last executing test programs: 4m35.078214496s ago: executing program 3 (id=142): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x5}]}}}]}, 0x3c}}, 0x0) 4m34.436740572s ago: executing program 3 (id=145): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES8], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x80008100, 0x0, 0xff28, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000700)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000019740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000019780)={&(0x7f00000197c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019800)={0x11, 0x3, &(0x7f00000198c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000019900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000019940)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000019980)=@bpf_tracing={0x1a, 0xf, &(0x7f0000019a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000019ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4}, 0x94) timerfd_create(0x0, 0x0) 4m31.205379503s ago: executing program 3 (id=149): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000200)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000004c0)={0x1, 0x1, &(0x7f0000000500)=""/247, &(0x7f0000000600)=""/85, &(0x7f0000000680)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f0000000740)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000800)=0x1) 4m30.659213789s ago: executing program 3 (id=151): bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32], 0x3c}}, 0x0) write(r0, &(0x7f00000001c0)="ffffffffffff1211223344554305000f32000000ffff00112233445500112233445500ff9000", 0xfdef) 4m28.70420204s ago: executing program 3 (id=154): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000880)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000008c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000900)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000940), 0x0, 0x0) read$msr(r4, &(0x7f0000000980)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000019d00)=0x40003) sendmmsg(r0, &(0x7f0000000280), 0x800001d, 0x300) 4m26.340628963s ago: executing program 3 (id=155): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc081}, 0x810) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4b39fd, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019a00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000019a80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000019ac0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000019b00)=0x6) r4 = syz_open_dev$usbfs(&(0x7f000001a840), 0x204, 0x2) mmap(&(0x7f00003ef000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r4, 0x108000) 4m11.17106304s ago: executing program 32 (id=155): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc081}, 0x810) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4b39fd, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019a00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000019a80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000019ac0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000019b00)=0x6) r4 = syz_open_dev$usbfs(&(0x7f000001a840), 0x204, 0x2) mmap(&(0x7f00003ef000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r4, 0x108000) 28.757936688s ago: executing program 2 (id=460): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0xffffffd3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003140)=@bpf_lsm={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000032c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000003300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000003340)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000033c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000003440), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000034c0)=0x6) setpriority(0x0, r0, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xb7b7d04e76582bb2) r3 = fsopen(&(0x7f0000003500)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000003540)='gid', &(0x7f0000003580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\x00\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 25.725515159s ago: executing program 0 (id=463): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@bloom_filter={0x1e, 0x3, 0x8000, 0x7ff, 0xe86, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000001000000457b197c000000000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x80f2, r1}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r2, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$usbmon(0x0, 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000440)=[{&(0x7f0000000480)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000540)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r4, 0x890b, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r4, &(0x7f0000000840), 0x12) connect$x25(r4, &(0x7f0000000880), 0x12) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000008c0)={'bond0\x00', 0x2000}) 25.397329312s ago: executing program 1 (id=464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x0) write(r0, &(0x7f00000001c0)="ffffffffffff1211223344554305000f32000000ffff00112233445500112233445500ff9000", 0xfdef) 24.278061147s ago: executing program 1 (id=466): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000200)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000240)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000004c0)={0x1, 0x1, &(0x7f0000000500)=""/247, &(0x7f0000000600)=""/85, &(0x7f0000000680)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f0000000740)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 23.555777962s ago: executing program 1 (id=467): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, 0x0, 0x4000) 22.904819279s ago: executing program 4 (id=468): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019580)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019700)={0x0, 0x0, &(0x7f0000019740)={&(0x7f0000019780)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e25, @multicast2}}, 0x0, 0x0, 0x7, 0x0, "84f40300000c000000000000008777b29cf7bbe1e7b68fe581abb22e3a33fa2ae9bc6534624e6b6adc4e6eb25906052d8f0aa71dce32959c5860a714e40d9ba959c1cd7a5af9ffffffffffffffbb4b01"}, 0xd8) bind$inet(r3, 0x0, 0x0) 22.828586716s ago: executing program 1 (id=469): setns(0xc9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000006600)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000006640)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000006680)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0x1b}, r0}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000066c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r0, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000067c0)={0x4, 0x8, 0xfa00, {r0, 0xc}}, 0x10) 20.955840499s ago: executing program 4 (id=470): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x6) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x80008100, 0x0, 0xff28, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000700)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000019740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000019780)={&(0x7f00000197c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019800)={0x11, 0x3, &(0x7f00000198c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000019900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000019940)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000019980)=@bpf_tracing={0x1a, 0xf, &(0x7f0000019a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000019ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5}, 0x94) timerfd_create(0x0, 0x0) 20.607762154s ago: executing program 1 (id=471): socket(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e20, @private=0xa010103}]}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r1, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000009c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000a00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000a40), 0x0, 0x0) read$msr(r5, &(0x7f0000000a80)=""/102392, 0x18ff8) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000019b00), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000019b40)=0x1000) 18.036035048s ago: executing program 2 (id=472): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) write(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 17.297188244s ago: executing program 1 (id=473): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) tgkill(r2, r2, 0x2d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000400), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000440)=0x2) recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f00000004c0)) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x94, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x0, 0xfff1}, {0x7, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x5, 0x6, 0x6, 0x4, 0x101, 0x5, 0x100, 0x0, [{0x2, 0x8514, 0x7, 0x1ff}, {0x401, 0x0, 0x93d, 0x5}, {0x8000, 0x9, 0xffff, 0x8}, {0xb, 0x3, 0x10, 0x3}, {0x2, 0xd, 0xfffffffe, 0x1}]}}]}}]}, 0x94}}, 0x24040084) r5 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x80) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000800)={'veth0_to_team\x00', &(0x7f0000000840)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x4, 0x2, 0x1}}) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 16.781465507s ago: executing program 2 (id=474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x0) write(r0, &(0x7f00000001c0)="ffffffffffff1211223344554305000f32000000ffff00112233445500112233445500ff9000", 0xfdef) 16.779020008s ago: executing program 0 (id=475): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) mount(&(0x7f00000004c0)=@filename='mtd0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000580)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x42, 0x1b6) ftruncate(r1, 0x200000) ioctl$DVB_DEMUX_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000d00)={0xffff1883, 0x80000, 0xffffffffffffffff}) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000d40)={0x2, 0x9}, 0x2) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0\x00', 0x804808, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES16, @ANYRES16=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYRES16, @ANYBLOB="d121a88a73617879e13abcffedf2a9b3da3136e1cb27d03bf463695bcb7a4697467a8b1f87eccba771e7c61ac8", @ANYRESDEC=r0, @ANYRES8=r3, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedeb1d9bcee970ffa8930646fb8e2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94ca00000000c11acdffc890dc6ef75d668954cb9f57fa7f41862200bc47cb4822f1490000"], 0x2, 0x55e, &(0x7f0000000ec0)="$eJzs3V1v00oawPHHpV2irNRdLSuEqgJD2ZWKVIKTQFDEldeZpIbEjmwHtVeooimqSGFFWWnbG7Y37K50zofgXJ4Pcb4ROh+BI4+dvuYF6Oup/r+ojGOPPY/TaB6miccCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSk6fmdJTWcWwuD1t7TbO8jK+TegWJEuyJW8iO5nNxIV934697m68k/czKbPpuVXFLkZPuP1//85NrkRH//EQF/k5++80ibW9uvV3q97ruTCuQCunl1+LaG9r0o8FpOQysvClS1UrEfLNYjVfeaOlqOYt1SbqidOAjVvHtPFavVstKF5aDjN2pOU/dXPr5fsu2KelpoayeMAv/B00LkLnrNpuc3TJ1kc1LncfJGfObFKtZOS6m19V63PO4EkkrFr6lUGlepZJdKxWKpVKw8qj56bNuTR1bYh8iRGif3psXv0wn23sDxTGT5X5riiS8dWRI18OFKTUIJpDVke6af///+QI9sd3/+72f5G3ubZ8Tk/1vps1vD8v+QWM7usSlbsi2vZUV60pOuvDv3iM720RAtvngSSSCetMQxa1S2RklVKlIRW17IotSnkl9iXTxpipZIliWSWLR5R7kSihZHYgkkFCXz4so9UVKUqlSlLEq0FGRZAumILw2piWOOsibr5nUvi7KGxbhbqTj0NPL9911XSiPOlvyP4zvJ7hs4li/9/A8AAAAAAC4ty/z1fcr83DTP615T2+cdFgAAAAAAOEHmk//ZpDDfzropFuN/AAAAAAAuG8tcY2eJSF5up0trYpnLpfgjAAAAAAAAl4T5/P9WUpg5UG6LtTtdCuN/AAAAAAAuif+NnWM/al+1fvlVwnDK2mkv/c3aMHPzOhtX0v2uHD5iXJ+xprODmKKSFpOTrp61cmml3UkwP2fF2rg4rL0AnN0A/vMtAVyblB/kTlrnzmparmZb/pS2kq97TV1wg+aTojjO9ESsl+J/vVn/t5jT/7/fmrZyst7rFl6+7a2aWHaSo+xsZBMoHplHcUQs7818C+aai4FnPGUuxMjazVuytt7r2u2lq9mRnY2JdGHiYIsfpke0+VHm0lpz2Yy3+f6WtM1c0maxMOzssyiKxzzzj3I3rXN3/m5aDIiiNC6K0v4oBr8Wx4+iPC6K8jGjAIDzsjYmC1lyJO9+Ry93KLsn3d5XZHf5xuz+UebTOvMzpmOdnBnQo9vjenT7mNnt5yP3QBqWY5N2fzyUVT8lO3wa2m7ULFnJS3jl/cY/5frm1vb99Y2VV91X3TelUrliP7TtRyWZMqeRFeQeAMAA+++xYw3M/6PuwvPlS5K7H2aj6p3Do+os4/1l9ysFBXkpb6Unq7JgrjYw3zgY+P+O/L6vISyMGbXmTZpM7/CyMGJU9wdzlUP/uKWRdQ/GUD6LXwUAAGdmbkweHp3/07H7wphx98FcPnp0nN93tzYAAHA6dPjZysf/tcLQa78oVqtFJ17UKgzcZyr0ag2tPD/Wobvo+A2t2mEQB27QTBaeezUdqajTbgdhrOpBqNpB5C2Z6QNVduv3SLccP/bcqN3UTqSVG/ix48aq5kWuanf+0fSiRR2anaO2dr265zqxF/gqCjqhqwtKRVrvq+jVtB97dS9Z9FU79FpOmFPPg2anpVVNR27oteMgPWC/Lc+vB2HLHLZw3i82AAAXxObW9uuVXq/77hQXBjacO/NTBQAAmTFZGgAAAAAAAAAAAAAAAAAAAAAAXABncf0fC5d8oT8V9EWJh4UTWBjbdXw49c4JwKn6LQAA//8FIlBo") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001480)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000014c0)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001500), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000001540), 0x2, 0x40102) writev(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)="94", 0xf000}, {0x0}], 0x2f) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, 0x0) syz_open_procfs(0x0, &(0x7f0000001740)='syscall\x00') syz_open_dev$dvb_frontend(&(0x7f0000001780), 0x0, 0x84003) 14.606400181s ago: executing program 4 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x4000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000000340)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x5) 13.432074471s ago: executing program 2 (id=477): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="503bfde51b257f", 0x7}], 0x1) syz_ublk_setup_io_uring(0x735d, &(0x7f0000000500)={0x0, 0x8eb4, 0x1000, 0x3, 0xa1}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) 13.145302861s ago: executing program 0 (id=478): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019580)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019700)={0x0, 0x0, &(0x7f0000019740)={&(0x7f0000019780)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e25, @multicast2}}, 0x0, 0x0, 0x7, 0x0, "84f40300000c000000000000008777b29cf7bbe1e7b68fe581abb22e3a33fa2ae9bc6534624e6b6adc4e6eb25906052d8f0aa71dce32959c5860a714e40d9ba959c1cd7a5af9ffffffffffffffbb4b01"}, 0xd8) bind$inet(r3, 0x0, 0x0) 12.711082275s ago: executing program 2 (id=479): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f00000005c0)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x202}, 0x10) sendmsg$tipc(r4, 0x0, 0x4000) 11.035971487s ago: executing program 0 (id=480): socket(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e20, @private=0xa010103}]}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000a00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000a40), 0x0, 0x0) read$msr(r4, &(0x7f0000000a80)=""/102392, 0x18ff8) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000019a80)=0x3) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000019b00), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000019b40)=0x1000) 8.446216253s ago: executing program 2 (id=481): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000880)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000008c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000900)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000940), 0x0, 0x0) read$msr(r4, &(0x7f0000000980)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019d00)=0x40003) sendmmsg(r0, &(0x7f0000000280), 0x800001d, 0x300) 6.681557864s ago: executing program 4 (id=482): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) write(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 4.648438103s ago: executing program 0 (id=483): openat2$dir(0xffffffffffffff9c, &(0x7f0000001a40)='./file0\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x173, &(0x7f0000000240)="$eJzs281qE1EYBuBvkviDK8GduLNq/WmmzWitu3oppR1LcarFumkRxEvxyvQGXHgDRjo2I5kEhEhySPM8q++dl2HOLE7mbBLA6urtRhZZrF3M927e/nwnS70iYEGGiZ//awik0/2eegVAGj9eR5xExLefn/ajuzbxfb7od0d958Fk/yXibu+yzx7Go1Y//Br1tT/9+tT7bzX946n9+v3R85/E03gWG9GPPDZj67I/aO5//p+nEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABWVRb9dh670Ik3R1W52eRrdd5q8vU6D1q5aPKNOvf331cH83oFYEadf+z/bmv/91r7H1hep2fnb/eqqvxgMBgMzZD6lwmYt/zj8Ul+ena+cXS8d1gelu+KF9vFYOfV9sudvD755+Pnf+Dq+PvRT70SAAAAAAAAAGBWgyhSLwEAAFiQRfydKPU7AgAAAAAAAAAAAADAsvsdAAD//4Ptq2k=") 4.585728039s ago: executing program 4 (id=484): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x6) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x80008100, 0x0, 0xff28, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000700)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000019740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000019780)={&(0x7f00000197c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019800)={0x11, 0x3, &(0x7f00000198c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000019900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000019940)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000019980)=@bpf_tracing={0x1a, 0xf, &(0x7f0000019a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000019ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5}, 0x94) timerfd_create(0x0, 0x0) 2.525714571s ago: executing program 4 (id=485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x0) write(r0, &(0x7f00000001c0)="ffffffffffff1211223344554305000f32000000ffff00112233445500112233445500ff9000", 0xfdef) 1.306861646s ago: executing program 33 (id=473): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) tgkill(r2, r2, 0x2d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000400), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000440)=0x2) recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f00000004c0)) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x94, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x0, 0xfff1}, {0x7, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x5, 0x6, 0x6, 0x4, 0x101, 0x5, 0x100, 0x0, [{0x2, 0x8514, 0x7, 0x1ff}, {0x401, 0x0, 0x93d, 0x5}, {0x8000, 0x9, 0xffff, 0x8}, {0xb, 0x3, 0x10, 0x3}, {0x2, 0xd, 0xfffffffe, 0x1}]}}]}}]}, 0x94}}, 0x24040084) r5 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x80) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000800)={'veth0_to_team\x00', &(0x7f0000000840)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x4, 0x2, 0x1}}) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 0s ago: executing program 0 (id=487): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) mount(&(0x7f00000004c0)=@filename='mtd0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000580)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x42, 0x1b6) ftruncate(r1, 0x200000) ioctl$DVB_DEMUX_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000d00)={0xffff1883, 0x80000, 0xffffffffffffffff}) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000d40)={0x2, 0x9}, 0x2) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0\x00', 0x804808, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES16, @ANYRES16=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYRES16, @ANYBLOB="d121a88a73617879e13abcffedf2a9b3da3136e1cb27d03bf463695bcb7a4697467a8b1f87eccba771e7c61ac8", @ANYRESDEC=r0, @ANYRES8=r3, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedeb1d9bcee970ffa8930646fb8e2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94ca00000000c11acdffc890dc6ef75d668954cb9f57fa7f41862200bc47cb4822f1490000"], 0x2, 0x55e, &(0x7f0000000ec0)="$eJzs3V1v00oawPHHpV2irNRdLSuEqgJD2ZWKVIKTQFDEldeZpIbEjmwHtVeooimqSGFFWWnbG7Y37K50zofgXJ4Pcb4ROh+BI4+dvuYF6Oup/r+ojGOPPY/TaB6miccCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSk6fmdJTWcWwuD1t7TbO8jK+TegWJEuyJW8iO5nNxIV934697m68k/czKbPpuVXFLkZPuP1//85NrkRH//EQF/k5++80ibW9uvV3q97ruTCuQCunl1+LaG9r0o8FpOQysvClS1UrEfLNYjVfeaOlqOYt1SbqidOAjVvHtPFavVstKF5aDjN2pOU/dXPr5fsu2KelpoayeMAv/B00LkLnrNpuc3TJ1kc1LncfJGfObFKtZOS6m19V63PO4EkkrFr6lUGlepZJdKxWKpVKw8qj56bNuTR1bYh8iRGif3psXv0wn23sDxTGT5X5riiS8dWRI18OFKTUIJpDVke6af///+QI9sd3/+72f5G3ubZ8Tk/1vps1vD8v+QWM7usSlbsi2vZUV60pOuvDv3iM720RAtvngSSSCetMQxa1S2RklVKlIRW17IotSnkl9iXTxpipZIliWSWLR5R7kSihZHYgkkFCXz4so9UVKUqlSlLEq0FGRZAumILw2piWOOsibr5nUvi7KGxbhbqTj0NPL9911XSiPOlvyP4zvJ7hs4li/9/A8AAAAAAC4ty/z1fcr83DTP615T2+cdFgAAAAAAOEHmk//ZpDDfzropFuN/AAAAAAAuG8tcY2eJSF5up0trYpnLpfgjAAAAAAAAl4T5/P9WUpg5UG6LtTtdCuN/AAAAAAAuif+NnWM/al+1fvlVwnDK2mkv/c3aMHPzOhtX0v2uHD5iXJ+xprODmKKSFpOTrp61cmml3UkwP2fF2rg4rL0AnN0A/vMtAVyblB/kTlrnzmparmZb/pS2kq97TV1wg+aTojjO9ESsl+J/vVn/t5jT/7/fmrZyst7rFl6+7a2aWHaSo+xsZBMoHplHcUQs7818C+aai4FnPGUuxMjazVuytt7r2u2lq9mRnY2JdGHiYIsfpke0+VHm0lpz2Yy3+f6WtM1c0maxMOzssyiKxzzzj3I3rXN3/m5aDIiiNC6K0v4oBr8Wx4+iPC6K8jGjAIDzsjYmC1lyJO9+Ry93KLsn3d5XZHf5xuz+UebTOvMzpmOdnBnQo9vjenT7mNnt5yP3QBqWY5N2fzyUVT8lO3wa2m7ULFnJS3jl/cY/5frm1vb99Y2VV91X3TelUrliP7TtRyWZMqeRFeQeAMAA+++xYw3M/6PuwvPlS5K7H2aj6p3Do+os4/1l9ysFBXkpb6Unq7JgrjYw3zgY+P+O/L6vISyMGbXmTZpM7/CyMGJU9wdzlUP/uKWRdQ/GUD6LXwUAAGdmbkweHp3/07H7wphx98FcPnp0nN93tzYAAHA6dPjZysf/tcLQa78oVqtFJ17UKgzcZyr0ag2tPD/Wobvo+A2t2mEQB27QTBaeezUdqajTbgdhrOpBqNpB5C2Z6QNVduv3SLccP/bcqN3UTqSVG/ix48aq5kWuanf+0fSiRR2anaO2dr265zqxF/gqCjqhqwtKRVrvq+jVtB97dS9Z9FU79FpOmFPPg2anpVVNR27oteMgPWC/Lc+vB2HLHLZw3i82AAAXxObW9uuVXq/77hQXBjacO/NTBQAAmTFZGgAAAAAAAAAAAAAAAAAAAAAAXABncf0fC5d8oT8V9EWJh4UTWBjbdXw49c4JwKn6LQAA//8FIlBo") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001480)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000014c0)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001500), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000001540), 0x2, 0x40102) writev(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000001680)={0x48, 0x5, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) syz_open_procfs(0x0, &(0x7f0000001740)='syscall\x00') syz_open_dev$dvb_frontend(&(0x7f0000001780), 0x0, 0x84003) kernel console output (not intermixed with test programs): 17.421320][ T5789] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 117.447665][ T5789] NILFS (loop2): discard dirty block: blocknr=11, size=1024 [ 117.474985][ T5789] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.501937][ T5789] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.534027][ T5789] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.568510][ T5789] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 117.583180][ T5789] NILFS (loop2): discard dirty block: blocknr=10, size=1024 [ 117.611062][ T5789] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.634602][ T5789] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.652103][ T5789] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 118.220893][ T6169] loop2: detected capacity change from 0 to 256 [ 118.232435][ T6169] exfat: Deprecated parameter 'utf8' [ 118.238350][ T6169] exfat: Deprecated parameter 'utf8' [ 118.253291][ T6169] exfat: Unknown parameter 'zero_size_dir' [ 118.728248][ T5799] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.193877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.627496][ T6179] loop2: detected capacity change from 0 to 164 [ 120.739286][ T6183] comedi comedi3: board detection failed [ 125.582769][ T6214] loop3: detected capacity change from 0 to 32768 [ 125.633436][ T6214] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.75 (6214) [ 125.697834][ T6214] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.733236][ T6214] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 125.742833][ T6214] BTRFS info (device loop3): setting nodatasum [ 125.760307][ T6214] BTRFS info (device loop3): force zlib compression, level 3 [ 125.775445][ T6214] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 125.805654][ T6214] BTRFS info (device loop3): use lzo compression, level 0 [ 127.000512][ T6214] BTRFS info (device loop3): turning on flush-on-commit [ 127.040636][ T6214] BTRFS info (device loop3): enabling auto defrag [ 127.069999][ T6214] BTRFS info (device loop3): max_inline at 4096 [ 127.076737][ T6228] comedi comedi3: board detection failed [ 127.145831][ T6214] BTRFS info (device loop3): using free space tree [ 127.273434][ T6214] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 127.285863][ T6214] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 127.372322][ T6214] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 127.407774][ T6214] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 127.444049][ T6214] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 127.475796][ T6214] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 127.505102][ T6214] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 127.540183][ T6214] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 127.595321][ T6214] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 127.634078][ T6214] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 127.665069][ T6214] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 127.689385][ T6214] BTRFS error (device loop3): open_ctree failed: -12 [ 127.955658][ T5799] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (5799) [ 131.803152][ C1] sched: RT throttling activated [ 132.483682][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 132.814372][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 132.855330][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 132.911004][ T27] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 132.920290][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.928636][ T27] usb 3-1: Product: syz [ 132.933111][ T27] usb 3-1: Manufacturer: syz [ 132.937925][ T27] usb 3-1: SerialNumber: syz [ 133.054069][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.061041][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.621120][ T27] usb 3-1: config 0 descriptor?? [ 133.670219][ T27] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 135.336561][ T27] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 135.458461][ T27] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 135.487344][ T6291] FAULT_INJECTION: forcing a failure. [ 135.487344][ T6291] name failslab, interval 1, probability 5, space 0, times 100 [ 135.504414][ T6291] CPU: 1 PID: 6291 Comm: syz.1.93 Not tainted syzkaller #0 [ 135.511697][ T6291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.521820][ T6291] Call Trace: [ 135.525167][ T6291] [ 135.528142][ T6291] dump_stack_lvl+0x18c/0x250 [ 135.532908][ T6291] ? show_regs_print_info+0x20/0x20 [ 135.538168][ T6291] ? load_image+0x420/0x420 [ 135.542725][ T6291] ? __might_sleep+0xe0/0xe0 [ 135.547727][ T6291] ? __lock_acquire+0x7eb0/0x7eb0 [ 135.552820][ T6291] should_fail_ex+0x394/0x4c0 [ 135.557554][ T6291] should_failslab+0x9/0x20 [ 135.562116][ T6291] slab_pre_alloc_hook+0x59/0x300 [ 135.567202][ T6291] kmem_cache_alloc+0x5a/0x2d0 [ 135.572055][ T6291] ? security_inode_alloc+0x34/0x110 [ 135.577410][ T6291] security_inode_alloc+0x34/0x110 [ 135.582584][ T6291] inode_init_always+0x914/0xc90 [ 135.587581][ T6291] new_inode_pseudo+0x95/0x1d0 [ 135.592408][ T6291] new_inode+0x22/0x1d0 [ 135.596629][ T6291] shmem_get_inode+0x34d/0xcd0 [ 135.601474][ T6291] __shmem_file_setup+0x167/0x2c0 [ 135.606554][ T6291] __se_sys_memfd_create+0x357/0x660 [ 135.611911][ T6291] do_syscall_64+0x55/0xb0 [ 135.616390][ T6291] ? clear_bhb_loop+0x40/0x90 [ 135.621130][ T6291] ? clear_bhb_loop+0x40/0x90 [ 135.625869][ T6291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.631823][ T6291] RIP: 0033:0x7f6d3719fb19 [ 135.636281][ T6291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.655947][ T6291] RSP: 002b:00007f6d38159e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 135.664430][ T6291] RAX: ffffffffffffffda RBX: 0000000000000baf RCX: 00007f6d3719fb19 [ 135.672456][ T6291] RDX: 00007f6d38159ee0 RSI: 0000000000000000 RDI: 00007f6d37237ceb [ 135.680503][ T6291] RBP: 0000200000007100 R08: 00000000ffffffff R09: 0000000000000000 [ 135.688549][ T6291] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000007080 [ 135.696582][ T6291] R13: 00007f6d38159ee0 R14: 00007f6d38159ea0 R15: 00002000000070c0 [ 135.704632][ T6291] [ 135.738144][ T27] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 135.751735][ T27] em28xx 3-1:0.0: board has no eeprom [ 135.844971][ T27] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 135.868371][ T27] em28xx 3-1:0.0: dvb set to bulk mode. [ 135.880751][ T5853] em28xx 3-1:0.0: Binding DVB extension [ 135.909737][ T6296] comedi comedi3: board detection failed [ 135.943653][ T27] usb 3-1: USB disconnect, device number 2 [ 135.969734][ T27] em28xx 3-1:0.0: Disconnecting em28xx [ 136.239671][ T5853] em28xx 3-1:0.0: Registering input extension [ 136.246559][ T27] em28xx 3-1:0.0: Closing input extension [ 136.301142][ T27] em28xx 3-1:0.0: Freeing device [ 138.113171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 139.550684][ T6320] loop0: detected capacity change from 0 to 1024 [ 139.571019][ T6320] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8003c01c, mo2=0002] [ 139.581463][ T6320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 139.595548][ T6320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.892651][ T6324] loop0: detected capacity change from 0 to 128 [ 139.970268][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 139.987862][ T6324] FAT-fs (loop0): Filesystem has been set read-only [ 139.999722][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.012112][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.030611][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.062574][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.072764][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.089190][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.101270][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.114443][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.128778][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.140318][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.153526][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.171703][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.171718][ T6327] FAULT_INJECTION: forcing a failure. [ 140.171718][ T6327] name failslab, interval 1, probability 5, space 0, times 100 [ 140.181264][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.207539][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.217761][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.231401][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.241606][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.243343][ T6327] CPU: 1 PID: 6327 Comm: syz.3.105 Not tainted syzkaller #0 [ 140.257471][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 140.268109][ T6327] Call Trace: [ 140.271453][ T6327] [ 140.274448][ T6327] dump_stack_lvl+0x18c/0x250 [ 140.279232][ T6327] ? show_regs_print_info+0x20/0x20 [ 140.283807][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.292912][ T6327] ? load_image+0x420/0x420 [ 140.292952][ T6327] ? __lock_acquire+0x7eb0/0x7eb0 [ 140.292987][ T6327] should_fail_ex+0x394/0x4c0 [ 140.307350][ T6327] should_failslab+0x9/0x20 [ 140.311895][ T6327] slab_pre_alloc_hook+0x59/0x300 [ 140.316982][ T6327] kmem_cache_alloc+0x5a/0x2d0 [ 140.321779][ T6327] ? vm_area_alloc+0x10e/0x1d0 [ 140.326581][ T6327] vm_area_alloc+0x10e/0x1d0 [ 140.331206][ T6327] mmap_region+0xcfa/0x2090 [ 140.335855][ T6327] ? file_mmap_ok+0x170/0x170 [ 140.340752][ T6327] ? cap_mmap_addr+0x157/0x2b0 [ 140.345573][ T6327] do_mmap+0x98f/0x10a0 [ 140.349821][ T6327] ? mlock_future_ok+0xf0/0xf0 [ 140.354696][ T6327] ? down_write+0x200/0x200 [ 140.359270][ T6327] vm_mmap_pgoff+0x1c4/0x3f0 [ 140.363921][ T6327] ? account_locked_vm+0x200/0x200 [ 140.369080][ T6327] ? ksys_mmap_pgoff+0xf3/0x720 [ 140.373976][ T6327] ? __x64_sys_mmap+0x7a/0x130 [ 140.378790][ T6327] do_syscall_64+0x55/0xb0 [ 140.383774][ T6327] ? clear_bhb_loop+0x40/0x90 [ 140.388508][ T6327] ? clear_bhb_loop+0x40/0x90 [ 140.393221][ T6327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.399178][ T6327] RIP: 0033:0x7f746e59f882 [ 140.403668][ T6327] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 140.423320][ T6327] RSP: 002b:00007f746f463df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 140.431782][ T6327] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f746e59f882 [ 140.440568][ T6327] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 140.448585][ T6327] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 140.456588][ T6327] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 140.464589][ T6327] R13: 00007f746f463ee0 R14: 00007f746f463ea0 R15: 00002000000070c0 [ 140.472713][ T6327] [ 140.511541][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.521344][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.539846][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.548863][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.562412][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.574409][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.589543][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.602101][ T6327] FAULT_INJECTION: forcing a failure. [ 140.602101][ T6327] name failslab, interval 1, probability 5, space 0, times 99 [ 140.623701][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.636068][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.646182][ T6327] CPU: 0 PID: 6327 Comm: syz.3.105 Not tainted syzkaller #0 [ 140.653549][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 140.663669][ T6327] Call Trace: [ 140.666998][ T6327] [ 140.669975][ T6327] dump_stack_lvl+0x18c/0x250 [ 140.674740][ T6327] ? show_regs_print_info+0x20/0x20 [ 140.680005][ T6327] ? load_image+0x420/0x420 [ 140.684584][ T6327] ? __might_sleep+0xe0/0xe0 [ 140.689458][ T6327] ? __lock_acquire+0x7eb0/0x7eb0 [ 140.694592][ T6327] should_fail_ex+0x394/0x4c0 [ 140.699350][ T6327] should_failslab+0x9/0x20 [ 140.703912][ T6327] slab_pre_alloc_hook+0x59/0x300 [ 140.709026][ T6327] kmem_cache_alloc+0x5a/0x2d0 [ 140.713862][ T6327] ? security_inode_alloc+0x34/0x110 [ 140.719224][ T6327] security_inode_alloc+0x34/0x110 [ 140.724409][ T6327] inode_init_always+0x914/0xc90 [ 140.729420][ T6327] new_inode_pseudo+0x95/0x1d0 [ 140.734676][ T6327] __sock_create+0x12d/0x940 [ 140.739454][ T6327] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 140.745538][ T6327] __sys_socket+0xd7/0x1b0 [ 140.750110][ T6327] __x64_sys_socket+0x7a/0x90 [ 140.754851][ T6327] do_syscall_64+0x55/0xb0 [ 140.759351][ T6327] ? clear_bhb_loop+0x40/0x90 [ 140.764112][ T6327] ? clear_bhb_loop+0x40/0x90 [ 140.768869][ T6327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.774842][ T6327] RIP: 0033:0x7f746e59fb19 [ 140.779319][ T6327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.799077][ T6327] RSP: 002b:00007f746f464028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 140.807558][ T6327] RAX: ffffffffffffffda RBX: 00007f746e825fa0 RCX: 00007f746e59fb19 [ 140.815709][ T6327] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 140.823887][ T6327] RBP: 00007f746e637af8 R08: 0000000000000000 R09: 0000000000000000 [ 140.832017][ T6327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.840052][ T6327] R13: 00007f746e826038 R14: 00007f746e825fa0 R15: 00007ffec10b1e48 [ 140.848106][ T6327] [ 140.866670][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.897389][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.906186][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.908274][ T6327] socket: no more sockets [ 140.922490][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.941672][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.950869][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.964918][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.978172][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 140.996033][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 141.008928][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 141.021327][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 141.031539][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 141.053367][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 141.061920][ T6324] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 141.074078][ T28] audit: type=1800 audit(1793642259.645:3): pid=6324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.104" name="file1" dev="loop0" ino=1048648 res=0 errno=0 [ 141.131382][ T6324] syz.0.104 (6324) used greatest stack depth: 19376 bytes left [ 141.239285][ T6330] comedi comedi3: board detection failed [ 143.234059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 144.053213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 144.978212][ T6346] ip_tables: iptables: counters copy to user failed while replacing table [ 145.382867][ T6350] FAULT_INJECTION: forcing a failure. [ 145.382867][ T6350] name failslab, interval 1, probability 5, space 0, times 100 [ 145.396613][ T6350] CPU: 1 PID: 6350 Comm: syz.3.114 Not tainted syzkaller #0 [ 145.404140][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 145.414328][ T6350] Call Trace: [ 145.418081][ T6350] [ 145.421065][ T6350] dump_stack_lvl+0x18c/0x250 [ 145.426277][ T6350] ? show_regs_print_info+0x20/0x20 [ 145.431642][ T6350] ? load_image+0x420/0x420 [ 145.436340][ T6350] ? __might_sleep+0xe0/0xe0 [ 145.441437][ T6350] ? __lock_acquire+0x7eb0/0x7eb0 [ 145.447406][ T6350] should_fail_ex+0x394/0x4c0 [ 145.452158][ T6350] should_failslab+0x9/0x20 [ 145.457957][ T6350] slab_pre_alloc_hook+0x59/0x300 [ 145.463031][ T6350] kmem_cache_alloc+0x5a/0x2d0 [ 145.467861][ T6350] ? __kernfs_new_node+0xe5/0x7f0 [ 145.472947][ T6350] __kernfs_new_node+0xe5/0x7f0 [ 145.478464][ T6350] ? kernfs_new_node+0x260/0x260 [ 145.483481][ T6350] ? up_write+0x1be/0x410 [ 145.489086][ T6350] kernfs_new_node+0x14c/0x260 [ 145.493938][ T6350] __kernfs_create_file+0x4b/0x2e0 [ 145.499093][ T6350] sysfs_add_file_mode_ns+0x237/0x2f0 [ 145.504522][ T6350] internal_create_group+0x431/0xd10 [ 145.511052][ T6350] ? loop_set_status_from_info+0x2a0/0x2a0 [ 145.516946][ T6350] ? sysfs_create_group+0x20/0x20 [ 145.523157][ T6350] ? __loop_update_dio+0x2d5/0x540 [ 145.528434][ T6350] loop_configure+0xc2b/0x1220 [ 145.533316][ T6350] lo_ioctl+0x437/0x1d00 [ 145.537660][ T6350] ? security_file_open+0x62/0xa0 [ 145.542781][ T6350] ? lo_release+0x1f0/0x1f0 [ 145.547434][ T6350] ? mark_lock+0x94/0x320 [ 145.551916][ T6350] ? verify_lock_unused+0x140/0x140 [ 145.557252][ T6350] ? __lock_acquire+0x1431/0x7eb0 [ 145.562355][ T6350] ? deref_stack_reg+0x1ab/0x230 [ 145.567600][ T6350] ? is_bpf_text_address+0x26/0x2a0 [ 145.572862][ T6350] ? __lock_acquire+0x7eb0/0x7eb0 [ 145.578025][ T6350] ? __read_once_word_nocheck+0x9/0x10 [ 145.583727][ T6350] ? is_bpf_text_address+0x28f/0x2a0 [ 145.589176][ T6350] ? is_bpf_text_address+0x26/0x2a0 [ 145.594446][ T6350] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.600967][ T6350] ? kernel_text_address+0xa0/0xd0 [ 145.606268][ T6350] ? __kernel_text_address+0xd/0x30 [ 145.611650][ T6350] ? unwind_get_return_address+0x91/0xc0 [ 145.617489][ T6350] ? stack_trace_save+0x100/0x100 [ 145.622568][ T6350] ? arch_stack_walk+0x160/0x190 [ 145.627584][ T6350] ? stack_trace_save+0xaa/0x100 [ 145.632828][ T6350] ? stack_trace_snprint+0xf0/0xf0 [ 145.638434][ T6350] ? kasan_save_free_info+0x28/0x40 [ 145.643780][ T6350] ? __stack_depot_save+0x1f/0x660 [ 145.648953][ T6350] ? do_syscall_64+0x55/0xb0 [ 145.653594][ T6350] ? kasan_set_track+0x5f/0x70 [ 145.658487][ T6350] ? kasan_set_track+0x4e/0x70 [ 145.663543][ T6350] ? kasan_save_free_info+0x28/0x40 [ 145.668783][ T6350] ? ____kasan_slab_free+0x126/0x1f0 [ 145.674257][ T6350] ? slab_free_freelist_hook+0x154/0x240 [ 145.679937][ T6350] ? __kmem_cache_free+0xba/0x1f0 [ 145.684999][ T6350] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 145.690708][ T6350] ? security_file_ioctl+0x70/0xa0 [ 145.695905][ T6350] ? __se_sys_ioctl+0x48/0x170 [ 145.700717][ T6350] ? do_syscall_64+0x55/0xb0 [ 145.705376][ T6350] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.711522][ T6350] ? mark_lock+0x94/0x320 [ 145.715943][ T6350] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 145.723206][ T6350] ? lock_chain_count+0x20/0x20 [ 145.728130][ T6350] ? do_vfs_ioctl+0x156c/0x1cc0 [ 145.733057][ T6350] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 145.738739][ T6350] ? blkdev_bszset+0x1f0/0x1f0 [ 145.743675][ T6350] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 145.749215][ T6350] ? lo_release+0x1f0/0x1f0 [ 145.753781][ T6350] blkdev_ioctl+0x5b2/0x730 [ 145.758331][ T6350] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 145.764806][ T6350] ? bpf_lsm_file_ioctl+0x9/0x10 [ 145.769814][ T6350] ? security_file_ioctl+0x80/0xa0 [ 145.775089][ T6350] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 145.780619][ T6350] __se_sys_ioctl+0xfd/0x170 [ 145.786128][ T6350] do_syscall_64+0x55/0xb0 [ 145.790586][ T6350] ? clear_bhb_loop+0x40/0x90 [ 145.795312][ T6350] ? clear_bhb_loop+0x40/0x90 [ 145.800043][ T6350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.806003][ T6350] RIP: 0033:0x7f746e59f7ab [ 145.810471][ T6350] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 145.830155][ T6350] RSP: 002b:00007f746f463db0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.838625][ T6350] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f746e59f7ab [ 145.846640][ T6350] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 145.854648][ T6350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.862655][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 145.870662][ T6350] R13: 00007f746f463ee0 R14: 00007f746f463ea0 R15: 00007f74643f7000 [ 145.878683][ T6350] [ 145.903575][ T6350] loop3: detected capacity change from 0 to 4096 [ 145.990766][ T6352] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.080364][ T6350] FAULT_INJECTION: forcing a failure. [ 146.080364][ T6350] name failslab, interval 1, probability 5, space 0, times 99 [ 146.123286][ T6350] CPU: 1 PID: 6350 Comm: syz.3.114 Not tainted syzkaller #0 [ 146.130886][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 146.141098][ T6350] Call Trace: [ 146.144883][ T6350] [ 146.147981][ T6350] dump_stack_lvl+0x18c/0x250 [ 146.153114][ T6350] ? show_regs_print_info+0x20/0x20 [ 146.159543][ T6350] ? load_image+0x420/0x420 [ 146.164675][ T6350] ? __might_sleep+0xe0/0xe0 [ 146.169522][ T6350] ? __lock_acquire+0x7eb0/0x7eb0 [ 146.174666][ T6350] should_fail_ex+0x394/0x4c0 [ 146.179414][ T6350] should_failslab+0x9/0x20 [ 146.184553][ T6350] slab_pre_alloc_hook+0x59/0x300 [ 146.189909][ T6350] kmem_cache_alloc_lru+0x4d/0x2c0 [ 146.196321][ T6350] ? __d_alloc+0x31/0x710 [ 146.200734][ T6350] __d_alloc+0x31/0x710 [ 146.204968][ T6350] d_alloc_pseudo+0x1d/0x70 [ 146.209821][ T6350] alloc_file_pseudo+0xe4/0x210 [ 146.214997][ T6350] ? fput+0x1a0/0x1a0 [ 146.219056][ T6350] ? alloc_fd+0x590/0x640 [ 146.223446][ T6350] sock_alloc_file+0xb7/0x280 [ 146.228242][ T6350] __sys_socket+0x140/0x1b0 [ 146.232834][ T6350] __x64_sys_socket+0x7a/0x90 [ 146.237566][ T6350] do_syscall_64+0x55/0xb0 [ 146.242035][ T6350] ? clear_bhb_loop+0x40/0x90 [ 146.246765][ T6350] ? clear_bhb_loop+0x40/0x90 [ 146.251572][ T6350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.258680][ T6350] RIP: 0033:0x7f746e5a1387 [ 146.263429][ T6350] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.285974][ T6350] RSP: 002b:00007f746f462f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 146.295063][ T6350] RAX: ffffffffffffffda RBX: 00007f746e825fa0 RCX: 00007f746e5a1387 [ 146.303614][ T6350] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 146.311723][ T6350] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 146.319948][ T6350] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000000 [ 146.328154][ T6350] R13: 00007f746e826038 R14: 00007f746e825fa0 R15: 00007ffec10b1e48 [ 146.336987][ T6350] [ 152.774375][ T6400] loop0: detected capacity change from 0 to 131072 [ 152.811757][ T6400] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 152.820510][ T6400] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 152.851100][ T6400] F2FS-fs (loop0): invalid crc value [ 152.887293][ T6400] F2FS-fs (loop0): Found nat_bits in checkpoint [ 153.022269][ T6400] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 153.029860][ T6400] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 155.775962][ T6416] batman_adv: batadv0: Adding interface: syz_tun [ 155.782418][ T6416] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.823347][ T6416] batman_adv: batadv0: Interface activated: syz_tun [ 155.901898][ T6415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.162123][ T6432] FAULT_INJECTION: forcing a failure. [ 158.162123][ T6432] name failslab, interval 1, probability 5, space 0, times 100 [ 158.228172][ T6432] CPU: 1 PID: 6432 Comm: syz.2.124 Not tainted syzkaller #0 [ 158.235565][ T6432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 158.245689][ T6432] Call Trace: [ 158.249021][ T6432] [ 158.252028][ T6432] dump_stack_lvl+0x18c/0x250 [ 158.256787][ T6432] ? show_regs_print_info+0x20/0x20 [ 158.262052][ T6432] ? load_image+0x420/0x420 [ 158.266637][ T6432] ? __might_sleep+0xe0/0xe0 [ 158.271301][ T6432] ? __lock_acquire+0x7eb0/0x7eb0 [ 158.276441][ T6432] should_fail_ex+0x394/0x4c0 [ 158.281285][ T6432] should_failslab+0x9/0x20 [ 158.285859][ T6432] slab_pre_alloc_hook+0x59/0x300 [ 158.291000][ T6432] ? prepend_path+0x8a7/0x950 [ 158.295822][ T6432] ? tomoyo_encode+0x2ad/0x570 [ 158.300682][ T6432] ? tomoyo_encode+0x2ad/0x570 [ 158.305530][ T6432] __kmem_cache_alloc_node+0x53/0x260 [ 158.311188][ T6432] ? tomoyo_encode+0x2ad/0x570 [ 158.316043][ T6432] __kmalloc+0xa7/0x240 [ 158.320249][ T6432] tomoyo_encode+0x2ad/0x570 [ 158.324917][ T6432] tomoyo_realpath_from_path+0x57c/0x5c0 [ 158.330601][ T6432] ? tomoyo_domain+0xd6/0x120 [ 158.335393][ T6432] tomoyo_path_number_perm+0x248/0x5e0 [ 158.340961][ T6432] ? tomoyo_path_number_perm+0x217/0x5e0 [ 158.346776][ T6432] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 158.352327][ T6432] ? __fget_files+0x28/0x460 [ 158.357260][ T6432] security_file_ioctl+0x70/0xa0 [ 158.362411][ T6432] __se_sys_ioctl+0x48/0x170 [ 158.367067][ T6432] do_syscall_64+0x55/0xb0 [ 158.371857][ T6432] ? clear_bhb_loop+0x40/0x90 [ 158.376744][ T6432] ? clear_bhb_loop+0x40/0x90 [ 158.381472][ T6432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.387465][ T6432] RIP: 0033:0x7f4cbed9f7ab [ 158.391950][ T6432] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 158.411612][ T6432] RSP: 002b:00007f4cbcff5db0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.420091][ T6432] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4cbed9f7ab [ 158.428118][ T6432] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 158.436129][ T6432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.444153][ T6432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 158.452159][ T6432] R13: 00007f4cbcff5ee0 R14: 00007f4cbcff5ea0 R15: 00007f4cb4bd6000 [ 158.460184][ T6432] [ 158.597837][ T6432] ERROR: Out of memory at tomoyo_realpath_from_path. [ 158.624741][ T6432] loop2: detected capacity change from 0 to 4096 [ 158.651286][ T6432] FAULT_INJECTION: forcing a failure. [ 158.651286][ T6432] name failslab, interval 1, probability 5, space 0, times 99 [ 158.755717][ T6432] CPU: 1 PID: 6432 Comm: syz.2.124 Not tainted syzkaller #0 [ 158.763112][ T6432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 158.773254][ T6432] Call Trace: [ 158.776610][ T6432] [ 158.779706][ T6432] dump_stack_lvl+0x18c/0x250 [ 158.784490][ T6432] ? show_regs_print_info+0x20/0x20 [ 158.789772][ T6432] ? load_image+0x420/0x420 [ 158.794351][ T6432] ? __might_sleep+0xe0/0xe0 [ 158.799012][ T6432] ? __lock_acquire+0x7eb0/0x7eb0 [ 158.804123][ T6432] should_fail_ex+0x394/0x4c0 [ 158.808900][ T6432] should_failslab+0x9/0x20 [ 158.813618][ T6432] slab_pre_alloc_hook+0x59/0x300 [ 158.818715][ T6432] ? kobject_get_path+0xc3/0x2c0 [ 158.823747][ T6432] ? kobject_get_path+0xc3/0x2c0 [ 158.828788][ T6432] __kmem_cache_alloc_node+0x53/0x260 [ 158.834472][ T6432] ? kobject_get_path+0xc3/0x2c0 [ 158.839452][ T6432] __kmalloc+0xa7/0x240 [ 158.843765][ T6432] kobject_get_path+0xc3/0x2c0 [ 158.848868][ T6432] kobject_uevent_env+0x291/0x890 [ 158.853986][ T6432] loop_configure+0xed4/0x1220 [ 158.858939][ T6432] lo_ioctl+0x437/0x1d00 [ 158.863340][ T6432] ? lo_release+0x1f0/0x1f0 [ 158.868449][ T6432] ? mark_lock+0x94/0x320 [ 158.872822][ T6432] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 158.878890][ T6432] ? read_lock_is_recursive+0x20/0x20 [ 158.884315][ T6432] ? lock_chain_count+0x20/0x20 [ 158.889389][ T6432] ? finish_task_switch+0x262/0x8f0 [ 158.894888][ T6432] ? lockdep_hardirqs_on+0x98/0x150 [ 158.900241][ T6432] ? finish_task_switch+0x262/0x8f0 [ 158.905537][ T6432] ? __schedule+0x1577/0x4720 [ 158.910311][ T6432] ? asan.module_dtor+0x20/0x20 [ 158.915225][ T6432] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 158.921971][ T6432] ? llist_add_batch+0x10f/0x1f0 [ 158.927073][ T6432] ? preempt_schedule+0xc0/0xd0 [ 158.932129][ T6432] ? find_next_clump8+0x1a0/0x1a0 [ 158.937200][ T6432] ? preempt_schedule_common+0x82/0xc0 [ 158.942882][ T6432] ? preempt_schedule+0xc0/0xd0 [ 158.947865][ T6432] ? tick_nohz_tick_stopped+0x7f/0xc0 [ 158.953468][ T6432] ? __irq_work_queue_local+0x13a/0x3b0 [ 158.959104][ T6432] ? irq_work_queue+0xbc/0x140 [ 158.963918][ T6432] ? __wake_up_klogd+0xd9/0x100 [ 158.968816][ T6432] ? vprintk_emit+0x53d/0x610 [ 158.973537][ T6432] ? printk_sprint+0x460/0x460 [ 158.978349][ T6432] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 158.984395][ T6432] ? lock_chain_count+0x20/0x20 [ 158.989297][ T6432] ? _printk+0xde/0x130 [ 158.993496][ T6432] ? do_vfs_ioctl+0x156c/0x1cc0 [ 158.998519][ T6432] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 159.004203][ T6432] ? blkdev_bszset+0x1f0/0x1f0 [ 159.009031][ T6432] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 159.014585][ T6432] ? lo_release+0x1f0/0x1f0 [ 159.019239][ T6432] blkdev_ioctl+0x5b2/0x730 [ 159.023793][ T6432] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 159.029988][ T6432] ? bpf_lsm_file_ioctl+0x9/0x10 [ 159.035137][ T6432] ? security_file_ioctl+0x80/0xa0 [ 159.040472][ T6432] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 159.046066][ T6432] __se_sys_ioctl+0xfd/0x170 [ 159.050734][ T6432] do_syscall_64+0x55/0xb0 [ 159.055487][ T6432] ? clear_bhb_loop+0x40/0x90 [ 159.060703][ T6432] ? clear_bhb_loop+0x40/0x90 [ 159.065999][ T6432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.072711][ T6432] RIP: 0033:0x7f4cbed9f7ab [ 159.077218][ T6432] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 159.097675][ T6432] RSP: 002b:00007f4cbcff5db0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.106860][ T6432] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4cbed9f7ab [ 159.115907][ T6432] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 159.126134][ T6432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.134391][ T6432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 159.143182][ T6432] R13: 00007f4cbcff5ee0 R14: 00007f4cbcff5ea0 R15: 00007f4cb4bd6000 [ 159.151348][ T6432] [ 159.479209][ T6432] FAULT_INJECTION: forcing a failure. [ 159.479209][ T6432] name failslab, interval 1, probability 5, space 0, times 98 [ 159.513183][ T6432] CPU: 0 PID: 6432 Comm: syz.2.124 Not tainted syzkaller #0 [ 159.521007][ T6432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 159.531321][ T6432] Call Trace: [ 159.534742][ T6432] [ 159.537743][ T6432] dump_stack_lvl+0x18c/0x250 [ 159.542571][ T6432] ? show_regs_print_info+0x20/0x20 [ 159.548085][ T6432] ? load_image+0x420/0x420 [ 159.552884][ T6432] ? __might_sleep+0xe0/0xe0 [ 159.557829][ T6432] ? __lock_acquire+0x7eb0/0x7eb0 [ 159.563066][ T6432] should_fail_ex+0x394/0x4c0 [ 159.568090][ T6432] should_failslab+0x9/0x20 [ 159.573114][ T6432] slab_pre_alloc_hook+0x59/0x300 [ 159.578372][ T6432] ? legacy_init_fs_context+0x51/0xc0 [ 159.584457][ T6432] __kmem_cache_alloc_node+0x53/0x260 [ 159.590729][ T6432] ? legacy_init_fs_context+0x51/0xc0 [ 159.596193][ T6432] kmalloc_trace+0x2a/0xe0 [ 159.600967][ T6432] legacy_init_fs_context+0x51/0xc0 [ 159.606246][ T6432] alloc_fs_context+0x618/0x7a0 [ 159.611472][ T6432] path_mount+0xc0b/0xfa0 [ 159.616144][ T6432] __se_sys_mount+0x2e7/0x3d0 [ 159.621249][ T6432] ? __x64_sys_mount+0xc0/0xc0 [ 159.626258][ T6432] ? lockdep_hardirqs_on+0x98/0x150 [ 159.631641][ T6432] ? __x64_sys_mount+0x20/0xc0 [ 159.636668][ T6432] do_syscall_64+0x55/0xb0 [ 159.641261][ T6432] ? clear_bhb_loop+0x40/0x90 [ 159.645985][ T6432] ? clear_bhb_loop+0x40/0x90 [ 159.650759][ T6432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.657214][ T6432] RIP: 0033:0x7f4cbeda0d8a [ 159.661789][ T6432] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.681457][ T6432] RSP: 002b:00007f4cbcff5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 159.690101][ T6432] RAX: ffffffffffffffda RBX: 00007f4cbcff5ee0 RCX: 00007f4cbeda0d8a [ 159.698140][ T6432] RDX: 0000200000007040 RSI: 0000200000007080 RDI: 00007f4cbcff5ea0 [ 159.706152][ T6432] RBP: 0000200000007040 R08: 00007f4cbcff5ee0 R09: 0000000000380831 [ 159.715122][ T6432] R10: 0000000000380831 R11: 0000000000000246 R12: 0000200000007080 [ 159.723671][ T6432] R13: 00007f4cbcff5ea0 R14: 0000000000000baf R15: 00002000000070c0 [ 159.732341][ T6432] [ 159.783546][ T6437] comedi comedi3: board detection failed [ 159.791569][ T6432] FAULT_INJECTION: forcing a failure. [ 159.791569][ T6432] name failslab, interval 1, probability 5, space 0, times 97 [ 160.371536][ T6432] CPU: 0 PID: 6432 Comm: syz.2.124 Not tainted syzkaller #0 [ 160.378934][ T6432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 160.389087][ T6432] Call Trace: [ 160.392415][ T6432] [ 160.395461][ T6432] dump_stack_lvl+0x18c/0x250 [ 160.400209][ T6432] ? show_regs_print_info+0x20/0x20 [ 160.405566][ T6432] ? load_image+0x420/0x420 [ 160.410139][ T6432] ? __might_sleep+0xe0/0xe0 [ 160.414887][ T6432] ? __lock_acquire+0x7eb0/0x7eb0 [ 160.419971][ T6432] should_fail_ex+0x394/0x4c0 [ 160.424756][ T6432] should_failslab+0x9/0x20 [ 160.429309][ T6432] slab_pre_alloc_hook+0x59/0x300 [ 160.434368][ T6432] ? __lock_acquire+0x7eb0/0x7eb0 [ 160.440806][ T6432] kmem_cache_alloc+0x5a/0x2d0 [ 160.445657][ T6432] ? security_file_alloc+0x34/0x120 [ 160.450968][ T6432] security_file_alloc+0x34/0x120 [ 160.456126][ T6432] init_file+0x94/0x1f0 [ 160.460439][ T6432] alloc_empty_file+0xb7/0x1d0 [ 160.465282][ T6432] path_openat+0x120/0x3270 [ 160.469869][ T6432] ? kasan_set_track+0x5f/0x70 [ 160.474728][ T6432] ? verify_lock_unused+0x140/0x140 [ 160.480033][ T6432] ? do_sys_openat2+0xda/0x1d0 [ 160.484875][ T6432] ? __x64_sys_openat+0x139/0x160 [ 160.489980][ T6432] ? do_syscall_64+0x55/0xb0 [ 160.494655][ T6432] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.500801][ T6432] ? verify_lock_unused+0x140/0x140 [ 160.506876][ T6432] ? do_filp_open+0x430/0x430 [ 160.511668][ T6432] do_filp_open+0x1f2/0x430 [ 160.516275][ T6432] ? vfs_tmpfile+0x620/0x620 [ 160.520956][ T6432] ? _raw_spin_unlock+0x28/0x40 [ 160.525892][ T6432] ? alloc_fd+0x590/0x640 [ 160.530731][ T6432] do_sys_openat2+0x134/0x1d0 [ 160.535539][ T6432] ? do_sys_open+0xe0/0xe0 [ 160.540127][ T6432] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 160.547136][ T6432] ? lock_chain_count+0x20/0x20 [ 160.552065][ T6432] __x64_sys_openat+0x139/0x160 [ 160.557353][ T6432] do_syscall_64+0x55/0xb0 [ 160.561950][ T6432] ? clear_bhb_loop+0x40/0x90 [ 160.566966][ T6432] ? clear_bhb_loop+0x40/0x90 [ 160.572073][ T6432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.578139][ T6432] RIP: 0033:0x7f4cbed6034e [ 160.582748][ T6432] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 160.602859][ T6432] RSP: 002b:00007f4cbcff5da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 160.611352][ T6432] RAX: ffffffffffffffda RBX: 00007f4cbcff66c0 RCX: 00007f4cbed6034e [ 160.619566][ T6432] RDX: 0000000000000000 RSI: 00007f4cbcff5ea0 RDI: ffffffffffffff9c [ 160.627601][ T6432] RBP: 0000200000007040 R08: 0000000000000000 R09: 0000000000000000 [ 160.635694][ T6432] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 160.643732][ T6432] R13: 00007f4cbcff5ea0 R14: 0000000000000baf R15: 00002000000070c0 [ 160.651851][ T6432] [ 160.793445][ T6432] FAULT_INJECTION: forcing a failure. [ 160.793445][ T6432] name failslab, interval 1, probability 5, space 0, times 96 [ 160.835358][ T6432] CPU: 1 PID: 6432 Comm: syz.2.124 Not tainted syzkaller #0 [ 160.842725][ T6432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 160.853654][ T6432] Call Trace: [ 160.856991][ T6432] [ 160.860168][ T6432] dump_stack_lvl+0x18c/0x250 [ 160.865534][ T6432] ? show_regs_print_info+0x20/0x20 [ 160.871079][ T6432] ? load_image+0x420/0x420 [ 160.875648][ T6432] ? __might_sleep+0xe0/0xe0 [ 160.880332][ T6432] ? __lock_acquire+0x7eb0/0x7eb0 [ 160.885421][ T6432] should_fail_ex+0x394/0x4c0 [ 160.890245][ T6432] should_failslab+0x9/0x20 [ 160.894785][ T6432] slab_pre_alloc_hook+0x59/0x300 [ 160.899968][ T6432] ? mas_next_slot+0x910/0x980 [ 160.905138][ T6432] ? task_numa_work+0x921/0x1350 [ 160.910327][ T6432] __kmem_cache_alloc_node+0x53/0x260 [ 160.915888][ T6432] ? task_numa_work+0x921/0x1350 [ 160.921322][ T6432] kmalloc_trace+0x2a/0xe0 [ 160.925954][ T6432] task_numa_work+0x921/0x1350 [ 160.931141][ T6432] ? init_numa_balancing+0x400/0x400 [ 160.936481][ T6432] ? __might_sleep+0xe0/0xe0 [ 160.941193][ T6432] ? _raw_spin_unlock_irq+0x23/0x50 [ 160.946430][ T6432] ? lockdep_hardirqs_on+0x98/0x150 [ 160.952030][ T6432] task_work_run+0x1d4/0x260 [ 160.956666][ T6432] ? task_work_cancel+0x220/0x220 [ 160.961730][ T6432] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 160.967918][ T6432] ? exit_to_user_mode_loop+0x3b/0x110 [ 160.973423][ T6432] exit_to_user_mode_loop+0xe6/0x110 [ 160.978869][ T6432] exit_to_user_mode_prepare+0xee/0x180 [ 160.984635][ T6432] syscall_exit_to_user_mode+0x1a/0x50 [ 160.990175][ T6432] do_syscall_64+0x61/0xb0 [ 160.994647][ T6432] ? clear_bhb_loop+0x40/0x90 [ 160.999489][ T6432] ? clear_bhb_loop+0x40/0x90 [ 161.004210][ T6432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.010157][ T6432] RIP: 0033:0x7f4cbed6034e [ 161.014611][ T6432] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 161.034287][ T6432] RSP: 002b:00007f4cbcff5da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 161.043180][ T6432] RAX: fffffffffffffff4 RBX: 00007f4cbcff66c0 RCX: 00007f4cbed6034e [ 161.051222][ T6432] RDX: 0000000000000000 RSI: 00007f4cbcff5ea0 RDI: ffffffffffffff9c [ 161.059293][ T6432] RBP: 0000200000007040 R08: 0000000000000000 R09: 0000000000000000 [ 161.067512][ T6432] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 161.075603][ T6432] R13: 00007f4cbcff5ea0 R14: 0000000000000baf R15: 00002000000070c0 [ 161.083637][ T6432] [ 161.785286][ T6448] loop0: detected capacity change from 0 to 512 [ 164.112269][ T6448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.785815][ T6468] FAULT_INJECTION: forcing a failure. [ 165.785815][ T6468] name failslab, interval 1, probability 5, space 0, times 100 [ 165.833472][ T6468] CPU: 1 PID: 6468 Comm: syz.1.152 Not tainted syzkaller #0 [ 165.840864][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 165.851000][ T6468] Call Trace: [ 165.854348][ T6468] [ 165.857318][ T6468] dump_stack_lvl+0x18c/0x250 [ 165.862180][ T6468] ? show_regs_print_info+0x20/0x20 [ 165.867430][ T6468] ? load_image+0x420/0x420 [ 165.872004][ T6468] ? __might_sleep+0xe0/0xe0 [ 165.876654][ T6468] ? __lock_acquire+0x7eb0/0x7eb0 [ 165.881744][ T6468] should_fail_ex+0x394/0x4c0 [ 165.886502][ T6468] should_failslab+0x9/0x20 [ 165.891067][ T6468] slab_pre_alloc_hook+0x59/0x300 [ 165.896176][ T6468] kmem_cache_alloc+0x5a/0x2d0 [ 165.901010][ T6468] ? ptlock_alloc+0x20/0x70 [ 165.905581][ T6468] ptlock_alloc+0x20/0x70 [ 165.910045][ T6468] pte_alloc_one+0xcc/0x540 [ 165.914685][ T6468] ? pfn_modify_allowed+0x560/0x560 [ 165.919951][ T6468] ? __lock_acquire+0x7eb0/0x7eb0 [ 165.925043][ T6468] __pte_alloc+0x22/0x2a0 [ 165.929418][ T6468] handle_mm_fault+0x3dc0/0x4a40 [ 165.934399][ T6468] ? handle_mm_fault+0xe6/0x4a40 [ 165.939389][ T6468] ? numa_migrate_prep+0x350/0x350 [ 165.944558][ T6468] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 165.949889][ T6468] do_user_addr_fault+0xeb7/0x13e0 [ 165.955063][ T6468] exc_page_fault+0x64/0x100 [ 165.959689][ T6468] ? clear_bhb_loop+0x40/0x90 [ 165.964407][ T6468] asm_exc_page_fault+0x26/0x30 [ 165.969346][ T6468] RIP: 0033:0x7f6d3705644e [ 165.973826][ T6468] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 165.993512][ T6468] RSP: 002b:00007f6d38159470 EFLAGS: 00010246 [ 165.999622][ T6468] RAX: 0000000000000001 RBX: 00007f6d38159530 RCX: 0000000000000101 [ 166.007631][ T6468] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f6d381595d0 [ 166.015646][ T6468] RBP: 0000000000000102 R08: 00007f6d2cff7000 R09: 0000000000000000 [ 166.023673][ T6468] R10: 0000000000000000 R11: 00007f6d38159540 R12: 0000000000000001 [ 166.031708][ T6468] R13: 00007f6d37258240 R14: 0000000000000000 R15: 00007f6d381595d0 [ 166.039763][ T6468] [ 166.113546][ T6468] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 166.377179][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.428164][ T6468] FAULT_INJECTION: forcing a failure. [ 166.428164][ T6468] name failslab, interval 1, probability 5, space 0, times 98 [ 166.551208][ T6468] CPU: 0 PID: 6468 Comm: syz.1.152 Not tainted syzkaller #0 [ 166.558621][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 166.569018][ T6468] Call Trace: [ 166.572375][ T6468] [ 166.575458][ T6468] dump_stack_lvl+0x18c/0x250 [ 166.580219][ T6468] ? show_regs_print_info+0x20/0x20 [ 166.585493][ T6468] ? load_image+0x420/0x420 [ 166.590241][ T6468] ? __might_sleep+0xe0/0xe0 [ 166.594947][ T6468] ? __lock_acquire+0x7eb0/0x7eb0 [ 166.600044][ T6468] should_fail_ex+0x394/0x4c0 [ 166.604790][ T6468] should_failslab+0x9/0x20 [ 166.609347][ T6468] slab_pre_alloc_hook+0x59/0x300 [ 166.614612][ T6468] kmem_cache_alloc+0x5a/0x2d0 [ 166.619516][ T6468] ? __kernfs_new_node+0xe5/0x7f0 [ 166.624646][ T6468] __kernfs_new_node+0xe5/0x7f0 [ 166.629571][ T6468] ? kernfs_new_node+0x260/0x260 [ 166.634597][ T6468] ? up_write+0x1be/0x410 [ 166.638986][ T6468] kernfs_new_node+0x14c/0x260 [ 166.643819][ T6468] __kernfs_create_file+0x4b/0x2e0 [ 166.648991][ T6468] sysfs_add_file_mode_ns+0x237/0x2f0 [ 166.654538][ T6468] internal_create_group+0x431/0xd10 [ 166.662166][ T6468] ? loop_set_status_from_info+0x2a0/0x2a0 [ 166.668040][ T6468] ? sysfs_create_group+0x20/0x20 [ 166.673123][ T6468] ? __loop_update_dio+0x2d5/0x540 [ 166.678475][ T6468] loop_configure+0xc2b/0x1220 [ 166.683463][ T6468] lo_ioctl+0x437/0x1d00 [ 166.688025][ T6468] ? security_file_open+0x62/0xa0 [ 166.693765][ T6468] ? lo_release+0x1f0/0x1f0 [ 166.698312][ T6468] ? mark_lock+0x94/0x320 [ 166.703026][ T6468] ? verify_lock_unused+0x140/0x140 [ 166.708279][ T6468] ? __lock_acquire+0x1431/0x7eb0 [ 166.713381][ T6468] ? deref_stack_reg+0x1ab/0x230 [ 166.718456][ T6468] ? is_bpf_text_address+0x26/0x2a0 [ 166.723968][ T6468] ? __lock_acquire+0x7eb0/0x7eb0 [ 166.729118][ T6468] ? __read_once_word_nocheck+0x9/0x10 [ 166.735252][ T6468] ? is_bpf_text_address+0x28f/0x2a0 [ 166.740571][ T6468] ? is_bpf_text_address+0x26/0x2a0 [ 166.745990][ T6468] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.752118][ T6468] ? kernel_text_address+0xa0/0xd0 [ 166.757367][ T6468] ? __kernel_text_address+0xd/0x30 [ 166.762730][ T6468] ? unwind_get_return_address+0x91/0xc0 [ 166.768483][ T6468] ? stack_trace_save+0x100/0x100 [ 166.774731][ T6468] ? arch_stack_walk+0x160/0x190 [ 166.779950][ T6468] ? stack_trace_save+0xaa/0x100 [ 166.785055][ T6468] ? stack_trace_snprint+0xf0/0xf0 [ 166.790242][ T6468] ? kasan_save_free_info+0x28/0x40 [ 166.795605][ T6468] ? __stack_depot_save+0x1f/0x660 [ 166.800964][ T6468] ? do_syscall_64+0x55/0xb0 [ 166.805644][ T6468] ? kasan_set_track+0x5f/0x70 [ 166.810469][ T6468] ? kasan_set_track+0x4e/0x70 [ 166.815447][ T6468] ? kasan_save_free_info+0x28/0x40 [ 166.821315][ T6468] ? ____kasan_slab_free+0x126/0x1f0 [ 166.826738][ T6468] ? slab_free_freelist_hook+0x154/0x240 [ 166.832476][ T6468] ? __kmem_cache_free+0xba/0x1f0 [ 166.837711][ T6468] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 166.843395][ T6468] ? security_file_ioctl+0x70/0xa0 [ 166.848565][ T6468] ? __se_sys_ioctl+0x48/0x170 [ 166.853657][ T6468] ? do_syscall_64+0x55/0xb0 [ 166.858635][ T6468] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.864771][ T6468] ? mark_lock+0x94/0x320 [ 166.869147][ T6468] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 166.875308][ T6468] ? lock_chain_count+0x20/0x20 [ 166.880214][ T6468] ? do_vfs_ioctl+0x156c/0x1cc0 [ 166.885168][ T6468] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 166.890998][ T6468] ? blkdev_bszset+0x1f0/0x1f0 [ 166.895850][ T6468] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 166.901400][ T6468] ? lo_release+0x1f0/0x1f0 [ 166.905976][ T6468] blkdev_ioctl+0x5b2/0x730 [ 166.910530][ T6468] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 166.916040][ T6468] ? bpf_lsm_file_ioctl+0x9/0x10 [ 166.921064][ T6468] ? security_file_ioctl+0x80/0xa0 [ 166.926238][ T6468] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 166.931758][ T6468] __se_sys_ioctl+0xfd/0x170 [ 166.936414][ T6468] do_syscall_64+0x55/0xb0 [ 166.940907][ T6468] ? clear_bhb_loop+0x40/0x90 [ 166.945652][ T6468] ? clear_bhb_loop+0x40/0x90 [ 166.950463][ T6468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.956399][ T6468] RIP: 0033:0x7f6d3719f7ab [ 166.960875][ T6468] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 166.980523][ T6468] RSP: 002b:00007f6d38159db0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.988989][ T6468] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f6d3719f7ab [ 166.997004][ T6468] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 167.005020][ T6468] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.013030][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 167.021065][ T6468] R13: 00007f6d38159ee0 R14: 00007f6d38159ea0 R15: 00007f6d2cff7000 [ 167.029094][ T6468] [ 167.103546][ T6468] loop1: detected capacity change from 0 to 4096 [ 167.274088][ T6468] FAULT_INJECTION: forcing a failure. [ 167.274088][ T6468] name failslab, interval 1, probability 5, space 0, times 97 [ 167.511545][ T6468] CPU: 0 PID: 6468 Comm: syz.1.152 Not tainted syzkaller #0 [ 167.519026][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 167.529125][ T6468] Call Trace: [ 167.532469][ T6468] [ 167.535520][ T6468] dump_stack_lvl+0x18c/0x250 [ 167.540294][ T6468] ? show_regs_print_info+0x20/0x20 [ 167.545554][ T6468] ? load_image+0x420/0x420 [ 167.550105][ T6468] ? __lock_acquire+0x7eb0/0x7eb0 [ 167.555266][ T6468] should_fail_ex+0x394/0x4c0 [ 167.560823][ T6468] should_failslab+0x9/0x20 [ 167.565355][ T6468] slab_pre_alloc_hook+0x59/0x300 [ 167.570951][ T6468] ? mark_lock+0x94/0x320 [ 167.576190][ T6468] kmem_cache_alloc+0x5a/0x2d0 [ 167.581176][ T6468] ? alloc_empty_file+0x9e/0x1d0 [ 167.586511][ T6468] alloc_empty_file+0x9e/0x1d0 [ 167.591449][ T6468] path_openat+0x120/0x3270 [ 167.595995][ T6468] ? kasan_set_track+0x5f/0x70 [ 167.600890][ T6468] ? verify_lock_unused+0x140/0x140 [ 167.606124][ T6468] ? do_sys_openat2+0xda/0x1d0 [ 167.610928][ T6468] ? __x64_sys_openat+0x139/0x160 [ 167.616090][ T6468] ? do_syscall_64+0x55/0xb0 [ 167.621309][ T6468] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.628386][ T6468] ? verify_lock_unused+0x140/0x140 [ 167.633751][ T6468] ? do_filp_open+0x430/0x430 [ 167.638893][ T6468] do_filp_open+0x1f2/0x430 [ 167.643549][ T6468] ? vfs_tmpfile+0x620/0x620 [ 167.648334][ T6468] ? _raw_spin_unlock+0x28/0x40 [ 167.653255][ T6468] ? alloc_fd+0x590/0x640 [ 167.658383][ T6468] do_sys_openat2+0x134/0x1d0 [ 167.663373][ T6468] ? __kmem_cache_free+0xba/0x1f0 [ 167.668525][ T6468] ? do_sys_open+0xe0/0xe0 [ 167.672958][ T6468] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 167.679415][ T6468] ? lock_chain_count+0x20/0x20 [ 167.684325][ T6468] __x64_sys_openat+0x139/0x160 [ 167.689270][ T6468] do_syscall_64+0x55/0xb0 [ 167.693729][ T6468] ? clear_bhb_loop+0x40/0x90 [ 167.698547][ T6468] ? clear_bhb_loop+0x40/0x90 [ 167.703273][ T6468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.709399][ T6468] RIP: 0033:0x7f6d3716034e [ 167.714065][ T6468] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 167.734833][ T6468] RSP: 002b:00007f6d38159da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 167.743311][ T6468] RAX: ffffffffffffffda RBX: 00007f6d3815a6c0 RCX: 00007f6d3716034e [ 167.751455][ T6468] RDX: 0000000000000000 RSI: 00007f6d38159ea0 RDI: ffffffffffffff9c [ 167.759940][ T6468] RBP: 0000200000007040 R08: 0000000000000000 R09: 0000000000000000 [ 167.768506][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 167.776530][ T6468] R13: 00007f6d38159ea0 R14: 0000000000000baf R15: 00002000000070c0 [ 167.784924][ T6468] [ 168.833964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 169.243500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 173.578538][ T6489] comedi comedi3: board detection failed [ 174.740551][ T6492] FAULT_INJECTION: forcing a failure. [ 174.740551][ T6492] name failslab, interval 1, probability 5, space 0, times 96 [ 174.773722][ T6492] CPU: 0 PID: 6492 Comm: syz.2.161 Not tainted syzkaller #0 [ 174.781276][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 174.791390][ T6492] Call Trace: [ 174.794718][ T6492] [ 174.798616][ T6492] dump_stack_lvl+0x18c/0x250 [ 174.803448][ T6492] ? show_regs_print_info+0x20/0x20 [ 174.808714][ T6492] ? load_image+0x420/0x420 [ 174.813276][ T6492] ? __lock_acquire+0x7eb0/0x7eb0 [ 174.818358][ T6492] should_fail_ex+0x394/0x4c0 [ 174.823111][ T6492] should_failslab+0x9/0x20 [ 174.827766][ T6492] slab_pre_alloc_hook+0x59/0x300 [ 174.832847][ T6492] ? lockdep_softirqs_off+0x440/0x440 [ 174.838568][ T6492] kmem_cache_alloc+0x5a/0x2d0 [ 174.843417][ T6492] ? seq_open+0x62/0x140 [ 174.847741][ T6492] seq_open+0x62/0x140 [ 174.851916][ T6492] kernfs_fop_open+0x524/0xc60 [ 174.857055][ T6492] ? fsnotify_perm+0x271/0x5e0 [ 174.861920][ T6492] do_dentry_open+0x880/0x14b0 [ 174.867113][ T6492] ? kernfs_fop_mmap+0x570/0x570 [ 174.872288][ T6492] path_openat+0x284f/0x3270 [ 174.876952][ T6492] ? do_sys_openat2+0xda/0x1d0 [ 174.881874][ T6492] ? __x64_sys_openat+0x139/0x160 [ 174.886963][ T6492] ? verify_lock_unused+0x140/0x140 [ 174.892408][ T6492] ? do_filp_open+0x430/0x430 [ 174.897245][ T6492] do_filp_open+0x1f2/0x430 [ 174.901806][ T6492] ? vfs_tmpfile+0x620/0x620 [ 174.906467][ T6492] ? _raw_spin_unlock+0x28/0x40 [ 174.911354][ T6492] ? alloc_fd+0x590/0x640 [ 174.915735][ T6492] do_sys_openat2+0x134/0x1d0 [ 174.920519][ T6492] ? do_sys_open+0xe0/0xe0 [ 174.925004][ T6492] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 174.931063][ T6492] ? lock_chain_count+0x20/0x20 [ 174.936003][ T6492] __x64_sys_openat+0x139/0x160 [ 174.940943][ T6492] do_syscall_64+0x55/0xb0 [ 174.945410][ T6492] ? clear_bhb_loop+0x40/0x90 [ 174.950244][ T6492] ? clear_bhb_loop+0x40/0x90 [ 174.955072][ T6492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.961286][ T6492] RIP: 0033:0x7f4cbed9fb19 [ 174.965859][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.985547][ T6492] RSP: 002b:00007f4cbcff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 174.994434][ T6492] RAX: ffffffffffffffda RBX: 00007f4cbf025fa0 RCX: 00007f4cbed9fb19 [ 175.003217][ T6492] RDX: 0000000000101a02 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 175.011279][ T6492] RBP: 00007f4cbee37af8 R08: 0000000000000000 R09: 0000000000000000 [ 175.019320][ T6492] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000000 [ 175.027362][ T6492] R13: 00007f4cbf026038 R14: 00007f4cbf025fa0 R15: 00007ffcbbf245b8 [ 175.035481][ T6492] [ 176.923565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 182.301038][ T6525] comedi comedi3: board detection failed [ 187.620937][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.633640][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.643704][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.653847][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.673509][ T5796] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 187.681545][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.897409][ T6548] rxe_eth0 speed is unknown, defaulting to 1000 [ 190.829845][ T5796] Bluetooth: hci4: command tx timeout [ 190.957724][ T6561] FAULT_INJECTION: forcing a failure. [ 190.957724][ T6561] name failslab, interval 1, probability 5, space 0, times 95 [ 191.011185][ T6561] CPU: 1 PID: 6561 Comm: syz.0.177 Not tainted syzkaller #0 [ 191.018829][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 191.028945][ T6561] Call Trace: [ 191.032287][ T6561] [ 191.035276][ T6561] dump_stack_lvl+0x18c/0x250 [ 191.040215][ T6561] ? show_regs_print_info+0x20/0x20 [ 191.045510][ T6561] ? load_image+0x420/0x420 [ 191.050066][ T6561] ? __might_sleep+0xe0/0xe0 [ 191.054834][ T6561] ? __lock_acquire+0x7eb0/0x7eb0 [ 191.059938][ T6561] ? __mutex_lock+0x30d/0xce0 [ 191.064740][ T6561] should_fail_ex+0x394/0x4c0 [ 191.069596][ T6561] should_failslab+0x9/0x20 [ 191.074403][ T6561] slab_pre_alloc_hook+0x59/0x300 [ 191.079527][ T6561] ? kernfs_fop_open+0x790/0xc60 [ 191.084554][ T6561] __kmem_cache_alloc_node+0x53/0x260 [ 191.090076][ T6561] ? kernfs_fop_open+0x790/0xc60 [ 191.095113][ T6561] kmalloc_trace+0x2a/0xe0 [ 191.099659][ T6561] kernfs_fop_open+0x790/0xc60 [ 191.104590][ T6561] ? fsnotify_perm+0x271/0x5e0 [ 191.109621][ T6561] do_dentry_open+0x880/0x14b0 [ 191.114460][ T6561] ? kernfs_fop_mmap+0x570/0x570 [ 191.119472][ T6561] path_openat+0x284f/0x3270 [ 191.124165][ T6561] ? do_sys_openat2+0xda/0x1d0 [ 191.128990][ T6561] ? __x64_sys_openat+0x139/0x160 [ 191.134128][ T6561] ? verify_lock_unused+0x140/0x140 [ 191.139386][ T6561] ? do_filp_open+0x430/0x430 [ 191.144131][ T6561] do_filp_open+0x1f2/0x430 [ 191.148690][ T6561] ? vfs_tmpfile+0x620/0x620 [ 191.153365][ T6561] ? _raw_spin_unlock+0x28/0x40 [ 191.158286][ T6561] ? alloc_fd+0x590/0x640 [ 191.162755][ T6561] do_sys_openat2+0x134/0x1d0 [ 191.167505][ T6561] ? do_sys_open+0xe0/0xe0 [ 191.172117][ T6561] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 191.178162][ T6561] ? lock_chain_count+0x20/0x20 [ 191.183141][ T6561] __x64_sys_openat+0x139/0x160 [ 191.188077][ T6561] do_syscall_64+0x55/0xb0 [ 191.192576][ T6561] ? clear_bhb_loop+0x40/0x90 [ 191.197354][ T6561] ? clear_bhb_loop+0x40/0x90 [ 191.202221][ T6561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.208170][ T6561] RIP: 0033:0x7f24e679fb19 [ 191.212789][ T6561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.233179][ T6561] RSP: 002b:00007f24e7722028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 191.241665][ T6561] RAX: ffffffffffffffda RBX: 00007f24e6a25fa0 RCX: 00007f24e679fb19 [ 191.249680][ T6561] RDX: 0000000000101a02 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 191.257710][ T6561] RBP: 00007f24e6837af8 R08: 0000000000000000 R09: 0000000000000000 [ 191.265817][ T6561] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000000 [ 191.273863][ T6561] R13: 00007f24e6a26038 R14: 00007f24e6a25fa0 R15: 00007fffe9a95978 [ 191.281897][ T6561] [ 191.627886][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.928967][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.205797][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.485421][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.637956][ T6548] chnl_net:caif_netlink_parms(): no params data found [ 192.845993][ T6573] loop0: detected capacity change from 0 to 4096 [ 192.855536][ T5796] Bluetooth: hci4: command tx timeout [ 192.879118][ T6573] FAULT_INJECTION: forcing a failure. [ 192.879118][ T6573] name failslab, interval 1, probability 5, space 0, times 99 [ 192.975852][ T6573] CPU: 1 PID: 6573 Comm: syz.0.181 Not tainted syzkaller #0 [ 192.983240][ T6573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 192.993437][ T6573] Call Trace: [ 192.996957][ T6573] [ 192.999955][ T6573] dump_stack_lvl+0x18c/0x250 [ 193.004908][ T6573] ? show_regs_print_info+0x20/0x20 [ 193.010223][ T6573] ? load_image+0x420/0x420 [ 193.014795][ T6573] ? __might_sleep+0xe0/0xe0 [ 193.019453][ T6573] ? __lock_acquire+0x7eb0/0x7eb0 [ 193.024552][ T6573] should_fail_ex+0x394/0x4c0 [ 193.029298][ T6573] should_failslab+0x9/0x20 [ 193.033848][ T6573] slab_pre_alloc_hook+0x59/0x300 [ 193.038995][ T6573] ? __lock_acquire+0x7eb0/0x7eb0 [ 193.044096][ T6573] kmem_cache_alloc+0x5a/0x2d0 [ 193.048981][ T6573] ? security_file_alloc+0x34/0x120 [ 193.054226][ T6573] security_file_alloc+0x34/0x120 [ 193.059296][ T6573] init_file+0x94/0x1f0 [ 193.063513][ T6573] alloc_empty_file+0xb7/0x1d0 [ 193.068480][ T6573] path_openat+0x120/0x3270 [ 193.073110][ T6573] ? kasan_set_track+0x5f/0x70 [ 193.078032][ T6573] ? verify_lock_unused+0x140/0x140 [ 193.083289][ T6573] ? do_sys_openat2+0xda/0x1d0 [ 193.088113][ T6573] ? __x64_sys_openat+0x139/0x160 [ 193.093192][ T6573] ? do_syscall_64+0x55/0xb0 [ 193.097851][ T6573] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.103993][ T6573] ? verify_lock_unused+0x140/0x140 [ 193.109301][ T6573] ? do_filp_open+0x430/0x430 [ 193.114059][ T6573] do_filp_open+0x1f2/0x430 [ 193.118633][ T6573] ? vfs_tmpfile+0x620/0x620 [ 193.123306][ T6573] ? _raw_spin_unlock+0x28/0x40 [ 193.128219][ T6573] ? alloc_fd+0x590/0x640 [ 193.132709][ T6573] do_sys_openat2+0x134/0x1d0 [ 193.137430][ T6573] ? __kmem_cache_free+0xba/0x1f0 [ 193.142523][ T6573] ? do_sys_open+0xe0/0xe0 [ 193.147083][ T6573] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 193.153417][ T6573] ? lock_chain_count+0x20/0x20 [ 193.158360][ T6573] __x64_sys_openat+0x139/0x160 [ 193.163477][ T6573] do_syscall_64+0x55/0xb0 [ 193.167955][ T6573] ? clear_bhb_loop+0x40/0x90 [ 193.172717][ T6573] ? clear_bhb_loop+0x40/0x90 [ 193.177469][ T6573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.183480][ T6573] RIP: 0033:0x7f24e676034e [ 193.187968][ T6573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 193.207715][ T6573] RSP: 002b:00007f24e7721da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 193.216188][ T6573] RAX: ffffffffffffffda RBX: 00007f24e77226c0 RCX: 00007f24e676034e [ 193.224227][ T6573] RDX: 0000000000000000 RSI: 00007f24e7721ea0 RDI: ffffffffffffff9c [ 193.232245][ T6573] RBP: 0000200000007040 R08: 0000000000000000 R09: 0000000000000000 [ 193.240418][ T6573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 193.248437][ T6573] R13: 00007f24e7721ea0 R14: 0000000000000baf R15: 00002000000070c0 [ 193.256489][ T6573] [ 193.285516][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.292747][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.300175][ T6548] bridge_slave_0: entered allmulticast mode [ 193.309340][ T6548] bridge_slave_0: entered promiscuous mode [ 193.323694][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.331083][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.339066][ T6548] bridge_slave_1: entered allmulticast mode [ 193.346847][ T6548] bridge_slave_1: entered promiscuous mode [ 193.379140][ T6573] FAULT_INJECTION: forcing a failure. [ 193.379140][ T6573] name failslab, interval 1, probability 5, space 0, times 98 [ 193.469851][ T6583] comedi comedi3: board detection failed [ 193.519641][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.556991][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.599000][ T6573] CPU: 0 PID: 6573 Comm: syz.0.181 Not tainted syzkaller #0 [ 193.606400][ T6573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 193.616535][ T6573] Call Trace: [ 193.619864][ T6573] [ 193.622852][ T6573] dump_stack_lvl+0x18c/0x250 [ 193.627616][ T6573] ? show_regs_print_info+0x20/0x20 [ 193.633234][ T6573] ? load_image+0x420/0x420 [ 193.637846][ T6573] ? __might_sleep+0xe0/0xe0 [ 193.642625][ T6573] ? __lock_acquire+0x7eb0/0x7eb0 [ 193.647709][ T6573] should_fail_ex+0x394/0x4c0 [ 193.652448][ T6573] should_failslab+0x9/0x20 [ 193.656997][ T6573] slab_pre_alloc_hook+0x59/0x300 [ 193.662072][ T6573] ? security_sk_alloc+0x4b/0x130 [ 193.667157][ T6573] ? security_sk_alloc+0x4b/0x130 [ 193.672497][ T6573] __kmem_cache_alloc_node+0x53/0x260 [ 193.677915][ T6573] ? security_sk_alloc+0x4b/0x130 [ 193.683150][ T6573] __kmalloc+0xa7/0x240 [ 193.687391][ T6573] ? sk_prot_alloc+0xe7/0x210 [ 193.692336][ T6573] security_sk_alloc+0x4b/0x130 [ 193.697239][ T6573] sk_prot_alloc+0x101/0x210 [ 193.701882][ T6573] ? sk_alloc+0x24/0x350 [ 193.706168][ T6573] sk_alloc+0x3a/0x350 [ 193.710317][ T6573] __netlink_create+0x6c/0x290 [ 193.715140][ T6573] netlink_create+0x3ee/0x5c0 [ 193.719977][ T6573] ? rtnetlink_rcv+0x20/0x20 [ 193.724649][ T6573] __sock_create+0x49e/0x940 [ 193.729414][ T6573] __sys_socket+0xd7/0x1b0 [ 193.733913][ T6573] __x64_sys_socket+0x7a/0x90 [ 193.738930][ T6573] do_syscall_64+0x55/0xb0 [ 193.743426][ T6573] ? clear_bhb_loop+0x40/0x90 [ 193.748266][ T6573] ? clear_bhb_loop+0x40/0x90 [ 193.753193][ T6573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.759322][ T6573] RIP: 0033:0x7f24e679fb19 [ 193.763790][ T6573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.783461][ T6573] RSP: 002b:00007f24e7722028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 193.791951][ T6573] RAX: ffffffffffffffda RBX: 00007f24e6a25fa0 RCX: 00007f24e679fb19 [ 193.800038][ T6573] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 193.808069][ T6573] RBP: 00007f24e6837af8 R08: 0000000000000000 R09: 0000000000000000 [ 193.816316][ T6573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.824527][ T6573] R13: 00007f24e6a26038 R14: 00007f24e6a25fa0 R15: 00007fffe9a95978 [ 193.832989][ T6573] [ 194.001252][ T6548] team0: Port device team_slave_0 added [ 194.037376][ T6548] team0: Port device team_slave_1 added [ 194.216369][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.246747][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.318591][ T6593] loop2: detected capacity change from 0 to 512 [ 194.343146][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.396066][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.434018][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.468746][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.526671][ T6593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.572160][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.103348][ T5796] Bluetooth: hci4: command tx timeout [ 195.425116][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.283188][ T5796] Bluetooth: hci4: command tx timeout [ 198.504683][ T6548] hsr_slave_0: entered promiscuous mode [ 198.613709][ T6548] hsr_slave_1: entered promiscuous mode [ 198.643483][ T6548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.651314][ T6548] Cannot create hsr debugfs directory [ 200.063474][ T6634] FAULT_INJECTION: forcing a failure. [ 200.063474][ T6634] name failslab, interval 1, probability 5, space 0, times 97 [ 200.117136][ T6634] CPU: 1 PID: 6634 Comm: syz.2.186 Not tainted syzkaller #0 [ 200.125055][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 200.135772][ T6634] Call Trace: [ 200.139191][ T6634] [ 200.142334][ T6634] dump_stack_lvl+0x18c/0x250 [ 200.147071][ T6634] ? show_regs_print_info+0x20/0x20 [ 200.152490][ T6634] ? load_image+0x420/0x420 [ 200.157027][ T6634] ? __might_sleep+0xe0/0xe0 [ 200.161679][ T6634] ? __lock_acquire+0x7eb0/0x7eb0 [ 200.166750][ T6634] should_fail_ex+0x394/0x4c0 [ 200.171606][ T6634] should_failslab+0x9/0x20 [ 200.176154][ T6634] slab_pre_alloc_hook+0x59/0x300 [ 200.181220][ T6634] ? fanotify_alloc_overflow_event+0x4a/0x140 [ 200.187541][ T6634] __kmem_cache_alloc_node+0x53/0x260 [ 200.193094][ T6634] ? fanotify_alloc_overflow_event+0x4a/0x140 [ 200.199253][ T6634] kmalloc_trace+0x2a/0xe0 [ 200.203766][ T6634] fanotify_alloc_overflow_event+0x4a/0x140 [ 200.209877][ T6634] __se_sys_fanotify_init+0x3df/0x750 [ 200.215568][ T6634] do_syscall_64+0x55/0xb0 [ 200.220063][ T6634] ? clear_bhb_loop+0x40/0x90 [ 200.224965][ T6634] ? clear_bhb_loop+0x40/0x90 [ 200.229961][ T6634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.236192][ T6634] RIP: 0033:0x7f4cbed9fb19 [ 200.240773][ T6634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.260958][ T6634] RSP: 002b:00007f4cbcff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 200.269597][ T6634] RAX: ffffffffffffffda RBX: 00007f4cbf025fa0 RCX: 00007f4cbed9fb19 [ 200.278100][ T6634] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000008 [ 200.286310][ T6634] RBP: 00007f4cbee37af8 R08: 0000000000000000 R09: 0000000000000000 [ 200.294427][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.302553][ T6634] R13: 00007f4cbf026038 R14: 00007f4cbf025fa0 R15: 00007ffcbbf245b8 [ 200.310774][ T6634] [ 200.495619][ T6632] comedi comedi3: board detection failed [ 200.618809][ T6640] loop0: detected capacity change from 0 to 512 [ 201.004944][ T6640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.362427][ T6652] FAULT_INJECTION: forcing a failure. [ 203.362427][ T6652] name failslab, interval 1, probability 5, space 0, times 99 [ 203.417510][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.478985][ T6652] CPU: 0 PID: 6652 Comm: syz.1.194 Not tainted syzkaller #0 [ 203.486375][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 203.496497][ T6652] Call Trace: [ 203.499865][ T6652] [ 203.502904][ T6652] dump_stack_lvl+0x18c/0x250 [ 203.507653][ T6652] ? show_regs_print_info+0x20/0x20 [ 203.512911][ T6652] ? load_image+0x420/0x420 [ 203.517499][ T6652] ? __might_sleep+0xe0/0xe0 [ 203.522168][ T6652] ? __lock_acquire+0x7eb0/0x7eb0 [ 203.527271][ T6652] should_fail_ex+0x394/0x4c0 [ 203.532003][ T6652] should_failslab+0x9/0x20 [ 203.536531][ T6652] slab_pre_alloc_hook+0x59/0x300 [ 203.541595][ T6652] ? __lock_acquire+0x1431/0x7eb0 [ 203.546657][ T6652] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 203.552433][ T6652] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 203.558187][ T6652] __kmem_cache_alloc_node+0x53/0x260 [ 203.563588][ T6652] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 203.569342][ T6652] __kmalloc+0xa7/0x240 [ 203.573539][ T6652] tomoyo_realpath_from_path+0xe6/0x5c0 [ 203.579131][ T6652] tomoyo_check_open_permission+0x224/0x460 [ 203.585067][ T6652] ? tomoyo_check_open_permission+0x1cf/0x460 [ 203.591176][ T6652] ? tomoyo_check_path_number_acl+0x280/0x280 [ 203.597277][ T6652] ? __asan_memset+0x22/0x40 [ 203.601910][ T6652] ? __rwlock_init+0x150/0x150 [ 203.606699][ T6652] ? tomoyo_file_open+0xed/0x180 [ 203.611663][ T6652] security_file_open+0x62/0xa0 [ 203.616549][ T6652] do_dentry_open+0x32b/0x14b0 [ 203.621373][ T6652] ? __asan_memcpy+0x40/0x70 [ 203.626117][ T6652] path_openat+0x284f/0x3270 [ 203.630780][ T6652] ? do_sys_openat2+0xda/0x1d0 [ 203.635633][ T6652] ? __x64_sys_openat+0x139/0x160 [ 203.640759][ T6652] ? verify_lock_unused+0x140/0x140 [ 203.645993][ T6652] ? do_filp_open+0x430/0x430 [ 203.650710][ T6652] do_filp_open+0x1f2/0x430 [ 203.655275][ T6652] ? vfs_tmpfile+0x620/0x620 [ 203.660006][ T6652] ? _raw_spin_unlock+0x28/0x40 [ 203.665091][ T6652] ? alloc_fd+0x590/0x640 [ 203.669482][ T6652] do_sys_openat2+0x134/0x1d0 [ 203.674661][ T6652] ? do_sys_open+0xe0/0xe0 [ 203.679145][ T6652] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 203.685164][ T6652] ? lock_chain_count+0x20/0x20 [ 203.690430][ T6652] __x64_sys_openat+0x139/0x160 [ 203.695336][ T6652] do_syscall_64+0x55/0xb0 [ 203.700070][ T6652] ? clear_bhb_loop+0x40/0x90 [ 203.704889][ T6652] ? clear_bhb_loop+0x40/0x90 [ 203.709730][ T6652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.715710][ T6652] RIP: 0033:0x7f6d3716034e [ 203.720257][ T6652] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.740602][ T6652] RSP: 002b:00007f6d38159d58 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.749053][ T6652] RAX: ffffffffffffffda RBX: 00007f6d3815a6c0 RCX: 00007f6d3716034e [ 203.757056][ T6652] RDX: 0000000000000002 RSI: 00007f6d38159ea0 RDI: ffffffffffffff9c [ 203.765577][ T6652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 203.773614][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 203.781711][ T6652] R13: 00007f6d38159ee0 R14: 00007f6d38159ea0 R15: 00007f6d2cff7000 [ 203.789902][ T6652] [ 203.930664][ T6652] ERROR: Out of memory at tomoyo_realpath_from_path. [ 204.042219][ T6652] FAULT_INJECTION: forcing a failure. [ 204.042219][ T6652] name failslab, interval 1, probability 5, space 0, times 98 [ 204.170067][ T6652] CPU: 0 PID: 6652 Comm: syz.1.194 Not tainted syzkaller #0 [ 204.177594][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 204.187895][ T6652] Call Trace: [ 204.191226][ T6652] [ 204.194237][ T6652] dump_stack_lvl+0x18c/0x250 [ 204.199012][ T6652] ? show_regs_print_info+0x20/0x20 [ 204.204379][ T6652] ? load_image+0x420/0x420 [ 204.209023][ T6652] ? __might_sleep+0xe0/0xe0 [ 204.213732][ T6652] ? __lock_acquire+0x7eb0/0x7eb0 [ 204.218837][ T6652] should_fail_ex+0x394/0x4c0 [ 204.223763][ T6652] should_failslab+0x9/0x20 [ 204.228323][ T6652] slab_pre_alloc_hook+0x59/0x300 [ 204.233433][ T6652] ? prepend_path+0x8a7/0x950 [ 204.238182][ T6652] ? tomoyo_encode+0x2ad/0x570 [ 204.243028][ T6652] ? tomoyo_encode+0x2ad/0x570 [ 204.247882][ T6652] __kmem_cache_alloc_node+0x53/0x260 [ 204.253329][ T6652] ? tomoyo_encode+0x2ad/0x570 [ 204.258168][ T6652] __kmalloc+0xa7/0x240 [ 204.262407][ T6652] tomoyo_encode+0x2ad/0x570 [ 204.267119][ T6652] tomoyo_realpath_from_path+0x57c/0x5c0 [ 204.272839][ T6652] ? tomoyo_domain+0xd6/0x120 [ 204.277601][ T6652] tomoyo_path_number_perm+0x248/0x5e0 [ 204.283134][ T6652] ? tomoyo_path_number_perm+0x217/0x5e0 [ 204.288842][ T6652] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 204.294404][ T6652] ? __fget_files+0x28/0x460 [ 204.299076][ T6652] security_file_ioctl+0x70/0xa0 [ 204.304086][ T6652] __se_sys_ioctl+0x48/0x170 [ 204.309036][ T6652] do_syscall_64+0x55/0xb0 [ 204.314053][ T6652] ? clear_bhb_loop+0x40/0x90 [ 204.318823][ T6652] ? clear_bhb_loop+0x40/0x90 [ 204.323659][ T6652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.329621][ T6652] RIP: 0033:0x7f6d3719f7ab [ 204.334177][ T6652] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 204.354373][ T6652] RSP: 002b:00007f6d38159db0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.362967][ T6652] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f6d3719f7ab [ 204.371009][ T6652] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 204.379674][ T6652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.387740][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 204.395874][ T6652] R13: 00007f6d38159ee0 R14: 00007f6d38159ea0 R15: 00007f6d2cff7000 [ 204.404279][ T6652] [ 204.437412][ T6652] loop1: detected capacity change from 0 to 4096 [ 204.449974][ T6652] FAULT_INJECTION: forcing a failure. [ 204.449974][ T6652] name failslab, interval 1, probability 5, space 0, times 97 [ 204.463427][ T6652] CPU: 0 PID: 6652 Comm: syz.1.194 Not tainted syzkaller #0 [ 204.471138][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 204.482258][ T6652] Call Trace: [ 204.485629][ T6652] [ 204.488711][ T6652] dump_stack_lvl+0x18c/0x250 [ 204.493823][ T6652] ? show_regs_print_info+0x20/0x20 [ 204.499362][ T6652] ? load_image+0x420/0x420 [ 204.503938][ T6652] ? __might_sleep+0xe0/0xe0 [ 204.508599][ T6652] ? __lock_acquire+0x7eb0/0x7eb0 [ 204.513830][ T6652] should_fail_ex+0x394/0x4c0 [ 204.518580][ T6652] should_failslab+0x9/0x20 [ 204.523202][ T6652] slab_pre_alloc_hook+0x59/0x300 [ 204.528277][ T6652] ? __virt_addr_valid+0x10c/0x380 [ 204.534203][ T6652] ? __virt_addr_valid+0x10c/0x380 [ 204.539473][ T6652] ? __se_sys_mount+0x15b/0x3d0 [ 204.544470][ T6652] __kmem_cache_alloc_node+0x53/0x260 [ 204.550089][ T6652] ? __might_fault+0xaa/0x120 [ 204.555402][ T6652] ? __se_sys_mount+0x15b/0x3d0 [ 204.560429][ T6652] kmalloc_trace+0x2a/0xe0 [ 204.565005][ T6652] __se_sys_mount+0x15b/0x3d0 [ 204.569855][ T6652] ? __x64_sys_mount+0xc0/0xc0 [ 204.575107][ T6652] ? lockdep_hardirqs_on+0x98/0x150 [ 204.580821][ T6652] ? __x64_sys_mount+0x20/0xc0 [ 204.586489][ T6652] do_syscall_64+0x55/0xb0 [ 204.590967][ T6652] ? clear_bhb_loop+0x40/0x90 [ 204.595702][ T6652] ? clear_bhb_loop+0x40/0x90 [ 204.600532][ T6652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.606485][ T6652] RIP: 0033:0x7f6d371a0d8a [ 204.610928][ T6652] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.630665][ T6652] RSP: 002b:00007f6d38159e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 204.639112][ T6652] RAX: ffffffffffffffda RBX: 00007f6d38159ee0 RCX: 00007f6d371a0d8a [ 204.647307][ T6652] RDX: 0000200000007040 RSI: 0000200000007080 RDI: 00007f6d38159ea0 [ 204.655302][ T6652] RBP: 0000200000007040 R08: 00007f6d38159ee0 R09: 0000000000380831 [ 204.663316][ T6652] R10: 0000000000380831 R11: 0000000000000246 R12: 0000200000007080 [ 204.671360][ T6652] R13: 00007f6d38159ea0 R14: 0000000000000baf R15: 00002000000070c0 [ 204.679604][ T6652] [ 204.694390][ T6652] FAULT_INJECTION: forcing a failure. [ 204.694390][ T6652] name failslab, interval 1, probability 5, space 0, times 96 [ 204.882812][ T6652] CPU: 1 PID: 6652 Comm: syz.1.194 Not tainted syzkaller #0 [ 204.890570][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 204.900695][ T6652] Call Trace: [ 204.904021][ T6652] [ 204.906996][ T6652] dump_stack_lvl+0x18c/0x250 [ 204.911756][ T6652] ? show_regs_print_info+0x20/0x20 [ 204.916986][ T6652] ? load_image+0x420/0x420 [ 204.921556][ T6652] ? __might_sleep+0xe0/0xe0 [ 204.926208][ T6652] ? __lock_acquire+0x7eb0/0x7eb0 [ 204.931300][ T6652] should_fail_ex+0x394/0x4c0 [ 204.936052][ T6652] should_failslab+0x9/0x20 [ 204.940586][ T6652] slab_pre_alloc_hook+0x59/0x300 [ 204.945668][ T6652] ? prepend_path+0x8a7/0x950 [ 204.950434][ T6652] ? tomoyo_encode+0x2ad/0x570 [ 204.955268][ T6652] ? tomoyo_encode+0x2ad/0x570 [ 204.960080][ T6652] __kmem_cache_alloc_node+0x53/0x260 [ 204.965491][ T6652] ? tomoyo_encode+0x2ad/0x570 [ 204.970312][ T6652] __kmalloc+0xa7/0x240 [ 204.974523][ T6652] tomoyo_encode+0x2ad/0x570 [ 204.979204][ T6652] tomoyo_realpath_from_path+0x57c/0x5c0 [ 204.984981][ T6652] ? tomoyo_domain+0xd6/0x120 [ 204.989843][ T6652] tomoyo_path_number_perm+0x248/0x5e0 [ 204.995442][ T6652] ? tomoyo_path_number_perm+0x217/0x5e0 [ 205.001113][ T6652] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 205.006633][ T6652] ? __fget_files+0x28/0x460 [ 205.011281][ T6652] security_file_ioctl+0x70/0xa0 [ 205.016298][ T6652] __se_sys_ioctl+0x48/0x170 [ 205.020984][ T6652] do_syscall_64+0x55/0xb0 [ 205.026071][ T6652] ? clear_bhb_loop+0x40/0x90 [ 205.030833][ T6652] ? clear_bhb_loop+0x40/0x90 [ 205.035618][ T6652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.041589][ T6652] RIP: 0033:0x7f6d3719f7ab [ 205.046058][ T6652] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 205.065881][ T6652] RSP: 002b:00007f6d38159e00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.074349][ T6652] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f6d3719f7ab [ 205.082456][ T6652] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000007 [ 205.090479][ T6652] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000 [ 205.098499][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 205.106573][ T6652] R13: 00007f6d38159ea0 R14: 0000000000000baf R15: 00002000000070c0 [ 205.114584][ T6652] [ 205.133564][ T6652] FAULT_INJECTION: forcing a failure. [ 205.133564][ T6652] name failslab, interval 1, probability 5, space 0, times 95 [ 205.148044][ T6548] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 205.227145][ T6548] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 205.234949][ T6652] CPU: 1 PID: 6652 Comm: syz.1.194 Not tainted syzkaller #0 [ 205.242341][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 205.252458][ T6652] Call Trace: [ 205.255795][ T6652] [ 205.258783][ T6652] dump_stack_lvl+0x18c/0x250 [ 205.263543][ T6652] ? show_regs_print_info+0x20/0x20 [ 205.268854][ T6652] ? load_image+0x420/0x420 [ 205.273440][ T6652] ? __might_sleep+0xe0/0xe0 [ 205.278114][ T6652] ? __lock_acquire+0x7eb0/0x7eb0 [ 205.283238][ T6652] should_fail_ex+0x394/0x4c0 [ 205.287999][ T6652] should_failslab+0x9/0x20 [ 205.292718][ T6652] slab_pre_alloc_hook+0x59/0x300 [ 205.297851][ T6652] ? mas_next_slot+0x910/0x980 [ 205.302749][ T6652] ? task_numa_work+0x921/0x1350 [ 205.307931][ T6652] __kmem_cache_alloc_node+0x53/0x260 [ 205.313406][ T6652] ? task_numa_work+0x921/0x1350 [ 205.318416][ T6652] kmalloc_trace+0x2a/0xe0 [ 205.322903][ T6652] task_numa_work+0x921/0x1350 [ 205.327753][ T6652] ? init_numa_balancing+0x400/0x400 [ 205.333115][ T6652] ? __might_sleep+0xe0/0xe0 [ 205.337790][ T6652] ? _raw_spin_unlock_irq+0x23/0x50 [ 205.343146][ T6652] ? lockdep_hardirqs_on+0x98/0x150 [ 205.349098][ T6652] task_work_run+0x1d4/0x260 [ 205.353817][ T6652] ? task_work_cancel+0x220/0x220 [ 205.359177][ T6652] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 205.364728][ T6652] ? exit_to_user_mode_loop+0x3b/0x110 [ 205.370278][ T6652] exit_to_user_mode_loop+0xe6/0x110 [ 205.375790][ T6652] exit_to_user_mode_prepare+0xee/0x180 [ 205.381585][ T6652] syscall_exit_to_user_mode+0x1a/0x50 [ 205.387276][ T6652] do_syscall_64+0x61/0xb0 [ 205.391833][ T6652] ? clear_bhb_loop+0x40/0x90 [ 205.397117][ T6652] ? clear_bhb_loop+0x40/0x90 [ 205.402007][ T6652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.407974][ T6652] RIP: 0033:0x7f6d3719f7ab [ 205.412438][ T6652] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 205.432128][ T6652] RSP: 002b:00007f6d38159e00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.440683][ T6652] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: 00007f6d3719f7ab [ 205.448702][ T6652] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000007 [ 205.456976][ T6652] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000 [ 205.465417][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 205.473741][ T6652] R13: 00007f6d38159ea0 R14: 0000000000000baf R15: 00002000000070c0 [ 205.481814][ T6652] [ 205.506084][ T6548] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 205.561600][ T6548] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 205.599888][ T6652] FAULT_INJECTION: forcing a failure. [ 205.599888][ T6652] name failslab, interval 1, probability 5, space 0, times 94 [ 205.673224][ T6652] CPU: 0 PID: 6652 Comm: syz.1.194 Not tainted syzkaller #0 [ 205.680832][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 205.690959][ T6652] Call Trace: [ 205.694349][ T6652] [ 205.697390][ T6652] dump_stack_lvl+0x18c/0x250 [ 205.702142][ T6652] ? show_regs_print_info+0x20/0x20 [ 205.707501][ T6652] ? load_image+0x420/0x420 [ 205.712078][ T6652] ? __might_sleep+0xe0/0xe0 [ 205.716838][ T6652] ? __lock_acquire+0x7eb0/0x7eb0 [ 205.722080][ T6652] should_fail_ex+0x394/0x4c0 [ 205.726866][ T6652] should_failslab+0x9/0x20 [ 205.731626][ T6652] slab_pre_alloc_hook+0x59/0x300 [ 205.736740][ T6652] ? mas_next_slot+0x910/0x980 [ 205.741592][ T6652] ? task_numa_work+0x921/0x1350 [ 205.746778][ T6652] __kmem_cache_alloc_node+0x53/0x260 [ 205.752247][ T6652] ? task_numa_work+0x921/0x1350 [ 205.757284][ T6652] kmalloc_trace+0x2a/0xe0 [ 205.761785][ T6652] task_numa_work+0x921/0x1350 [ 205.766634][ T6652] ? init_numa_balancing+0x400/0x400 [ 205.771994][ T6652] ? __might_sleep+0xe0/0xe0 [ 205.776670][ T6652] ? _raw_spin_unlock_irq+0x23/0x50 [ 205.781943][ T6652] ? lockdep_hardirqs_on+0x98/0x150 [ 205.787222][ T6652] task_work_run+0x1d4/0x260 [ 205.791901][ T6652] ? task_work_cancel+0x220/0x220 [ 205.797013][ T6652] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 205.802588][ T6652] ? exit_to_user_mode_loop+0x3b/0x110 [ 205.808135][ T6652] exit_to_user_mode_loop+0xe6/0x110 [ 205.813521][ T6652] exit_to_user_mode_prepare+0xee/0x180 [ 205.819205][ T6652] syscall_exit_to_user_mode+0x1a/0x50 [ 205.824723][ T6652] do_syscall_64+0x61/0xb0 [ 205.829207][ T6652] ? clear_bhb_loop+0x40/0x90 [ 205.833963][ T6652] ? clear_bhb_loop+0x40/0x90 [ 205.838687][ T6652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.844611][ T6652] RIP: 0033:0x7f6d3719f7ab [ 205.849616][ T6652] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 205.869309][ T6652] RSP: 002b:00007f6d38159e00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.877850][ T6652] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: 00007f6d3719f7ab [ 205.885985][ T6652] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000007 [ 205.894097][ T6652] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000 [ 205.902128][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 205.910186][ T6652] R13: 00007f6d38159ea0 R14: 0000000000000baf R15: 00002000000070c0 [ 205.918506][ T6652] [ 206.319448][ T6652] FAULT_INJECTION: forcing a failure. [ 206.319448][ T6652] name failslab, interval 1, probability 5, space 0, times 93 [ 206.415397][ T6652] CPU: 1 PID: 6652 Comm: syz.1.194 Not tainted syzkaller #0 [ 206.422818][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 206.432938][ T6652] Call Trace: [ 206.436321][ T6652] [ 206.439349][ T6652] dump_stack_lvl+0x18c/0x250 [ 206.444111][ T6652] ? show_regs_print_info+0x20/0x20 [ 206.449384][ T6652] ? load_image+0x420/0x420 [ 206.454001][ T6652] ? __lock_acquire+0x7eb0/0x7eb0 [ 206.459121][ T6652] ? exit_to_user_mode_loop+0x70/0x110 [ 206.464654][ T6652] ? syscall_exit_to_user_mode+0x1a/0x50 [ 206.470353][ T6652] ? do_syscall_64+0x61/0xb0 [ 206.475011][ T6652] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.481148][ T6652] should_fail_ex+0x394/0x4c0 [ 206.485907][ T6652] should_failslab+0x9/0x20 [ 206.490528][ T6652] slab_pre_alloc_hook+0x59/0x300 [ 206.495625][ T6652] ? kobject_get_path+0xc3/0x2c0 [ 206.500710][ T6652] ? kobject_get_path+0xc3/0x2c0 [ 206.505715][ T6652] __kmem_cache_alloc_node+0x53/0x260 [ 206.511170][ T6652] ? kobject_get_path+0xc3/0x2c0 [ 206.516167][ T6652] __kmalloc+0xa7/0x240 [ 206.520391][ T6652] kobject_get_path+0xc3/0x2c0 [ 206.525228][ T6652] kobject_uevent_env+0x291/0x890 [ 206.530321][ T6652] disk_force_media_change+0x10d/0x1b0 [ 206.535849][ T6652] ? disk_check_media_change+0x300/0x300 [ 206.541551][ T6652] ? kobject_uevent_env+0x368/0x890 [ 206.546903][ T6652] __loop_clr_fd+0x36c/0x600 [ 206.551557][ T6652] ? lo_rw_aio_complete+0x150/0x150 [ 206.556816][ T6652] blkdev_put+0x5e1/0x7a0 [ 206.561218][ T6652] blkdev_release+0x84/0x90 [ 206.565900][ T6652] ? blkdev_open+0x360/0x360 [ 206.570574][ T6652] __fput+0x221/0x940 [ 206.574881][ T6652] task_work_run+0x1d4/0x260 [ 206.579911][ T6652] ? task_work_cancel+0x220/0x220 [ 206.585056][ T6652] do_exit+0x986/0x2530 [ 206.589303][ T6652] ? put_task_struct+0xc0/0xc0 [ 206.594692][ T6652] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 206.600788][ T6652] ? get_signal+0x100e/0x1390 [ 206.605546][ T6652] ? lock_chain_count+0x20/0x20 [ 206.610535][ T6652] ? _raw_spin_lock_irq+0xbb/0xf0 [ 206.615691][ T6652] do_group_exit+0x22d/0x2f0 [ 206.620365][ T6652] ? lockdep_hardirqs_on+0x98/0x150 [ 206.625724][ T6652] get_signal+0x12a6/0x1390 [ 206.630328][ T6652] arch_do_signal_or_restart+0xc2/0x7b0 [ 206.635963][ T6652] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 206.642098][ T6652] ? get_sigframe_size+0x20/0x20 [ 206.647176][ T6652] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 206.652730][ T6652] ? exit_to_user_mode_loop+0x3b/0x110 [ 206.658310][ T6652] exit_to_user_mode_loop+0x70/0x110 [ 206.663682][ T6652] exit_to_user_mode_prepare+0xee/0x180 [ 206.669311][ T6652] syscall_exit_to_user_mode+0x1a/0x50 [ 206.674841][ T6652] do_syscall_64+0x61/0xb0 [ 206.679333][ T6652] ? clear_bhb_loop+0x40/0x90 [ 206.684190][ T6652] ? clear_bhb_loop+0x40/0x90 [ 206.688950][ T6652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.694913][ T6652] RIP: 0033:0x7f6d3719f7ab [ 206.699399][ T6652] Code: Unable to access opcode bytes at 0x7f6d3719f781. [ 206.706555][ T6652] RSP: 002b:00007f6d38159e00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.715474][ T6652] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: 00007f6d3719f7ab [ 206.723623][ T6652] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000007 [ 206.731674][ T6652] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000 [ 206.739741][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 206.747801][ T6652] R13: 00007f6d38159ea0 R14: 0000000000000baf R15: 00002000000070c0 [ 206.755852][ T6652] [ 206.803188][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 206.809397][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 206.815442][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 206.860538][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.950318][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.982589][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.989957][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.128082][ T6675] FAULT_INJECTION: forcing a failure. [ 207.128082][ T6675] name failslab, interval 1, probability 5, space 0, times 92 [ 207.187624][ T6675] CPU: 1 PID: 6675 Comm: syz.0.200 Not tainted syzkaller #0 [ 207.189115][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.195002][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 207.195024][ T6675] Call Trace: [ 207.195035][ T6675] [ 207.195046][ T6675] dump_stack_lvl+0x18c/0x250 [ 207.202464][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.212225][ T6675] ? show_regs_print_info+0x20/0x20 [ 207.212266][ T6675] ? load_image+0x420/0x420 [ 207.212292][ T6675] ? __might_sleep+0xe0/0xe0 [ 207.212321][ T6675] ? __lock_acquire+0x7eb0/0x7eb0 [ 207.249978][ T6675] should_fail_ex+0x394/0x4c0 [ 207.254710][ T6675] should_failslab+0x9/0x20 [ 207.259290][ T6675] slab_pre_alloc_hook+0x59/0x300 [ 207.264404][ T6675] ? fanotify_alloc_overflow_event+0x4a/0x140 [ 207.270592][ T6675] __kmem_cache_alloc_node+0x53/0x260 [ 207.276154][ T6675] ? fanotify_alloc_overflow_event+0x4a/0x140 [ 207.282307][ T6675] kmalloc_trace+0x2a/0xe0 [ 207.286764][ T6675] fanotify_alloc_overflow_event+0x4a/0x140 [ 207.292689][ T6675] __se_sys_fanotify_init+0x3df/0x750 [ 207.298181][ T6675] do_syscall_64+0x55/0xb0 [ 207.302631][ T6675] ? clear_bhb_loop+0x40/0x90 [ 207.307344][ T6675] ? clear_bhb_loop+0x40/0x90 [ 207.312071][ T6675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.318031][ T6675] RIP: 0033:0x7f24e679fb19 [ 207.322471][ T6675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.342273][ T6675] RSP: 002b:00007f24e7722028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 207.350733][ T6675] RAX: ffffffffffffffda RBX: 00007f24e6a25fa0 RCX: 00007f24e679fb19 [ 207.358929][ T6675] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000008 [ 207.367492][ T6675] RBP: 00007f24e6837af8 R08: 0000000000000000 R09: 0000000000000000 [ 207.375582][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.384551][ T6675] R13: 00007f24e6a26038 R14: 00007f24e6a25fa0 R15: 00007fffe9a95978 [ 207.392577][ T6675] [ 208.313193][ T61] hsr_slave_0: left promiscuous mode [ 208.348996][ T61] hsr_slave_1: left promiscuous mode [ 208.372670][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.393741][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.414845][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.453622][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.503358][ T61] bridge_slave_1: left allmulticast mode [ 209.299352][ T61] bridge_slave_1: left promiscuous mode [ 209.323792][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.544241][ T61] bridge_slave_0: left allmulticast mode [ 209.560212][ T61] bridge_slave_0: left promiscuous mode [ 209.586970][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.612354][ T6694] loop1: detected capacity change from 0 to 512 [ 209.938210][ T6694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.980196][ T61] veth1_macvtap: left promiscuous mode [ 210.011524][ T61] veth0_macvtap: left promiscuous mode [ 210.052186][ T61] veth1_vlan: left promiscuous mode [ 210.079516][ T61] veth0_vlan: left promiscuous mode [ 210.890345][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.294185][ T6713] FAULT_INJECTION: forcing a failure. [ 211.294185][ T6713] name failslab, interval 1, probability 5, space 0, times 100 [ 211.387121][ T6713] CPU: 0 PID: 6713 Comm: syz.0.206 Not tainted syzkaller #0 [ 211.394491][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 211.404935][ T6713] Call Trace: [ 211.408275][ T6713] [ 211.411259][ T6713] dump_stack_lvl+0x18c/0x250 [ 211.415993][ T6713] ? show_regs_print_info+0x20/0x20 [ 211.421262][ T6713] ? load_image+0x420/0x420 [ 211.425813][ T6713] ? __might_sleep+0xe0/0xe0 [ 211.430468][ T6713] ? __lock_acquire+0x7eb0/0x7eb0 [ 211.435561][ T6713] should_fail_ex+0x394/0x4c0 [ 211.440514][ T6713] should_failslab+0x9/0x20 [ 211.445097][ T6713] slab_pre_alloc_hook+0x59/0x300 [ 211.450194][ T6713] ? prepend_path+0x8a7/0x950 [ 211.454930][ T6713] ? tomoyo_encode+0x2ad/0x570 [ 211.459762][ T6713] ? tomoyo_encode+0x2ad/0x570 [ 211.464590][ T6713] __kmem_cache_alloc_node+0x53/0x260 [ 211.470032][ T6713] ? tomoyo_encode+0x2ad/0x570 [ 211.474921][ T6713] __kmalloc+0xa7/0x240 [ 211.479225][ T6713] tomoyo_encode+0x2ad/0x570 [ 211.483899][ T6713] tomoyo_realpath_from_path+0x57c/0x5c0 [ 211.489612][ T6713] ? tomoyo_domain+0xd6/0x120 [ 211.494358][ T6713] tomoyo_path_number_perm+0x248/0x5e0 [ 211.499935][ T6713] ? tomoyo_path_number_perm+0x217/0x5e0 [ 211.505651][ T6713] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 211.511231][ T6713] ? __fget_files+0x28/0x460 [ 211.515987][ T6713] security_file_ioctl+0x70/0xa0 [ 211.520994][ T6713] __se_sys_ioctl+0x48/0x170 [ 211.525673][ T6713] do_syscall_64+0x55/0xb0 [ 211.530172][ T6713] ? clear_bhb_loop+0x40/0x90 [ 211.534935][ T6713] ? clear_bhb_loop+0x40/0x90 [ 211.539693][ T6713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.545669][ T6713] RIP: 0033:0x7f24e679f7ab [ 211.550146][ T6713] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 211.569836][ T6713] RSP: 002b:00007f24e7721db0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.578325][ T6713] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f24e679f7ab [ 211.586358][ T6713] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 211.594651][ T6713] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.602707][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 211.610754][ T6713] R13: 00007f24e7721ee0 R14: 00007f24e7721ea0 R15: 00007f24dc5f7000 [ 211.618825][ T6713] [ 211.713254][ T6713] ERROR: Out of memory at tomoyo_realpath_from_path. [ 211.720289][ T6713] loop0: detected capacity change from 0 to 4096 [ 211.733768][ T6713] FAULT_INJECTION: forcing a failure. [ 211.733768][ T6713] name failslab, interval 1, probability 5, space 0, times 99 [ 211.814040][ T6713] CPU: 0 PID: 6713 Comm: syz.0.206 Not tainted syzkaller #0 [ 211.821443][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 211.831679][ T6713] Call Trace: [ 211.835018][ T6713] [ 211.838008][ T6713] dump_stack_lvl+0x18c/0x250 [ 211.842775][ T6713] ? show_regs_print_info+0x20/0x20 [ 211.848053][ T6713] ? load_image+0x420/0x420 [ 211.852640][ T6713] ? __might_sleep+0xe0/0xe0 [ 211.857354][ T6713] ? __lock_acquire+0x7eb0/0x7eb0 [ 211.862580][ T6713] should_fail_ex+0x394/0x4c0 [ 211.867343][ T6713] should_failslab+0x9/0x20 [ 211.871940][ T6713] slab_pre_alloc_hook+0x59/0x300 [ 211.877264][ T6713] ? inotify_handle_inode_event+0x18a/0x560 [ 211.883246][ T6713] ? inotify_handle_inode_event+0x18a/0x560 [ 211.889227][ T6713] __kmem_cache_alloc_node+0x53/0x260 [ 211.894684][ T6713] ? inotify_handle_inode_event+0x18a/0x560 [ 211.900677][ T6713] __kmalloc+0xa7/0x240 [ 211.904924][ T6713] ? read_lock_is_recursive+0x20/0x20 [ 211.910390][ T6713] inotify_handle_inode_event+0x18a/0x560 [ 211.916213][ T6713] fsnotify+0x14db/0x1800 [ 211.920729][ T6713] ? fsnotify+0x513/0x1800 [ 211.925231][ T6713] ? fsnotify_clear_child_dentry_flag+0xe0/0xe0 [ 211.931562][ T6713] __fsnotify_parent+0x577/0x7c0 [ 211.936565][ T6713] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 211.943539][ T6713] __fput+0x6ed/0x940 [ 211.947604][ T6713] __se_sys_close+0x15c/0x1e0 [ 211.952370][ T6713] do_syscall_64+0x55/0xb0 [ 211.957014][ T6713] ? clear_bhb_loop+0x40/0x90 [ 211.961770][ T6713] ? clear_bhb_loop+0x40/0x90 [ 211.966534][ T6713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.972496][ T6713] RIP: 0033:0x7f24e676034e [ 211.976960][ T6713] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 211.996635][ T6713] RSP: 002b:00007f24e7721df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 212.005096][ T6713] RAX: ffffffffffffffda RBX: 00007f24e77226c0 RCX: 00007f24e676034e [ 212.013123][ T6713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 212.021147][ T6713] RBP: 0000200000007040 R08: 0000000000000000 R09: 0000000000000000 [ 212.029163][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000007080 [ 212.037197][ T6713] R13: 00007f24e7721ea0 R14: 0000000000000baf R15: 00002000000070c0 [ 212.045222][ T6713] [ 213.227792][ T6713] FAULT_INJECTION: forcing a failure. [ 213.227792][ T6713] name failslab, interval 1, probability 5, space 0, times 98 [ 213.240820][ T6713] CPU: 0 PID: 6713 Comm: syz.0.206 Not tainted syzkaller #0 [ 213.248179][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 213.258391][ T6713] Call Trace: [ 213.261730][ T6713] [ 213.264723][ T6713] dump_stack_lvl+0x18c/0x250 [ 213.269660][ T6713] ? show_regs_print_info+0x20/0x20 [ 213.274935][ T6713] ? load_image+0x420/0x420 [ 213.279535][ T6713] ? __might_sleep+0xe0/0xe0 [ 213.284209][ T6713] ? __lock_acquire+0x7eb0/0x7eb0 [ 213.289415][ T6713] should_fail_ex+0x394/0x4c0 [ 213.294250][ T6713] should_failslab+0x9/0x20 [ 213.298906][ T6713] slab_pre_alloc_hook+0x59/0x300 [ 213.304027][ T6713] ? tomoyo_encode+0x2ad/0x570 [ 213.308885][ T6713] ? tomoyo_encode+0x2ad/0x570 [ 213.313713][ T6713] __kmem_cache_alloc_node+0x53/0x260 [ 213.319130][ T6713] ? tomoyo_encode+0x2ad/0x570 [ 213.323958][ T6713] __kmalloc+0xa7/0x240 [ 213.328191][ T6713] ? full_name_hash+0x92/0xe0 [ 213.332954][ T6713] tomoyo_encode+0x2ad/0x570 [ 213.337651][ T6713] tomoyo_mount_permission+0x50b/0x9d0 [ 213.343472][ T6713] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 213.349187][ T6713] ? ____kasan_slab_free+0x126/0x1f0 [ 213.354801][ T6713] ? tomoyo_get_name+0x570/0x570 [ 213.360025][ T6713] ? do_syscall_64+0x55/0xb0 [ 213.364811][ T6713] ? kasan_quarantine_put+0xd8/0x220 [ 213.370151][ T6713] ? lockdep_hardirqs_on+0x98/0x150 [ 213.375476][ T6713] security_sb_mount+0x87/0xc0 [ 213.380290][ T6713] path_mount+0xbc/0xfa0 [ 213.384715][ T6713] ? kmem_cache_free+0xf8/0x290 [ 213.389699][ T6713] __se_sys_mount+0x2e7/0x3d0 [ 213.394636][ T6713] ? __x64_sys_mount+0xc0/0xc0 [ 213.399714][ T6713] ? lockdep_hardirqs_on+0x98/0x150 [ 213.405033][ T6713] ? __x64_sys_mount+0x20/0xc0 [ 213.409838][ T6713] do_syscall_64+0x55/0xb0 [ 213.414337][ T6713] ? clear_bhb_loop+0x40/0x90 [ 213.419100][ T6713] ? clear_bhb_loop+0x40/0x90 [ 213.423954][ T6713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.429933][ T6713] RIP: 0033:0x7f24e67a0d8a [ 213.434398][ T6713] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.454488][ T6713] RSP: 002b:00007f24e7721e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 213.463567][ T6713] RAX: ffffffffffffffda RBX: 00007f24e7721ee0 RCX: 00007f24e67a0d8a [ 213.471972][ T6713] RDX: 0000200000007040 RSI: 0000200000007080 RDI: 00007f24e7721ea0 [ 213.481112][ T6713] RBP: 0000200000007040 R08: 00007f24e7721ee0 R09: 0000000000380831 [ 213.489323][ T6713] R10: 0000000000380831 R11: 0000000000000246 R12: 0000200000007080 [ 213.498488][ T6713] R13: 00007f24e7721ea0 R14: 0000000000000baf R15: 00002000000070c0 [ 213.506806][ T6713] [ 213.598725][ T6713] FAULT_INJECTION: forcing a failure. [ 213.598725][ T6713] name failslab, interval 1, probability 5, space 0, times 97 [ 213.612141][ T6713] CPU: 1 PID: 6713 Comm: syz.0.206 Not tainted syzkaller #0 [ 213.619678][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 213.629805][ T6713] Call Trace: [ 213.633231][ T6713] [ 213.636217][ T6713] dump_stack_lvl+0x18c/0x250 [ 213.641148][ T6713] ? show_regs_print_info+0x20/0x20 [ 213.646424][ T6713] ? load_image+0x420/0x420 [ 213.651121][ T6713] ? __lock_acquire+0x7eb0/0x7eb0 [ 213.656229][ T6713] should_fail_ex+0x394/0x4c0 [ 213.660992][ T6713] should_failslab+0x9/0x20 [ 213.666080][ T6713] slab_pre_alloc_hook+0x59/0x300 [ 213.671172][ T6713] kmem_cache_alloc_lru+0x4d/0x2c0 [ 213.676338][ T6713] ? sock_alloc_inode+0x28/0xc0 [ 213.681265][ T6713] sock_alloc_inode+0x28/0xc0 [ 213.686010][ T6713] ? sockfs_init_fs_context+0xb0/0xb0 [ 213.691476][ T6713] new_inode_pseudo+0x63/0x1d0 [ 213.696289][ T6713] __sock_create+0x12d/0x940 [ 213.700935][ T6713] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 213.707009][ T6713] __sys_socket+0xd7/0x1b0 [ 213.711487][ T6713] __x64_sys_socket+0x7a/0x90 [ 213.716326][ T6713] do_syscall_64+0x55/0xb0 [ 213.721243][ T6713] ? clear_bhb_loop+0x40/0x90 [ 213.725974][ T6713] ? clear_bhb_loop+0x40/0x90 [ 213.730683][ T6713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.736711][ T6713] RIP: 0033:0x7f24e67a1387 [ 213.741241][ T6713] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.761158][ T6713] RSP: 002b:00007f24e7720f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 213.769796][ T6713] RAX: ffffffffffffffda RBX: 00007f24e6a25fa0 RCX: 00007f24e67a1387 [ 213.777801][ T6713] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 213.785792][ T6713] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 213.793794][ T6713] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000000 [ 213.801849][ T6713] R13: 00007f24e6a26038 R14: 00007f24e6a25fa0 R15: 00007fffe9a95978 [ 213.809880][ T6713] [ 213.955543][ T6713] socket: no more sockets [ 213.960114][ T6713] FAULT_INJECTION: forcing a failure. [ 213.960114][ T6713] name failslab, interval 1, probability 5, space 0, times 96 [ 214.047018][ T6713] CPU: 1 PID: 6713 Comm: syz.0.206 Not tainted syzkaller #0 [ 214.054425][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 214.064553][ T6713] Call Trace: [ 214.067895][ T6713] [ 214.070986][ T6713] dump_stack_lvl+0x18c/0x250 [ 214.075819][ T6713] ? show_regs_print_info+0x20/0x20 [ 214.081128][ T6713] ? load_image+0x420/0x420 [ 214.085706][ T6713] ? __might_sleep+0xe0/0xe0 [ 214.090378][ T6713] ? __lock_acquire+0x7eb0/0x7eb0 [ 214.095572][ T6713] should_fail_ex+0x394/0x4c0 [ 214.100334][ T6713] should_failslab+0x9/0x20 [ 214.105002][ T6713] slab_pre_alloc_hook+0x59/0x300 [ 214.110086][ T6713] ? mas_next_slot+0x910/0x980 [ 214.114930][ T6713] ? task_numa_work+0x921/0x1350 [ 214.120030][ T6713] __kmem_cache_alloc_node+0x53/0x260 [ 214.125465][ T6713] ? task_numa_work+0x921/0x1350 [ 214.130453][ T6713] kmalloc_trace+0x2a/0xe0 [ 214.134924][ T6713] task_numa_work+0x921/0x1350 [ 214.139759][ T6713] ? init_numa_balancing+0x400/0x400 [ 214.145102][ T6713] ? __might_sleep+0xe0/0xe0 [ 214.149751][ T6713] ? _raw_spin_unlock_irq+0x23/0x50 [ 214.154997][ T6713] ? lockdep_hardirqs_on+0x98/0x150 [ 214.160252][ T6713] task_work_run+0x1d4/0x260 [ 214.164925][ T6713] ? task_work_cancel+0x220/0x220 [ 214.170398][ T6713] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 214.176567][ T6713] ? exit_to_user_mode_loop+0x3b/0x110 [ 214.182186][ T6713] exit_to_user_mode_loop+0xe6/0x110 [ 214.187517][ T6713] exit_to_user_mode_prepare+0xee/0x180 [ 214.193209][ T6713] syscall_exit_to_user_mode+0x1a/0x50 [ 214.198726][ T6713] do_syscall_64+0x61/0xb0 [ 214.203282][ T6713] ? clear_bhb_loop+0x40/0x90 [ 214.208133][ T6713] ? clear_bhb_loop+0x40/0x90 [ 214.212967][ T6713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.218916][ T6713] RIP: 0033:0x7f24e67a1387 [ 214.223371][ T6713] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.243211][ T6713] RSP: 002b:00007f24e7720f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 214.251767][ T6713] RAX: ffffffffffffffe9 RBX: 00007f24e6a25fa0 RCX: 00007f24e67a1387 [ 214.259780][ T6713] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 214.267799][ T6713] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 214.275829][ T6713] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000000 [ 214.283851][ T6713] R13: 00007f24e6a26038 R14: 00007f24e6a25fa0 R15: 00007fffe9a95978 [ 214.291879][ T6713] [ 214.404332][ T6713] FAULT_INJECTION: forcing a failure. [ 214.404332][ T6713] name failslab, interval 1, probability 5, space 0, times 95 [ 214.461625][ T6713] CPU: 0 PID: 6713 Comm: syz.0.206 Not tainted syzkaller #0 [ 214.469034][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 214.479153][ T6713] Call Trace: [ 214.482494][ T6713] [ 214.485483][ T6713] dump_stack_lvl+0x18c/0x250 [ 214.490246][ T6713] ? show_regs_print_info+0x20/0x20 [ 214.495559][ T6713] ? load_image+0x420/0x420 [ 214.500147][ T6713] ? __might_sleep+0xe0/0xe0 [ 214.504826][ T6713] ? __lock_acquire+0x7eb0/0x7eb0 [ 214.509949][ T6713] should_fail_ex+0x394/0x4c0 [ 214.514712][ T6713] should_failslab+0x9/0x20 [ 214.519280][ T6713] slab_pre_alloc_hook+0x59/0x300 [ 214.524384][ T6713] ? mas_next_slot+0x910/0x980 [ 214.529226][ T6713] ? task_numa_work+0x921/0x1350 [ 214.534238][ T6713] __kmem_cache_alloc_node+0x53/0x260 [ 214.539695][ T6713] ? task_numa_work+0x921/0x1350 [ 214.544688][ T6713] kmalloc_trace+0x2a/0xe0 [ 214.549188][ T6713] task_numa_work+0x921/0x1350 [ 214.554065][ T6713] ? init_numa_balancing+0x400/0x400 [ 214.559405][ T6713] ? __might_sleep+0xe0/0xe0 [ 214.564049][ T6713] ? _raw_spin_unlock_irq+0x23/0x50 [ 214.569305][ T6713] ? lockdep_hardirqs_on+0x98/0x150 [ 214.574565][ T6713] task_work_run+0x1d4/0x260 [ 214.579237][ T6713] ? task_work_cancel+0x220/0x220 [ 214.584343][ T6713] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 214.590374][ T6713] ? exit_to_user_mode_loop+0x3b/0x110 [ 214.595898][ T6713] exit_to_user_mode_loop+0xe6/0x110 [ 214.601249][ T6713] exit_to_user_mode_prepare+0xee/0x180 [ 214.606853][ T6713] syscall_exit_to_user_mode+0x1a/0x50 [ 214.612358][ T6713] do_syscall_64+0x61/0xb0 [ 214.616818][ T6713] ? clear_bhb_loop+0x40/0x90 [ 214.621564][ T6713] ? clear_bhb_loop+0x40/0x90 [ 214.626432][ T6713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.632420][ T6713] RIP: 0033:0x7f24e67a1387 [ 214.636915][ T6713] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.656597][ T6713] RSP: 002b:00007f24e7720f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 214.665079][ T6713] RAX: ffffffffffffffe9 RBX: 00007f24e6a25fa0 RCX: 00007f24e67a1387 [ 214.673087][ T6713] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 214.681135][ T6713] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 214.689137][ T6713] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000000 [ 214.697143][ T6713] R13: 00007f24e6a26038 R14: 00007f24e6a25fa0 R15: 00007fffe9a95978 [ 214.705164][ T6713] [ 216.216763][ T61] team0 (unregistering): Port device team_slave_1 removed [ 216.317601][ T61] team0 (unregistering): Port device team_slave_0 removed [ 216.400002][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.575131][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.673568][ T6727] FAULT_INJECTION: forcing a failure. [ 216.673568][ T6727] name failslab, interval 1, probability 5, space 0, times 94 [ 216.707482][ T6727] CPU: 1 PID: 6727 Comm: syz.2.208 Not tainted syzkaller #0 [ 216.714872][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 216.725080][ T6727] Call Trace: [ 216.728423][ T6727] [ 216.731437][ T6727] dump_stack_lvl+0x18c/0x250 [ 216.736199][ T6727] ? show_regs_print_info+0x20/0x20 [ 216.741477][ T6727] ? load_image+0x420/0x420 [ 216.746047][ T6727] ? __might_sleep+0xe0/0xe0 [ 216.750696][ T6727] ? __lock_acquire+0x7eb0/0x7eb0 [ 216.755760][ T6727] should_fail_ex+0x394/0x4c0 [ 216.760503][ T6727] should_failslab+0x9/0x20 [ 216.765072][ T6727] slab_pre_alloc_hook+0x59/0x300 [ 216.770159][ T6727] ? fsnotify_alloc_group+0x74/0x3b0 [ 216.775479][ T6727] __kmem_cache_alloc_node+0x53/0x260 [ 216.780903][ T6727] ? fsnotify_alloc_group+0x74/0x3b0 [ 216.786221][ T6727] kmalloc_trace+0x2a/0xe0 [ 216.790690][ T6727] fsnotify_alloc_group+0x74/0x3b0 [ 216.795856][ T6727] __se_sys_fanotify_init+0x1d2/0x750 [ 216.801313][ T6727] ? lockdep_hardirqs_on+0x98/0x150 [ 216.806571][ T6727] do_syscall_64+0x55/0xb0 [ 216.811035][ T6727] ? clear_bhb_loop+0x40/0x90 [ 216.815780][ T6727] ? clear_bhb_loop+0x40/0x90 [ 216.820534][ T6727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.826498][ T6727] RIP: 0033:0x7f4cbed9fb19 [ 216.830970][ T6727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.850642][ T6727] RSP: 002b:00007f4cbcff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 216.859127][ T6727] RAX: ffffffffffffffda RBX: 00007f4cbf025fa0 RCX: 00007f4cbed9fb19 [ 216.867163][ T6727] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000008 [ 216.875259][ T6727] RBP: 00007f4cbee37af8 R08: 0000000000000000 R09: 0000000000000000 [ 216.883418][ T6727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.891434][ T6727] R13: 00007f4cbf026038 R14: 00007f4cbf025fa0 R15: 00007ffcbbf245b8 [ 216.899448][ T6727] [ 218.955132][ T61] bond0 (unregistering): Released all slaves [ 219.327180][ T6548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.444099][ T6745] loop0: detected capacity change from 0 to 512 [ 220.505767][ T6745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.515128][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.841076][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.030061][ T6769] FAULT_INJECTION: forcing a failure. [ 223.030061][ T6769] name failslab, interval 1, probability 5, space 0, times 93 [ 223.107307][ T6769] CPU: 1 PID: 6769 Comm: syz.0.216 Not tainted syzkaller #0 [ 223.115008][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 223.125311][ T6769] Call Trace: [ 223.128658][ T6769] [ 223.131761][ T6769] dump_stack_lvl+0x18c/0x250 [ 223.136520][ T6769] ? show_regs_print_info+0x20/0x20 [ 223.141974][ T6769] ? load_image+0x420/0x420 [ 223.146685][ T6769] ? __might_sleep+0xe0/0xe0 [ 223.151446][ T6769] ? __lock_acquire+0x7eb0/0x7eb0 [ 223.156559][ T6769] should_fail_ex+0x394/0x4c0 [ 223.161493][ T6769] should_failslab+0x9/0x20 [ 223.166075][ T6769] slab_pre_alloc_hook+0x59/0x300 [ 223.171447][ T6769] ? kvmalloc_node+0x70/0x180 [ 223.176236][ T6769] ? kvmalloc_node+0x70/0x180 [ 223.181218][ T6769] __kmem_cache_alloc_node+0x53/0x260 [ 223.189151][ T6769] ? kvmalloc_node+0x70/0x180 [ 223.194819][ T6769] __kmalloc_node+0xa6/0x240 [ 223.199517][ T6769] kvmalloc_node+0x70/0x180 [ 223.204109][ T6769] alloc_fdtable+0x106/0x2c0 [ 223.208793][ T6769] dup_fd+0x747/0xa20 [ 223.212995][ T6769] __close_range+0x19d/0x690 [ 223.217977][ T6769] ? pick_file+0x1e0/0x1e0 [ 223.222518][ T6769] __x64_sys_close_range+0x7a/0x90 [ 223.227887][ T6769] do_syscall_64+0x55/0xb0 [ 223.232408][ T6769] ? clear_bhb_loop+0x40/0x90 [ 223.237197][ T6769] ? clear_bhb_loop+0x40/0x90 [ 223.242087][ T6769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.248877][ T6769] RIP: 0033:0x7f24e679fb19 [ 223.253366][ T6769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.273557][ T6769] RSP: 002b:00007f24e7722028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 223.282147][ T6769] RAX: ffffffffffffffda RBX: 00007f24e6a25fa0 RCX: 00007f24e679fb19 [ 223.290308][ T6769] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 223.298503][ T6769] RBP: 00007f24e6837af8 R08: 0000000000000000 R09: 0000000000000000 [ 223.306541][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.315206][ T6769] R13: 00007f24e6a26038 R14: 00007f24e6a25fa0 R15: 00007fffe9a95978 [ 223.323356][ T6769] [ 226.106781][ T6548] veth0_vlan: entered promiscuous mode [ 226.146986][ T6548] veth1_vlan: entered promiscuous mode [ 226.301924][ T6548] veth0_macvtap: entered promiscuous mode [ 226.359863][ T6548] veth1_macvtap: entered promiscuous mode [ 226.464197][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.523512][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.553423][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.603144][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.653159][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.706880][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.755826][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.811459][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.843191][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.874385][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.940024][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.015729][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.043157][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.065093][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.121363][ T6548] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.140145][ T6548] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.149917][ T6548] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.186452][ T6548] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.030962][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.063184][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.156425][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.177884][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.210554][ T6956] comedi comedi3: board detection failed [ 255.910760][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.550050][ T7031] comedi comedi3: board detection failed [ 267.475946][ T5801] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 268.727255][ T7081] comedi comedi3: board detection failed [ 269.461877][ T7091] comedi comedi3: board detection failed [ 278.661411][ T7148] comedi comedi3: board detection failed [ 283.032724][ T7186] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 283.042746][ T7186] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 284.407026][ T7192] loop2: detected capacity change from 0 to 512 [ 286.098932][ T7192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.548448][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.149918][ T7237] comedi comedi3: board detection failed [ 294.094425][ T7262] netlink: 36 bytes leftover after parsing attributes in process `syz.1.307'. [ 301.600578][ T23] IPVS: starting estimator thread 0... [ 301.709031][ T7375] IPVS: using max 26 ests per chain, 62400 per kthread [ 307.596715][ T7422] loop4: detected capacity change from 0 to 4096 [ 307.770330][ T7422] ntfs3: loop4: ino=19, mi_enum_attr [ 307.799859][ T7422] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 307.844127][ T7422] ntfs3: loop4: Failed to load root (-2). [ 314.371012][ T5796] Bluetooth: hci4: command 0x0406 tx timeout [ 315.922568][ T7464] loop2: detected capacity change from 0 to 512 [ 316.055504][ T7464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.146697][ T7469] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 317.019644][ T7480] loop1: detected capacity change from 0 to 1024 [ 317.156096][ T7480] hfsplus: invalid length 1280 has been corrected to 255 [ 317.205576][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.879088][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.970474][ T7518] loop1: detected capacity change from 0 to 128 [ 330.295680][ T7546] loop9: detected capacity change from 0 to 7 [ 331.853354][ T7546] Dev loop9: unable to read RDB block 7 [ 331.863172][ T7546] loop9: unable to read partition table [ 331.872259][ T7546] loop9: partition table beyond EOD, truncated [ 331.881711][ T7546] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 339.516905][ T7586] loop1: detected capacity change from 0 to 512 [ 339.601418][ T7586] EXT4-fs: Ignoring removed nobh option [ 339.728755][ T7586] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.376: invalid indirect mapped block 256 (level 2) [ 339.779608][ T7586] EXT4-fs (loop1): 2 truncates cleaned up [ 339.849723][ T7586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.166586][ T7585] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.376: bg 0: block 5: invalid block bitmap [ 340.304074][ T7585] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 340.343172][ T7585] EXT4-fs (loop1): This should not happen!! Data will be lost [ 340.343172][ T7585] [ 340.393281][ T7585] EXT4-fs (loop1): Total free blocks count 0 [ 340.427844][ T7585] EXT4-fs (loop1): Free/Dirty block details [ 340.465003][ T7585] EXT4-fs (loop1): free_blocks=0 [ 340.472508][ T7585] EXT4-fs (loop1): dirty_blocks=1 [ 340.513505][ T7585] EXT4-fs (loop1): Block reservation details [ 340.521144][ T7585] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 340.772914][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.132433][ T7600] loop4: detected capacity change from 0 to 131072 [ 342.209558][ T7600] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945) [ 342.222781][ T7600] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 342.239408][ T7600] F2FS-fs (loop4): invalid crc value [ 342.287519][ T7601] loop2: detected capacity change from 0 to 8 [ 342.341990][ T7600] F2FS-fs (loop4): Found nat_bits in checkpoint [ 342.561265][ T7600] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 342.568845][ T7600] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 342.864648][ T28] audit: type=1804 audit(1793642461.435:4): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.379" name="/newroot/36/file1/bus" dev="loop4" ino=10 res=1 errno=0 [ 343.088359][ T7601] SQUASHFS error: Failed to read block 0x8f: -5 [ 343.113247][ T28] audit: type=1800 audit(1793642461.675:5): pid=7601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.380" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 348.889750][ T7615] syzkaller0: entered promiscuous mode [ 348.937608][ T7615] syzkaller0: entered allmulticast mode [ 357.756238][ T7654] loop0: detected capacity change from 0 to 128 [ 368.124983][ T7703] loop0: detected capacity change from 0 to 164 [ 378.834333][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.037654][ T7728] loop0: detected capacity change from 0 to 131072 [ 379.100191][ T7728] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 379.111093][ T7728] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 379.151549][ T7728] F2FS-fs (loop0): invalid crc value [ 379.571458][ T7728] F2FS-fs (loop0): Found nat_bits in checkpoint [ 379.909106][ T7728] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 379.918519][ T7728] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 383.999401][ T7770] loop4: detected capacity change from 0 to 164 [ 389.243659][ T7804] loop1: detected capacity change from 0 to 164 [ 390.064283][ T7805] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 392.098522][ T7817] loop1: detected capacity change from 0 to 164 [ 401.497486][ T7856] loop0: detected capacity change from 0 to 164 [ 401.725981][ T7857] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 403.406973][ T7876] loop2: detected capacity change from 0 to 128 [ 403.889215][ T7878] loop0: detected capacity change from 0 to 164 [ 412.103810][ T7910] loop4: detected capacity change from 0 to 764 [ 412.458798][ T7911] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 412.514985][ T7910] syz.4.465: attempt to access beyond end of device [ 412.514985][ T7910] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 412.580550][ T7910] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 421.676168][ T7941] loop0: detected capacity change from 0 to 164 [ 421.920848][ T7943] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 422.316188][ T7944] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 422.878546][ T7947] comedi comedi3: board detection failed [ 435.518168][ T7981] loop0: detected capacity change from 0 to 128 [ 435.729116][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 435.749536][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 435.826262][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 435.858239][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 435.895291][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 435.924402][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 436.293939][ T7982] rxe_eth0 speed is unknown, defaulting to 1000 [ 436.311969][ T7990] loop0: detected capacity change from 0 to 164 [ 436.612549][ T7992] ================================================================== [ 436.622559][ T7992] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc9/0x360 [ 436.630878][ T7992] Read of size 8 at addr ffff888145364618 by task syz.0.487/7992 [ 436.640083][ T7992] [ 436.643784][ T7992] CPU: 1 PID: 7992 Comm: syz.0.487 Not tainted syzkaller #0 [ 436.653687][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 436.670358][ T7992] Call Trace: [ 436.674284][ T7992] [ 436.678619][ T7992] dump_stack_lvl+0x18c/0x250 [ 436.686528][ T7992] ? read_lock_is_recursive+0x20/0x20 [ 436.692572][ T7992] ? show_regs_print_info+0x20/0x20 [ 436.698206][ T7992] ? load_image+0x420/0x420 [ 436.703587][ T7992] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 436.711529][ T7992] ? __virt_addr_valid+0x10c/0x380 [ 436.717688][ T7992] ? __virt_addr_valid+0x10c/0x380 [ 436.722904][ T7992] ? __virt_addr_valid+0x10c/0x380 [ 436.728607][ T7992] print_report+0xa8/0x210 [ 436.734080][ T7992] ? dvb_device_open+0xc9/0x360 [ 436.740339][ T7992] kasan_report+0x117/0x150 [ 436.745222][ T7992] ? chrdev_open+0x385/0x600 [ 436.752190][ T7992] ? dvb_device_open+0xc9/0x360 [ 436.757859][ T7992] dvb_device_open+0xc9/0x360 [ 436.762629][ T7992] chrdev_open+0x58c/0x600 [ 436.767479][ T7992] ? cd_forget+0x160/0x160 [ 436.771984][ T7992] ? fsnotify_perm+0x3ed/0x5e0 [ 436.777100][ T7992] do_dentry_open+0x880/0x14b0 [ 436.782310][ T7992] ? cd_forget+0x160/0x160 [ 436.786972][ T7992] path_openat+0x284f/0x3270 [ 436.792499][ T7992] ? do_sys_openat2+0xda/0x1d0 [ 436.797653][ T7992] ? __x64_sys_openat+0x139/0x160 [ 436.803286][ T7992] ? verify_lock_unused+0x140/0x140 [ 436.810852][ T7992] ? do_filp_open+0x430/0x430 [ 436.815813][ T7992] do_filp_open+0x1f2/0x430 [ 436.820399][ T7992] ? vfs_tmpfile+0x620/0x620 [ 436.825455][ T7992] ? _raw_spin_unlock+0x28/0x40 [ 436.830901][ T7992] ? alloc_fd+0x590/0x640 [ 436.835691][ T7992] do_sys_openat2+0x134/0x1d0 [ 436.841584][ T7992] ? do_sys_open+0xe0/0xe0 [ 436.846782][ T7992] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 436.854086][ T7992] ? lock_chain_count+0x20/0x20 [ 436.859590][ T7992] __x64_sys_openat+0x139/0x160 [ 436.865249][ T7992] do_syscall_64+0x55/0xb0 [ 436.870882][ T7992] ? clear_bhb_loop+0x40/0x90 [ 436.875949][ T7992] ? clear_bhb_loop+0x40/0x90 [ 436.881501][ T7992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.889150][ T7992] RIP: 0033:0x7f24e676034e [ 436.894004][ T7992] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 436.922514][ T7992] RSP: 002b:00007f24e7700b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 436.933822][ T7992] RAX: ffffffffffffffda RBX: 00007f24e77016c0 RCX: 00007f24e676034e [ 436.946704][ T7992] RDX: 0000000000084003 RSI: 00007f24e7700c00 RDI: ffffffffffffff9c [ 436.958406][ T7992] RBP: 00007f24e7700c00 R08: 0000000000000000 R09: 0000000000000000 [ 436.967261][ T7992] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 436.975477][ T7992] R13: 00007f24e6a26128 R14: 00007f24e6a26090 R15: 00007fffe9a95978 [ 436.986135][ T7992] [ 436.990587][ T7992] [ 436.993717][ T7992] Allocated by task 1: [ 436.999391][ T7992] kasan_set_track+0x4e/0x70 [ 437.004234][ T7992] __kasan_kmalloc+0x8f/0xa0 [ 437.010371][ T7992] dvb_register_device+0x309/0x1df0 [ 437.016242][ T7992] dvb_register_frontend+0x62d/0x900 [ 437.022637][ T7992] vidtv_bridge_probe+0x9d6/0xf60 [ 437.029912][ T7992] platform_probe+0x13b/0x1c0 [ 437.037446][ T7992] really_probe+0x24a/0xae0 [ 437.042611][ T7992] __driver_probe_device+0x1f5/0x390 [ 437.050485][ T7992] driver_probe_device+0x4f/0x420 [ 437.056328][ T7992] __driver_attach+0x444/0x6d0 [ 437.061306][ T7992] bus_for_each_dev+0x235/0x2b0 [ 437.067780][ T7992] bus_add_driver+0x340/0x630 [ 437.075783][ T7992] driver_register+0x23a/0x310 [ 437.081099][ T7992] vidtv_bridge_init+0x49/0x80 [ 437.090981][ T7992] do_one_initcall+0x242/0x790 [ 437.096218][ T7992] do_initcall_level+0x13d/0x1f0 [ 437.102377][ T7992] do_initcalls+0x69/0xd0 [ 437.109467][ T7992] kernel_init_freeable+0x3d9/0x560 [ 437.116135][ T7992] kernel_init+0x1d/0x1c0 [ 437.120822][ T7992] ret_from_fork+0x48/0x80 [ 437.128968][ T7992] ret_from_fork_asm+0x11/0x20 [ 437.134001][ T7992] [ 437.136645][ T7992] Freed by task 7944: [ 437.142726][ T7992] kasan_set_track+0x4e/0x70 [ 437.149160][ T7992] kasan_save_free_info+0x28/0x40 [ 437.157033][ T7992] ____kasan_slab_free+0x126/0x1f0 [ 437.163561][ T7992] slab_free_freelist_hook+0x154/0x240 [ 437.170414][ T7992] __kmem_cache_free+0xba/0x1f0 [ 437.178139][ T7992] dvb_device_open+0x2d9/0x360 [ 437.183028][ T7992] chrdev_open+0x58c/0x600 [ 437.190606][ T7992] do_dentry_open+0x880/0x14b0 [ 437.197831][ T7992] path_openat+0x284f/0x3270 [ 437.204398][ T7992] do_filp_open+0x1f2/0x430 [ 437.210032][ T7992] do_sys_openat2+0x134/0x1d0 [ 437.217275][ T7992] __x64_sys_openat+0x139/0x160 [ 437.223627][ T7992] do_syscall_64+0x55/0xb0 [ 437.232880][ T7992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.241132][ T7992] [ 437.245509][ T7992] The buggy address belongs to the object at ffff888145364600 [ 437.245509][ T7992] which belongs to the cache kmalloc-256 of size 256 [ 437.269865][ T7992] The buggy address is located 24 bytes inside of [ 437.269865][ T7992] freed 256-byte region [ffff888145364600, ffff888145364700) [ 437.285681][ T7992] [ 437.288086][ T7992] The buggy address belongs to the physical page: [ 437.297231][ T7992] page:ffffea000514d900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x145364 [ 437.309303][ T7992] head:ffffea000514d900 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 437.321340][ T7992] flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 437.334068][ T7992] page_type: 0xffffffff() [ 437.342137][ T7992] raw: 057ff00000000840 ffff888018c41b40 dead000000000122 0000000000000000 [ 437.353492][ T7992] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 437.365617][ T7992] page dumped because: kasan: bad access detected [ 437.374453][ T7992] page_owner tracks the page as allocated [ 437.380951][ T7992] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19311678762, free_ts 0 [ 437.403644][ T7992] post_alloc_hook+0x1c1/0x200 [ 437.408850][ T7992] get_page_from_freelist+0x2181/0x22a0 [ 437.415394][ T7992] __alloc_pages+0x1f0/0x460 [ 437.421204][ T7992] alloc_page_interleave+0x24/0x1e0 [ 437.428708][ T7992] alloc_slab_page+0x5d/0x180 [ 437.433751][ T7992] new_slab+0x87/0x2d0 [ 437.438985][ T7992] ___slab_alloc+0xc5c/0x12f0 [ 437.444285][ T7992] __kmem_cache_alloc_node+0x122/0x260 [ 437.450613][ T7992] kmalloc_trace+0x2a/0xe0 [ 437.456254][ T7992] bus_add_driver+0x162/0x630 [ 437.462928][ T7992] driver_register+0x23a/0x310 [ 437.470296][ T7992] usb_register_driver+0x1aa/0x360 [ 437.477534][ T7992] do_one_initcall+0x242/0x790 [ 437.483519][ T7992] do_initcall_level+0x13d/0x1f0 [ 437.488698][ T7992] do_initcalls+0x69/0xd0 [ 437.494860][ T7992] kernel_init_freeable+0x3d9/0x560 [ 437.504951][ T7992] page_owner free stack trace missing [ 437.512137][ T7992] [ 437.514841][ T7992] Memory state around the buggy address: [ 437.520736][ T7992] ffff888145364500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 437.529560][ T7992] ffff888145364580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 437.539123][ T7992] >ffff888145364600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 437.549737][ T7992] ^ [ 437.555493][ T7992] ffff888145364680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 437.564963][ T7992] ffff888145364700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 437.574025][ T7992] ================================================================== [ 437.584218][ T7992] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 437.595500][ T7992] CPU: 1 PID: 7992 Comm: syz.0.487 Not tainted syzkaller #0 [ 437.604244][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 437.615399][ T7992] Call Trace: [ 437.619077][ T7992] [ 437.622277][ T7992] dump_stack_lvl+0x18c/0x250 [ 437.627336][ T7992] ? show_regs_print_info+0x20/0x20 [ 437.633490][ T7992] ? load_image+0x420/0x420 [ 437.638082][ T7992] panic+0x2ca/0x720 [ 437.642083][ T7992] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 437.648814][ T7992] ? bpf_jit_dump+0xd0/0xd0 [ 437.654949][ T7992] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 437.662774][ T7992] ? _raw_spin_unlock+0x40/0x40 [ 437.670067][ T7992] ? dvb_device_open+0xc9/0x360 [ 437.675938][ T7992] check_panic_on_warn+0x84/0xa0 [ 437.681759][ T7992] ? dvb_device_open+0xc9/0x360 [ 437.687329][ T7992] end_report+0x6f/0x130 [ 437.691831][ T7992] kasan_report+0x128/0x150 [ 437.697833][ T7992] ? chrdev_open+0x385/0x600 [ 437.703264][ T7992] ? dvb_device_open+0xc9/0x360 [ 437.708492][ T7992] dvb_device_open+0xc9/0x360 [ 437.714059][ T7992] chrdev_open+0x58c/0x600 [ 437.718849][ T7992] ? cd_forget+0x160/0x160 [ 437.724428][ T7992] ? fsnotify_perm+0x3ed/0x5e0 [ 437.730086][ T7992] do_dentry_open+0x880/0x14b0 [ 437.735722][ T7992] ? cd_forget+0x160/0x160 [ 437.740694][ T7992] path_openat+0x284f/0x3270 [ 437.747618][ T7992] ? do_sys_openat2+0xda/0x1d0 [ 437.753876][ T7992] ? __x64_sys_openat+0x139/0x160 [ 437.759222][ T7992] ? verify_lock_unused+0x140/0x140 [ 437.764775][ T7992] ? do_filp_open+0x430/0x430 [ 437.769734][ T7992] do_filp_open+0x1f2/0x430 [ 437.774601][ T7992] ? vfs_tmpfile+0x620/0x620 [ 437.779327][ T7992] ? _raw_spin_unlock+0x28/0x40 [ 437.784271][ T7992] ? alloc_fd+0x590/0x640 [ 437.789294][ T7992] do_sys_openat2+0x134/0x1d0 [ 437.794371][ T7992] ? do_sys_open+0xe0/0xe0 [ 437.799800][ T7992] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 437.807241][ T7992] ? lock_chain_count+0x20/0x20 [ 437.814052][ T7992] __x64_sys_openat+0x139/0x160 [ 437.819085][ T7992] do_syscall_64+0x55/0xb0 [ 437.824026][ T7992] ? clear_bhb_loop+0x40/0x90 [ 437.830527][ T7992] ? clear_bhb_loop+0x40/0x90 [ 437.836913][ T7992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.844380][ T7992] RIP: 0033:0x7f24e676034e [ 437.849437][ T7992] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 437.872420][ T7992] RSP: 002b:00007f24e7700b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 437.881793][ T7992] RAX: ffffffffffffffda RBX: 00007f24e77016c0 RCX: 00007f24e676034e [ 437.890705][ T7992] RDX: 0000000000084003 RSI: 00007f24e7700c00 RDI: ffffffffffffff9c [ 437.900715][ T7992] RBP: 00007f24e7700c00 R08: 0000000000000000 R09: 0000000000000000 [ 437.908998][ T7992] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 437.918095][ T7992] R13: 00007f24e6a26128 R14: 00007f24e6a26090 R15: 00007fffe9a95978 [ 437.926875][ T7992] [ 437.930505][ T7992] Kernel Offset: disabled [ 437.935031][ T7992] Rebooting in 86400 seconds..