] ? rcu_lock_release+0x5/0x20 [ 193.781708][ T5545] ? show_regs_print_info+0x20/0x20 [ 193.786936][ T5545] ? load_image+0x410/0x410 [ 193.791492][ T5545] ? __rcu_read_unlock+0x78/0xd0 [ 193.796459][ T5545] warn_alloc+0x245/0x320 [ 193.800995][ T5545] ? zone_watermark_ok_safe+0x250/0x250 [ 193.807297][ T5545] ? __get_vm_area_node+0x164/0x2d0 [ 193.815968][ T5545] ? kfree+0xef/0x2a0 [ 193.821748][ T5545] __vmalloc_node_range+0x2b1/0x8b0 [ 193.828656][ T5545] ? vidtv_mux_init+0x200/0x1950 [ 193.834458][ T5545] vzalloc+0x75/0x80 [ 193.839487][ T5545] ? vidtv_mux_init+0x200/0x1950 [ 193.845024][ T5545] vidtv_mux_init+0x200/0x1950 [ 193.850283][ T5545] ? __mutex_lock_common+0x435/0x2400 [ 193.855732][ T5545] vidtv_start_feed+0x368/0x590 [ 193.860915][ T5545] ? vidtv_i2c_func+0x10/0x10 [ 193.866064][ T5545] ? vidtv_stop_feed+0x250/0x250 [ 193.871461][ T5545] ? _raw_spin_unlock_irq+0x1f/0x40 [ 193.877840][ T5545] ? lockdep_hardirqs_on+0x94/0x140 [ 193.885021][ T5545] dmx_ts_feed_start_filtering+0x11c/0x210 [ 193.891861][ T5545] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 193.899361][ T5545] dvb_dmxdev_filter_start+0x422/0x1060 [ 193.905361][ T5545] dvb_demux_do_ioctl+0x48d/0x530 [ 193.912721][ T5545] dvb_usercopy+0x191/0x2b0 [ 193.917447][ T5545] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 193.923926][ T5545] ? dvb_generic_ioctl+0xb0/0xb0 [ 193.929977][ T5545] ? dvb_demux_ioctl+0x11/0x30 [ 193.937693][ T5545] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 193.945153][ T5545] ? dvb_demux_poll+0x210/0x210 [ 193.950909][ T5545] dvb_demux_ioctl+0x25/0x30 [ 193.956443][ T5545] __se_sys_ioctl+0xfa/0x170 [ 193.961176][ T5545] do_syscall_64+0x4c/0xa0 [ 193.967404][ T5545] ? clear_bhb_loop+0x30/0x80 [ 193.973515][ T5545] ? clear_bhb_loop+0x30/0x80 [ 193.981395][ T5545] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.988282][ T5545] RIP: 0033:0x7ffa3ca18559 [ 193.993689][ T5545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.017641][ T5545] RSP: 002b:00007ffa3ac70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.029817][ T5545] RAX: ffffffffffffffda RBX: 00007ffa3cc9ffa0 RCX: 00007ffa3ca18559 [ 194.038862][ T5545] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000004 [ 194.047230][ T5545] RBP: 00007ffa3caaf8b0 R08: 0000000000000000 R09: 0000000000000000 [ 194.056718][ T5545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.065675][ T5545] R13: 00007ffa3cca0038 R14: 00007ffa3cc9ffa0 R15: 00007fffe60fe858 [ 194.075456][ T5545] [ 194.131737][ T5545] Mem-Info: [ 194.135435][ T5545] active_anon:326 inactive_anon:10037 isolated_anon:0 [ 194.135435][ T5545] active_file:14848 inactive_file:40424 isolated_file:0 [ 194.135435][ T5545] unevictable:768 dirty:179 writeback:0 [ 194.135435][ T5545] slab_reclaimable:21044 slab_unreclaimable:98485 [ 194.135435][ T5545] mapped:33960 shmem:5497 pagetables:679 bounce:0 [ 194.135435][ T5545] kernel_misc_reclaimable:0 [ 194.135435][ T5545] free:1354054 free_pcp:7662 free_cma:0 [ 194.221830][ T5545] Node 0 active_anon:1272kB inactive_anon:46536kB active_file:59192kB inactive_file:161696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142640kB dirty:716kB writeback:0kB shmem:26708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11292kB pagetables:2716kB all_unreclaimable? no [ 194.323703][ T5545] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 195.204456][ T5545] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 195.304285][ T5545] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 195.310556][ T5545] Node 0 DMA32 free:1478420kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:11672kB inactive_anon:25040kB active_file:59216kB inactive_file:161680kB unevictable:1536kB writepending:720kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:31392kB local_pcp:19292kB free_cma:0kB [ 195.347636][ T5545] lowmem_reserve[]: 0 0 0 0 0 [ 195.361584][ T5545] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 195.407214][ T5545] lowmem_reserve[]: 0 0 0 0 0 [ 195.420516][ T5545] Node 1 Normal free:3921988kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:4972kB local_pcp:2500kB free_cma:0kB [ 195.449622][ T5569] loop2: detected capacity change from 0 to 512 [ 195.471532][ T5545] lowmem_reserve[]: 0 0 0 0 0 [ 195.476337][ T5545] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 196.359204][ T5571] rxe_eth0 speed is unknown, defaulting to 1000 [ 196.839340][ T5577] loop3: detected capacity change from 0 to 128 [ 196.865911][ T5545] Node 0 DMA32: 899*4kB (UME) 423*8kB (UME) 322*16kB (UME) 602*32kB (UME) 414*64kB (UME) 86*128kB (UME) 29*256kB (UME) 16*512kB (UM) 9*1024kB (UME) 4*2048kB (UME) 337*4096kB (M) = 1482276kB [ 196.891535][ T5545] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 196.932328][ T5545] Node 1 Normal: 161*4kB (UME) 44*8kB (UE) 16*16kB (UME) 139*32kB (UE) 58*64kB (UME) 23*128kB (UME) 8*256kB (UM) 2*512kB (U) 1*1024kB (E) 1*2048kB (M) 953*4096kB (UM) = 3921988kB [ 196.956722][ T5569] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 196.992960][ T5569] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.012215][ T5577] EXT4-fs (loop3): Test dummy encryption mode enabled [ 197.022145][ T5545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.039499][ T5577] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 197.058429][ T5545] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.074760][ T5577] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 197.085959][ T5545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.100476][ T5545] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.113027][ T5545] 60340 total pagecache pages [ 197.119246][ T5545] 0 pages in swap cache [ 197.124393][ T5545] Swap cache stats: add 0, delete 0, find 0/0 [ 197.133521][ T5545] Free swap = 124996kB [ 197.139489][ T5545] Total swap = 124996kB [ 197.152573][ T5545] 2097051 pages RAM [ 197.157869][ T5545] 0 pages HighMem/MovableOnly [ 197.178737][ T5545] 415313 pages reserved [ 197.215039][ T5545] 0 pages cma reserved [ 198.038082][ T5588] loop1: detected capacity change from 0 to 512 [ 198.455157][ T5588] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 198.496686][ T5588] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.513189][ T5596] loop0: detected capacity change from 0 to 128 [ 198.627721][ T5596] EXT4-fs (loop0): Test dummy encryption mode enabled [ 199.249022][ T5596] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 199.265835][ T5596] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.158373][ T5618] rxe_eth0 speed is unknown, defaulting to 1000 [ 201.632025][ T5623] loop3: detected capacity change from 0 to 128 [ 201.661374][ T5622] ERROR: Out of memory at tomoyo_realpath_from_path. [ 201.678357][ T5623] EXT4-fs (loop3): Test dummy encryption mode enabled [ 201.716074][ T5626] comedi comedi2: pcl816: I/O port conflict (0x1,16) [ 201.758977][ T5623] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 201.814604][ T5623] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 203.079233][ T5642] loop2: detected capacity change from 0 to 128 [ 203.138924][ T5642] EXT4-fs (loop2): Test dummy encryption mode enabled [ 203.284782][ T5642] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 203.308484][ T5644] loop3: detected capacity change from 0 to 512 [ 203.322352][ T5649] loop4: detected capacity change from 0 to 512 [ 203.344858][ T5642] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 203.546596][ T5644] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 203.566223][ T5644] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.630470][ T5649] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 203.772360][ T5649] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.181997][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.188314][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.214157][ T5658] ubi0: attaching mtd0 [ 204.373661][ T5658] ubi0: scanning is finished [ 204.489689][ T5658] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 204.504137][ T5658] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 204.607339][ T5658] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 205.205521][ T5658] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 205.222952][ T5658] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 205.323422][ T5658] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 205.378871][ T5673] loop2: detected capacity change from 0 to 128 [ 205.385843][ T5658] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2010294496 [ 205.431991][ T5673] EXT4-fs (loop2): Test dummy encryption mode enabled [ 205.511759][ T5658] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 205.869851][ T5678] rxe_eth0 speed is unknown, defaulting to 1000 [ 206.291711][ T4440] Bluetooth: hci4: command 0x0406 tx timeout [ 206.298751][ T5673] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 206.324874][ T4440] Bluetooth: hci0: command 0x0406 tx timeout [ 206.352994][ T5666] ubi0: background thread "ubi_bgt0d" started, PID 5666 [ 206.361569][ T5673] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 206.379140][ T4440] Bluetooth: hci1: command 0x0406 tx timeout [ 206.388834][ T4440] Bluetooth: hci2: command 0x0406 tx timeout [ 206.407596][ T4440] Bluetooth: hci3: command 0x0406 tx timeout [ 207.123236][ T5684] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.368'. [ 207.272272][ T5684] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 208.226739][ T5699] loop4: detected capacity change from 0 to 128 [ 208.305396][ T5699] EXT4-fs (loop4): Test dummy encryption mode enabled [ 208.359116][ T5701] loop1: detected capacity change from 0 to 128 [ 208.378874][ T5699] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 208.451294][ T5699] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 208.525683][ T5701] EXT4-fs (loop1): Test dummy encryption mode enabled [ 208.589317][ T5701] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 208.636178][ T5705] loop3: detected capacity change from 0 to 128 [ 208.659636][ T5701] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.201560][ T5705] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,max_dir_size_kb=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 210.455233][ T5705] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.738774][ T5722] loop0: detected capacity change from 0 to 512 [ 211.513867][ T5722] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 211.591174][ T5722] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.627334][ T5736] loop4: detected capacity change from 0 to 128 [ 212.327053][ T5732] warn_alloc: 1 callbacks suppressed [ 212.328006][ T5732] syz.3.382: vmalloc error: size 8192, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 212.693001][ T5736] EXT4-fs (loop4): Test dummy encryption mode enabled [ 212.719650][ T5732] ,cpuset=syz3,mems_allowed=0-1 [ 212.743364][ T5732] CPU: 1 PID: 5732 Comm: syz.3.382 Not tainted syzkaller #0 [ 212.750699][ T5732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.760778][ T5732] Call Trace: [ 212.764071][ T5732] [ 212.767037][ T5732] dump_stack_lvl+0x188/0x250 [ 212.771728][ T5732] ? rcu_lock_release+0x5/0x20 [ 212.776512][ T5732] ? show_regs_print_info+0x20/0x20 [ 212.781728][ T5732] ? load_image+0x410/0x410 [ 212.786275][ T5732] warn_alloc+0x245/0x320 [ 212.790652][ T5732] ? zone_watermark_ok_safe+0x250/0x250 [ 212.796228][ T5732] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 212.802234][ T5732] ? __get_vm_area_node+0x2b5/0x2d0 [ 212.807454][ T5732] __vmalloc_node_range+0x2b1/0x8b0 [ 212.812693][ T5732] ? dvb_demux_do_ioctl+0x2ad/0x530 [ 212.817929][ T5732] ? dvb_dmxdev_filter_start+0x107/0x1060 [ 212.823672][ T5732] vmalloc+0x75/0x80 [ 212.827587][ T5732] ? dvb_dmxdev_filter_start+0x107/0x1060 [ 212.833333][ T5732] dvb_dmxdev_filter_start+0x107/0x1060 [ 212.838916][ T5732] dvb_demux_do_ioctl+0x48d/0x530 [ 212.843972][ T5732] dvb_usercopy+0x191/0x2b0 [ 212.848501][ T5732] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 212.854170][ T5732] ? dvb_generic_ioctl+0xb0/0xb0 [ 212.859158][ T5732] ? bpf_lsm_file_free_security+0x10/0x10 [ 212.864905][ T5732] ? dvb_demux_poll+0x210/0x210 [ 212.869866][ T5732] dvb_demux_ioctl+0x25/0x30 [ 212.874474][ T5732] __se_sys_ioctl+0xfa/0x170 [ 212.879089][ T5732] do_syscall_64+0x4c/0xa0 [ 212.883528][ T5732] ? clear_bhb_loop+0x30/0x80 [ 212.888252][ T5732] ? clear_bhb_loop+0x30/0x80 [ 212.892950][ T5732] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 212.899234][ T5732] RIP: 0033:0x7f8edeb9e559 [ 212.903760][ T5732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.923384][ T5732] RSP: 002b:00007f8edcdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.931991][ T5732] RAX: ffffffffffffffda RBX: 00007f8edee25fa0 RCX: 00007f8edeb9e559 [ 212.940071][ T5732] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000004 [ 212.948150][ T5732] RBP: 00007f8edec358b0 R08: 0000000000000000 R09: 0000000000000000 [ 212.956139][ T5732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.964124][ T5732] R13: 00007f8edee26038 R14: 00007f8edee25fa0 R15: 00007ffeea2befb8 [ 212.972179][ T5732] [ 213.015932][ T5736] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 213.055150][ T5736] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.779829][ T5755] loop1: detected capacity change from 0 to 128 [ 213.847370][ T5732] Mem-Info: [ 213.850530][ T5732] active_anon:346 inactive_anon:10374 isolated_anon:0 [ 213.850530][ T5732] active_file:14863 inactive_file:40418 isolated_file:0 [ 213.850530][ T5732] unevictable:768 dirty:60 writeback:0 [ 213.850530][ T5732] slab_reclaimable:21096 slab_unreclaimable:99181 [ 213.850530][ T5732] mapped:34251 shmem:5864 pagetables:673 bounce:0 [ 213.850530][ T5732] kernel_misc_reclaimable:0 [ 213.850530][ T5732] free:1352717 free_pcp:6719 free_cma:0 [ 213.906462][ T5732] Node 0 active_anon:1352kB inactive_anon:41784kB active_file:59252kB inactive_file:161672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137704kB dirty:240kB writeback:0kB shmem:22176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11420kB pagetables:2692kB all_unreclaimable? no [ 213.947987][ T5755] EXT4-fs (loop1): Test dummy encryption mode enabled [ 214.066583][ T5755] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 214.109757][ T5755] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 214.229219][ T5747] ubi: mtd0 is already attached to ubi0 [ 214.750725][ T5732] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 214.927059][ T5732] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.021520][ T5732] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 215.027422][ T5732] Node 0 DMA32 free:1441684kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1340kB inactive_anon:58420kB active_file:59248kB inactive_file:161700kB unevictable:1536kB writepending:268kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:34048kB local_pcp:21536kB free_cma:0kB [ 215.131547][ T5732] lowmem_reserve[]: 0 0 0 0 0 [ 215.153801][ T5732] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.198702][ T5760] loop4: detected capacity change from 0 to 32768 [ 215.972665][ T5732] lowmem_reserve[]: 0 0 0 0 0 [ 215.991474][ T5732] Node 1 Normal free:3921988kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:4972kB local_pcp:2500kB free_cma:0kB [ 216.052633][ T5732] lowmem_reserve[]: 0 0 0 0 0 [ 216.059730][ T5732] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 216.082388][ T5732] Node 0 DMA32: 47*4kB (UME) 19*8kB (UE) 4*16kB (ME) 18*32kB (UME) 321*64kB (UME) 75*128kB (UME) 28*256kB (ME) 15*512kB (M) 9*1024kB (UME) 3*2048kB (ME) 337*4096kB (M) = 1441684kB [ 216.105993][ T5732] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 216.132695][ T5770] loop1: detected capacity change from 0 to 128 [ 216.164817][ T5732] Node 1 Normal: 161*4kB (UME) 44*8kB (UE) 16*16kB (UME) 139*32kB (UE) 58*64kB (UME) 23*128kB (UME) 8*256kB (UM) 2*512kB (U) 1*1024kB (E) 1*2048kB (M) 953*4096kB (UM) = 3921988kB [ 216.214664][ T5770] EXT4-fs (loop1): Test dummy encryption mode enabled [ 216.246025][ T5760] JBD2: Ignoring recovery information on journal [ 216.343600][ T5770] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 216.377213][ T5732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.387335][ T5732] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.397056][ T5732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.407401][ T5732] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.417115][ T5732] 66910 total pagecache pages [ 216.422064][ T5732] 0 pages in swap cache [ 216.426221][ T5732] Swap cache stats: add 0, delete 0, find 0/0 [ 216.433525][ T5732] Free swap = 124996kB [ 216.437700][ T5732] Total swap = 124996kB [ 216.442232][ T5732] 2097051 pages RAM [ 216.446155][ T5732] 0 pages HighMem/MovableOnly [ 216.450834][ T5732] 415313 pages reserved [ 216.458565][ T5732] 0 pages cma reserved [ 216.474559][ T5770] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.657986][ T5760] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 217.848301][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 220.184708][ T5797] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.318740][ T5801] loop3: detected capacity change from 0 to 64 [ 220.624458][ T5801] hfs: bad allocation block size 63487 [ 220.681753][ T5808] loop2: detected capacity change from 0 to 64 [ 221.660605][ T5817] loop0: detected capacity change from 0 to 128 [ 221.684057][ T5819] loop4: detected capacity change from 0 to 512 [ 222.275612][ T5822] rxe_eth0 speed is unknown, defaulting to 1000 [ 222.479701][ T5817] EXT4-fs (loop0): Test dummy encryption mode enabled [ 222.523796][ T5823] loop3: detected capacity change from 0 to 128 [ 222.603305][ T5817] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 222.680299][ T5819] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 222.725784][ T5817] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 222.743612][ T5823] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.746153][ T5819] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.772680][ T5823] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.358662][ T5851] ------------[ cut here ]------------ [ 225.419713][ T5851] kernel BUG at arch/x86/mm/physaddr.c:28! [ 225.456994][ T5851] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 225.463140][ T5851] CPU: 1 PID: 5851 Comm: syz.1.412 Not tainted syzkaller #0 [ 225.470438][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.480504][ T5851] RIP: 0010:__phys_addr+0x158/0x170 [ 225.485720][ T5851] Code: ff ff e8 fb 14 43 00 48 c7 c7 d0 83 f9 8c 48 89 de 4c 89 f2 e8 d9 3c d3 02 e9 49 ff ff ff e8 df 14 43 00 0f 0b e8 d8 14 43 00 <0f> 0b e8 d1 14 43 00 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 [ 225.505330][ T5851] RSP: 0018:ffffc9000407f820 EFLAGS: 00010283 [ 225.511391][ T5851] RAX: ffffffff81360e88 RBX: 0000408004781000 RCX: 0000000000080000 [ 225.519360][ T5851] RDX: ffffc90005341000 RSI: 0000000000000e4e RDI: 0000000000000e4f [ 225.527325][ T5851] RBP: ffffc9000407f998 R08: 0000000000000040 R09: 1ffffffff1a3e6e6 [ 225.535295][ T5851] R10: dffffc0000000000 R11: fffffbfff1a3e6e7 R12: ffff8880238a6c10 [ 225.543258][ T5851] R13: ffff8880238a6c40 R14: 000000000000002e R15: 0000000000000001 [ 225.551220][ T5851] FS: 00007ffa3ac706c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 225.560136][ T5851] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.566717][ T5851] CR2: 00007ffa3ac4eff8 CR3: 000000002c0ef000 CR4: 00000000003506e0 [ 225.574679][ T5851] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 225.582639][ T5851] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 225.590721][ T5851] Call Trace: [ 225.594003][ T5851] [ 225.596924][ T5851] ? vidtv_s302m_encoder_init+0x573/0x770 [ 225.602731][ T5851] kfree+0x64/0x2a0 [ 225.606529][ T5851] ? kmem_cache_alloc_trace+0x18d/0x290 [ 225.612058][ T5851] ? vidtv_s302m_encoder_init+0x322/0x770 [ 225.617783][ T5851] vidtv_s302m_encoder_init+0x573/0x770 [ 225.623313][ T5851] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 225.628846][ T5851] vidtv_channel_s302m_init+0x357/0x830 [ 225.634406][ T5851] vidtv_channels_init+0x41/0x90 [ 225.639332][ T5851] vidtv_mux_init+0x4d0/0x1950 [ 225.644077][ T5851] ? __mutex_lock_common+0x435/0x2400 [ 225.649438][ T5851] vidtv_start_feed+0x368/0x590 [ 225.654274][ T5851] ? vidtv_i2c_func+0x10/0x10 [ 225.658933][ T5851] ? vidtv_stop_feed+0x250/0x250 [ 225.663852][ T5851] ? _raw_spin_unlock_irq+0x1f/0x40 [ 225.669038][ T5851] ? lockdep_hardirqs_on+0x94/0x140 [ 225.674223][ T5851] dmx_ts_feed_start_filtering+0x11c/0x210 [ 225.680027][ T5851] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 225.685907][ T5851] dvb_dmxdev_filter_start+0x422/0x1060 [ 225.691441][ T5851] dvb_demux_do_ioctl+0x48d/0x530 [ 225.696459][ T5851] dvb_usercopy+0x191/0x2b0 [ 225.700950][ T5851] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 225.706483][ T5851] ? dvb_generic_ioctl+0xb0/0xb0 [ 225.711426][ T5851] ? dvb_demux_poll+0x210/0x210 [ 225.716288][ T5851] dvb_demux_ioctl+0x25/0x30 [ 225.720870][ T5851] __se_sys_ioctl+0xfa/0x170 [ 225.725450][ T5851] do_syscall_64+0x4c/0xa0 [ 225.729867][ T5851] ? clear_bhb_loop+0x30/0x80 [ 225.734796][ T5851] ? clear_bhb_loop+0x30/0x80 [ 225.739458][ T5851] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 225.745342][ T5851] RIP: 0033:0x7ffa3ca18559 [ 225.749742][ T5851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.769328][ T5851] RSP: 002b:00007ffa3ac70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.777737][ T5851] RAX: ffffffffffffffda RBX: 00007ffa3cc9ffa0 RCX: 00007ffa3ca18559 [ 225.785697][ T5851] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 225.793651][ T5851] RBP: 00007ffa3caaf8b0 R08: 0000000000000000 R09: 0000000000000000 [ 225.801605][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.809561][ T5851] R13: 00007ffa3cca0038 R14: 00007ffa3cc9ffa0 R15: 00007fffe60fe858 [ 225.817524][ T5851] [ 225.820547][ T5851] Modules linked in: [ 226.046072][ T5856] rxe_eth0 speed is unknown, defaulting to 1000 [ 226.248378][ T5851] ---[ end trace 87a9024a38a3a52a ]--- [ 226.276359][ T5851] RIP: 0010:__phys_addr+0x158/0x170 [ 226.282325][ T5851] Code: ff ff e8 fb 14 43 00 48 c7 c7 d0 83 f9 8c 48 89 de 4c 89 f2 e8 d9 3c d3 02 e9 49 ff ff ff e8 df 14 43 00 0f 0b e8 d8 14 43 00 <0f> 0b e8 d1 14 43 00 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 [ 226.303735][ T5851] RSP: 0018:ffffc9000407f820 EFLAGS: 00010283 [ 226.310038][ T5851] RAX: ffffffff81360e88 RBX: 0000408004781000 RCX: 0000000000080000 [ 226.320305][ T5851] RDX: ffffc90005341000 RSI: 0000000000000e4e RDI: 0000000000000e4f [ 226.330116][ T5851] RBP: ffffc9000407f998 R08: 0000000000000040 R09: 1ffffffff1a3e6e6 [ 226.364995][ T5851] R10: dffffc0000000000 R11: fffffbfff1a3e6e7 R12: ffff8880238a6c10 [ 226.404245][ T5851] R13: ffff8880238a6c40 R14: 000000000000002e R15: 0000000000000001 [ 226.430556][ T5851] FS: 00007ffa3ac706c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 226.455735][ T5851] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.473615][ T5851] CR2: 00007ffa3a80d000 CR3: 000000002c0ef000 CR4: 00000000003506e0 [ 226.477514][ T5858] ubi: mtd0 is already attached to ubi0 [ 226.481960][ T5851] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.511574][ T5851] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.529832][ T5851] Kernel panic - not syncing: Fatal exception [ 226.537623][ T5851] Kernel Offset: disabled [ 226.541965][ T5851] Rebooting in 86400 seconds..