last executing test programs: 12.163605683s ago: executing program 3 (id=758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r7 = fsmount(r4, 0x1, 0x0) fchdir(r7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000240)=""/133, 0x85, 0x4640) 11.788237701s ago: executing program 4 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r7 = fsmount(r4, 0x1, 0x0) fchdir(r7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000240)=""/133, 0x85, 0x4640) 11.0265603s ago: executing program 3 (id=761): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='Y\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='100', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='5', 0x1) close(r3) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1\x00', 0x1) close(r4) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x3, 0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 10.504921273s ago: executing program 4 (id=762): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r0], 0x54}}, 0x0) 10.472079054s ago: executing program 3 (id=763): munmap$binder(0x0, 0xffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xcbfba000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000000700)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nRp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x8f\x02\xc5 \x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x04\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xa0\xc3\x1d\x19\xf5\x00'/439, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0xa) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0xff64000) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 10.092072853s ago: executing program 4 (id=764): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) 7.77582547s ago: executing program 2 (id=771): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r7 = fsmount(r4, 0x1, 0x0) fchdir(r7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000240)=""/133, 0x85, 0x4640) 7.061927417s ago: executing program 1 (id=773): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) 6.784374024s ago: executing program 4 (id=774): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r4, 0x10e, 0xa, 0x0, &(0x7f0000000280)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f00000002c0)='M', 0x1) recvmsg$unix(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x20040050) 6.475486232s ago: executing program 3 (id=775): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='Y\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='100', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='5', 0x1) close(r3) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1\x00', 0x1) close(r4) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x3, 0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 6.345319375s ago: executing program 3 (id=776): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$kcm(0x21, 0x2, 0xa) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000640)='./mnt\x00', 0x840, &(0x7f0000000680)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ac0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b00), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000b40)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000b80)=0x20, 0x4) write$binfmt_misc(r3, &(0x7f0000000bc0), 0x6) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xd, "aa"}], 0x18}, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) splice(r0, &(0x7f0000000540)=0x7, r4, &(0x7f00000005c0)=0x7, 0x200, 0xc) syz_emit_ethernet(0x6a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd605abc8000343c00fc0000000000000000000000000000ffff0200000000000000000000000000010003000000000000c910ff"], 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x4) write(r5, &(0x7f0000000100)='3', 0x1) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', &(0x7f0000000200), &(0x7f0000000240)='./sys/class/video4linux/video0/dev_debug\x00', 0x29, 0x1) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb70b, 0x58f}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000001c0)={0x0, 0x3, 0x8, r5, 0x0, &(0x7f0000000180)={0x9b090b, 0xf64, '\x00', @value64=0x10001}}) 4.568276498s ago: executing program 1 (id=780): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) 4.567915669s ago: executing program 2 (id=781): socket$inet_tcp(0x2, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000080)={0x2, 0x0, [{0x1, 0x2, 0x1, 0x2, 0x10, 0x9, 0x546b89ad}, {0x8000000f, 0x1ff, 0x1, 0x2, 0x2, 0x25, 0x3ff}]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) setns(0xc9, 0x0) r4 = socket(0x2a, 0x2, 0x9) connect(r4, &(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0xc004) connect(r4, &(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r6 = getpid() setpriority(0x0, r6, 0x5) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r7, 0x40405514, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x5e5010ad, '\x00', 0x441}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x1, 0x0) write(r8, &(0x7f0000000100), 0x0) mq_notify(r8, &(0x7f0000000380)={0x0, 0x22, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000300)="677b4af6a35bfcf4dc2f00f281bac188cda9cca0187d21322d17c5e2c9da26c9ac6fa76ed28173ae924e74be3f43d805b1804b0d803b54e449fe163137199c"}}) close(r7) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000002c0)={r3, r9, 0x1, 0x0, 0x400000d4}) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) 3.982047923s ago: executing program 0 (id=782): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) 3.70147402s ago: executing program 2 (id=783): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) 2.652758095s ago: executing program 1 (id=784): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) 2.099691999s ago: executing program 0 (id=785): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='Y\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='10', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='5', 0x1) close(r3) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1\x00', 0x1) close(r4) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x3, 0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.872144104s ago: executing program 2 (id=786): munmap$binder(0x0, 0xffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xcbfba000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000000700)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nRp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x8f\x02\xc5 \x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x04\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xa0\xc3\x1d\x19\xf5\x00'/439, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0xa) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x20000) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0xff64000) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 1.430631885s ago: executing program 0 (id=787): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='Y\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='100', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='5', 0x1) close(r3) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1\x00', 0x1) close(r4) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x3, 0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.414112866s ago: executing program 2 (id=788): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='Y\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='100', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='5', 0x1) close(r3) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1\x00', 0x1) close(r4) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x3, 0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.308287818s ago: executing program 1 (id=789): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='Y\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='100', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) write(r2, 0x0, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='5', 0x1) close(r3) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1\x00', 0x1) close(r4) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x3, 0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.257827379s ago: executing program 0 (id=790): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000080)={0x2, 0x0, [{0x1, 0x2, 0x1, 0x2, 0x10, 0x9, 0x546b89ad}, {0x8000000f, 0x1ff, 0x1, 0x2, 0x2, 0x25, 0x3ff}]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) setns(0xc9, 0x0) r4 = socket(0x2a, 0x2, 0x9) connect(r4, &(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0xc004) connect(r4, &(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r6 = getpid() setpriority(0x0, r6, 0x5) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r7, 0x40405514, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x5e5010ad, '\x00', 0x441}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x1, 0x0) write(r8, &(0x7f0000000100), 0x0) mq_notify(r8, &(0x7f0000000380)={0x0, 0x22, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000300)="677b4af6a35bfcf4dc2f00f281bac188cda9cca0187d21322d17c5e2c9da26c9ac6fa76ed28173ae924e74be3f43d805b1804b0d803b54e449fe163137199cf125a455bc6bf3e4"}}) close(r7) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000002c0)={r3, r9, 0x1, 0x0, 0x400000d4}) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) 1.23103882s ago: executing program 2 (id=791): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) 1.177244671s ago: executing program 1 (id=792): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$eJzs3c9vG1kdAPDvTOImm3U3XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSNwoil1HcVKa0ENy5I5EJU7wJ3DjgNQTB27c4MalHJAqqEANUg9GM54mJoljs03iJv58pPHMe+P4+57t957nJc4LYGhdjYjtiLgUEZ9ExGSRnxRb3Gxv2f2ePrm/sPvk/kISrdbH/0jy81ledPxM5tXiMccj4offi/hJcjhuc3NrZb5Wq64V6an1+upUc3Pr+nJa5MzOzcxNv3/jvdkTq+ub9d8+/u7yhz/6/e++9OhP29/8WVas8s8v5+c663GS2lUvRbkjbzQiPjyNYAMyWrx/OH+y1vaZiHgrb/+TMZK/mv05olkDAOdAqzUZrcnONABw0WXX/+VI0koxF1CONK1U2nN4b8REWms019+ZbGzcWYx8DutKlNLby7XqdDFXeCVKSZaeyY/307MH0jci4vWI+MXYK3m6stCoLQ7ygw8ADLFXD4z//x5rj/8AwAU3PugCAABnzvgPAMPH+A8Aw+f/GP/7/3YgAPBSc/0PAMPH+A8Aw6fn+L9zNuUAAM7EDz76KNtau8X/v168u7nx7fLd64vV5kqlvrFQWWisrVaWGo2lWrWy0Gr1erxao7E68+5esrm5dave2Lizfmu5Pr9UvVUtnXJ9AIDeXn/z4V+SiNj+1iv5Fh1rORir4WJLB10AYGBGBl0AYGB8nweGVx/X+KYB4ILrtZZn1z8RemDxVzivrn3e/D8MK/P/MLw+3fz/d068HMDZM/8Pw6vVSqz5DwBDxhw/8EK//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVc63JK3ka4FvZ7dppRJxOSKuRCm5vVyrTkfEaxHx57HSWJaeGXShAYAXlP49Kdb/ujb5dvng2UvJf8byfUT89Fcf//Le/Pr62kyW/8+9/PUHRf7spUFUAADodPNwVnucLvYdF/JPn9xfeL6dZREff9BeXDSLu1ts7TOjMZrvx6MUERP/Sop0W/Z5ZeQE4m/vRMTn9ut/ryNCOZ8Daa98ejB+FvvyKcTff/4Pxk//J36an8v2pfy5+OwJlAWGzcMP2v1k0fayJla0vzSu5vuj2/943kO9uOf93+6h/i/d6/9GDsVP8jZ/dS99fEkev/uH7x/KbE22z+1EfGH0qPjJXvykS//7dp91/OsXv/xWt3OtX0dci6Pjt9XzbnZqvb461dzcur5cn1+qLlXvzM7OzcxNv3/jvdmpfI66ffvHAw//rFjm/rWuz81OxESX+OM96v+1Puv/m2ef/Pgrx8T/xlePfv3fOCZ+NiZ+vc/48xM3uy7fncVf7FL/Xq//O33Gf/S3rcU+7woAnIHm5tbKfK1WXetxkH3W7HUfB+fzILYjXoJi9DpIi7fsy1KeC35wTKeRnlHnBJyq/UY/6JIAAAAAAAAAAAAAAADdNDe3VsbidL9ONOg6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9NwAA//8tM9Id") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r5, 0x10e, 0xa, 0x0, &(0x7f0000000280)) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f00000002c0)='M', 0x1) recvmsg$unix(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x20040050) 1.121247223s ago: executing program 0 (id=793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r7 = fsmount(r4, 0x1, 0x0) fchdir(r7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000240)=""/133, 0x85, 0x4640) 1.120870593s ago: executing program 4 (id=794): socket$inet_tcp(0x2, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000080)={0x2, 0x0, [{0x1, 0x2, 0x1, 0x2, 0x10, 0x9, 0x546b89ad}, {0x8000000f, 0x1ff, 0x1, 0x2, 0x2, 0x25, 0x3ff}]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) setns(0xc9, 0x0) r4 = socket(0x2a, 0x2, 0x9) connect(r4, &(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0xc004) connect(r4, &(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r6 = getpid() setpriority(0x0, r6, 0x5) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r7, 0x40405514, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x5e5010ad, '\x00', 0x441}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x1, 0x0) write(r8, &(0x7f0000000100), 0x0) mq_notify(r8, &(0x7f0000000380)={0x0, 0x22, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000300)="677b4af6a35bfcf4dc2f00f281bac188cda9cca0187d21322d17c5e2c9da26c9ac6fa76ed28173ae924e74be3f43d805b1804b0d803b54e449fe163137199c"}}) close(r7) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000002c0)={r3, r9, 0x1, 0x0, 0x400000d4}) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) 214.952915ms ago: executing program 1 (id=795): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) 80.962828ms ago: executing program 0 (id=796): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) 68.373359ms ago: executing program 3 (id=797): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) 0s ago: executing program 4 (id=798): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='Y\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='10', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='5', 0x1) close(r3) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1\x00', 0x1) close(r4) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x3, 0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) kernel console output (not intermixed with test programs): 114.379408][ T5004] RBP: 00007f6b3d87c8b0 R08: 0000000000000000 R09: 0000000000000000 [ 114.387375][ T5004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.395333][ T5004] R13: 00007f6b3da6d038 R14: 00007f6b3da6cfa0 R15: 00007fff3b200368 [ 114.403307][ T5004] [ 114.455364][ T5004] Mem-Info: [ 114.460940][ T5004] active_anon:332 inactive_anon:9952 isolated_anon:0 [ 114.460940][ T5004] active_file:4768 inactive_file:36571 isolated_file:0 [ 114.460940][ T5004] unevictable:768 dirty:210 writeback:0 [ 114.460940][ T5004] slab_reclaimable:20811 slab_unreclaimable:102184 [ 114.460940][ T5004] mapped:32801 shmem:4475 pagetables:672 bounce:0 [ 114.460940][ T5004] kernel_misc_reclaimable:0 [ 114.460940][ T5004] free:1370075 free_pcp:6464 free_cma:0 [ 114.533385][ T5004] Node 0 active_anon:1296kB inactive_anon:39396kB active_file:18872kB inactive_file:146284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131204kB dirty:840kB writeback:0kB shmem:15820kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11412kB pagetables:2688kB all_unreclaimable? no [ 114.537107][ T5011] capability: warning: `syz.1.207' uses deprecated v2 capabilities in a way that may be insecure [ 114.670398][ T5020] ubi: mtd0 is already attached to ubi0 [ 114.685054][ T5022] loop2: detected capacity change from 0 to 8 [ 114.688198][ T5004] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 114.744605][ T5004] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.785087][ T5004] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 114.791399][ T5004] Node 0 DMA32 free:1547580kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1244kB inactive_anon:35492kB active_file:18820kB inactive_file:146280kB unevictable:1536kB writepending:836kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:28332kB local_pcp:20812kB free_cma:0kB [ 114.821415][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.834903][ T5004] lowmem_reserve[]: 0 0 0 0 0 [ 114.867805][ T5004] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.920261][ T5025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 114.936261][ T5004] lowmem_reserve[]: 0 0 0 0 0 [ 114.946398][ T5004] Node 1 Normal free:3912100kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:6652kB local_pcp:2984kB free_cma:0kB [ 114.975173][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.018374][ T5004] lowmem_reserve[]: 0 0 0 0 0 [ 115.023155][ T5004] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 115.036856][ T5004] Node 0 DMA32: 6*4kB (UME) 9*8kB (UME) 21*16kB (UME) 27*32kB (UE) 45*64kB (UME) 16*128kB (ME) 20*256kB (M) 12*512kB (M) 9*1024kB (UM) 3*2048kB (UME) 370*4096kB (M) = 1548368kB [ 115.058172][ T5004] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 115.070340][ T5004] Node 1 Normal: 155*4kB (UME) 35*8kB (UME) 16*16kB (UME) 109*32kB (UME) 48*64kB (UE) 21*128kB (UE) 7*256kB (UME) 3*512kB (UE) 1*1024kB (U) 3*2048kB (UME) 950*4096kB (M) = 3912100kB [ 115.163205][ T5004] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.190342][ T5004] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.230712][ T5004] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.265756][ T5004] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.294737][ T5004] 48675 total pagecache pages [ 115.384536][ T5004] 0 pages in swap cache [ 115.425178][ T5004] Swap cache stats: add 0, delete 0, find 0/0 [ 115.613021][ T5004] Free swap = 124996kB [ 115.708682][ T5004] Total swap = 124996kB [ 115.799491][ T5004] 2097051 pages RAM [ 115.884393][ T5004] 0 pages HighMem/MovableOnly [ 115.907570][ T5004] 415313 pages reserved [ 115.911777][ T5004] 0 pages cma reserved [ 115.993263][ T5037] loop1: detected capacity change from 0 to 512 [ 116.075739][ T5037] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 116.097606][ T5037] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.216980][ T5043] ubi: mtd0 is already attached to ubi0 [ 116.760927][ T5045] rxe_eth0 speed is unknown, defaulting to 1000 [ 117.394285][ T5055] loop0: detected capacity change from 0 to 512 [ 117.560841][ T5055] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 117.613750][ T5055] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.753042][ T5062] loop2: detected capacity change from 0 to 512 [ 117.830238][ T5065] loop3: detected capacity change from 0 to 512 [ 119.111560][ T5075] rxe_eth0 speed is unknown, defaulting to 1000 [ 119.244988][ T5062] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 119.278485][ T5062] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.351077][ T5065] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 119.369280][ T5081] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.382233][ T5065] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.024831][ T5086] loop4: detected capacity change from 0 to 512 [ 120.305398][ T5086] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 120.436316][ T5086] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.557526][ T5100] rxe_eth0 speed is unknown, defaulting to 1000 [ 121.845143][ T5111] loop1: detected capacity change from 0 to 512 [ 122.557102][ T5119] rxe_eth0 speed is unknown, defaulting to 1000 [ 122.916505][ T5111] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 122.953262][ T5111] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.807252][ T5128] rxe_eth0 speed is unknown, defaulting to 1000 [ 124.454008][ T5131] loop3: detected capacity change from 0 to 512 [ 124.928064][ T5131] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 124.975601][ T5131] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.993797][ T5142] loop4: detected capacity change from 0 to 512 [ 125.172652][ T5145] rxe_eth0 speed is unknown, defaulting to 1000 [ 126.133980][ T5160] loop3: detected capacity change from 0 to 512 [ 126.160367][ T5142] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 126.256894][ T5162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 126.278923][ T5142] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.109542][ T5169] rxe_eth0 speed is unknown, defaulting to 1000 [ 127.441180][ T5160] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 127.500215][ T5160] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.568489][ T5175] loop2: detected capacity change from 0 to 512 [ 128.246557][ T5177] rxe_eth0 speed is unknown, defaulting to 1000 [ 128.871248][ T5175] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 129.126945][ T5175] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.451881][ T5192] ubi: mtd0 is already attached to ubi0 [ 130.533467][ T5198] loop0: detected capacity change from 0 to 512 [ 130.940115][ T5211] loop2: detected capacity change from 0 to 512 [ 130.952856][ T5198] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 131.099498][ T5198] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.310572][ T5211] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 131.585073][ T5211] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.659226][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.666646][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.638875][ T5233] rxe_eth0 speed is unknown, defaulting to 1000 [ 133.866072][ T5240] loop4: detected capacity change from 0 to 512 [ 134.219497][ T5254] ubi: mtd0 is already attached to ubi0 [ 134.938826][ T5240] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 135.057988][ T5251] loop1: detected capacity change from 0 to 512 [ 135.104623][ T5240] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.843275][ T5251] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 135.877534][ T5251] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.458833][ T5272] ERROR: Out of memory at tomoyo_realpath_from_path. [ 136.493398][ T5275] loop2: detected capacity change from 0 to 512 [ 136.710805][ T5275] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 136.749107][ T5280] loop1: detected capacity change from 0 to 512 [ 136.757033][ T5275] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.113112][ T5280] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 137.113635][ T5280] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.005885][ T5300] rxe_eth0 speed is unknown, defaulting to 1000 [ 139.275499][ T5301] ERROR: Out of memory at tomoyo_realpath_from_path. [ 139.601404][ T5307] ubi: mtd0 is already attached to ubi0 [ 141.785119][ T5327] loop2: detected capacity change from 0 to 512 [ 141.795296][ T5328] loop1: detected capacity change from 0 to 512 [ 141.885213][ T5327] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 141.909972][ T5328] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 141.958292][ T5328] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.977723][ T5327] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.822120][ T5341] rxe_eth0 speed is unknown, defaulting to 1000 [ 143.562755][ T5346] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.618725][ T5346] warn_alloc: 1 callbacks suppressed [ 143.618742][ T5346] syz.0.291: vmalloc error: size 65024, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 144.164975][ T5353] ubi: mtd0 is already attached to ubi0 [ 144.460662][ T5346] CPU: 1 PID: 5346 Comm: syz.0.291 Not tainted syzkaller #0 [ 144.467999][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.478068][ T5346] Call Trace: [ 144.481364][ T5346] [ 144.484295][ T5346] dump_stack_lvl+0x188/0x250 [ 144.488975][ T5346] ? rcu_lock_release+0x5/0x20 [ 144.493747][ T5346] ? show_regs_print_info+0x20/0x20 [ 144.498953][ T5346] ? load_image+0x410/0x410 [ 144.503473][ T5346] warn_alloc+0x245/0x320 [ 144.507813][ T5346] ? zone_watermark_ok_safe+0x250/0x250 [ 144.513364][ T5346] ? __get_vm_area_node+0x164/0x2d0 [ 144.518567][ T5346] ? kfree+0xef/0x2a0 [ 144.522582][ T5346] __vmalloc_node_range+0x2b1/0x8b0 [ 144.527798][ T5346] ? vidtv_s302m_encoder_init+0x174/0x770 [ 144.533694][ T5346] vzalloc+0x75/0x80 [ 144.537595][ T5346] ? vidtv_s302m_encoder_init+0x174/0x770 [ 144.543327][ T5346] vidtv_s302m_encoder_init+0x174/0x770 [ 144.548978][ T5346] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 144.554552][ T5346] vidtv_channel_s302m_init+0x357/0x830 [ 144.560127][ T5346] vidtv_channels_init+0x41/0x90 [ 144.565075][ T5346] vidtv_mux_init+0x4d0/0x1950 [ 144.569840][ T5346] ? __mutex_lock_common+0x435/0x2400 [ 144.575227][ T5346] vidtv_start_feed+0x368/0x590 [ 144.580089][ T5346] ? vidtv_i2c_func+0x10/0x10 [ 144.584767][ T5346] ? vidtv_stop_feed+0x250/0x250 [ 144.589715][ T5346] ? _raw_spin_unlock_irq+0x1f/0x40 [ 144.594920][ T5346] ? lockdep_hardirqs_on+0x94/0x140 [ 144.600155][ T5346] dmx_ts_feed_start_filtering+0x11c/0x210 [ 144.605971][ T5346] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 144.611877][ T5346] dvb_dmxdev_filter_start+0x422/0x1060 [ 144.617445][ T5346] dvb_demux_do_ioctl+0x48d/0x530 [ 144.622475][ T5346] dvb_usercopy+0x191/0x2b0 [ 144.626975][ T5346] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 144.632525][ T5346] ? dvb_generic_ioctl+0xb0/0xb0 [ 144.637482][ T5346] ? dvb_demux_poll+0x210/0x210 [ 144.642334][ T5346] dvb_demux_ioctl+0x25/0x30 [ 144.646927][ T5346] __se_sys_ioctl+0xfa/0x170 [ 144.651542][ T5346] do_syscall_64+0x4c/0xa0 [ 144.655972][ T5346] ? clear_bhb_loop+0x30/0x80 [ 144.660664][ T5346] ? clear_bhb_loop+0x30/0x80 [ 144.665361][ T5346] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.671273][ T5346] RIP: 0033:0x7f6b3d7e5559 [ 144.675698][ T5346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.695399][ T5346] RSP: 002b:00007f6b3ba1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.703921][ T5346] RAX: ffffffffffffffda RBX: 00007f6b3da6d090 RCX: 00007f6b3d7e5559 [ 144.711915][ T5346] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 144.719995][ T5346] RBP: 00007f6b3d87c8b0 R08: 0000000000000000 R09: 0000000000000000 [ 144.727989][ T5346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.735981][ T5346] R13: 00007f6b3da6d128 R14: 00007f6b3da6d090 R15: 00007fff3b200368 [ 144.743992][ T5346] [ 144.747164][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.881633][ T5346] Mem-Info: [ 144.895877][ T5346] active_anon:332 inactive_anon:9184 isolated_anon:0 [ 144.895877][ T5346] active_file:4817 inactive_file:36555 isolated_file:0 [ 144.895877][ T5346] unevictable:768 dirty:166 writeback:0 [ 144.895877][ T5346] slab_reclaimable:21173 slab_unreclaimable:104835 [ 144.895877][ T5346] mapped:32810 shmem:4570 pagetables:660 bounce:0 [ 144.895877][ T5346] kernel_misc_reclaimable:0 [ 144.895877][ T5346] free:1365559 free_pcp:8768 free_cma:0 [ 144.937754][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.503656][ T5362] rxe_eth0 speed is unknown, defaulting to 1000 [ 146.035117][ T5346] Node 0 active_anon:1296kB inactive_anon:28088kB active_file:19064kB inactive_file:146220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119860kB dirty:664kB writeback:0kB shmem:4800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11040kB pagetables:2560kB all_unreclaimable? no [ 146.103131][ T5364] loop1: detected capacity change from 0 to 512 [ 146.143889][ T5366] loop2: detected capacity change from 0 to 8 [ 146.202276][ T5346] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 146.277464][ T5346] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.278873][ T5364] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 146.332832][ T5346] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 146.436404][ T5346] Node 0 DMA32 free:1532328kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1296kB inactive_anon:25940kB active_file:19064kB inactive_file:146220kB unevictable:1536kB writepending:664kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:38572kB local_pcp:17756kB free_cma:0kB [ 147.008395][ T5364] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.029273][ T5346] lowmem_reserve[]: 0 0 0 0 0 [ 147.057106][ T5346] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 147.368034][ T5346] lowmem_reserve[]: 0 0 0 0 0 [ 147.730286][ T5346] Node 1 Normal free:3915664kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3088kB local_pcp:1712kB free_cma:0kB [ 147.767667][ T5346] lowmem_reserve[]: 0 0 0 0 0 [ 147.776708][ T5346] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 147.814940][ T5346] Node 0 DMA32: 209*4kB (UME) 217*8kB (UME) 149*16kB (UME) 18*32kB (UME) 25*64kB (UME) 12*128kB (UM) 3*256kB (M) 6*512kB (ME) 6*1024kB (UME) 2*2048kB (UM) 368*4096kB (M) = 1530076kB [ 147.928398][ T5346] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 147.963357][ T5346] Node 1 Normal: 184*4kB (UME) 38*8kB (UME) 18*16kB (UME) 157*32kB (UME) 63*64kB (UME) 20*128kB (UE) 11*256kB (UME) 3*512kB (UE) 1*1024kB (U) 3*2048kB (UME) 950*4096kB (M) = 3915664kB [ 148.000604][ T5346] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.086684][ T5346] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.096518][ T5346] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.106490][ T5346] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.116152][ T5346] 45356 total pagecache pages [ 148.121035][ T5346] 0 pages in swap cache [ 148.126040][ T5346] Swap cache stats: add 0, delete 0, find 0/0 [ 148.132294][ T5346] Free swap = 124996kB [ 148.136529][ T5346] Total swap = 124996kB [ 148.141547][ T5346] 2097051 pages RAM [ 148.145447][ T5346] 0 pages HighMem/MovableOnly [ 148.150653][ T5346] 415313 pages reserved [ 148.155935][ T5346] 0 pages cma reserved [ 148.195920][ T5386] loop0: detected capacity change from 0 to 512 [ 148.687345][ T5386] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 148.872076][ T5386] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.045192][ T5395] loop1: detected capacity change from 0 to 1764 [ 149.082416][ T5395] ISOFS: unable to read i-node block [ 149.277559][ T5395] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 149.406526][ T5395] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 149.531591][ T5400] loop4: detected capacity change from 0 to 512 [ 149.747001][ T5409] loop0: detected capacity change from 0 to 128 [ 149.776812][ T5400] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 149.794524][ T5400] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.977834][ T5413] ubi: mtd0 is already attached to ubi0 [ 151.288661][ T5418] rxe_eth0 speed is unknown, defaulting to 1000 [ 151.380034][ T5409] EXT4-fs (loop0): Test dummy encryption mode enabled [ 151.770703][ T5409] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 151.879498][ T5409] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.634953][ T5427] rxe_eth0 speed is unknown, defaulting to 1000 [ 153.315528][ T5432] loop1: detected capacity change from 0 to 8 [ 153.618188][ T5439] loop3: detected capacity change from 0 to 8 [ 153.861207][ T5443] loop4: detected capacity change from 0 to 128 [ 153.886849][ T5448] loop2: detected capacity change from 0 to 512 [ 154.143684][ T5443] EXT4-fs (loop4): Test dummy encryption mode enabled [ 154.333139][ T5448] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 154.380503][ T5443] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 154.409230][ T5453] loop1: detected capacity change from 0 to 512 [ 154.454892][ T5448] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.475072][ T5443] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.483710][ T5453] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 156.377701][ T5453] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.587598][ T5474] rxe_eth0 speed is unknown, defaulting to 1000 [ 156.874387][ T5477] loop0: detected capacity change from 0 to 128 [ 156.965073][ T5477] EXT4-fs (loop0): Test dummy encryption mode enabled [ 157.272371][ T5485] syz.3.326: vmalloc error: size 65024, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 157.298054][ T5477] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 157.315085][ T5477] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.761492][ T5490] rxe_eth0 speed is unknown, defaulting to 1000 [ 158.359160][ T5485] CPU: 0 PID: 5485 Comm: syz.3.326 Not tainted syzkaller #0 [ 158.366491][ T5485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.376552][ T5485] Call Trace: [ 158.379843][ T5485] [ 158.382785][ T5485] dump_stack_lvl+0x188/0x250 [ 158.387480][ T5485] ? rcu_lock_release+0x5/0x20 [ 158.392348][ T5485] ? show_regs_print_info+0x20/0x20 [ 158.397569][ T5485] ? load_image+0x410/0x410 [ 158.402098][ T5485] warn_alloc+0x245/0x320 [ 158.406471][ T5485] ? zone_watermark_ok_safe+0x250/0x250 [ 158.412036][ T5485] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 158.418030][ T5485] ? __get_vm_area_node+0x119/0x2d0 [ 158.423243][ T5485] __vmalloc_node_range+0x2b1/0x8b0 [ 158.428495][ T5485] ? vidtv_s302m_encoder_init+0x174/0x770 [ 158.434213][ T5485] vzalloc+0x75/0x80 [ 158.438113][ T5485] ? vidtv_s302m_encoder_init+0x174/0x770 [ 158.443843][ T5485] vidtv_s302m_encoder_init+0x174/0x770 [ 158.449378][ T5485] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 158.454916][ T5485] vidtv_channel_s302m_init+0x357/0x830 [ 158.460480][ T5485] vidtv_channels_init+0x41/0x90 [ 158.465423][ T5485] vidtv_mux_init+0x4d0/0x1950 [ 158.470183][ T5485] ? __mutex_lock_common+0x435/0x2400 [ 158.475554][ T5485] vidtv_start_feed+0x368/0x590 [ 158.480404][ T5485] ? vidtv_i2c_func+0x10/0x10 [ 158.485081][ T5485] ? vidtv_stop_feed+0x250/0x250 [ 158.490019][ T5485] ? _raw_spin_unlock_irq+0x1f/0x40 [ 158.495225][ T5485] ? lockdep_hardirqs_on+0x94/0x140 [ 158.500425][ T5485] dmx_ts_feed_start_filtering+0x11c/0x210 [ 158.506243][ T5485] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 158.512180][ T5485] dvb_dmxdev_filter_start+0x422/0x1060 [ 158.517758][ T5485] dvb_demux_do_ioctl+0x48d/0x530 [ 158.522800][ T5485] dvb_usercopy+0x191/0x2b0 [ 158.527291][ T5485] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 158.532838][ T5485] ? dvb_generic_ioctl+0xb0/0xb0 [ 158.537800][ T5485] ? dvb_demux_poll+0x210/0x210 [ 158.542662][ T5485] dvb_demux_ioctl+0x25/0x30 [ 158.547233][ T5485] __se_sys_ioctl+0xfa/0x170 [ 158.551804][ T5485] do_syscall_64+0x4c/0xa0 [ 158.556200][ T5485] ? clear_bhb_loop+0x30/0x80 [ 158.560902][ T5485] ? clear_bhb_loop+0x30/0x80 [ 158.565588][ T5485] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.571466][ T5485] RIP: 0033:0x7f136f3da559 [ 158.575867][ T5485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.595456][ T5485] RSP: 002b:00007f136d632028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.603863][ T5485] RAX: ffffffffffffffda RBX: 00007f136f661fa0 RCX: 00007f136f3da559 [ 158.611845][ T5485] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 158.619814][ T5485] RBP: 00007f136f4718b0 R08: 0000000000000000 R09: 0000000000000000 [ 158.627894][ T5485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.635861][ T5485] R13: 00007f136f662038 R14: 00007f136f661fa0 R15: 00007fffc0249ab8 [ 158.643831][ T5485] [ 158.646850][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.659981][ T5485] Mem-Info: [ 158.681873][ T5485] active_anon:339 inactive_anon:7088 isolated_anon:0 [ 158.681873][ T5485] active_file:4841 inactive_file:36555 isolated_file:0 [ 158.681873][ T5485] unevictable:768 dirty:34 writeback:0 [ 158.681873][ T5485] slab_reclaimable:21179 slab_unreclaimable:106801 [ 158.681873][ T5485] mapped:29950 shmem:1715 pagetables:605 bounce:0 [ 158.681873][ T5485] kernel_misc_reclaimable:0 [ 158.681873][ T5485] free:1369142 free_pcp:5602 free_cma:0 [ 158.723466][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.730878][ T5485] Node 0 active_anon:1324kB inactive_anon:27840kB active_file:19164kB inactive_file:146220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119800kB dirty:136kB writeback:0kB shmem:4780kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11156kB pagetables:2420kB all_unreclaimable? no [ 158.762010][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.768292][ T5485] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 158.806813][ T5485] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 158.833167][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.839922][ T5485] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 158.845753][ T5485] Node 0 DMA32 free:1545320kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1324kB inactive_anon:27940kB active_file:19164kB inactive_file:146220kB unevictable:1536kB writepending:136kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:19192kB local_pcp:15872kB free_cma:0kB [ 158.875699][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.212717][ T5485] lowmem_reserve[]: 0 0 0 0 0 [ 159.215279][ T5485] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 159.215860][ T5485] lowmem_reserve[]: 0 0 0 0 0 [ 159.216784][ T5485] Node 1 Normal free:3915664kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3088kB local_pcp:1376kB free_cma:0kB [ 159.217161][ T5485] lowmem_reserve[]: 0 0 0 0 0 [ 159.221839][ T5485] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 159.226615][ T5485] Node 0 DMA32: 1146*4kB (UME) 992*8kB (UME) 420*16kB (UME) 179*32kB (ME) 69*64kB (UME) 20*128kB (M) 13*256kB (ME) 2*512kB (M) 5*1024kB (ME) 2*2048kB (UM) 366*4096kB (M) = 1544648kB [ 159.236137][ T5485] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 159.240947][ T5485] Node 1 Normal: 184*4kB (UME) 38*8kB (UME) 18*16kB (UME) 157*32kB (UME) 63*64kB (UME) 20*128kB (UE) 11*256kB (UME) 3*512kB (UE) 1*1024kB (U) 3*2048kB (UME) 950*4096kB (M) = 3915664kB [ 159.246836][ T5485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 159.251534][ T5485] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 159.251852][ T5485] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 159.252007][ T5485] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 159.252243][ T5485] 43032 total pagecache pages [ 159.252252][ T5485] 0 pages in swap cache [ 159.252259][ T5485] Swap cache stats: add 0, delete 0, find 0/0 [ 159.253047][ T5485] Free swap = 124996kB [ 159.253149][ T5485] Total swap = 124996kB [ 159.253376][ T5485] 2097051 pages RAM [ 159.253633][ T5485] 0 pages HighMem/MovableOnly [ 159.253714][ T5485] 415313 pages reserved [ 159.254285][ T5485] 0 pages cma reserved [ 159.586469][ T5505] loop4: detected capacity change from 0 to 8 [ 159.606696][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.850798][ T5515] netlink: 'syz.3.333': attribute type 1 has an invalid length. [ 159.863955][ T5515] netlink: 'syz.3.333': attribute type 2 has an invalid length. [ 160.871863][ T5529] loop1: detected capacity change from 0 to 128 [ 160.880877][ T5530] loop2: detected capacity change from 0 to 512 [ 160.909360][ T5529] EXT4-fs (loop1): Test dummy encryption mode enabled [ 161.564842][ T5537] rxe_eth0 speed is unknown, defaulting to 1000 [ 161.854739][ T5529] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 161.897776][ T5529] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.946357][ T5530] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 162.002952][ T5530] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.387800][ T5568] netlink: 'syz.1.345': attribute type 10 has an invalid length. [ 164.571243][ T5568] device hsr0 entered promiscuous mode [ 164.596277][ T5568] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 164.708090][ T5568] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 164.794887][ T5568] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 164.937960][ T5568] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 165.314145][ T5569] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.086645][ T5593] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.754328][ T5596] loop4: detected capacity change from 0 to 8 [ 166.792754][ T5600] loop2: detected capacity change from 0 to 512 [ 167.074586][ T5600] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 167.797520][ T5600] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.274414][ T5624] loop4: detected capacity change from 0 to 512 [ 168.490451][ T5632] xt_bpf: check failed: parse error [ 168.586308][ T5624] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 168.657259][ T5624] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.771024][ T5642] loop0: detected capacity change from 0 to 128 [ 169.332547][ T5646] ubi: mtd0 is already attached to ubi0 [ 169.364499][ T5642] EXT4-fs (loop0): Test dummy encryption mode enabled [ 169.404129][ T5642] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 169.467700][ T5642] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.378573][ T5660] loop1: detected capacity change from 0 to 8 [ 170.450650][ T5655] rxe_eth0 speed is unknown, defaulting to 1000 [ 172.482098][ T5681] loop2: detected capacity change from 0 to 256 [ 172.615012][ T5683] loop4: detected capacity change from 0 to 512 [ 172.627670][ T5016] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 172.664104][ T5687] loop1: detected capacity change from 0 to 512 [ 172.748100][ T5683] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 172.782093][ T5683] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.966160][ T5687] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 173.343988][ T5687] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.415915][ T5016] usb 4-1: Using ep0 maxpacket: 16 [ 173.924825][ T5706] ERROR: Out of memory at tomoyo_realpath_from_path. [ 174.017513][ T5708] loop2: detected capacity change from 0 to 512 [ 174.027777][ T5706] syz.4.386: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 174.107506][ T5706] CPU: 0 PID: 5706 Comm: syz.4.386 Not tainted syzkaller #0 [ 174.114839][ T5706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.124908][ T5706] Call Trace: [ 174.128198][ T5706] [ 174.131134][ T5706] dump_stack_lvl+0x188/0x250 [ 174.135833][ T5706] ? rcu_lock_release+0x5/0x20 [ 174.140610][ T5706] ? show_regs_print_info+0x20/0x20 [ 174.145817][ T5706] ? load_image+0x410/0x410 [ 174.150348][ T5706] warn_alloc+0x245/0x320 [ 174.154701][ T5706] ? zone_watermark_ok_safe+0x250/0x250 [ 174.155447][ T5708] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.160269][ T5706] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 174.160297][ T5706] ? __get_vm_area_node+0x119/0x2d0 [ 174.160349][ T5706] __vmalloc_node_range+0x2b1/0x8b0 [ 174.187632][ T5706] ? vidtv_mux_init+0x200/0x1950 [ 174.192587][ T5706] vzalloc+0x75/0x80 [ 174.196493][ T5706] ? vidtv_mux_init+0x200/0x1950 [ 174.201446][ T5706] vidtv_mux_init+0x200/0x1950 [ 174.206228][ T5706] ? __mutex_lock_common+0x435/0x2400 [ 174.211631][ T5706] vidtv_start_feed+0x368/0x590 [ 174.216517][ T5706] ? vidtv_i2c_func+0x10/0x10 [ 174.221210][ T5706] ? vidtv_stop_feed+0x250/0x250 [ 174.226173][ T5706] ? _raw_spin_unlock_irq+0x1f/0x40 [ 174.231396][ T5706] ? lockdep_hardirqs_on+0x94/0x140 [ 174.236623][ T5706] dmx_ts_feed_start_filtering+0x11c/0x210 [ 174.242449][ T5706] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 174.248371][ T5706] dvb_dmxdev_filter_start+0x422/0x1060 [ 174.254045][ T5706] dvb_demux_do_ioctl+0x48d/0x530 [ 174.257288][ T5708] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.259085][ T5706] dvb_usercopy+0x191/0x2b0 [ 174.259109][ T5706] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 174.259126][ T5706] ? dvb_generic_ioctl+0xb0/0xb0 [ 174.259158][ T5706] ? dvb_demux_poll+0x210/0x210 [ 174.259174][ T5706] dvb_demux_ioctl+0x25/0x30 [ 174.259198][ T5706] __se_sys_ioctl+0xfa/0x170 [ 174.298297][ T5706] do_syscall_64+0x4c/0xa0 [ 174.302733][ T5706] ? clear_bhb_loop+0x30/0x80 [ 174.307431][ T5706] ? clear_bhb_loop+0x30/0x80 [ 174.312123][ T5706] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.318119][ T5706] RIP: 0033:0x7efe63df7559 [ 174.322543][ T5706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.342164][ T5706] RSP: 002b:00007efe6204f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.350604][ T5706] RAX: ffffffffffffffda RBX: 00007efe6407efa0 RCX: 00007efe63df7559 [ 174.358590][ T5706] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 174.366581][ T5706] RBP: 00007efe63e8e8b0 R08: 0000000000000000 R09: 0000000000000000 [ 174.374571][ T5706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.382554][ T5706] R13: 00007efe6407f038 R14: 00007efe6407efa0 R15: 00007ffc51297e88 [ 174.390558][ T5706] [ 174.393619][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.420894][ T5706] Mem-Info: [ 174.424053][ T5706] active_anon:344 inactive_anon:6196 isolated_anon:0 [ 174.424053][ T5706] active_file:4929 inactive_file:36483 isolated_file:0 [ 174.424053][ T5706] unevictable:768 dirty:187 writeback:0 [ 174.424053][ T5706] slab_reclaimable:21269 slab_unreclaimable:107066 [ 174.424053][ T5706] mapped:29648 shmem:1763 pagetables:602 bounce:0 [ 174.424053][ T5706] kernel_misc_reclaimable:0 [ 174.424053][ T5706] free:1368851 free_pcp:6425 free_cma:0 [ 174.465930][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.541921][ T5706] Node 0 active_anon:1344kB inactive_anon:24672kB active_file:19516kB inactive_file:145932kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118592kB dirty:748kB writeback:0kB shmem:4772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11188kB pagetables:2408kB all_unreclaimable? no [ 174.575727][ T5706] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 174.643017][ T5016] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 175.185282][ T5706] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.295677][ T5016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.303977][ T5016] usb 4-1: Product: syz [ 175.308263][ T5016] usb 4-1: Manufacturer: syz [ 175.312952][ T5016] usb 4-1: SerialNumber: syz [ 175.332455][ T5706] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 175.338896][ T5706] Node 0 DMA32 free:1544260kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1292kB inactive_anon:29620kB active_file:19516kB inactive_file:145908kB unevictable:1536kB writepending:740kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:18232kB local_pcp:16476kB free_cma:0kB [ 175.368884][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.409867][ T5706] lowmem_reserve[]: 0 0 0 0 0 [ 175.414623][ T5706] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.440550][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.447549][ T5706] lowmem_reserve[]: 0 0 0 0 0 [ 175.452625][ T5706] Node 1 Normal free:3915664kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3120kB local_pcp:1712kB free_cma:0kB [ 175.498216][ T5016] usb 4-1: config 0 descriptor?? [ 175.523210][ T5706] lowmem_reserve[]: 0 0 0 0 0 [ 175.529082][ T5016] usb 4-1: can't set config #0, error -71 [ 175.538043][ T5706] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 175.545668][ T5721] loop2: detected capacity change from 0 to 8 [ 175.556256][ T5016] usb 4-1: USB disconnect, device number 2 [ 175.572989][ T5706] Node 0 DMA32: 682*4kB (UE) 257*8kB (UME) 458*16kB (UME) 336*32kB (UM) 110*64kB (UME) 31*128kB (UME) 20*256kB (UM) 3*512kB (UM) 6*1024kB (UME) 3*2048kB (UM) 364*4096kB (M) = 1543760kB [ 175.796310][ T5706] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 176.195505][ T5706] Node 1 Normal: 184*4kB (UME) 38*8kB (UME) 18*16kB (UME) 157*32kB (UME) 63*64kB (UME) 20*128kB (UE) 11*256kB (UME) 3*512kB (UE) 1*1024kB (U) 3*2048kB (UME) 950*4096kB (M) = 3915664kB [ 176.713464][ T5706] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.725073][ T5706] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.735075][ T5706] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.745842][ T5706] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.755984][ T5706] 43032 total pagecache pages [ 176.760816][ T5706] 0 pages in swap cache [ 176.765011][ T5706] Swap cache stats: add 0, delete 0, find 0/0 [ 176.771423][ T5706] Free swap = 124996kB [ 176.775587][ T5706] Total swap = 124996kB [ 176.779811][ T5706] 2097051 pages RAM [ 176.787084][ T5706] 0 pages HighMem/MovableOnly [ 176.792048][ T5706] 415313 pages reserved [ 176.796209][ T5706] 0 pages cma reserved [ 176.907673][ T5736] loop0: detected capacity change from 0 to 512 [ 177.073331][ T5753] ubi: mtd0 is already attached to ubi0 [ 177.939801][ T5757] comedi comedi2: das16m1: I/O port conflict (0x20140,16) [ 177.949138][ T5736] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 178.010370][ T5736] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.189299][ T5775] loop4: detected capacity change from 0 to 8 [ 179.219340][ T5777] loop2: detected capacity change from 0 to 256 [ 179.378413][ T5783] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.857287][ T5790] ubi: mtd0 is already attached to ubi0 [ 180.294734][ T5794] ERROR: Out of memory at tomoyo_realpath_from_path. [ 180.521993][ T5804] loop0: detected capacity change from 0 to 512 [ 180.525613][ T5806] netlink: 'syz.4.419': attribute type 10 has an invalid length. [ 180.613513][ T5806] team0: Device nlmon0 is of different type [ 180.849138][ T5804] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 181.076271][ T5804] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.462247][ T5814] netlink: 'syz.4.421': attribute type 5 has an invalid length. [ 182.065299][ T5828] loop3: detected capacity change from 0 to 8 [ 182.852468][ T5831] rxe_eth0 speed is unknown, defaulting to 1000 [ 183.245149][ T5834] ubi: mtd0 is already attached to ubi0 [ 183.703149][ T5838] ERROR: Out of memory at tomoyo_realpath_from_path. [ 183.882312][ T5840] loop0: detected capacity change from 0 to 128 [ 184.875306][ T5840] EXT4-fs (loop0): Test dummy encryption mode enabled [ 184.976592][ T5850] loop4: detected capacity change from 0 to 16 [ 185.003901][ T5840] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 185.052388][ T5850] erofs: (device loop4): mounted with root inode @ nid 36. [ 185.109315][ T5840] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 185.155346][ T5850] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 1862 in[58, 4038] out[2639] [ 185.371906][ T5850] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 185.930955][ T4592] Bluetooth: hci4: command 0x0406 tx timeout [ 186.171898][ T4592] Bluetooth: hci1: command 0x0406 tx timeout [ 186.277537][ T4592] Bluetooth: hci0: command 0x0406 tx timeout [ 186.298120][ T4592] Bluetooth: hci3: command 0x0406 tx timeout [ 186.337597][ T4592] Bluetooth: hci2: command 0x0406 tx timeout [ 186.431260][ T5867] netlink: 'syz.1.439': attribute type 2 has an invalid length. [ 186.461064][ T5867] netlink: 36 bytes leftover after parsing attributes in process `syz.1.439'. [ 187.185872][ T5872] rxe_eth0 speed is unknown, defaulting to 1000 [ 187.397237][ T5875] loop4: detected capacity change from 0 to 512 [ 187.512597][ T5875] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 187.547922][ T5875] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.586565][ T5876] ubi: mtd0 is already attached to ubi0 [ 187.605648][ T5887] loop2: detected capacity change from 0 to 512 [ 187.826755][ T5887] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 188.169695][ T5887] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.375133][ T5907] rxe_eth0 speed is unknown, defaulting to 1000 [ 190.002684][ T5918] loop3: detected capacity change from 0 to 512 [ 190.107922][ T5918] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 190.221051][ T5918] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.940719][ T5932] rxe_eth0 speed is unknown, defaulting to 1000 [ 192.069433][ T5931] rxe_eth0 speed is unknown, defaulting to 1000 [ 193.293044][ T5946] ubi: mtd0 is already attached to ubi0 [ 194.137999][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.144379][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.667727][ T5953] loop0: detected capacity change from 0 to 8 [ 195.085438][ T5956] loop3: detected capacity change from 0 to 128 [ 195.311915][ T5958] loop2: detected capacity change from 0 to 512 [ 195.337723][ T5956] EXT4-fs (loop3): Test dummy encryption mode enabled [ 195.820518][ T5956] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 195.826761][ T5973] ERROR: Out of memory at tomoyo_realpath_from_path. [ 195.857684][ T5956] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.879128][ T5976] loop0: detected capacity change from 0 to 512 [ 195.961930][ T5958] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 195.962030][ T5958] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.285304][ T5976] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 196.285403][ T5976] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.544564][ T5996] rxe_eth0 speed is unknown, defaulting to 1000 [ 199.032450][ T5998] rxe_eth0 speed is unknown, defaulting to 1000 [ 199.358869][ T6006] ubi: mtd0 is already attached to ubi0 [ 200.540346][ T6012] warn_alloc: 5 callbacks suppressed [ 200.540363][ T6012] syz.2.475: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 200.587735][ T6012] CPU: 0 PID: 6012 Comm: syz.2.475 Not tainted syzkaller #0 [ 200.595072][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.605230][ T6012] Call Trace: [ 200.610397][ T6012] [ 200.613346][ T6012] dump_stack_lvl+0x188/0x250 [ 200.618064][ T6012] ? rcu_lock_release+0x5/0x20 [ 200.622858][ T6012] ? show_regs_print_info+0x20/0x20 [ 200.628074][ T6012] ? load_image+0x410/0x410 [ 200.632695][ T6012] warn_alloc+0x245/0x320 [ 200.637223][ T6012] ? zone_watermark_ok_safe+0x250/0x250 [ 200.642786][ T6012] ? __get_vm_area_node+0x164/0x2d0 [ 200.648005][ T6012] ? kfree+0xef/0x2a0 [ 200.652107][ T6012] __vmalloc_node_range+0x2b1/0x8b0 [ 200.657341][ T6012] ? vidtv_mux_init+0x200/0x1950 [ 200.662296][ T6012] vzalloc+0x75/0x80 [ 200.666214][ T6012] ? vidtv_mux_init+0x200/0x1950 [ 200.671179][ T6012] vidtv_mux_init+0x200/0x1950 [ 200.676052][ T6012] ? __mutex_lock_common+0x435/0x2400 [ 200.681446][ T6012] vidtv_start_feed+0x368/0x590 [ 200.686317][ T6012] ? vidtv_i2c_func+0x10/0x10 [ 200.691010][ T6012] ? vidtv_stop_feed+0x250/0x250 [ 200.695971][ T6012] ? _raw_spin_unlock_irq+0x1f/0x40 [ 200.701204][ T6012] ? lockdep_hardirqs_on+0x94/0x140 [ 200.706431][ T6012] dmx_ts_feed_start_filtering+0x11c/0x210 [ 200.712430][ T6012] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 200.718443][ T6012] dvb_dmxdev_filter_start+0x422/0x1060 [ 200.724213][ T6012] dvb_demux_do_ioctl+0x48d/0x530 [ 200.729265][ T6012] dvb_usercopy+0x191/0x2b0 [ 200.733789][ T6012] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 200.739349][ T6012] ? dvb_generic_ioctl+0xb0/0xb0 [ 200.744324][ T6012] ? dvb_demux_poll+0x210/0x210 [ 200.749215][ T6012] dvb_demux_ioctl+0x25/0x30 [ 200.753826][ T6012] __se_sys_ioctl+0xfa/0x170 [ 200.758430][ T6012] do_syscall_64+0x4c/0xa0 [ 200.762861][ T6012] ? clear_bhb_loop+0x30/0x80 [ 200.767554][ T6012] ? clear_bhb_loop+0x30/0x80 [ 200.772257][ T6012] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.778178][ T6012] RIP: 0033:0x7f5c77a6d559 [ 200.782602][ T6012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.802652][ T6012] RSP: 002b:00007f5c75cc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.811267][ T6012] RAX: ffffffffffffffda RBX: 00007f5c77cf4fa0 RCX: 00007f5c77a6d559 [ 200.819250][ T6012] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 200.827239][ T6012] RBP: 00007f5c77b048b0 R08: 0000000000000000 R09: 0000000000000000 [ 200.835221][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.843200][ T6012] R13: 00007f5c77cf5038 R14: 00007f5c77cf4fa0 R15: 00007ffd38f10128 [ 200.851210][ T6012] [ 200.857553][ T6012] Mem-Info: [ 200.874668][ T6012] active_anon:332 inactive_anon:6817 isolated_anon:0 [ 200.874668][ T6012] active_file:4934 inactive_file:36476 isolated_file:0 [ 200.874668][ T6012] unevictable:768 dirty:65 writeback:0 [ 200.874668][ T6012] slab_reclaimable:21228 slab_unreclaimable:107344 [ 200.874668][ T6012] mapped:30237 shmem:2048 pagetables:643 bounce:0 [ 200.874668][ T6012] kernel_misc_reclaimable:0 [ 200.874668][ T6012] free:1363885 free_pcp:10477 free_cma:0 [ 200.916610][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.135415][ T6025] loop3: detected capacity change from 0 to 128 [ 202.149479][ T6012] Node 0 active_anon:1244kB inactive_anon:25216kB active_file:19536kB inactive_file:145904kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119308kB dirty:296kB writeback:0kB shmem:4460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11128kB pagetables:2364kB all_unreclaimable? no [ 202.187838][ T6012] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 202.234508][ T6029] loop0: detected capacity change from 0 to 64 [ 202.244175][ T6025] EXT4-fs (loop3): Test dummy encryption mode enabled [ 202.306125][ T6012] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 202.344082][ T6025] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 202.372794][ T6025] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.376600][ T6012] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 202.392622][ T6012] Node 0 DMA32 free:1526032kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1244kB inactive_anon:26016kB active_file:19536kB inactive_file:145904kB unevictable:1536kB writepending:296kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:38820kB local_pcp:17892kB free_cma:0kB [ 202.422729][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.430614][ T6012] lowmem_reserve[]: 0 0 0 0 0 [ 202.435737][ T6012] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 202.461871][ T6012] lowmem_reserve[]: 0 0 0 0 0 [ 202.467338][ T6012] Node 1 [ 202.622386][ T6035] rxe_eth0 speed is unknown, defaulting to 1000 [ 203.252821][ T6012] Normal free:3915664kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3120kB local_pcp:1712kB free_cma:0kB [ 203.320542][ T6012] lowmem_reserve[]: 0 0 0 0 0 [ 203.325316][ T6012] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 203.338456][ T6012] Node 0 DMA32: 25*4kB (ME) 30*8kB (UME) 16*16kB (ME) 334*32kB (UME) 63*64kB (UME) 13*128kB (UME) 14*256kB (UM) 2*512kB (M) 5*1024kB (ME) 3*2048kB (UM) 364*4096kB (M) = 1523796kB [ 203.391605][ T6012] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 203.413731][ T6012] Node 1 Normal: 184*4kB (UME) 38*8kB (UME) 18*16kB (UME) 157*32kB (UME) 63*64kB (UME) 20*128kB (UE) 11*256kB (UME) 3*512kB (UE) 1*1024kB (U) 3*2048kB (UME) 950*4096kB (M) = 3915664kB [ 203.478886][ T6012] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.980113][ T6043] rxe_eth0 speed is unknown, defaulting to 1000 [ 204.553814][ T6040] loop1: detected capacity change from 0 to 512 [ 204.616229][ T6012] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.628157][ T6012] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.638134][ T6012] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.669232][ T6012] 43106 total pagecache pages [ 205.264154][ T6047] rxe_eth0 speed is unknown, defaulting to 1000 [ 205.498367][ T6012] 0 pages in swap cache [ 205.504390][ T6012] Swap cache stats: add 0, delete 0, find 0/0 [ 205.530851][ T6012] Free swap = 124996kB [ 205.535385][ T6012] Total swap = 124996kB [ 205.540660][ T6012] 2097051 pages RAM [ 205.543062][ T6051] loop0: detected capacity change from 0 to 8 [ 205.544512][ T6012] 0 pages HighMem/MovableOnly [ 205.560841][ T6012] 415313 pages reserved [ 205.580389][ T6012] 0 pages cma reserved [ 205.618582][ T6040] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 205.783876][ T6040] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.170236][ T6070] loop0: detected capacity change from 0 to 128 [ 207.265416][ T6070] EXT4-fs (loop0): Test dummy encryption mode enabled [ 207.316870][ T6070] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 207.520302][ T6070] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 207.958396][ T6083] loop2: detected capacity change from 0 to 128 [ 208.136622][ T6083] EXT4-fs (loop2): Test dummy encryption mode enabled [ 208.199620][ T6083] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 208.270439][ T6083] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.008801][ T6114] rxe_eth0 speed is unknown, defaulting to 1000 [ 213.740657][ T6126] rxe_eth0 speed is unknown, defaulting to 1000 [ 214.245896][ T6136] loop4: detected capacity change from 0 to 8 [ 214.252638][ T6132] syz.2.503: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 214.387985][ T6132] CPU: 0 PID: 6132 Comm: syz.2.503 Not tainted syzkaller #0 [ 214.395317][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.405382][ T6132] Call Trace: [ 214.408672][ T6132] [ 214.411612][ T6132] dump_stack_lvl+0x188/0x250 [ 214.416307][ T6132] ? rcu_lock_release+0x5/0x20 [ 214.421077][ T6132] ? show_regs_print_info+0x20/0x20 [ 214.426276][ T6132] ? load_image+0x410/0x410 [ 214.430785][ T6132] warn_alloc+0x245/0x320 [ 214.435133][ T6132] ? zone_watermark_ok_safe+0x250/0x250 [ 214.440664][ T6132] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 214.446627][ T6132] ? __get_vm_area_node+0x119/0x2d0 [ 214.451822][ T6132] __vmalloc_node_range+0x2b1/0x8b0 [ 214.457021][ T6132] ? vidtv_mux_init+0x200/0x1950 [ 214.461954][ T6132] vzalloc+0x75/0x80 [ 214.465853][ T6132] ? vidtv_mux_init+0x200/0x1950 [ 214.470786][ T6132] vidtv_mux_init+0x200/0x1950 [ 214.475557][ T6132] ? __mutex_lock_common+0x435/0x2400 [ 214.480937][ T6132] vidtv_start_feed+0x368/0x590 [ 214.485793][ T6132] ? vidtv_i2c_func+0x10/0x10 [ 214.490458][ T6132] ? vidtv_stop_feed+0x250/0x250 [ 214.495382][ T6132] ? _raw_spin_unlock_irq+0x1f/0x40 [ 214.500590][ T6132] ? lockdep_hardirqs_on+0x94/0x140 [ 214.505785][ T6132] dmx_ts_feed_start_filtering+0x11c/0x210 [ 214.511578][ T6132] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 214.517461][ T6132] dvb_dmxdev_filter_start+0x422/0x1060 [ 214.523004][ T6132] dvb_demux_do_ioctl+0x48d/0x530 [ 214.528017][ T6132] dvb_usercopy+0x191/0x2b0 [ 214.532507][ T6132] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 214.538035][ T6132] ? dvb_generic_ioctl+0xb0/0xb0 [ 214.542974][ T6132] ? dvb_demux_poll+0x210/0x210 [ 214.547815][ T6132] dvb_demux_ioctl+0x25/0x30 [ 214.552446][ T6132] __se_sys_ioctl+0xfa/0x170 [ 214.557036][ T6132] do_syscall_64+0x4c/0xa0 [ 214.561447][ T6132] ? clear_bhb_loop+0x30/0x80 [ 214.566116][ T6132] ? clear_bhb_loop+0x30/0x80 [ 214.570781][ T6132] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.576660][ T6132] RIP: 0033:0x7f5c77a6d559 [ 214.581060][ T6132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.600652][ T6132] RSP: 002b:00007f5c75cc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.609055][ T6132] RAX: ffffffffffffffda RBX: 00007f5c77cf4fa0 RCX: 00007f5c77a6d559 [ 214.617014][ T6132] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 214.624971][ T6132] RBP: 00007f5c77b048b0 R08: 0000000000000000 R09: 0000000000000000 [ 214.632929][ T6132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.640883][ T6132] R13: 00007f5c77cf5038 R14: 00007f5c77cf4fa0 R15: 00007ffd38f10128 [ 214.648852][ T6132] [ 214.651877][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.432791][ T6132] Mem-Info: [ 215.436018][ T6132] active_anon:319 inactive_anon:8189 isolated_anon:0 [ 215.436018][ T6132] active_file:4964 inactive_file:36450 isolated_file:0 [ 215.436018][ T6132] unevictable:768 dirty:138 writeback:0 [ 215.436018][ T6132] slab_reclaimable:21248 slab_unreclaimable:108550 [ 215.436018][ T6132] mapped:29586 shmem:1635 pagetables:581 bounce:0 [ 215.436018][ T6132] kernel_misc_reclaimable:0 [ 215.436018][ T6132] free:1364840 free_pcp:6192 free_cma:0 [ 215.560641][ T6132] Node 0 active_anon:1244kB inactive_anon:32944kB active_file:19656kB inactive_file:145800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122544kB dirty:552kB writeback:0kB shmem:8360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11464kB pagetables:2324kB all_unreclaimable? no [ 215.591858][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.650879][ T6146] loop0: detected capacity change from 0 to 128 [ 215.676945][ T6132] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 215.713897][ T6132] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.730104][ T6150] loop3: detected capacity change from 0 to 128 [ 215.740266][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.801478][ T6146] EXT4-fs (loop0): Test dummy encryption mode enabled [ 216.157865][ T6150] EXT4-fs (loop3): Test dummy encryption mode enabled [ 216.234656][ T6132] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 216.250632][ T6132] Node 0 DMA32 free:1521364kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1248kB inactive_anon:32948kB active_file:19696kB inactive_file:145772kB unevictable:1536kB writepending:552kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:24360kB local_pcp:21472kB free_cma:0kB [ 216.281043][ T6132] lowmem_reserve[]: 0 0 0 0 0 [ 216.286079][ T6132] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.321411][ T6132] lowmem_reserve[]: 0 0 0 0 0 [ 216.356169][ T6146] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 216.459285][ T6150] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 216.545293][ T6132] Node 1 Normal free:3915664kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3120kB local_pcp:1408kB free_cma:0kB [ 216.611530][ T6146] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.687724][ T6150] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.784005][ T6132] lowmem_reserve[]: 0 0 0 0 0 [ 216.788926][ T6132] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 217.013436][ T6132] Node 0 DMA32: 1557*4kB (UME) 722*8kB (UME) 280*16kB (UME) 58*32kB (UM) 66*64kB (UME) 16*128kB (UM) 13*256kB (M) 3*512kB (UM) 6*1024kB (UME) 0*2048kB 364*4096kB (M) = 1526564kB [ 217.038238][ T6132] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 217.050991][ T6132] Node 1 Normal: 184*4kB (UME) 38*8kB (UME) 18*16kB (UME) 157*32kB (UME) 63*64kB (UME) 20*128kB (UE) 11*256kB (UME) 3*512kB (UE) 1*1024kB (U) 3*2048kB (UME) 950*4096kB (M) = 3915664kB [ 217.135437][ T6132] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.192731][ T6132] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 217.221873][ T6132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.246880][ T6132] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.256805][ T6132] 43130 total pagecache pages [ 217.337330][ T6132] 0 pages in swap cache [ 217.634130][ T6132] Swap cache stats: add 0, delete 0, find 0/0 [ 217.672318][ T6132] Free swap = 124996kB [ 217.676570][ T6132] Total swap = 124996kB [ 217.680860][ T6132] 2097051 pages RAM [ 217.684761][ T6132] 0 pages HighMem/MovableOnly [ 217.710075][ T6132] 415313 pages reserved [ 217.714386][ T6132] 0 pages cma reserved [ 221.351601][ T6190] rxe_eth0 speed is unknown, defaulting to 1000 [ 222.231399][ T6202] loop2: detected capacity change from 0 to 8 [ 222.557538][ T6212] loop1: detected capacity change from 0 to 128 [ 222.957896][ T6210] loop3: detected capacity change from 0 to 128 [ 223.041663][ T6210] EXT4-fs (loop3): Test dummy encryption mode enabled [ 223.054722][ T6212] EXT4-fs (loop1): Test dummy encryption mode enabled [ 223.232918][ T6212] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 223.232929][ T6210] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 223.249309][ T6212] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 223.277671][ T6210] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 223.987074][ T6233] loop0: detected capacity change from 0 to 256 [ 224.014839][ T6236] loop1: detected capacity change from 0 to 256 [ 224.087632][ T6236] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 224.121742][ T6240] loop3: detected capacity change from 0 to 512 [ 224.270888][ T6240] EXT4-fs (loop3): Ignoring removed nobh option [ 224.299222][ T6240] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 224.338360][ T6240] EXT4-fs (loop3): 1 truncate cleaned up [ 224.344162][ T6240] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 224.400548][ T6249] kernel read not supported for file / œ7³ÏüâW)«s“§Ç!Qöì¥fsõ‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 6249 comm: syz.1.533) [ 224.425565][ T6247] loop2: detected capacity change from 0 to 256 [ 224.502519][ T26] audit: type=1800 audit(1792045421.239:2): pid=6249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.533" name=20019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=38984 res=0 errno=0 [ 224.517073][ T6247] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 224.567123][ T6257] loop0: detected capacity change from 0 to 512 [ 224.730304][ T6257] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 224.761900][ T6263] loop3: detected capacity change from 0 to 128 [ 224.779870][ T6257] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.942379][ T6263] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.981198][ T6259] loop1: detected capacity change from 0 to 32768 [ 224.998999][ T6263] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.041267][ T6263] EXT4-fs warning (device loop3): __ext4_ioctl:888: Setting inode version is not supported with metadata_csum enabled. [ 225.079143][ T6259] XFS (loop1): Mounting V5 Filesystem [ 225.175368][ T6277] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 225.366514][ T6259] XFS (loop1): Ending clean mount [ 225.491634][ T6296] FAT-fs (loop3): Directory bread(block 64) failed [ 225.537299][ T6296] FAT-fs (loop3): Directory bread(block 65) failed [ 225.553213][ T6296] FAT-fs (loop3): Directory bread(block 66) failed [ 225.568714][ T6296] FAT-fs (loop3): Directory bread(block 67) failed [ 225.585250][ T6296] FAT-fs (loop3): Directory bread(block 68) failed [ 225.599926][ T6296] FAT-fs (loop3): Directory bread(block 69) failed [ 225.600622][ T4187] XFS (loop1): Unmounting Filesystem [ 225.610247][ T6300] ERROR: Out of memory at tomoyo_realpath_from_path. [ 225.617343][ T6292] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 225.653565][ T6296] FAT-fs (loop3): Directory bread(block 70) failed [ 225.670954][ T6296] FAT-fs (loop3): Directory bread(block 71) failed [ 225.672662][ T6300] warn_alloc: 1 callbacks suppressed [ 225.672673][ T6300] syz.2.554: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 225.701909][ T6296] FAT-fs (loop3): Directory bread(block 72) failed [ 225.722755][ T6300] ,cpuset=syz2,mems_allowed=0-1 [ 225.736900][ T6300] CPU: 1 PID: 6300 Comm: syz.2.554 Not tainted syzkaller #0 [ 225.744231][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.754317][ T6300] Call Trace: [ 225.757613][ T6300] [ 225.760566][ T6300] dump_stack_lvl+0x188/0x250 [ 225.765273][ T6300] ? rcu_lock_release+0x5/0x20 [ 225.770058][ T6300] ? show_regs_print_info+0x20/0x20 [ 225.775279][ T6300] ? load_image+0x410/0x410 [ 225.779816][ T6300] warn_alloc+0x245/0x320 [ 225.784170][ T6300] ? zone_watermark_ok_safe+0x250/0x250 [ 225.789737][ T6300] ? __get_vm_area_node+0x164/0x2d0 [ 225.794953][ T6300] ? kfree+0xef/0x2a0 [ 225.798966][ T6300] __vmalloc_node_range+0x2b1/0x8b0 [ 225.804188][ T6300] ? vidtv_mux_init+0x200/0x1950 [ 225.809135][ T6300] vzalloc+0x75/0x80 [ 225.813043][ T6300] ? vidtv_mux_init+0x200/0x1950 [ 225.817986][ T6300] vidtv_mux_init+0x200/0x1950 [ 225.822764][ T6300] ? __mutex_lock_common+0x435/0x2400 [ 225.828159][ T6300] vidtv_start_feed+0x368/0x590 [ 225.833024][ T6300] ? vidtv_i2c_func+0x10/0x10 [ 225.837712][ T6300] ? vidtv_stop_feed+0x250/0x250 [ 225.842669][ T6300] ? _raw_spin_unlock_irq+0x1f/0x40 [ 225.847881][ T6300] ? lockdep_hardirqs_on+0x94/0x140 [ 225.853098][ T6300] dmx_ts_feed_start_filtering+0x11c/0x210 [ 225.858912][ T6300] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 225.864822][ T6300] dvb_dmxdev_filter_start+0x422/0x1060 [ 225.870397][ T6300] dvb_demux_do_ioctl+0x48d/0x530 [ 225.875440][ T6300] dvb_usercopy+0x191/0x2b0 [ 225.879955][ T6300] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 225.885506][ T6300] ? dvb_generic_ioctl+0xb0/0xb0 [ 225.890472][ T6300] ? dvb_demux_poll+0x210/0x210 [ 225.895334][ T6300] dvb_demux_ioctl+0x25/0x30 [ 225.899947][ T6300] __se_sys_ioctl+0xfa/0x170 [ 225.904548][ T6300] do_syscall_64+0x4c/0xa0 [ 225.908971][ T6300] ? clear_bhb_loop+0x30/0x80 [ 225.913665][ T6300] ? clear_bhb_loop+0x30/0x80 [ 225.918359][ T6300] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 225.924261][ T6300] RIP: 0033:0x7f5c77a6d559 [ 225.928694][ T6300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.937560][ T6296] FAT-fs (loop3): Directory bread(block 73) failed [ 225.948404][ T6300] RSP: 002b:00007f5c75cc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.948434][ T6300] RAX: ffffffffffffffda RBX: 00007f5c77cf4fa0 RCX: 00007f5c77a6d559 [ 225.948447][ T6300] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 225.948458][ T6300] RBP: 00007f5c77b048b0 R08: 0000000000000000 R09: 0000000000000000 [ 225.948469][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.948479][ T6300] R13: 00007f5c77cf5038 R14: 00007f5c77cf4fa0 R15: 00007ffd38f10128 [ 225.948508][ T6300] [ 225.965724][ T6300] Mem-Info: [ 225.999252][ T6292] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 226.004781][ T6300] active_anon:1054 inactive_anon:13668 isolated_anon:0 [ 226.004781][ T6300] active_file:5094 inactive_file:36504 isolated_file:0 [ 226.004781][ T6300] unevictable:768 dirty:175 writeback:0 [ 226.004781][ T6300] slab_reclaimable:21277 slab_unreclaimable:108302 [ 226.004781][ T6300] mapped:29677 shmem:10350 pagetables:616 bounce:0 [ 226.004781][ T6300] kernel_misc_reclaimable:0 [ 226.004781][ T6300] free:1355345 free_pcp:9756 free_cma:0 [ 226.089139][ T6292] ntfs3: loop4: Failed to load $Extend. [ 226.124037][ T6300] Node 0 active_anon:4184kB inactive_anon:54260kB active_file:20176kB inactive_file:146016kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118708kB dirty:700kB writeback:0kB shmem:39320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11688kB pagetables:2464kB all_unreclaimable? no [ 226.269595][ T6300] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 226.308847][ T6300] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 226.344240][ T6300] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 226.422846][ T6300] Node 0 DMA32 free:1493440kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:2384kB inactive_anon:52860kB active_file:20376kB inactive_file:145916kB unevictable:1536kB writepending:700kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:37272kB local_pcp:20200kB free_cma:0kB [ 226.497470][ T6300] lowmem_reserve[]: 0 0 0 0 0 [ 226.502233][ T6300] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 226.584683][ T6300] lowmem_reserve[]: 0 0 0 0 0 [ 226.589584][ T6300] Node 1 Normal free:3915664kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3120kB local_pcp:1408kB free_cma:0kB [ 226.618359][ T6300] lowmem_reserve[]: 0 0 0 0 0 [ 226.623089][ T6300] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 226.636015][ T6300] Node 0 DMA32: 391*4kB (UME) 73*8kB (UME) 19*16kB (UME) 44*32kB (ME) 9*64kB (UME) 9*128kB (UM) 5*256kB (U) 3*512kB (UE) 2*1024kB (UM) 2*2048kB (UM) 361*4096kB (M) = 1493204kB [ 226.655256][ T6300] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 226.668878][ T6300] Node 1 Normal: 184*4kB (UME) 38*8kB (UME) 18*16kB (UME) 157*32kB (UME) 63*64kB (UME) 20*128kB (UE) 11*256kB (UME) 3*512kB (UE) 1*1024kB (U) 3*2048kB (UME) 950*4096kB (M) = 3915664kB [ 226.710774][ T6300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 226.763376][ T6300] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 226.773308][ T6300] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 226.787859][ T6311] EXT4-fs (loop4): Test dummy encryption mode enabled [ 226.815315][ T6300] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 226.825153][ T6314] EXT4-fs (loop3): Test dummy encryption mode enabled [ 226.832482][ T6300] 47469 total pagecache pages [ 226.837312][ T6300] 0 pages in swap cache [ 226.858992][ T6300] Swap cache stats: add 0, delete 0, find 0/0 [ 226.865105][ T6300] Free swap = 124996kB [ 226.871031][ T6300] Total swap = 124996kB [ 226.875208][ T6300] 2097051 pages RAM [ 226.879288][ T6300] 0 pages HighMem/MovableOnly [ 226.884268][ T6300] 415313 pages reserved [ 226.889149][ T6300] 0 pages cma reserved [ 226.918699][ T6311] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 226.928557][ T6314] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 226.934704][ T6311] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.106561][ T6314] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.441633][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.564'. [ 227.556092][ T6336] comedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config [ 227.574217][ T6341] set_capacity_and_notify: 8 callbacks suppressed [ 227.574231][ T6341] loop3: detected capacity change from 0 to 512 [ 227.616168][ T6341] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 227.692684][ T6343] loop0: detected capacity change from 0 to 512 [ 227.705999][ T6341] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 227.727734][ T6341] System zones: 1-12 [ 227.732936][ T6341] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.563: bad orphan inode 131072 [ 227.758512][ T6343] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 227.870731][ T6341] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none. [ 227.886394][ T6343] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.013751][ T6353] ubi: mtd0 is already attached to ubi0 [ 228.741860][ T6355] ERROR: Out of memory at tomoyo_realpath_from_path. [ 228.765008][ T6359] loop3: detected capacity change from 0 to 512 [ 229.439462][ T6362] rxe_eth0 speed is unknown, defaulting to 1000 [ 229.653055][ T6359] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 229.699249][ T6359] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.734476][ T6380] rxe_eth0 speed is unknown, defaulting to 1000 [ 233.418579][ T6397] loop2: detected capacity change from 0 to 128 [ 233.499899][ T6399] loop1: detected capacity change from 0 to 128 [ 233.521924][ T6397] EXT4-fs (loop2): Test dummy encryption mode enabled [ 233.556967][ T6399] EXT4-fs (loop1): Test dummy encryption mode enabled [ 233.584589][ T6397] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 233.709246][ T6397] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 233.711748][ T6399] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 233.736834][ T6399] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 235.023696][ T6415] ubi: mtd0 is already attached to ubi0 [ 235.079473][ T6414] loop1: detected capacity change from 0 to 256 [ 237.781718][ T6428] rxe_eth0 speed is unknown, defaulting to 1000 [ 239.721236][ T6440] loop2: detected capacity change from 0 to 512 [ 239.811026][ T6446] loop3: detected capacity change from 0 to 128 [ 239.833589][ T6448] loop1: detected capacity change from 0 to 512 [ 239.874038][ T6446] EXT4-fs (loop3): Test dummy encryption mode enabled [ 239.914544][ T6440] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 239.954436][ T6440] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.955071][ T6446] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 240.066804][ T6456] loop0: detected capacity change from 0 to 128 [ 240.106827][ T6448] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 240.119293][ T6446] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.165988][ T6448] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.366778][ T6456] EXT4-fs (loop0): Test dummy encryption mode enabled [ 240.678582][ T6456] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 240.798808][ T6456] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 242.486034][ T6477] rxe_eth0 speed is unknown, defaulting to 1000 [ 243.726796][ T6492] loop0: detected capacity change from 0 to 512 [ 244.166180][ T6492] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,grpquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 244.437250][ T6492] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.059583][ T6492] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.601: inode #327680: comm syz.0.601: iget: illegal inode # [ 245.210967][ T6492] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.601: error while reading EA inode 327680 err=-117 [ 246.005921][ T6511] loop2: detected capacity change from 0 to 128 [ 246.033505][ T6509] loop1: detected capacity change from 0 to 128 [ 246.099455][ T6511] EXT4-fs (loop2): Test dummy encryption mode enabled [ 246.106553][ T6509] EXT4-fs (loop1): Test dummy encryption mode enabled [ 246.140713][ T6509] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 246.165811][ T6511] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 246.251654][ T6511] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 246.262602][ T6509] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 247.188543][ T6533] ERROR: Out of memory at tomoyo_realpath_from_path. [ 247.233031][ T6535] loop4: detected capacity change from 0 to 512 [ 247.250129][ T6536] ubi: mtd0 is already attached to ubi0 [ 247.342507][ T6535] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 247.343834][ T6538] loop2: detected capacity change from 0 to 512 [ 247.403213][ T6535] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.499487][ T6538] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 247.573391][ T6538] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.366227][ T6574] loop3: detected capacity change from 0 to 128 [ 251.417803][ T6574] EXT4-fs (loop3): Test dummy encryption mode enabled [ 251.488465][ T6574] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 251.488572][ T6574] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 252.430430][ T6585] ERROR: Out of memory at tomoyo_realpath_from_path. [ 252.443084][ T6585] syz.3.624: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 252.443211][ T6585] CPU: 0 PID: 6585 Comm: syz.3.624 Not tainted syzkaller #0 [ 252.443230][ T6585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.443255][ T6585] Call Trace: [ 252.443262][ T6585] [ 252.443272][ T6585] dump_stack_lvl+0x188/0x250 [ 252.443296][ T6585] ? rcu_lock_release+0x5/0x20 [ 252.443316][ T6585] ? show_regs_print_info+0x20/0x20 [ 252.443335][ T6585] ? load_image+0x410/0x410 [ 252.443367][ T6585] warn_alloc+0x245/0x320 [ 252.443393][ T6585] ? zone_watermark_ok_safe+0x250/0x250 [ 252.443416][ T6585] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 252.443434][ T6585] ? __get_vm_area_node+0x119/0x2d0 [ 252.443468][ T6585] __vmalloc_node_range+0x2b1/0x8b0 [ 252.443498][ T6585] ? vidtv_mux_init+0x200/0x1950 [ 252.443518][ T6585] vzalloc+0x75/0x80 [ 252.443536][ T6585] ? vidtv_mux_init+0x200/0x1950 [ 252.443553][ T6585] vidtv_mux_init+0x200/0x1950 [ 252.443580][ T6585] ? __mutex_lock_common+0x435/0x2400 [ 252.443608][ T6585] vidtv_start_feed+0x368/0x590 [ 252.443632][ T6585] ? vidtv_i2c_func+0x10/0x10 [ 252.443649][ T6585] ? vidtv_stop_feed+0x250/0x250 [ 252.443673][ T6585] ? _raw_spin_unlock_irq+0x1f/0x40 [ 252.443691][ T6585] ? lockdep_hardirqs_on+0x94/0x140 [ 252.443718][ T6585] dmx_ts_feed_start_filtering+0x11c/0x210 [ 252.443737][ T6585] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 252.443759][ T6585] dvb_dmxdev_filter_start+0x422/0x1060 [ 252.443789][ T6585] dvb_demux_do_ioctl+0x48d/0x530 [ 252.443811][ T6585] dvb_usercopy+0x191/0x2b0 [ 252.443829][ T6585] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 252.443847][ T6585] ? dvb_generic_ioctl+0xb0/0xb0 [ 252.443884][ T6585] ? dvb_demux_poll+0x210/0x210 [ 252.443902][ T6585] dvb_demux_ioctl+0x25/0x30 [ 252.443919][ T6585] __se_sys_ioctl+0xfa/0x170 [ 252.443940][ T6585] do_syscall_64+0x4c/0xa0 [ 252.443957][ T6585] ? clear_bhb_loop+0x30/0x80 [ 252.443974][ T6585] ? clear_bhb_loop+0x30/0x80 [ 252.443993][ T6585] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.444012][ T6585] RIP: 0033:0x7f136f3da559 [ 252.444030][ T6585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.444045][ T6585] RSP: 002b:00007f136d632028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.444066][ T6585] RAX: ffffffffffffffda RBX: 00007f136f661fa0 RCX: 00007f136f3da559 [ 252.444078][ T6585] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 252.444090][ T6585] RBP: 00007f136f4718b0 R08: 0000000000000000 R09: 0000000000000000 [ 252.444102][ T6585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.444115][ T6585] R13: 00007f136f662038 R14: 00007f136f661fa0 R15: 00007fffc0249ab8 [ 252.444142][ T6585] [ 252.444149][ T6585] Mem-Info: [ 252.444158][ T6585] active_anon:359 inactive_anon:6620 isolated_anon:0 [ 252.444158][ T6585] active_file:5028 inactive_file:36451 isolated_file:0 [ 252.444158][ T6585] unevictable:768 dirty:205 writeback:0 [ 252.444158][ T6585] slab_reclaimable:21258 slab_unreclaimable:105684 [ 252.444158][ T6585] mapped:29678 shmem:1706 pagetables:603 bounce:0 [ 252.444158][ T6585] kernel_misc_reclaimable:0 [ 252.444158][ T6585] free:1365598 free_pcp:10226 free_cma:0 [ 252.444205][ T6585] Node 0 active_anon:1404kB inactive_anon:25968kB active_file:19912kB inactive_file:145804kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118712kB dirty:820kB writeback:0kB shmem:4744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11540kB pagetables:2412kB all_unreclaimable? no [ 252.444253][ T6585] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 252.444297][ T6585] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.444348][ T6585] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 252.444391][ T6585] Node 0 DMA32 free:1531368kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1404kB inactive_anon:25968kB active_file:19912kB inactive_file:145804kB unevictable:1536kB writepending:820kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:37784kB local_pcp:20664kB free_cma:0kB [ 252.444449][ T6585] lowmem_reserve[]: 0 0 0 0 0 [ 252.444498][ T6585] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.444546][ T6585] lowmem_reserve[]: 0 0 0 0 0 [ 252.444595][ T6585] Node 1 Normal free:3915664kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3120kB local_pcp:1712kB free_cma:0kB [ 252.444649][ T6585] lowmem_reserve[]: 0 0 0 0 0 [ 252.444690][ T6585] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 252.444827][ T6585] Node 0 DMA32: 1402*4kB (UME) 600*8kB (UME) 418*16kB (UME) 347*32kB (UME) 140*64kB (UME) 10*128kB (UM) 16*256kB (UME) 4*512kB (UE) 4*1024kB (UM) 2*2048kB (UM) 361*4096kB (M) = 1531432kB [ 252.445017][ T6585] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 252.445131][ T6585] Node 1 Normal: 184*4kB (UME) 38*8kB (UME) 18*16kB (UME) 157*32kB (UME) 63*64kB (UME) 20*128kB (UE) 11*256kB (UME) 3*512kB (UE) 1*1024kB (U) 3*2048kB (UME) 950*4096kB (M) = 3915664kB [ 252.445318][ T6585] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.445336][ T6585] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 252.445352][ T6585] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.445368][ T6585] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.445383][ T6585] 43180 total pagecache pages [ 252.445391][ T6585] 0 pages in swap cache [ 252.445399][ T6585] Swap cache stats: add 0, delete 0, find 0/0 [ 252.445412][ T6585] Free swap = 124996kB [ 252.445420][ T6585] Total swap = 124996kB [ 252.445428][ T6585] 2097051 pages RAM [ 252.445436][ T6585] 0 pages HighMem/MovableOnly [ 252.445443][ T6585] 415313 pages reserved [ 252.445451][ T6585] 0 pages cma reserved [ 252.666152][ T6590] loop4: detected capacity change from 0 to 4096 [ 252.879223][ T6590] EXT4-fs (loop4): Test dummy encryption mode enabled [ 252.931504][ T6590] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 252.932873][ T6603] comedi comedi1: Minor 4 specified more than once! [ 253.321225][ T6612] comedi comedi1: fl512: I/O port conflict (0xfffffffffc000000,16) [ 253.323549][ T6613] ubi: mtd0 is already attached to ubi0 [ 253.371279][ T6615] loop1: detected capacity change from 0 to 16 [ 253.382157][ T6615] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 253.388143][ T6582] udevd[6582]: incorrect cramfs checksum on /dev/loop1 [ 254.300292][ T6621] loop4: detected capacity change from 0 to 4096 [ 254.436505][ T6621] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 254.496857][ T6621] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 254.658838][ T4394] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 254.680358][ T4186] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 254.687107][ T4186] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 254.721224][ T4186] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 254.749552][ T4386] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 254.756649][ T4186] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 254.819766][ T6623] loop1: detected capacity change from 0 to 32768 [ 255.535646][ T6623] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.638 (6623) [ 255.583607][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.588089][ T6643] rxe_eth0 speed is unknown, defaulting to 1000 [ 255.592572][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.657167][ T6644] loop2: detected capacity change from 0 to 128 [ 255.665129][ T6623] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 255.689386][ T6623] BTRFS info (device loop1): enabling auto defrag [ 255.729709][ T6623] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 255.740097][ T6644] EXT4-fs (loop2): Test dummy encryption mode enabled [ 255.788281][ T6623] BTRFS info (device loop1): force zstd compression, level 3 [ 255.814969][ T6623] BTRFS info (device loop1): force clearing of disk cache [ 255.822393][ T6623] BTRFS info (device loop1): disabling log replay at mount time [ 255.822814][ T6644] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 255.857615][ T6623] BTRFS info (device loop1): turning on async discard [ 255.864439][ T6623] BTRFS info (device loop1): setting nodatacow [ 256.443942][ T6623] BTRFS info (device loop1): enabling disk space caching [ 256.459483][ T6644] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 256.503080][ T6623] BTRFS info (device loop1): disabling disk space caching [ 256.638200][ T6623] BTRFS info (device loop1): disabling tree log [ 256.672678][ T6623] BTRFS info (device loop1): enabling disk space caching [ 256.673724][ T6655] loop3: detected capacity change from 0 to 8 [ 256.690998][ T6623] BTRFS info (device loop1): disk space caching is enabled [ 256.736834][ T6653] rxe_eth0 speed is unknown, defaulting to 1000 [ 257.084179][ T6623] BTRFS info (device loop1): has skinny extents [ 257.741926][ T6623] BTRFS error (device loop1): open_ctree failed: -12 [ 257.885575][ T6582] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (6582) [ 258.770423][ T6695] rxe_eth0 speed is unknown, defaulting to 1000 [ 259.653163][ T6705] loop2: detected capacity change from 0 to 128 [ 259.681556][ T6706] ubi: mtd0 is already attached to ubi0 [ 259.715927][ T6705] EXT4-fs (loop2): Test dummy encryption mode enabled [ 259.774051][ T6708] loop0: detected capacity change from 0 to 256 [ 259.811408][ T6705] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 259.887614][ T6705] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 260.307578][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 260.577459][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 260.637299][ T6719] loop4: detected capacity change from 0 to 128 [ 260.683043][ T6717] loop3: detected capacity change from 0 to 4096 [ 260.697861][ T7] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 260.726424][ T7] usb 1-1: config 1 has no interface number 0 [ 260.746711][ T7] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 260.747877][ T6719] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985 [ 260.765577][ T6717] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 260.777323][ T7] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 260.791326][ T6719] ; already mounted read-only [ 260.842655][ T6719] hpfs: filesystem error: improperly stopped [ 260.853794][ T7] usb 1-1: config 1 interface 105 has no altsetting 0 [ 260.879557][ T6719] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 260.912827][ T6719] hpfs: You really don't want any checks? You are crazy... [ 260.925744][ T6717] ntfs3: loop3: Failed to load $Extend. [ 260.932341][ T6719] hpfs: Code page index out of array [ 260.957522][ T6719] hpfs: code page support is disabled [ 260.985747][ T6719] hpfs: hpfs_map_4sectors(): unaligned read [ 261.008228][ T6719] hpfs: hpfs_map_4sectors(): unaligned read [ 261.014163][ T6719] hpfs: filesystem error: unable to find root dir [ 261.077775][ T7] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 261.104666][ T7] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 261.127417][ T7] usb 1-1: Product: syz [ 261.131626][ T7] usb 1-1: Manufacturer: syz [ 261.156609][ T7] usb 1-1: SerialNumber: syz [ 261.229825][ T6714] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 261.247641][ T6714] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 261.323565][ T6722] loop4: detected capacity change from 0 to 64 [ 261.852197][ T6731] rxe_eth0 speed is unknown, defaulting to 1000 [ 262.407808][ T6714] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 262.447610][ T6714] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 263.723038][ T7] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 263.743438][ T7] aqc111: probe of 1-1:1.105 failed with error -71 [ 263.759091][ T7] usb 1-1: USB disconnect, device number 4 [ 263.783021][ T6740] warn_alloc: 2 callbacks suppressed [ 263.783037][ T6740] syz.1.669: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 263.807489][ T6740] CPU: 0 PID: 6740 Comm: syz.1.669 Not tainted syzkaller #0 [ 263.814818][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.824972][ T6740] Call Trace: [ 263.828264][ T6740] [ 263.831206][ T6740] dump_stack_lvl+0x188/0x250 [ 263.835920][ T6740] ? rcu_lock_release+0x5/0x20 [ 263.840707][ T6740] ? show_regs_print_info+0x20/0x20 [ 263.845918][ T6740] ? load_image+0x410/0x410 [ 263.850447][ T6740] warn_alloc+0x245/0x320 [ 263.854799][ T6740] ? zone_watermark_ok_safe+0x250/0x250 [ 263.860352][ T6740] ? __get_vm_area_node+0x164/0x2d0 [ 263.865563][ T6740] ? kfree+0xef/0x2a0 [ 263.869569][ T6740] __vmalloc_node_range+0x2b1/0x8b0 [ 263.874787][ T6740] ? vidtv_mux_init+0x200/0x1950 [ 263.879741][ T6740] vzalloc+0x75/0x80 [ 263.883657][ T6740] ? vidtv_mux_init+0x200/0x1950 [ 263.888604][ T6740] vidtv_mux_init+0x200/0x1950 [ 263.893376][ T6740] ? __mutex_lock_common+0x435/0x2400 [ 263.898768][ T6740] vidtv_start_feed+0x368/0x590 [ 263.903629][ T6740] ? vidtv_i2c_func+0x10/0x10 [ 263.908315][ T6740] ? vidtv_stop_feed+0x250/0x250 [ 263.913269][ T6740] ? _raw_spin_unlock_irq+0x1f/0x40 [ 263.918480][ T6740] ? lockdep_hardirqs_on+0x94/0x140 [ 263.923697][ T6740] dmx_ts_feed_start_filtering+0x11c/0x210 [ 263.929515][ T6740] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 263.935417][ T6740] dvb_dmxdev_filter_start+0x422/0x1060 [ 263.940989][ T6740] dvb_demux_do_ioctl+0x48d/0x530 [ 263.946033][ T6740] dvb_usercopy+0x191/0x2b0 [ 263.950547][ T6740] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 263.956097][ T6740] ? dvb_generic_ioctl+0xb0/0xb0 [ 263.961077][ T6740] ? dvb_demux_poll+0x210/0x210 [ 263.965944][ T6740] dvb_demux_ioctl+0x25/0x30 [ 263.970546][ T6740] __se_sys_ioctl+0xfa/0x170 [ 263.975151][ T6740] do_syscall_64+0x4c/0xa0 [ 263.979581][ T6740] ? clear_bhb_loop+0x30/0x80 [ 263.984267][ T6740] ? clear_bhb_loop+0x30/0x80 [ 263.988952][ T6740] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.994860][ T6740] RIP: 0033:0x7f121f98d559 [ 263.999280][ T6740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.018902][ T6740] RSP: 002b:00007f121dbe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.027330][ T6740] RAX: ffffffffffffffda RBX: 00007f121fc14fa0 RCX: 00007f121f98d559 [ 264.035307][ T6740] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 264.043288][ T6740] RBP: 00007f121fa248b0 R08: 0000000000000000 R09: 0000000000000000 [ 264.051269][ T6740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.059246][ T6740] R13: 00007f121fc15038 R14: 00007f121fc14fa0 R15: 00007ffc36fce4b8 [ 264.067250][ T6740] [ 264.074944][ T6740] Mem-Info: [ 264.076827][ T6738] rxe_eth0 speed is unknown, defaulting to 1000 [ 264.078129][ T6740] active_anon:326 inactive_anon:7331 isolated_anon:0 [ 264.078129][ T6740] active_file:5048 inactive_file:36426 isolated_file:0 [ 264.078129][ T6740] unevictable:768 dirty:169 writeback:0 [ 264.078129][ T6740] slab_reclaimable:21194 slab_unreclaimable:101570 [ 264.078129][ T6740] mapped:29824 shmem:1652 pagetables:630 bounce:0 [ 264.078129][ T6740] kernel_misc_reclaimable:0 [ 264.078129][ T6740] free:1370768 free_pcp:8253 free_cma:0 [ 264.078181][ T6740] Node 0 active_anon:1272kB inactive_anon:28812kB active_file:19992kB inactive_file:145704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119296kB dirty:676kB writeback:0kB shmem:4528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11724kB pagetables:2520kB all_unreclaimable? no [ 264.078227][ T6740] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 264.078271][ T6740] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 264.214050][ T6740] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 264.244805][ T6740] Node 0 DMA32 free:1551160kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1272kB inactive_anon:29112kB active_file:19992kB inactive_file:145704kB unevictable:1536kB writepending:676kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:28468kB local_pcp:13472kB free_cma:0kB [ 264.840969][ T6740] lowmem_reserve[]: 0 0 0 0 0 [ 264.845748][ T6740] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 265.090818][ T6757] loop0: detected capacity change from 0 to 128 [ 265.322074][ T6757] EXT4-fs (loop0): Test dummy encryption mode enabled [ 265.553696][ T6740] lowmem_reserve[]: 0 0 0 0 0 [ 265.558640][ T6740] Node 1 Normal free:3915664kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3120kB local_pcp:1712kB free_cma:0kB [ 265.573341][ T6757] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 265.588198][ T6740] lowmem_reserve[]: 0 0 0 0 0 [ 265.608659][ T6740] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 265.621453][ T6740] Node 0 DMA32: 1906*4kB (UME) 1215*8kB (UME) 439*16kB (UME) 510*32kB (UME) 120*64kB (UME) 37*128kB (UM) 20*256kB (UME) 5*512kB (UE) 4*1024kB (UM) 2*2048kB (UM) 361*4096kB (M) = 1547632kB [ 265.642846][ T6740] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 265.654578][ T6740] Node 1 Normal: 184*4kB (UME) 38*8kB (UME) 18*16kB (UME) 157*32kB (UME) 63*64kB (UME) 20*128kB (UE) 11*256kB (UME) 3*512kB (UE) 1*1024kB (U) 3*2048kB (UME) 950*4096kB (M) = 3915664kB [ 265.692377][ T6764] loop4: detected capacity change from 0 to 128 [ 265.698930][ T6757] ext4 filesystem being mounted at /148/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 265.709399][ T6740] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.719918][ T6740] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 265.754531][ T6764] EXT4-fs (loop4): Test dummy encryption mode enabled [ 265.767459][ T6740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.816049][ T6764] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 265.837453][ T6740] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.846806][ T6740] 43118 total pagecache pages [ 265.860731][ T6764] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 265.915847][ T6740] 0 pages in swap cache [ 265.943232][ T6740] Swap cache stats: add 0, delete 0, find 0/0 [ 265.980126][ T6740] Free swap = 124996kB [ 266.000384][ T6740] Total swap = 124996kB [ 266.159095][ T6740] 2097051 pages RAM [ 266.238639][ T6740] 0 pages HighMem/MovableOnly [ 266.338267][ T6740] 415313 pages reserved [ 266.425945][ T6740] 0 pages cma reserved [ 266.855429][ T6774] loop3: detected capacity change from 0 to 512 [ 266.892614][ T6776] loop4: detected capacity change from 0 to 256 [ 267.508138][ T6779] rxe_eth0 speed is unknown, defaulting to 1000 [ 267.817812][ T6774] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 267.828238][ T6776] exfat: Deprecated parameter 'utf8' [ 267.844512][ T6776] exfat: Deprecated parameter 'utf8' [ 267.850285][ T6776] exfat: Deprecated parameter 'utf8' [ 267.878577][ T6776] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 267.981613][ T6774] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.639813][ T6785] rxe_eth0 speed is unknown, defaulting to 1000 [ 269.852274][ T6792] rxe_eth0 speed is unknown, defaulting to 1000 [ 270.115660][ T6794] loop3: detected capacity change from 0 to 8 [ 270.123489][ T6790] loop1: detected capacity change from 0 to 4096 [ 270.209446][ T6790] NILFS (loop1): invalid segment: Checksum error in segment payload [ 270.268496][ T6790] NILFS (loop1): trying rollback from an earlier position [ 270.393300][ T6790] NILFS (loop1): recovery complete [ 271.167755][ T6800] rxe_eth0 speed is unknown, defaulting to 1000 [ 271.771283][ T6801] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 271.860963][ T6790] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 12 already freed [ 271.894682][ T6803] ERROR: Out of memory at tomoyo_realpath_from_path. [ 271.912734][ T6790] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 272.279507][ T6816] loop4: detected capacity change from 0 to 128 [ 272.361272][ T6818] loop2: detected capacity change from 0 to 4096 [ 272.426505][ T6820] loop0: detected capacity change from 0 to 512 [ 272.485697][ T6818] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 272.574998][ T6820] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 272.587555][ T6820] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.899590][ T6829] loop4: detected capacity change from 0 to 128 [ 272.953872][ T6829] EXT4-fs (loop4): Test dummy encryption mode enabled [ 272.996350][ T6829] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 273.109198][ T6829] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 273.272774][ T6836] ubi: mtd0 is already attached to ubi0 [ 274.703115][ T6844] rxe_eth0 speed is unknown, defaulting to 1000 [ 274.957538][ T6846] loop2: detected capacity change from 0 to 8 [ 275.097664][ T6848] loop1: detected capacity change from 0 to 128 [ 275.180178][ T6848] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 275.820201][ T6848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.855280][ T6852] ERROR: Out of memory at tomoyo_realpath_from_path. [ 276.823387][ T6866] loop3: detected capacity change from 0 to 128 [ 276.869275][ T6866] EXT4-fs (loop3): Test dummy encryption mode enabled [ 276.911488][ T6868] loop1: detected capacity change from 0 to 128 [ 276.943212][ T6866] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 277.015752][ T6866] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 277.025304][ T6868] EXT4-fs (loop1): Test dummy encryption mode enabled [ 277.067575][ T6872] loop0: detected capacity change from 0 to 512 [ 277.151413][ T6868] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 277.192347][ T6868] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 277.225187][ T6876] loop4: detected capacity change from 0 to 512 [ 277.248640][ T6872] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 277.408264][ T6872] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.507178][ T6876] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 279.779834][ T6898] rxe_eth0 speed is unknown, defaulting to 1000 [ 280.191893][ T6902] ubi: mtd0 is already attached to ubi0 [ 280.843909][ T6905] loop4: detected capacity change from 0 to 8 [ 281.776909][ T6911] loop0: detected capacity change from 0 to 4096 [ 281.965947][ T6917] ERROR: Out of memory at tomoyo_realpath_from_path. [ 281.987450][ T6919] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.308866][ T6925] loop1: detected capacity change from 0 to 128 [ 282.420491][ T6925] EXT4-fs (loop1): Test dummy encryption mode enabled [ 282.468926][ T6908] loop2: detected capacity change from 0 to 32768 [ 282.485076][ T6928] loop0: detected capacity change from 0 to 512 [ 282.509603][ T6925] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 282.617714][ T6925] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 282.647980][ T6908] XFS (loop2): Mounting V5 Filesystem [ 282.791703][ T6928] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 282.857994][ T6908] XFS (loop2): Ending clean mount [ 282.884853][ T26] audit: type=1800 audit(1792045479.619:3): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.710" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 282.901699][ T6928] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.924552][ T4195] XFS (loop2): Unmounting Filesystem [ 285.056210][ T6955] rxe_eth0 speed is unknown, defaulting to 1000 [ 285.597762][ T6958] loop4: detected capacity change from 0 to 128 [ 285.677804][ T6958] EXT4-fs (loop4): Test dummy encryption mode enabled [ 285.721237][ T6958] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 285.890086][ T6958] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.077435][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 286.167661][ T6966] loop2: detected capacity change from 0 to 256 [ 286.208103][ T6966] exfat: Deprecated parameter 'utf8' [ 286.213526][ T6966] exfat: Deprecated parameter 'utf8' [ 286.264657][ T6966] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 286.291956][ T6968] ubi: mtd0 is already attached to ubi0 [ 286.342144][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 286.479668][ T13] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.532988][ T13] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 286.563183][ T6971] loop2: detected capacity change from 0 to 8 [ 286.566987][ T13] usb 1-1: config 0 interface 0 has no altsetting 0 [ 286.589780][ T13] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 286.634723][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.812856][ T13] usb 1-1: config 0 descriptor?? [ 287.429006][ T13] input: Glorious Model O as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:258A:0036.0001/input/input5 [ 288.051219][ T13] glorious 0003:258A:0036.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.0-1/input0 [ 288.111236][ T13] usb 1-1: USB disconnect, device number 5 [ 288.162081][ T6987] loop2: detected capacity change from 0 to 512 [ 288.288403][ T6987] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 288.337568][ T6987] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.355350][ T6988] fido_id[6988]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 289.915980][ T7003] rxe_eth0 speed is unknown, defaulting to 1000 [ 292.522636][ T7021] ERROR: Out of memory at tomoyo_realpath_from_path. [ 292.669193][ T7026] loop3: detected capacity change from 0 to 8 [ 293.792790][ T7034] device ip6_vti0 entered promiscuous mode [ 293.818617][ T7037] netlink: 279 bytes leftover after parsing attributes in process `syz.4.742'. [ 294.314396][ T7042] loop1: detected capacity change from 0 to 512 [ 294.954373][ T7042] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 295.141666][ T7042] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.381226][ T7057] ubi: mtd0 is already attached to ubi0 [ 295.602840][ T7061] rxe_eth0 speed is unknown, defaulting to 1000 [ 296.254708][ T7064] syz.0.749: vmalloc error: size 8192, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 296.272625][ T7066] loop2: detected capacity change from 0 to 128 [ 296.277510][ T7064] CPU: 0 PID: 7064 Comm: syz.0.749 Not tainted syzkaller #0 [ 296.286227][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.296302][ T7064] Call Trace: [ 296.299602][ T7064] [ 296.302549][ T7064] dump_stack_lvl+0x188/0x250 [ 296.307247][ T7064] ? rcu_lock_release+0x5/0x20 [ 296.312109][ T7064] ? show_regs_print_info+0x20/0x20 [ 296.317314][ T7064] ? load_image+0x410/0x410 [ 296.321858][ T7064] warn_alloc+0x245/0x320 [ 296.326214][ T7064] ? slab_free_freelist_hook+0xec/0x170 [ 296.331797][ T7064] ? zone_watermark_ok_safe+0x250/0x250 [ 296.337372][ T7064] ? kfree+0xef/0x2a0 [ 296.341383][ T7064] ? __get_vm_area_node+0x164/0x2d0 [ 296.346611][ T7064] __vmalloc_node_range+0x2b1/0x8b0 [ 296.351832][ T7064] ? dvb_demux_do_ioctl+0x2ad/0x530 [ 296.357041][ T7064] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 296.362697][ T7064] ? dvb_dmxdev_filter_start+0x107/0x1060 [ 296.368431][ T7064] vmalloc+0x75/0x80 [ 296.372427][ T7064] ? dvb_dmxdev_filter_start+0x107/0x1060 [ 296.378150][ T7064] dvb_dmxdev_filter_start+0x107/0x1060 [ 296.383717][ T7064] dvb_demux_do_ioctl+0x48d/0x530 [ 296.388773][ T7064] dvb_usercopy+0x191/0x2b0 [ 296.393289][ T7064] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 296.398846][ T7064] ? dvb_generic_ioctl+0xb0/0xb0 [ 296.403820][ T7064] ? dvb_demux_poll+0x210/0x210 [ 296.408682][ T7064] dvb_demux_ioctl+0x25/0x30 [ 296.413282][ T7064] __se_sys_ioctl+0xfa/0x170 [ 296.417877][ T7064] do_syscall_64+0x4c/0xa0 [ 296.422305][ T7064] ? clear_bhb_loop+0x30/0x80 [ 296.426990][ T7064] ? clear_bhb_loop+0x30/0x80 [ 296.431680][ T7064] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.437583][ T7064] RIP: 0033:0x7f6b3d7e5559 [ 296.442008][ T7064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.461625][ T7064] RSP: 002b:00007f6b3ba3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.470057][ T7064] RAX: ffffffffffffffda RBX: 00007f6b3da6cfa0 RCX: 00007f6b3d7e5559 [ 296.478038][ T7064] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 296.486017][ T7064] RBP: 00007f6b3d87c8b0 R08: 0000000000000000 R09: 0000000000000000 [ 296.494318][ T7064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.501809][ T7066] EXT4-fs (loop2): Test dummy encryption mode enabled [ 296.502300][ T7064] R13: 00007f6b3da6d038 R14: 00007f6b3da6cfa0 R15: 00007fff3b200368 [ 296.502332][ T7064] [ 296.541936][ T7066] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 296.568348][ T7066] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 296.597488][ T7064] Mem-Info: [ 296.601595][ T7064] active_anon:357 inactive_anon:5699 isolated_anon:0 [ 296.601595][ T7064] active_file:5063 inactive_file:36488 isolated_file:0 [ 296.601595][ T7064] unevictable:768 dirty:139 writeback:0 [ 296.601595][ T7064] slab_reclaimable:21112 slab_unreclaimable:100975 [ 296.601595][ T7064] mapped:29956 shmem:1669 pagetables:620 bounce:0 [ 296.601595][ T7064] kernel_misc_reclaimable:0 [ 296.601595][ T7064] free:1368379 free_pcp:10721 free_cma:0 [ 296.646347][ T7064] Node 0 active_anon:1396kB inactive_anon:22284kB active_file:20052kB inactive_file:145952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119824kB dirty:556kB writeback:0kB shmem:4596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11824kB pagetables:2480kB all_unreclaimable? no [ 297.779233][ T7064] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 298.769225][ T7064] Node 0 DMA free:15328kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.795842][ T7064] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 299.027508][ T7064] Node 0 DMA32 free:1542524kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1276kB inactive_anon:42104kB active_file:20044kB inactive_file:145952kB unevictable:1536kB writepending:560kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:28568kB local_pcp:11360kB free_cma:0kB [ 299.137860][ T7064] lowmem_reserve[]: 0 0 0 0 0 [ 299.177333][ T7064] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.209017][ T7089] loop4: detected capacity change from 0 to 8 [ 299.212371][ T7064] lowmem_reserve[]: 0 0 0 0 0 [ 299.220299][ T7064] Node 1 Normal free:3915664kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3120kB local_pcp:1408kB free_cma:0kB [ 299.318604][ T7064] lowmem_reserve[]: 0 0 0 0 0 [ 299.347005][ T7064] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 300.430371][ T7064] Node 0 DMA32: 503*4kB (UME) 244*8kB (UME) 718*16kB (UME) 667*32kB (UME) 166*64kB (UME) 39*128kB (UM) 13*256kB (UME) 5*512kB (UE) 1*1024kB (U) 2*2048kB (UM) 361*4096kB (UM) = 1542076kB [ 300.513706][ T7064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 300.565817][ T7064] Node 1 Normal: 184*4kB (UME) 38*8kB (UME) 18*16kB (UME) 157*32kB (UME) 63*64kB (UME) 20*128kB (UE) 11*256kB (UME) 3*512kB (UE) 1*1024kB (U) 3*2048kB (UME) 950*4096kB (M) = 3915664kB [ 300.688761][ T7064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 300.779621][ T7064] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 300.986309][ T7064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.179783][ T7064] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 301.255994][ T7064] 46062 total pagecache pages [ 301.260762][ T7064] 0 pages in swap cache [ 301.264929][ T7064] Swap cache stats: add 0, delete 0, find 0/0 [ 301.275458][ T7064] Free swap = 124996kB [ 301.279721][ T7064] Total swap = 124996kB [ 301.283877][ T7064] 2097051 pages RAM [ 301.289147][ T7064] 0 pages HighMem/MovableOnly [ 301.293930][ T7064] 415313 pages reserved [ 301.298918][ T7064] 0 pages cma reserved [ 301.721703][ T7103] loop0: detected capacity change from 0 to 512 [ 302.081935][ T7107] ERROR: Out of memory at tomoyo_realpath_from_path. [ 302.103448][ T7103] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 302.217574][ T7103] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.241099][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.762'. [ 302.438046][ T7112] device gretap0 entered promiscuous mode [ 302.565864][ T7118] ubi: mtd0 is already attached to ubi0 [ 303.468363][ T7132] rxe_eth0 speed is unknown, defaulting to 1000 [ 303.742831][ T7130] ERROR: Out of memory at tomoyo_realpath_from_path. [ 304.581014][ T7139] rxe_eth0 speed is unknown, defaulting to 1000 [ 304.902934][ T7141] loop1: detected capacity change from 0 to 128 [ 304.949990][ T7141] EXT4-fs (loop1): Test dummy encryption mode enabled [ 305.041068][ T7141] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 305.084428][ T7141] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.946701][ T7162] loop4: detected capacity change from 0 to 512 [ 306.012787][ T7162] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 306.012882][ T7162] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.381784][ T7169] loop3: detected capacity change from 0 to 128 [ 306.462601][ T7169] EXT4-fs (loop3): Test dummy encryption mode enabled [ 306.586121][ T7169] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 306.886708][ T7169] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 307.641851][ T7181] loop0: detected capacity change from 0 to 512 [ 307.753127][ T7181] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 307.772326][ T7181] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.283628][ T7191] rxe_eth0 speed is unknown, defaulting to 1000 [ 309.880991][ T7196] rxe_eth0 speed is unknown, defaulting to 1000 [ 310.440841][ T7204] rxe_eth0 speed is unknown, defaulting to 1000 [ 311.127834][ T7208] ERROR: Out of memory at tomoyo_realpath_from_path. [ 311.167049][ T7207] ubi: mtd0 is already attached to ubi0 [ 311.300484][ T7212] ERROR: Out of memory at tomoyo_realpath_from_path. [ 311.423168][ T7215] ERROR: Out of memory at tomoyo_realpath_from_path. [ 311.554523][ T7220] loop1: detected capacity change from 0 to 512 [ 311.606329][ T7220] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 311.623798][ T7220] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.475523][ T7242] rxe_eth0 speed is unknown, defaulting to 1000 [ 313.794007][ T7246] ERROR: Out of memory at tomoyo_realpath_from_path. [ 313.864784][ T7246] ------------[ cut here ]------------ [ 313.871311][ T7246] kernel BUG at arch/x86/mm/physaddr.c:28! [ 313.886177][ T7246] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 313.892277][ T7246] CPU: 1 PID: 7246 Comm: syz.4.798 Not tainted syzkaller #0 [ 313.899570][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 313.909624][ T7246] RIP: 0010:__phys_addr+0x158/0x170 [ 313.914825][ T7246] Code: ff ff e8 fb 14 43 00 48 c7 c7 d0 83 f9 8c 48 89 de 4c 89 f2 e8 d9 3c d3 02 e9 49 ff ff ff e8 df 14 43 00 0f 0b e8 d8 14 43 00 <0f> 0b e8 d1 14 43 00 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 [ 313.934521][ T7246] RSP: 0018:ffffc900033af820 EFLAGS: 00010287 [ 313.940593][ T7246] RAX: ffffffff81360e88 RBX: 0000408003431000 RCX: 0000000000080000 [ 313.948565][ T7246] RDX: ffffc90005e69000 RSI: 00000000000026f8 RDI: 00000000000026f9 [ 313.956542][ T7246] RBP: ffffc900033af998 R08: 0000000000000040 R09: 1ffffffff1a3e6e6 [ 313.964519][ T7246] R10: dffffc0000000000 R11: fffffbfff1a3e6e7 R12: ffff88801fb7a810 [ 313.972491][ T7246] R13: ffff88801fb7a840 R14: 000000000000002e R15: 0000000000000001 [ 313.980461][ T7246] FS: 00007efe6204f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 313.989392][ T7246] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.995975][ T7246] CR2: 00007f6b3d832c40 CR3: 0000000025a55000 CR4: 00000000003506e0 [ 314.003953][ T7246] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 314.011929][ T7246] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 314.019902][ T7246] Call Trace: [ 314.023178][ T7246] [ 314.026107][ T7246] ? vidtv_s302m_encoder_init+0x573/0x770 [ 314.031844][ T7246] kfree+0x64/0x2a0 [ 314.035668][ T7246] ? kmem_cache_alloc_trace+0x18d/0x290 [ 314.041216][ T7246] ? vidtv_s302m_encoder_init+0x322/0x770 [ 314.046941][ T7246] vidtv_s302m_encoder_init+0x573/0x770 [ 314.052491][ T7246] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 314.058050][ T7246] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 314.063690][ T7246] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.069760][ T7246] vidtv_channel_s302m_init+0x357/0x830 [ 314.075312][ T7246] vidtv_channels_init+0x41/0x90 [ 314.080261][ T7246] vidtv_mux_init+0x4d0/0x1950 [ 314.085039][ T7246] ? __mutex_lock_common+0x435/0x2400 [ 314.090414][ T7246] vidtv_start_feed+0x368/0x590 [ 314.095268][ T7246] ? vidtv_i2c_func+0x10/0x10 [ 314.099946][ T7246] ? vidtv_stop_feed+0x250/0x250 [ 314.104886][ T7246] ? _raw_spin_unlock_irq+0x1f/0x40 [ 314.110090][ T7246] ? lockdep_hardirqs_on+0x94/0x140 [ 314.115295][ T7246] dmx_ts_feed_start_filtering+0x11c/0x210 [ 314.121115][ T7246] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 314.127018][ T7246] dvb_dmxdev_filter_start+0x422/0x1060 [ 314.132572][ T7246] dvb_demux_do_ioctl+0x48d/0x530 [ 314.137598][ T7246] dvb_usercopy+0x191/0x2b0 [ 314.142097][ T7246] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 314.147639][ T7246] ? dvb_generic_ioctl+0xb0/0xb0 [ 314.152579][ T7246] ? dvb_demux_poll+0x210/0x210 [ 314.157425][ T7246] dvb_demux_ioctl+0x25/0x30 [ 314.162012][ T7246] __se_sys_ioctl+0xfa/0x170 [ 314.166599][ T7246] do_syscall_64+0x4c/0xa0 [ 314.171010][ T7246] ? clear_bhb_loop+0x30/0x80 [ 314.175684][ T7246] ? clear_bhb_loop+0x30/0x80 [ 314.180356][ T7246] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.186248][ T7246] RIP: 0033:0x7efe63df7559 [ 314.190659][ T7246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.210265][ T7246] RSP: 002b:00007efe6204f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.218688][ T7246] RAX: ffffffffffffffda RBX: 00007efe6407efa0 RCX: 00007efe63df7559 [ 314.226662][ T7246] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 314.234635][ T7246] RBP: 00007efe63e8e8b0 R08: 0000000000000000 R09: 0000000000000000 [ 314.242603][ T7246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.250579][ T7246] R13: 00007efe6407f038 R14: 00007efe6407efa0 R15: 00007ffc51297e88 [ 314.258566][ T7246] [ 314.261601][ T7246] Modules linked in: [ 314.265543][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.332160][ T7248] rxe_eth0 speed is unknown, defaulting to 1000 [ 314.395686][ T7239] rxe_eth0 speed is unknown, defaulting to 1000 [ 314.454319][ T7246] ---[ end trace 7f8853ec6fadabd4 ]--- [ 314.464855][ T7246] RIP: 0010:__phys_addr+0x158/0x170 [ 314.470564][ T7246] Code: ff ff e8 fb 14 43 00 48 c7 c7 d0 83 f9 8c 48 89 de 4c 89 f2 e8 d9 3c d3 02 e9 49 ff ff ff e8 df 14 43 00 0f 0b e8 d8 14 43 00 <0f> 0b e8 d1 14 43 00 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 [ 314.491880][ T7246] RSP: 0018:ffffc900033af820 EFLAGS: 00010287 [ 314.498793][ T7246] RAX: ffffffff81360e88 RBX: 0000408003431000 RCX: 0000000000080000 [ 314.507468][ T7246] RDX: ffffc90005e69000 RSI: 00000000000026f8 RDI: 00000000000026f9 [ 314.518389][ T7246] RBP: ffffc900033af998 R08: 0000000000000040 R09: 1ffffffff1a3e6e6 [ 314.526913][ T7246] R10: dffffc0000000000 R11: fffffbfff1a3e6e7 R12: ffff88801fb7a810 [ 314.547458][ T7246] R13: ffff88801fb7a840 R14: 000000000000002e R15: 0000000000000001 [ 314.561332][ T7246] FS: 00007efe6204f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 314.570676][ T7246] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.578152][ T7246] CR2: 00007f121fbe12f8 CR3: 0000000025a55000 CR4: 00000000003506f0 [ 314.586506][ T7246] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 314.595050][ T7246] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 314.631144][ T7246] Kernel panic - not syncing: Fatal exception [ 314.637469][ T7246] Kernel Offset: disabled [ 314.641822][ T7246] Rebooting in 86400 seconds..