last executing test programs: 18m55.006592202s ago: executing program 0 (id=375): syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r1, r1, 0x0, 0x40000000800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 18m54.053527337s ago: executing program 0 (id=376): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='my_tracefs\x00', &(0x7f00000001c0)='ncpfs\x00', 0x204023, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) 18m49.089245121s ago: executing program 0 (id=381): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r4, 0x100000000000011, 0x2000, 0x2f93) 18m48.03622312s ago: executing program 0 (id=385): syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r1, r1, 0x0, 0x40000000800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 18m46.789795409s ago: executing program 0 (id=388): write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x44040) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x1ef, 0x0, r5}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, @IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x0) 18m44.84913778s ago: executing program 0 (id=392): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8401, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0xd00}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) 18m28.697621741s ago: executing program 32 (id=392): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8401, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0xd00}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) 30.291928863s ago: executing program 2 (id=1716): socket$inet_udp(0x2, 0x2, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f00000c8000/0x3000)=nil, 0x3000, 0x1000005, 0x8010, 0xffffffffffffffff, 0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) rt_sigqueueinfo(0x0, 0x2a, &(0x7f0000000400)={0x3d, 0xb804, 0x6}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000009400)={&(0x7f0000009240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x40, 0xd03c}, {0x10, 0x5}, {0x7, 0x4}, {0x8, 0x7}, {0xe}, {0x5, 0x9}, {0x2, 0x6}, {0x3, 0x10}, {0x3, 0x9}, {0x343, 0xff}, {0x6, 0x5}, {0x2, 0xe005}, {0x3, 0x9}, {0xf4fb, 0x3}, {0x63f8, 0xc}, {0x4, 0x5}, {0x2, 0xe904}, {0x1, 0x28}, {0xfff, 0x1}, {0x0, 0x1ff}, {0x2, 0xdec}, {0x7fffffffffffffff, 0x1}, {0xffffffffffffffff, 0x1}, {0x3, 0x5}, {0x400, 0x3}, {0x400, 0x4}, {0x5, 0x3}, {0x4, 0xffffffffffffffff}, {0x6, 0x6}, {0x8, 0x2}, {0x7, 0x4}, {0xfffffffffffffd65, 0xfffffffffffffff8}, {0x1ff, 0x6}, {0x7, 0x8}, {0x100, 0x6}, {0xffffffffffffffb3}, {0xfffffffffffffff9, 0x5}, {0x1, 0x7}, {0x65, 0x100000000}, {0x2, 0x3}, {0x1ec, 0x401}, {0x4, 0x80000000}, {0x4, 0x3}, {0x6, 0x3}, {0x98c, 0xfffffffffffffffa}, {0x101, 0xe}, {0x9, 0x7}, {0xd467800000000000, 0x1800000000000}, {0xc2, 0x1}, {0x8, 0x8000000000000000}, {0x3ff, 0x9}, {0x1000, 0x1bc}, {0xfffffffffffffff7, 0x1}, {0x80000000, 0x8000000000000001}, {0x9, 0x401}, {0xcff, 0xa}, {0x4, 0x3}, {0x9, 0x7}, {0x37, 0x3ff}, {0x7897}, {0x2, 0x5}, {0x7c, 0x4}, {0x4, 0x6f8}, {0x8, 0x8}, {0x7fff, 0x80000001}, {0x7, 0x520ba26a}, {0x3}, {0x6, 0x7}, {0xc891, 0x1}, {0xca5, 0x1}, {0x6, 0x661}, {0x2, 0x41e74bda}, {0x200}, {0x1, 0x416}, {0x8, 0x9}, {0x2, 0xca}, {0xffffffff, 0x400}, {0x100, 0xaf03}, {0x80000000}, {0x96}, {0x401, 0xc}, {0x8000, 0xffffffff000}, {0x8000000000000001, 0x400}, {0x6, 0x10}, {0x49c1a567, 0xde}, {0x800, 0x3}, {0x2, 0x80000001}, {0x9, 0x1}, {0xffff, 0x6}, {0x2}, {0x2, 0x4}, {0xc, 0x80}, {0xd4e3, 0x80000000}, {0x9}, {0x811, 0x6}, {0x1, 0x101}, {0x1, 0xf}, {0x8, 0x7fff}, {0x2, 0x8}, {0x7, 0x7fffffffffffffff}, {0x10001, 0xffffffff}, {0x8c, 0x3}, {0x7, 0x8}, {0x9, 0x9}, {0x2, 0x9}, {0xd1, 0x8}, {0x6, 0x39f}, {0x10000, 0x7}, {0x2, 0x4}, {0x1ff}, {0x9, 0x10001}, {0xabd6, 0x3}, {0x9, 0x2}, {0x80000000, 0x4}, {0x9, 0x54}, {0x101, 0xc3bf}, {0x8, 0x9}, {0x80000000, 0x5}, {0x0, 0x1}, {0xffff, 0xa}, {0x14e1, 0xa6c3}, {0xf1c, 0x81}, {0xff, 0x3}, {0x6, 0xffffffffd5074900}, {0x0, 0xffffffffffffffff}, {0x7, 0x2}, {0x5, 0x6}, {0x4, 0x8}, {0x100000001, 0x4}, {0x8, 0x1}, {0x0, 0x7}, {0x837e, 0x9}, {0x5, 0x81}, {0x200, 0x1ff}, {0xffffffff, 0x1}, {0x32, 0x99}, {0x7fffffffffffffff, 0x4}, {0x0, 0x40}, {0xfffffffffffffff8, 0xfffffffffffffffd}, {0x8000000000000000}, {0x1, 0x200}, {0x7, 0x60a}, {0x5, 0xc}, {0x2, 0x11c}, {0xffff, 0x7d}, {0x80000001}, {0x101, 0x5}, {0x0, 0xf}, {0x200, 0x72b}, {0x6, 0x2}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x2}, {0xe19, 0x3}, {0x5}, {0xbdd, 0x9}, {0x9, 0xffffffffffffffff}, {0xf, 0x4}, {0x0, 0x8}, {0xd, 0xfffffffffffff801}, {0x4, 0x3}, {0x0, 0xe}, {0x100, 0x2}, {0x2, 0x280000000}, {0x5f, 0x1ea}, {0x7fff, 0x1}, {0x5, 0x8}, {0xd53, 0x9}, {0x2}, {0x7, 0x22}, {0x0, 0xfffffffffffffe01}, {0x2, 0x1800000000000000}, {0xffffffffffffffff, 0x178}, {0x1, 0x80}, {0x696, 0x9}, {0x3, 0xfffffffffffffffa}, {0x0, 0x9}, {0x3, 0x7ff}, {0x9, 0x3}, {0x726, 0x100000000}, {0x7, 0x50}, {0x705, 0x86e}, {0xb, 0x6}, {0x5, 0x7fffffffffffffff}, {0x80000001, 0x200}, {0x4, 0x3}, {0xfffffffffffffff8, 0x32954bdd}, {0x3}, {0x993d, 0x7}, {0x1f915b03, 0xf67}, {0x2, 0x7ff}, {0x800, 0xa3e}, {0x3, 0x2d82}, {0x4, 0x6}, {0xb9, 0x9}, {0x9, 0x2}, {0x10000, 0x1}, {0x7, 0x4}, {0x7fffffff, 0x8}, {0xdd4, 0xa82}, {0x0, 0x5a32}, {0xe76a, 0x80}, {0x0, 0x8}, {0x4ad, 0x7000000000}, {0x4, 0x4}, {0x4, 0x3}, {0x8001, 0x4}, {0x4, 0xcf}, {0x8000, 0x8000}, {0x6, 0x8}, {0x5, 0x70}, {0x5, 0x1}, {0x1518, 0x80}, {0x1, 0x8000}, {0x9, 0xa}, {0x6, 0x7}, {0x2, 0x6}, {0xfffffffffffffffc, 0x10}, {0x5, 0x8}, {0x0, 0xca5}, {0x7, 0x8000}, {0x1000, 0xba}, {0xfffffffffffffffc, 0x1}, {0xffffffffffffffff, 0x800}, {0x7, 0x10000}, {0x9, 0x3}, {0x0, 0x7}, {0x2, 0x9}, {0x8, 0x8000000000000001}, {0x1, 0x7fffffffffffffff}, {0xe0cd, 0x9}, {0x4, 0x3}, {0x2, 0xd}, {0x5, 0x7}, {0x9, 0x8}, {0x0, 0x9f}, {0x3, 0x6}, {0xffff, 0x6}, {0x80, 0xb1}, {0xba7a, 0x5}, {0x3ff, 0xfffffffffd8adff2}, {0x5, 0x9}, {0x5, 0x5}, {0xf, 0x5931}, {0x400000, 0x2}, {0x4, 0x7fffffff}, {0xffffffffffff8000, 0x8d}, {0xfc3a, 0x1}, {0x5, 0xffff}, {0x800, 0x8000000000000001}, {0x0, 0xa3a6}, {0xb4d, 0x3c}, {0x5, 0x1}, {0x1, 0x2}, {0x4, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 26.716401541s ago: executing program 2 (id=1719): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x184) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x5000003a, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 25.514327867s ago: executing program 1 (id=1721): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20024840) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) keyctl$chown(0x4, 0x0, 0x0, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) r2 = syz_open_dev$dvb_demux(0x0, 0x0, 0x80000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x806, {"4772fface304856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) 22.088719029s ago: executing program 1 (id=1724): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = timerfd_create(0x9, 0x0) timerfd_settime(r2, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/77, 0x4d}, 0x5}], 0x4f4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x11}}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x201, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x1, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x2, 0xffd, 0x0, 0x0, 0x1}, {0x1003, 0x3ffe, 0x0, 0x0, 0x1}, {0x8, 0xaf1, 0x0, 0x0, 0x1}]}) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x20c00, 0x0) get_mempolicy(0x0, 0x0, 0x800, &(0x7f000031e000/0x4000)=nil, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, 0x0) 19.976157819s ago: executing program 2 (id=1725): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x0}) 18.212310372s ago: executing program 3 (id=1726): socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x150) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) recvmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0xee00) keyctl$chown(0x4, 0x0, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) 17.889177727s ago: executing program 1 (id=1727): socket$inet_udp(0x2, 0x2, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f00000c8000/0x3000)=nil, 0x3000, 0x1000005, 0x8010, 0xffffffffffffffff, 0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) rt_sigqueueinfo(0x0, 0x2a, &(0x7f0000000400)={0x3d, 0xb804, 0x6}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000009400)={&(0x7f0000009240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x40, 0xd03c}, {0x10, 0x5}, {0x7, 0x4}, {0x8, 0x7}, {0xe}, {0x5, 0x9}, {0x2, 0x6}, {0x3, 0x10}, {0x3, 0x9}, {0x343, 0xff}, {0x6, 0x5}, {0x2, 0xe005}, {0x3, 0x9}, {0xf4fb, 0x3}, {0x63f8, 0xc}, {0x4, 0x5}, {0x2, 0xe904}, {0x1, 0x28}, {0xfff, 0x1}, {0x0, 0x1ff}, {0x2, 0xdec}, {0x7fffffffffffffff, 0x1}, {0xffffffffffffffff, 0x1}, {0x3, 0x5}, {0x400, 0x3}, {0x400, 0x4}, {0x5, 0x3}, {0x4, 0xffffffffffffffff}, {0x6, 0x6}, {0x8, 0x2}, {0x7, 0x4}, {0xfffffffffffffd65, 0xfffffffffffffff8}, {0x1ff, 0x6}, {0x7, 0x8}, {0x100, 0x6}, {0xffffffffffffffb3}, {0xfffffffffffffff9, 0x5}, {0x1, 0x7}, {0x65, 0x100000000}, {0x2, 0x3}, {0x1ec, 0x401}, {0x4, 0x80000000}, {0x4, 0x3}, {0x6, 0x3}, {0x98c, 0xfffffffffffffffa}, {0x101, 0xe}, {0x9, 0x7}, {0xd467800000000000, 0x1800000000000}, {0xc2, 0x1}, {0x8, 0x8000000000000000}, {0x3ff, 0x9}, {0x1000, 0x1bc}, {0xfffffffffffffff7, 0x1}, {0x80000000, 0x8000000000000001}, {0x9, 0x401}, {0xcff, 0xa}, {0x4, 0x3}, {0x9, 0x7}, {0x37, 0x3ff}, {0x7897}, {0x2, 0x5}, {0x7c, 0x4}, {0x4, 0x6f8}, {0x8, 0x8}, {0x7fff, 0x80000001}, {0x7, 0x520ba26a}, {0x3}, {0x6, 0x7}, {0xc891, 0x1}, {0xca5, 0x1}, {0x6, 0x661}, {0x2, 0x41e74bda}, {0x200}, {0x1, 0x416}, {0x8, 0x9}, {0x2, 0xca}, {0xffffffff, 0x400}, {0x100, 0xaf03}, {0x80000000}, {0x96}, {0x401, 0xc}, {0x8000, 0xffffffff000}, {0x8000000000000001, 0x400}, {0x6, 0x10}, {0x49c1a567, 0xde}, {0x800, 0x3}, {0x2, 0x80000001}, {0x9, 0x1}, {0xffff, 0x6}, {0x2}, {0x2, 0x4}, {0xc, 0x80}, {0xd4e3, 0x80000000}, {0x9}, {0x811, 0x6}, {0x1, 0x101}, {0x1, 0xf}, {0x8, 0x7fff}, {0x2, 0x8}, {0x7, 0x7fffffffffffffff}, {0x10001, 0xffffffff}, {0x8c, 0x3}, {0x7, 0x8}, {0x9, 0x9}, {0x2, 0x9}, {0xd1, 0x8}, {0x6, 0x39f}, {0x10000, 0x7}, {0x2, 0x4}, {0x1ff}, {0x9, 0x10001}, {0xabd6, 0x3}, {0x9, 0x2}, {0x80000000, 0x4}, {0x9, 0x54}, {0x101, 0xc3bf}, {0x8, 0x9}, {0x80000000, 0x5}, {0x0, 0x1}, {0xffff, 0xa}, {0x14e1, 0xa6c3}, {0xf1c, 0x81}, {0xff, 0x3}, {0x6, 0xffffffffd5074900}, {0x0, 0xffffffffffffffff}, {0x7, 0x2}, {0x5, 0x6}, {0x4, 0x8}, {0x100000001, 0x4}, {0x8, 0x1}, {0x0, 0x7}, {0x837e, 0x9}, {0x5, 0x81}, {0x200, 0x1ff}, {0xffffffff, 0x1}, {0x32, 0x99}, {0x7fffffffffffffff, 0x4}, {0x0, 0x40}, {0xfffffffffffffff8, 0xfffffffffffffffd}, {0x8000000000000000}, {0x1, 0x200}, {0x7, 0x60a}, {0x5, 0xc}, {0x2, 0x11c}, {0xffff, 0x7d}, {0x80000001}, {0x101, 0x5}, {0x0, 0xf}, {0x200, 0x72b}, {0x6, 0x2}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x2}, {0xe19, 0x3}, {0x5}, {0xbdd, 0x9}, {0x9, 0xffffffffffffffff}, {0xf, 0x4}, {0x0, 0x8}, {0xd, 0xfffffffffffff801}, {0x4, 0x3}, {0x0, 0xe}, {0x100, 0x2}, {0x2, 0x280000000}, {0x5f, 0x1ea}, {0x7fff, 0x1}, {0x5, 0x8}, {0xd53, 0x9}, {0x2}, {0x7, 0x22}, {0x0, 0xfffffffffffffe01}, {0x2, 0x1800000000000000}, {0xffffffffffffffff, 0x178}, {0x1, 0x80}, {0x696, 0x9}, {0x3, 0xfffffffffffffffa}, {0x0, 0x9}, {0x3, 0x7ff}, {0x9, 0x3}, {0x726, 0x100000000}, {0x7, 0x50}, {0x705, 0x86e}, {0xb, 0x6}, {0x5, 0x7fffffffffffffff}, {0x80000001, 0x200}, {0x4, 0x3}, {0xfffffffffffffff8, 0x32954bdd}, {0x3}, {0x993d, 0x7}, {0x1f915b03, 0xf67}, {0x2, 0x7ff}, {0x800, 0xa3e}, {0x3, 0x2d82}, {0x4, 0x6}, {0xb9, 0x9}, {0x9, 0x2}, {0x10000, 0x1}, {0x7, 0x4}, {0x7fffffff, 0x8}, {0xdd4, 0xa82}, {0x0, 0x5a32}, {0xe76a, 0x80}, {0x0, 0x8}, {0x4ad, 0x7000000000}, {0x4, 0x4}, {0x4, 0x3}, {0x8001, 0x4}, {0x4, 0xcf}, {0x8000, 0x8000}, {0x6, 0x8}, {0x5, 0x70}, {0x5, 0x1}, {0x1518, 0x80}, {0x1, 0x8000}, {0x9, 0xa}, {0x6, 0x7}, {0x2, 0x6}, {0xfffffffffffffffc, 0x10}, {0x5, 0x8}, {0x0, 0xca5}, {0x7, 0x8000}, {0x1000, 0xba}, {0xfffffffffffffffc, 0x1}, {0xffffffffffffffff, 0x800}, {0x7, 0x10000}, {0x9, 0x3}, {0x0, 0x7}, {0x2, 0x9}, {0x8, 0x8000000000000001}, {0x1, 0x7fffffffffffffff}, {0xe0cd, 0x9}, {0x4, 0x3}, {0x2, 0xd}, {0x5, 0x7}, {0x9, 0x8}, {0x0, 0x9f}, {0x3, 0x6}, {0xffff, 0x6}, {0x80, 0xb1}, {0xba7a, 0x5}, {0x3ff, 0xfffffffffd8adff2}, {0x5, 0x9}, {0x5, 0x5}, {0xf, 0x5931}, {0x400000, 0x2}, {0x4, 0x7fffffff}, {0xffffffffffff8000, 0x8d}, {0xfc3a, 0x1}, {0x5, 0xffff}, {0x800, 0x8000000000000001}, {0x0, 0xa3a6}, {0xb4d, 0x3c}, {0x5, 0x1}, {0x1, 0x2}, {0x4, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16.054976804s ago: executing program 1 (id=1728): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) fstatfs(r1, 0x0) r2 = syz_usb_connect(0x5, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="0007010cc365c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='6', 0x1) 13.79507781s ago: executing program 2 (id=1729): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x90}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2001f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xfffffffe}}], 0x1, 0x0, 0x0) 13.646044657s ago: executing program 4 (id=1730): r0 = socket(0x40000000015, 0x805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x28) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240000d4}, 0x48804) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r5, 0x7, '\x00', 0x0, r4, 0x0, 0x3}, 0x50) bind$inet(r3, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@any, 0x1}) listen(r3, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', 0x0, &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') write(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt(r0, 0x114, 0x5, 0x0, &(0x7f00000000c0)) 12.684357072s ago: executing program 4 (id=1731): socket(0x11, 0x3, 0x7f) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x4000000000009) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f00000002c0)) 10.554728733s ago: executing program 3 (id=1732): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r3 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800) recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@mpls_getroute={0x16, 0x1a, 0x1}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @private=0xa010101}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x8044) 10.525043634s ago: executing program 4 (id=1733): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x7}, 0x1c) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x17, 0x3, "4d5ac8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) setresgid(0xee01, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{0x0}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 10.498376346s ago: executing program 3 (id=1734): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x184) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x5000003a, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 8.823813814s ago: executing program 3 (id=1735): syz_open_dev$video4linux(0x0, 0x80000003, 0x20040) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$LINK_DETACH(0x22, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfff2) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) close(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.203811628s ago: executing program 4 (id=1736): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20024840) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) keyctl$chown(0x4, 0x0, 0x0, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) r2 = syz_open_dev$dvb_demux(0x0, 0x0, 0x80000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x806, {"4772fface304856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) 5.184028486s ago: executing program 1 (id=1737): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x0}) 5.183805256s ago: executing program 4 (id=1738): io_uring_setup(0x650b, 0x0) close(0xffffffffffffffff) socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) listen(r0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x3) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 4.930627618s ago: executing program 2 (id=1739): r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0x20001) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = syz_io_uring_setup(0x282e, &(0x7f0000000240)={0x0, 0x2457, 0x100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000), 0x0, 0x2}, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000004c0)="02", 0x1, 0x2) 3.327226393s ago: executing program 4 (id=1740): socket$inet_udp(0x2, 0x2, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f00000c8000/0x3000)=nil, 0x3000, 0x1000005, 0x8010, 0xffffffffffffffff, 0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) rt_sigqueueinfo(0x0, 0x2a, &(0x7f0000000400)={0x3d, 0xb804, 0x6}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={[{@quota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x31]}}]}) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x55) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000009400)={&(0x7f0000009240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x40, 0xd03c}, {0x10, 0x5}, {0xffff, 0x4}, {0x8, 0x7}, {0xe}, {0x5, 0x9}, {0x2, 0x6}, {0x3, 0x10}, {0x3, 0x9}, {0x343, 0xff}, {0x6, 0x5}, {0x2, 0xe005}, {0x3, 0x9}, {0xf4fb, 0x3}, {0x63f8, 0xc}, {0x4, 0x5}, {0x2, 0xe904}, {0x1, 0x28}, {0xfff, 0x1}, {0x0, 0x1ff}, {0x2, 0xdec}, {0x7fffffffffffffff, 0x1}, {0xffffffffffffffff, 0x1}, {0x3, 0x5}, {0x400, 0x3}, {0x400, 0x4}, {0x5, 0x3}, {0x4, 0xffffffffffffffff}, {0x6, 0x6}, {0x8, 0x2}, {0x7, 0x4}, {0xfffffffffffffd65, 0xfffffffffffffff8}, {0x1ff, 0x6}, {0x7, 0x8}, {0x100, 0x6}, {0xffffffffffffffb3}, {0xfffffffffffffff9, 0x5}, {0x1, 0x7}, {0x65, 0x100000000}, {0x2, 0x3}, {0x1ec, 0x401}, {0x8, 0x80000000}, {0x4, 0x3}, {0x6, 0x3}, {0x98c, 0xfffffffffffffffa}, {0x101, 0xe}, {0x9, 0x7}, {0xd467800000000000, 0x1800000000000}, {0xc2, 0x1}, {0x8, 0x8000000000000000}, {0x3ff, 0x9}, {0x1000, 0x1bc}, {0xfffffffffffffff7, 0x1}, {0x80000000, 0xa}, {0x9, 0x401}, {0xcff, 0xa}, {0x4, 0x3}, {0x9, 0x7}, {0x37, 0x3ff}, {0x7897}, {0x2, 0x5}, {0x7c, 0x4}, {0x4, 0x6f8}, {0x8, 0x8}, {0x7fff, 0x80400001}, {0x7, 0x520ba26a}, {0x3}, {0x6, 0x7}, {0xc891, 0x1}, {0xca5, 0x1}, {0x6, 0x661}, {0x2, 0x41e74bda}, {0x200}, {0x1, 0x416}, {0x8, 0x9}, {0x2, 0xca}, {0xffffffff, 0x400}, {0x100, 0xaf03}, {0x80001000}, {0x96}, {0x402, 0xc}, {0x8000, 0xffffffff000}, {0x8000000000000001, 0x400}, {0x6, 0x10}, {0x49c1a567, 0xde}, {0x800, 0x3}, {0x2, 0x80000001}, {0x9, 0x1}, {0xffff, 0x6}, {0x2}, {0x2, 0x4}, {0xc, 0x80}, {0xd4e3, 0x80000000}, {0x9}, {0x811, 0x6}, {0x1, 0x101}, {0x1, 0xf}, {0x8, 0x7fff}, {0x2, 0x8}, {0x7, 0x7fffffffffffffff}, {0x10001, 0xffffffff}, {0x8c, 0x3}, {0x7, 0x8}, {0x9, 0x9}, {0x2, 0x9}, {0xd1, 0x8}, {0x6, 0x39f}, {0x10000, 0x7}, {0x2, 0x4}, {0x1ff}, {0x9, 0x10001}, {0xabd6, 0x3}, {0x9, 0x2}, {0x80000000, 0x4}, {0x9, 0x54}, {0x101, 0xc3bf}, {0x8, 0x9}, {0x80000000, 0x5}, {0x0, 0x1}, {0xffff, 0xa}, {0x14e1, 0xa6c3}, {0xf1c, 0x81}, {0xff, 0x3}, {0x6, 0xffffffffd5074900}, {0x0, 0xffffffffffffffff}, {0x7, 0x2}, {0x5, 0x6}, {0x4, 0x8}, {0x100000001, 0x4}, {0x8, 0x7f50c674}, {0x0, 0x1}, {0x837e, 0x9}, {0x9, 0x81}, {0x200, 0x1ff}, {0xffffffff, 0x1}, {0x32, 0x99}, {0x7fffffffffffffff, 0x4}, {0x0, 0x40}, {0xfffffffffffffff8, 0xfffffffffffffffd}, {}, {0x1, 0x200}, {0x7, 0x60a}, {0x5, 0xc}, {0x2, 0x11c}, {0xffff, 0x7d}, {0x80000001}, {0x101, 0x5}, {0x0, 0xf}, {0x200, 0x72b}, {0x6, 0x2}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x2}, {0xe19, 0x3}, {0x5}, {0xbdd, 0x9}, {0x9, 0xffffffffffffffff}, {0x3, 0x10004}, {0x0, 0x8}, {0xd, 0xfffffffffffff801}, {0x4, 0x3}, {0x0, 0xe}, {0x100, 0x2}, {0x2, 0x280000000}, {0x5f, 0x1ea}, {0x7fff, 0x1}, {0x5, 0x8}, {0xd53, 0x9}, {0x2}, {0x7, 0x22}, {0x0, 0xfffffffffffffe01}, {0x2, 0x1800000000000000}, {0xffffffffffffffff, 0x178}, {0x1, 0x80}, {0x696, 0x9}, {0x3, 0xfffffffffffffffa}, {0x0, 0x9}, {0x3, 0x7ff}, {0x9, 0x3}, {0x726, 0x100000000}, {0x7, 0x50}, {0x705, 0x86e}, {0xb, 0x6}, {0x5, 0x7fffffffffffffff}, {0x1, 0x200}, {0x4, 0x3}, {0xfffffffffffffff8, 0x32954bdd}, {0x3}, {0x993d, 0x7}, {0x1f915b03, 0xf67}, {0x2, 0x7ff}, {0x800, 0xa3e}, {0x3, 0x2d82}, {0x4, 0x6}, {0xb9, 0x9}, {0x9, 0x2}, {0x10000, 0x1}, {0x7, 0x4}, {0x7fffffff, 0x8}, {0xdd4, 0xa84}, {0x0, 0x5a32}, {0xe76a, 0x80}, {0x0, 0x8}, {0x4ad, 0x7000000000}, {0x4, 0x4}, {0x4, 0x3}, {0x8001, 0x4}, {0x4, 0xcf}, {0x8000, 0x8000}, {0x6, 0x8}, {0x5, 0x70}, {0x5, 0x1}, {0x1518, 0x80}, {0x1, 0x8000}, {0x9, 0xa}, {0x6, 0x7}, {0x802, 0x6}, {0xfffffffffffffffc, 0x10}, {0x5, 0x8}, {0x0, 0xca5}, {0x7, 0x8000}, {0x1000, 0xba}, {0xfffffffffffffffc, 0x1}, {0xffffffffffffffff, 0x800}, {0x7, 0x10000}, {0x9, 0x3}, {0x0, 0x7}, {0x2, 0x9}, {0x8, 0x8000000000000001}, {0x1, 0x7fffffffffffffff}, {0xe0cd, 0x9}, {0x4, 0x3}, {0x2, 0xd}, {0x5, 0x7}, {0x9, 0x8}, {0x0, 0x9f}, {0x3, 0x6}, {0x10003, 0x6}, {0x80, 0xb1}, {0xba7a, 0x5}, {0x3ff, 0xfffffffffd8adff2}, {0x5, 0x9}, {0x5, 0x5}, {0xf, 0x5931}, {0x400000, 0x2}, {0x4, 0x7fffffff}, {0xffffffffffff8000, 0x8d}, {0xfc3a, 0x1}, {0x5, 0xffff}, {0x800, 0x8000000000000001}, {0x0, 0xa3a6}, {0xb4d, 0x3c}, {0x5, 0x1}, {0x1, 0x2}, {0x4, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 3.1760932s ago: executing program 3 (id=1741): socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x150) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0xee00) keyctl$chown(0x4, 0x0, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) 1.584019396s ago: executing program 1 (id=1742): socket$inet_udp(0x2, 0x2, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f00000c8000/0x3000)=nil, 0x3000, 0x1000005, 0x8010, 0xffffffffffffffff, 0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) rt_sigqueueinfo(0x0, 0x2a, &(0x7f0000000400)={0x3d, 0xb804, 0x6}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={[{@quota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x31]}}]}) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x55) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r2], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000009400)={&(0x7f0000009240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x40, 0xd03c}, {0x10, 0x5}, {0xffff, 0x4}, {0x8, 0x7}, {0xe}, {0x5, 0x9}, {0x2, 0x6}, {0x3, 0x10}, {0x3, 0x9}, {0x343, 0xff}, {0x6, 0x5}, {0x2, 0xe005}, {0x3, 0x9}, {0xf4fb, 0x3}, {0x63f8, 0xc}, {0x4, 0x5}, {0x2, 0xe904}, {0x1, 0x28}, {0xfff, 0x1}, {0x0, 0x1ff}, {0x2, 0xdec}, {0x7fffffffffffffff, 0x1}, {0xffffffffffffffff, 0x1}, {0x3, 0x5}, {0x400, 0x3}, {0x400, 0x4}, {0x5, 0x3}, {0x4, 0xffffffffffffffff}, {0x6, 0x6}, {0x8, 0x2}, {0x7, 0x4}, {0xfffffffffffffd65, 0xfffffffffffffff8}, {0x1ff, 0x6}, {0x7, 0x8}, {0x100, 0x6}, {0xffffffffffffffb3}, {0xfffffffffffffff9, 0x5}, {0x1, 0x7}, {0x65, 0x100000000}, {0x2, 0x3}, {0x1ec, 0x401}, {0x8, 0x80000000}, {0x4, 0x3}, {0x6, 0x3}, {0x98c, 0xfffffffffffffffa}, {0x101, 0xe}, {0x9, 0x7}, {0xd467800000000000, 0x1800000000000}, {0xc2, 0x1}, {0x8, 0x8000000000000000}, {0x3ff, 0x9}, {0x1000, 0x1bc}, {0xfffffffffffffff7, 0x1}, {0x80000000, 0xa}, {0x9, 0x401}, {0xcff, 0xa}, {0x4, 0x3}, {0x9, 0x7}, {0x37, 0x3ff}, {0x7897}, {0x2, 0x5}, {0x7c, 0x4}, {0x4, 0x6f8}, {0x8, 0x8}, {0x7fff, 0x80400001}, {0x7, 0x520ba26a}, {0x3}, {0x6, 0x7}, {0xc891, 0x1}, {0xca5, 0x1}, {0x6, 0x661}, {0x2, 0x41e74bda}, {0x200}, {0x1, 0x416}, {0x8, 0x9}, {0x2, 0xca}, {0xffffffff, 0x400}, {0x100, 0xaf03}, {0x80001000}, {0x96}, {0x402, 0xc}, {0x8000, 0xffffffff000}, {0x8000000000000001, 0x400}, {0x6, 0x10}, {0x49c1a567, 0xde}, {0x800, 0x3}, {0x2, 0x80000001}, {0x9, 0x1}, {0xffff, 0x6}, {0x2}, {0x2, 0x4}, {0xc, 0x80}, {0xd4e3, 0x80000000}, {0x9}, {0x811, 0x6}, {0x1, 0x101}, {0x1, 0xf}, {0x8, 0x7fff}, {0x2, 0x8}, {0x7, 0x7fffffffffffffff}, {0x10001, 0xffffffff}, {0x8c, 0x3}, {0x7, 0x8}, {0x9, 0x9}, {0x2, 0x9}, {0xd1, 0x8}, {0x6, 0x39f}, {0x10000, 0x7}, {0x2, 0x4}, {0x1ff}, {0x9, 0x10001}, {0xabd6, 0x3}, {0x9, 0x2}, {0x80000000, 0x4}, {0x9, 0x54}, {0x101, 0xc3bf}, {0x8, 0x9}, {0x80000000, 0x5}, {0x0, 0x1}, {0xffff, 0xa}, {0x14e1, 0xa6c3}, {0xf1c, 0x81}, {0xff, 0x3}, {0x6, 0xffffffffd5074900}, {0x0, 0xffffffffffffffff}, {0x7, 0x2}, {0x5, 0x6}, {0x4, 0x8}, {0x100000001, 0x4}, {0x8, 0x7f50c674}, {0x0, 0x1}, {0x837e, 0x9}, {0x9, 0x81}, {0x200, 0x1ff}, {0xffffffff, 0x1}, {0x32, 0x99}, {0x7fffffffffffffff, 0x4}, {0x0, 0x40}, {0xfffffffffffffff8, 0xfffffffffffffffd}, {}, {0x1, 0x200}, {0x7, 0x60a}, {0x5, 0xc}, {0x2, 0x11c}, {0xffff, 0x7d}, {0x80000001}, {0x101, 0x5}, {0x0, 0xf}, {0x200, 0x72b}, {0x6, 0x2}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x2}, {0xe19, 0x3}, {0x5}, {0xbdd, 0x9}, {0x9, 0xffffffffffffffff}, {0x3, 0x10004}, {0x0, 0x8}, {0xd, 0xfffffffffffff801}, {0x4, 0x3}, {0x0, 0xe}, {0x100, 0x2}, {0x2, 0x280000000}, {0x5f, 0x1ea}, {0x7fff, 0x1}, {0x5, 0x8}, {0xd53, 0x9}, {0x2}, {0x7, 0x22}, {0x0, 0xfffffffffffffe01}, {0x2, 0x1800000000000000}, {0xffffffffffffffff, 0x178}, {0x1, 0x80}, {0x696, 0x9}, {0x3, 0xfffffffffffffffa}, {0x0, 0x9}, {0x3, 0x7ff}, {0x9, 0x3}, {0x726, 0x100000000}, {0x7, 0x50}, {0x705, 0x86e}, {0xb, 0x6}, {0x5, 0x7fffffffffffffff}, {0x1, 0x200}, {0x4, 0x3}, {0xfffffffffffffff8, 0x32954bdd}, {0x3}, {0x993d, 0x7}, {0x1f915b03, 0xf67}, {0x2, 0x7ff}, {0x800, 0xa3e}, {0x3, 0x2d82}, {0x4, 0x6}, {0xb9, 0x9}, {0x9, 0x2}, {0x10000, 0x1}, {0x7, 0x4}, {0x7fffffff, 0x8}, {0xdd4, 0xa84}, {0x0, 0x5a32}, {0xe76a, 0x80}, {0x0, 0x8}, {0x4ad, 0x7000000000}, {0x4, 0x4}, {0x4, 0x3}, {0x8001, 0x4}, {0x4, 0xcf}, {0x8000, 0x8000}, {0x6, 0x8}, {0x5, 0x70}, {0x5, 0x1}, {0x1518, 0x80}, {0x1, 0x8000}, {0x9, 0xa}, {0x6, 0x7}, {0x802, 0x6}, {0xfffffffffffffffc, 0x10}, {0x5, 0x8}, {0x0, 0xca5}, {0x7, 0x8000}, {0x1000, 0xba}, {0xfffffffffffffffc, 0x1}, {0xffffffffffffffff, 0x800}, {0x7, 0x10000}, {0x9, 0x3}, {0x0, 0x7}, {0x2, 0x9}, {0x8, 0x8000000000000001}, {0x1, 0x7fffffffffffffff}, {0xe0cd, 0x9}, {0x4, 0x3}, {0x2, 0xd}, {0x5, 0x7}, {0x9, 0x8}, {0x0, 0x9f}, {0x3, 0x6}, {0x10003, 0x6}, {0x80, 0xb1}, {0xba7a, 0x5}, {0x3ff, 0xfffffffffd8adff2}, {0x5, 0x9}, {0x5, 0x5}, {0xf, 0x5931}, {0x400000, 0x2}, {0x4, 0x7fffffff}, {0xffffffffffff8000, 0x8d}, {0xfc3a, 0x1}, {0x5, 0xffff}, {0x800, 0x8000000000000001}, {0x0, 0xa3a6}, {0xb4d, 0x3c}, {0x5, 0x1}, {0x1, 0x2}, {0x4, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 326.157215ms ago: executing program 3 (id=1743): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c0010001000100000000000000010000000000000000000000000000000100"/67, 0x43, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x7}, 0x1c) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x17, 0x3, "4d5ac8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) setresgid(0xee01, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{0x0}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) kernel console output (not intermixed with test programs): peed: super-speed-plus [ 662.258703][ T9255] syz.4.855 (9255): drop_caches: 2 [ 662.359970][ T9255] input: syz1 as /devices/virtual/input/input22 [ 662.434201][ T9257] No source specified [ 664.340501][ T9269] blktrace: Concurrent blktraces are not allowed on loop7 [ 665.102538][ T9276] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 668.123637][ T9285] No source specified [ 668.705780][ T9289] CIFS: Attempting to mount //127.0.0.1/share [ 668.747965][ T9291] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 668.772812][ T9291] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 669.493631][ T9289] CIFS: VFS: cifs_mount failed w/return code = -112 [ 669.983460][ T9304] trusted_key: encrypted_key: key user:syz not found [ 670.234856][ T9315] debugfs: File 'trace0' in directory 'loop5' already present! [ 672.613463][ T9324] IPVS: set_ctl: invalid protocol: 0 172.20.20.35:20002 [ 674.677858][ T9334] siw: device registration error -23 [ 680.368434][ T9366] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 680.377336][ T9366] CPU: 0 PID: 9366 Comm: syz.1.887 Not tainted syzkaller #0 [ 680.384668][ T9366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 680.394767][ T9366] Call Trace: [ 680.398083][ T9366] [ 680.401044][ T9366] dump_stack_lvl+0x18c/0x250 [ 680.405776][ T9366] ? show_regs_print_info+0x20/0x20 [ 680.411009][ T9366] ? load_image+0x420/0x420 [ 680.415558][ T9366] sysfs_create_dir_ns+0x26e/0x2a0 [ 680.420715][ T9366] ? __lock_acquire+0x7d80/0x7d80 [ 680.425790][ T9366] ? sysfs_warn_dup+0xa0/0xa0 [ 680.430499][ T9366] ? rcu_is_watching+0x15/0xb0 [ 680.435320][ T9366] ? do_raw_spin_unlock+0x121/0x230 [ 680.440564][ T9366] kobject_add_internal+0x617/0xc90 [ 680.445826][ T9366] kobject_add+0x164/0x240 [ 680.450308][ T9366] ? kobject_init+0x1d0/0x1d0 [ 680.455074][ T9366] ? get_device_parent+0x366/0x390 [ 680.460259][ T9366] device_add+0x3fa/0xc40 [ 680.464652][ T9366] tty_register_device_attr+0x425/0x950 [ 680.470281][ T9366] ? tty_register_device+0x30/0x30 [ 680.475447][ T9366] ? tty_port_init+0x132/0x1a0 [ 680.480258][ T9366] ? gsm_dlci_alloc+0x32a/0x630 [ 680.485153][ T9366] ? __might_fault+0xaa/0x120 [ 680.489886][ T9366] gsm_activate_mux+0x110/0x2a0 [ 680.494817][ T9366] gsmld_ioctl+0x12ca/0x1900 [ 680.499474][ T9366] ? gsmld_write+0x120/0x120 [ 680.504126][ T9366] ? __init_ldsem+0x150/0x150 [ 680.508834][ T9366] ? __fget_files+0x28/0x460 [ 680.513460][ T9366] ? gsmld_write+0x120/0x120 [ 680.518074][ T9366] tty_ioctl+0x9b5/0xdc0 [ 680.522339][ T9366] ? tty_get_icount+0xb0/0xb0 [ 680.527031][ T9366] __se_sys_ioctl+0xfd/0x170 [ 680.531653][ T9366] do_syscall_64+0x55/0xb0 [ 680.536096][ T9366] ? clear_bhb_loop+0x40/0x90 [ 680.540796][ T9366] ? clear_bhb_loop+0x40/0x90 [ 680.545496][ T9366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.551410][ T9366] RIP: 0033:0x7f8874b9e159 [ 680.555859][ T9366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.575502][ T9366] RSP: 002b:00007f88759d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 680.583938][ T9366] RAX: ffffffffffffffda RBX: 00007f8874e26090 RCX: 00007f8874b9e159 [ 680.591927][ T9366] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 680.599918][ T9366] RBP: 00007f8874c3503b R08: 0000000000000000 R09: 0000000000000000 [ 680.607912][ T9366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.615902][ T9366] R13: 00007f8874e26128 R14: 00007f8874e26090 R15: 00007ffea40ab108 [ 680.623907][ T9366] [ 680.646450][ T9366] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 680.840699][ T9373] siw: device registration error -23 [ 682.411011][ T9380] trusted_key: encrypted_key: key user:syz not found [ 686.812348][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.825826][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.254491][ T9406] siw: device registration error -23 [ 694.850495][ T9436] fuse: Bad value for 'rootmode' [ 695.334478][ T9445] trusted_key: encrypted_key: key trusted:syz not found [ 699.578314][ T9467] fuse: Unknown parameter 'use00000000000000000000' [ 703.146018][ T9485] input: syz1 as /devices/virtual/input/input23 [ 703.182250][ T9482] syz.1.920 (9482): drop_caches: 2 [ 703.475437][ T9475] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 706.270138][ T9506] fuse: Unknown parameter 'use00000000000000000000' [ 709.070733][ T9536] 9pnet_fd: Insufficient options for proto=fd [ 709.082580][ T9536] mtrr: base(0x10000000100000) is not aligned on a size(0x0000) boundary [ 710.658449][ T9526] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 716.068881][ T9571] 9pnet_fd: Insufficient options for proto=fd [ 716.084924][ T9571] mtrr: base(0x10000000100000) is not aligned on a size(0x0000) boundary [ 719.274331][ T9584] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 722.788787][ T9611] 9pnet_fd: Insufficient options for proto=fd [ 722.801417][ T9611] mtrr: base(0x10000000100000) is not aligned on a size(0x0000) boundary [ 729.581941][ T9633] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 729.591508][ T9633] CPU: 1 PID: 9633 Comm: syz.4.957 Not tainted syzkaller #0 [ 729.598883][ T9633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 729.608986][ T9633] Call Trace: [ 729.612305][ T9633] [ 729.615290][ T9633] dump_stack_lvl+0x18c/0x250 [ 729.620014][ T9633] ? show_regs_print_info+0x20/0x20 [ 729.625258][ T9633] ? load_image+0x420/0x420 [ 729.629986][ T9633] sysfs_create_dir_ns+0x26e/0x2a0 [ 729.635181][ T9633] ? __lock_acquire+0x7d80/0x7d80 [ 729.640254][ T9633] ? sysfs_warn_dup+0xa0/0xa0 [ 729.645094][ T9633] ? do_raw_spin_unlock+0x121/0x230 [ 729.650346][ T9633] kobject_add_internal+0x617/0xc90 [ 729.655597][ T9633] kobject_add+0x164/0x240 [ 729.660056][ T9633] ? kobject_init+0x1d0/0x1d0 [ 729.664784][ T9633] ? get_device_parent+0x366/0x390 [ 729.669931][ T9633] device_add+0x3fa/0xc40 [ 729.674293][ T9633] tty_register_device_attr+0x425/0x950 [ 729.679875][ T9633] ? tty_register_device+0x30/0x30 [ 729.685021][ T9633] ? tty_port_init+0x132/0x1a0 [ 729.689841][ T9633] ? gsm_dlci_alloc+0x32a/0x630 [ 729.694720][ T9633] ? __might_fault+0xaa/0x120 [ 729.699430][ T9633] gsm_activate_mux+0x110/0x2a0 [ 729.704325][ T9633] gsmld_ioctl+0x12ca/0x1900 [ 729.708954][ T9633] ? gsmld_write+0x120/0x120 [ 729.713587][ T9633] ? __init_ldsem+0x150/0x150 [ 729.718300][ T9633] ? __fget_files+0x28/0x460 [ 729.722928][ T9633] ? gsmld_write+0x120/0x120 [ 729.727551][ T9633] tty_ioctl+0x9b5/0xdc0 [ 729.731829][ T9633] ? tty_get_icount+0xb0/0xb0 [ 729.736539][ T9633] __se_sys_ioctl+0xfd/0x170 [ 729.741162][ T9633] do_syscall_64+0x55/0xb0 [ 729.745628][ T9633] ? clear_bhb_loop+0x40/0x90 [ 729.750349][ T9633] ? clear_bhb_loop+0x40/0x90 [ 729.755058][ T9633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 729.760985][ T9633] RIP: 0033:0x7feb4739e159 [ 729.765433][ T9633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.785064][ T9633] RSP: 002b:00007feb48265028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 729.793500][ T9633] RAX: ffffffffffffffda RBX: 00007feb47626180 RCX: 00007feb4739e159 [ 729.801500][ T9633] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 729.809496][ T9633] RBP: 00007feb4743503b R08: 0000000000000000 R09: 0000000000000000 [ 729.817488][ T9633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 729.825483][ T9633] R13: 00007feb47626218 R14: 00007feb47626180 R15: 00007ffc4cdba248 [ 729.833498][ T9633] [ 729.931530][ T9633] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 732.356440][ T9660] 9pnet_fd: Insufficient options for proto=fd [ 732.366817][ T9660] mtrr: base(0x100000001000000000) is not aligned on a size(0x0000) boundary [ 732.601155][ T9662] trusted_key: encrypted_key: key user:syz not found [ 734.533812][ T9668] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 734.556782][ T9668] rtrs_client L2075: : Failed to resolve address, err: -19 [ 734.566069][ T9668] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 735.877188][ T9676] jffs2: notice: (9676) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 737.941770][ T9684] siw: device registration error -23 [ 744.993843][ T9716] siw: device registration error -23 [ 745.383977][ T9720] jffs2: notice: (9720) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 746.877172][ T9720] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 747.532077][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.540470][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.393081][ T9736] Bluetooth: MGMT ver 1.22 [ 748.397814][ T9736] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 749.813058][ T9741] trusted_key: encrypted_key: key user:syz not found [ 751.381051][ T9746] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 751.399510][ T9746] CPU: 1 PID: 9746 Comm: syz.2.993 Not tainted syzkaller #0 [ 751.406859][ T9746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 751.416965][ T9746] Call Trace: [ 751.420287][ T9746] [ 751.423260][ T9746] dump_stack_lvl+0x18c/0x250 [ 751.428017][ T9746] ? show_regs_print_info+0x20/0x20 [ 751.433295][ T9746] ? load_image+0x420/0x420 [ 751.437868][ T9746] sysfs_create_dir_ns+0x26e/0x2a0 [ 751.443054][ T9746] ? __lock_acquire+0x7d80/0x7d80 [ 751.448133][ T9746] ? sysfs_warn_dup+0xa0/0xa0 [ 751.452875][ T9746] ? rcu_is_watching+0x15/0xb0 [ 751.457709][ T9746] ? do_raw_spin_unlock+0x121/0x230 [ 751.462976][ T9746] kobject_add_internal+0x617/0xc90 [ 751.468252][ T9746] kobject_add+0x164/0x240 [ 751.472741][ T9746] ? kobject_init+0x1d0/0x1d0 [ 751.477507][ T9746] ? get_device_parent+0x366/0x390 [ 751.482683][ T9746] device_add+0x3fa/0xc40 [ 751.487071][ T9746] tty_register_device_attr+0x425/0x950 [ 751.492697][ T9746] ? tty_register_device+0x30/0x30 [ 751.497876][ T9746] ? tty_port_init+0x132/0x1a0 [ 751.502705][ T9746] ? gsm_dlci_alloc+0x32a/0x630 [ 751.507607][ T9746] ? __might_fault+0xaa/0x120 [ 751.512341][ T9746] gsm_activate_mux+0x110/0x2a0 [ 751.517265][ T9746] gsmld_ioctl+0x12ca/0x1900 [ 751.521934][ T9746] ? gsmld_write+0x120/0x120 [ 751.526595][ T9746] ? __init_ldsem+0x150/0x150 [ 751.531329][ T9746] ? __fget_files+0x28/0x460 [ 751.536029][ T9746] ? gsmld_write+0x120/0x120 [ 751.540679][ T9746] tty_ioctl+0x9b5/0xdc0 [ 751.544994][ T9746] ? tty_get_icount+0xb0/0xb0 [ 751.549730][ T9746] __se_sys_ioctl+0xfd/0x170 [ 751.554389][ T9746] do_syscall_64+0x55/0xb0 [ 751.558858][ T9746] ? clear_bhb_loop+0x40/0x90 [ 751.563591][ T9746] ? clear_bhb_loop+0x40/0x90 [ 751.568326][ T9746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 751.574271][ T9746] RIP: 0033:0x7f789ef9e159 [ 751.578730][ T9746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.598479][ T9746] RSP: 002b:00007f789fd80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.606967][ T9746] RAX: ffffffffffffffda RBX: 00007f789f226180 RCX: 00007f789ef9e159 [ 751.615004][ T9746] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 751.623016][ T9746] RBP: 00007f789f03503b R08: 0000000000000000 R09: 0000000000000000 [ 751.631031][ T9746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.639048][ T9746] R13: 00007f789f226218 R14: 00007f789f226180 R15: 00007ffc23ec6fd8 [ 751.647138][ T9746] [ 751.656248][ T9746] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 762.932129][ T1756] kworker/dying (1756) used greatest stack depth: 19768 bytes left [ 764.892065][ T9817] binder: 9816:9817 ioctl 4018620d 0 returned -22 [ 765.059898][ T9819] jffs2: notice: (9819) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 767.031919][ T9831] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 767.051636][ T9831] CPU: 1 PID: 9831 Comm: syz.3.1003 Not tainted syzkaller #0 [ 767.059072][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 767.069172][ T9831] Call Trace: [ 767.072508][ T9831] [ 767.075478][ T9831] dump_stack_lvl+0x18c/0x250 [ 767.080213][ T9831] ? show_regs_print_info+0x20/0x20 [ 767.085462][ T9831] ? load_image+0x420/0x420 [ 767.090028][ T9831] sysfs_create_dir_ns+0x26e/0x2a0 [ 767.095197][ T9831] ? __lock_acquire+0x7d80/0x7d80 [ 767.100277][ T9831] ? sysfs_warn_dup+0xa0/0xa0 [ 767.105016][ T9831] ? rcu_is_watching+0x15/0xb0 [ 767.109839][ T9831] ? do_raw_spin_unlock+0x121/0x230 [ 767.115106][ T9831] kobject_add_internal+0x617/0xc90 [ 767.120379][ T9831] kobject_add+0x164/0x240 [ 767.124857][ T9831] ? kobject_init+0x1d0/0x1d0 [ 767.129618][ T9831] ? get_device_parent+0x366/0x390 [ 767.134784][ T9831] device_add+0x3fa/0xc40 [ 767.139162][ T9831] tty_register_device_attr+0x425/0x950 [ 767.144770][ T9831] ? tty_register_device+0x30/0x30 [ 767.149945][ T9831] ? tty_port_init+0x132/0x1a0 [ 767.154753][ T9831] ? gsm_dlci_alloc+0x32a/0x630 [ 767.159674][ T9831] ? __might_fault+0xaa/0x120 [ 767.164417][ T9831] gsm_activate_mux+0x110/0x2a0 [ 767.169326][ T9831] gsmld_ioctl+0x12ca/0x1900 [ 767.173983][ T9831] ? gsmld_write+0x120/0x120 [ 767.178731][ T9831] ? __init_ldsem+0x150/0x150 [ 767.183493][ T9831] ? __fget_files+0x28/0x460 [ 767.188153][ T9831] ? gsmld_write+0x120/0x120 [ 767.192790][ T9831] tty_ioctl+0x9b5/0xdc0 [ 767.197085][ T9831] ? tty_get_icount+0xb0/0xb0 [ 767.201834][ T9831] __se_sys_ioctl+0xfd/0x170 [ 767.206488][ T9831] do_syscall_64+0x55/0xb0 [ 767.210958][ T9831] ? clear_bhb_loop+0x40/0x90 [ 767.215680][ T9831] ? clear_bhb_loop+0x40/0x90 [ 767.220407][ T9831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.226351][ T9831] RIP: 0033:0x7fcb7af9e159 [ 767.230822][ T9831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.250503][ T9831] RSP: 002b:00007fcb791b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 767.258958][ T9831] RAX: ffffffffffffffda RBX: 00007fcb7b226180 RCX: 00007fcb7af9e159 [ 767.266963][ T9831] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 767.274950][ T9831] RBP: 00007fcb7b03503b R08: 0000000000000000 R09: 0000000000000000 [ 767.282933][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.290943][ T9831] R13: 00007fcb7b226218 R14: 00007fcb7b226180 R15: 00007ffeab95bab8 [ 767.298940][ T9831] [ 767.317382][ T9831] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 767.381506][ T8187] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 768.432045][ T8187] usb 2-1: not running at top speed; connect to a high speed hub [ 768.509797][ T8187] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 242, changing to 4 [ 768.602762][ T8187] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 768.806578][ T8187] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 768.923936][ T8187] usb 2-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 769.090639][ T8187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.203117][ T8187] usb 2-1: Product: syz [ 769.255206][ T8187] usb 2-1: Manufacturer: syz [ 769.259882][ T8187] usb 2-1: SerialNumber: syz [ 769.330183][ T9842] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 770.870704][ T8187] usb 2-1: can't set config #1, error -71 [ 770.914546][ T8187] usb 2-1: USB disconnect, device number 9 [ 771.017263][ T9855] binder: 9854:9855 ioctl 4018620d 0 returned -22 [ 771.280063][ T9857] jffs2: notice: (9857) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 773.084008][ T9865] netlink: 'syz.4.1021': attribute type 1 has an invalid length. [ 773.130479][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1021'. [ 776.517840][ T9888] binder: 9887:9888 ioctl 4018620d 0 returned -22 [ 776.725969][ T9891] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 776.741669][ T9891] rtrs_client L2075: : Failed to resolve address, err: -19 [ 776.750637][ T9891] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 779.651946][ T9899] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 779.660444][ T9899] CPU: 1 PID: 9899 Comm: syz.4.1030 Not tainted syzkaller #0 [ 779.667844][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 779.677938][ T9899] Call Trace: [ 779.681247][ T9899] [ 779.684201][ T9899] dump_stack_lvl+0x18c/0x250 [ 779.688925][ T9899] ? show_regs_print_info+0x20/0x20 [ 779.694169][ T9899] ? load_image+0x420/0x420 [ 779.698804][ T9899] sysfs_create_dir_ns+0x26e/0x2a0 [ 779.703953][ T9899] ? __lock_acquire+0x7d80/0x7d80 [ 779.709018][ T9899] ? sysfs_warn_dup+0xa0/0xa0 [ 779.713730][ T9899] ? rcu_is_watching+0x15/0xb0 [ 779.718537][ T9899] ? do_raw_spin_unlock+0x121/0x230 [ 779.723783][ T9899] kobject_add_internal+0x617/0xc90 [ 779.729030][ T9899] kobject_add+0x164/0x240 [ 779.733498][ T9899] ? kobject_init+0x1d0/0x1d0 [ 779.738237][ T9899] ? get_device_parent+0x366/0x390 [ 779.743384][ T9899] device_add+0x3fa/0xc40 [ 779.747755][ T9899] tty_register_device_attr+0x425/0x950 [ 779.753356][ T9899] ? tty_register_device+0x30/0x30 [ 779.758516][ T9899] ? tty_port_init+0x132/0x1a0 [ 779.763324][ T9899] ? gsm_dlci_alloc+0x32a/0x630 [ 779.768213][ T9899] ? __might_fault+0xaa/0x120 [ 779.772926][ T9899] gsm_activate_mux+0x110/0x2a0 [ 779.777821][ T9899] gsmld_ioctl+0x12ca/0x1900 [ 779.782459][ T9899] ? gsmld_write+0x120/0x120 [ 779.787120][ T9899] ? __init_ldsem+0x150/0x150 [ 779.791872][ T9899] ? __fget_files+0x28/0x460 [ 779.796522][ T9899] ? gsmld_write+0x120/0x120 [ 779.801171][ T9899] tty_ioctl+0x9b5/0xdc0 [ 779.805466][ T9899] ? tty_get_icount+0xb0/0xb0 [ 779.810178][ T9899] __se_sys_ioctl+0xfd/0x170 [ 779.814806][ T9899] do_syscall_64+0x55/0xb0 [ 779.819261][ T9899] ? clear_bhb_loop+0x40/0x90 [ 779.823986][ T9899] ? clear_bhb_loop+0x40/0x90 [ 779.828722][ T9899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 779.834660][ T9899] RIP: 0033:0x7feb4739e159 [ 779.839113][ T9899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.858753][ T9899] RSP: 002b:00007feb48265028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.867251][ T9899] RAX: ffffffffffffffda RBX: 00007feb47626180 RCX: 00007feb4739e159 [ 779.875278][ T9899] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 779.883286][ T9899] RBP: 00007feb4743503b R08: 0000000000000000 R09: 0000000000000000 [ 779.891294][ T9899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.899292][ T9899] R13: 00007feb47626218 R14: 00007feb47626180 R15: 00007ffc4cdba248 [ 779.907334][ T9899] [ 780.491572][ T9902] jffs2: notice: (9902) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 782.336066][ T9899] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 782.780245][ T2942] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.960358][ T2942] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.164822][ T2942] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.067251][ T2942] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.196595][ T9923] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 787.206018][ T9923] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 787.214157][ T9923] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 787.223202][ T9923] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 787.230861][ T9923] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 787.238246][ T9923] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 789.363611][ T9926] Bluetooth: hci3: command tx timeout [ 791.437428][ T9920] chnl_net:caif_netlink_parms(): no params data found [ 791.444978][ T9926] Bluetooth: hci3: command tx timeout [ 791.489506][ T9955] binder: BINDER_SET_CONTEXT_MGR already set [ 791.521432][ T9955] binder: 9953:9955 ioctl 4018620d 200000004a80 returned -16 [ 793.091269][ T9970] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 793.106705][ T9970] rtrs_client L2075: : Failed to resolve address, err: -19 [ 793.114978][ T9970] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 793.511392][ T9926] Bluetooth: hci3: command tx timeout [ 794.129352][ T9920] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.158457][ T9920] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.183908][ T9920] bridge_slave_0: entered allmulticast mode [ 795.123089][ T9920] bridge_slave_0: entered promiscuous mode [ 795.469794][ T9920] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.504370][ T9920] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.511946][ T9920] bridge_slave_1: entered allmulticast mode [ 795.519131][ T9920] bridge_slave_1: entered promiscuous mode [ 795.598180][ T9926] Bluetooth: hci3: command tx timeout [ 795.734394][ T9920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.789399][ T9920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.914073][ T2942] hsr_slave_0: left promiscuous mode [ 795.932282][ T2942] hsr_slave_1: left promiscuous mode [ 797.465445][ T2942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.491761][ T2942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.499888][ T2942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.531533][ T2942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.582012][ T2942] bridge_slave_1: left allmulticast mode [ 797.587726][ T2942] bridge_slave_1: left promiscuous mode [ 797.611880][ T2942] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.662805][ T2942] bridge_slave_0: left allmulticast mode [ 797.668501][ T2942] bridge_slave_0: left promiscuous mode [ 797.691562][ T2942] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.841631][ T2942] veth1_macvtap: left promiscuous mode [ 797.847683][ T2942] veth0_macvtap: left promiscuous mode [ 797.872203][ T2942] veth1_vlan: left promiscuous mode [ 797.877671][ T2942] veth0_vlan: left promiscuous mode [ 798.041555][ T9991] jffs2: notice: (9991) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 798.312145][ T9996] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 798.320634][ T9996] CPU: 1 PID: 9996 Comm: syz.1.1044 Not tainted syzkaller #0 [ 798.328040][ T9996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 798.338134][ T9996] Call Trace: [ 798.341461][ T9996] [ 798.344442][ T9996] dump_stack_lvl+0x18c/0x250 [ 798.349172][ T9996] ? show_regs_print_info+0x20/0x20 [ 798.354404][ T9996] ? load_image+0x420/0x420 [ 798.358960][ T9996] sysfs_create_dir_ns+0x26e/0x2a0 [ 798.364117][ T9996] ? __lock_acquire+0x7d80/0x7d80 [ 798.369183][ T9996] ? sysfs_warn_dup+0xa0/0xa0 [ 798.373894][ T9996] ? rcu_is_watching+0x15/0xb0 [ 798.378707][ T9996] ? do_raw_spin_unlock+0x121/0x230 [ 798.383957][ T9996] kobject_add_internal+0x617/0xc90 [ 798.389217][ T9996] kobject_add+0x164/0x240 [ 798.393695][ T9996] ? kobject_init+0x1d0/0x1d0 [ 798.398438][ T9996] ? get_device_parent+0x366/0x390 [ 798.403616][ T9996] device_add+0x3fa/0xc40 [ 798.407990][ T9996] tty_register_device_attr+0x425/0x950 [ 798.413629][ T9996] ? tty_register_device+0x30/0x30 [ 798.418806][ T9996] ? tty_port_init+0x132/0x1a0 [ 798.423622][ T9996] ? gsm_dlci_alloc+0x32a/0x630 [ 798.428517][ T9996] ? __might_fault+0xaa/0x120 [ 798.433237][ T9996] gsm_activate_mux+0x110/0x2a0 [ 798.438141][ T9996] gsmld_ioctl+0x12ca/0x1900 [ 798.442778][ T9996] ? gsmld_write+0x120/0x120 [ 798.447421][ T9996] ? __init_ldsem+0x150/0x150 [ 798.452149][ T9996] ? __fget_files+0x28/0x460 [ 798.456799][ T9996] ? gsmld_write+0x120/0x120 [ 798.461437][ T9996] tty_ioctl+0x9b5/0xdc0 [ 798.465720][ T9996] ? tty_get_icount+0xb0/0xb0 [ 798.470464][ T9996] __se_sys_ioctl+0xfd/0x170 [ 798.475099][ T9996] do_syscall_64+0x55/0xb0 [ 798.479553][ T9996] ? clear_bhb_loop+0x40/0x90 [ 798.484285][ T9996] ? clear_bhb_loop+0x40/0x90 [ 798.489018][ T9996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 798.494958][ T9996] RIP: 0033:0x7f8874b9e159 [ 798.499409][ T9996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.519056][ T9996] RSP: 002b:00007f88759b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 798.527629][ T9996] RAX: ffffffffffffffda RBX: 00007f8874e26180 RCX: 00007f8874b9e159 [ 798.535646][ T9996] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 798.543669][ T9996] RBP: 00007f8874c3503b R08: 0000000000000000 R09: 0000000000000000 [ 798.551683][ T9996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.559715][ T9996] R13: 00007f8874e26218 R14: 00007f8874e26180 R15: 00007ffea40ab108 [ 798.567754][ T9996] [ 799.292653][ T9996] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 802.660161][T10014] binder: BINDER_SET_CONTEXT_MGR already set [ 802.672580][T10014] binder: 10013:10014 ioctl 4018620d 200000004a80 returned -16 [ 802.731679][ T2942] team0 (unregistering): Port device team_slave_1 removed [ 803.559225][ T2942] team0 (unregistering): Port device team_slave_0 removed [ 803.761708][ T2942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.150005][ T2942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.065654][ T2942] bond0 (unregistering): Released all slaves [ 806.288836][ T9920] team0: Port device team_slave_0 added [ 806.354852][ T9920] team0: Port device team_slave_1 added [ 806.479615][ T9920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.518019][ T9920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.591637][ T9920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.604557][ T9920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.616413][ T9920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.243132][ T9920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.436302][ T9920] hsr_slave_0: entered promiscuous mode [ 808.467381][ T9920] hsr_slave_1: entered promiscuous mode [ 808.526172][ T9920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 808.551399][ T9920] Cannot create hsr debugfs directory [ 809.902203][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.908585][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.250782][ T9920] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 814.351912][ T9920] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 815.324464][ T9920] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 815.464374][ T9920] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 815.885653][ T9920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.072218][T10087] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 816.080779][T10087] CPU: 0 PID: 10087 Comm: syz.2.1058 Not tainted syzkaller #0 [ 816.088248][T10087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 816.098312][T10087] Call Trace: [ 816.101601][T10087] [ 816.104538][T10087] dump_stack_lvl+0x18c/0x250 [ 816.109225][T10087] ? show_regs_print_info+0x20/0x20 [ 816.114439][T10087] ? load_image+0x420/0x420 [ 816.118964][T10087] sysfs_create_dir_ns+0x26e/0x2a0 [ 816.124082][T10087] ? __lock_acquire+0x7d80/0x7d80 [ 816.129113][T10087] ? sysfs_warn_dup+0xa0/0xa0 [ 816.133792][T10087] ? rcu_is_watching+0x15/0xb0 [ 816.138568][T10087] ? do_raw_spin_unlock+0x121/0x230 [ 816.143778][T10087] kobject_add_internal+0x617/0xc90 [ 816.148998][T10087] kobject_add+0x164/0x240 [ 816.153431][T10087] ? kobject_init+0x1d0/0x1d0 [ 816.158143][T10087] ? get_device_parent+0x366/0x390 [ 816.163277][T10087] device_add+0x3fa/0xc40 [ 816.167633][T10087] tty_register_device_attr+0x425/0x950 [ 816.173224][T10087] ? tty_register_device+0x30/0x30 [ 816.178381][T10087] ? tty_port_init+0x132/0x1a0 [ 816.183173][T10087] ? gsm_dlci_alloc+0x32a/0x630 [ 816.188052][T10087] ? __might_fault+0xaa/0x120 [ 816.192782][T10087] gsm_activate_mux+0x110/0x2a0 [ 816.197673][T10087] gsmld_ioctl+0x12ca/0x1900 [ 816.202293][T10087] ? gsmld_write+0x120/0x120 [ 816.206911][T10087] ? __init_ldsem+0x150/0x150 [ 816.211604][T10087] ? __fget_files+0x28/0x460 [ 816.216213][T10087] ? gsmld_write+0x120/0x120 [ 816.220821][T10087] tty_ioctl+0x9b5/0xdc0 [ 816.225109][T10087] ? tty_get_icount+0xb0/0xb0 [ 816.229821][T10087] __se_sys_ioctl+0xfd/0x170 [ 816.234424][T10087] do_syscall_64+0x55/0xb0 [ 816.238847][T10087] ? clear_bhb_loop+0x40/0x90 [ 816.243526][T10087] ? clear_bhb_loop+0x40/0x90 [ 816.248212][T10087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 816.254120][T10087] RIP: 0033:0x7f789ef9e159 [ 816.258556][T10087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.278167][T10087] RSP: 002b:00007f789fd80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 816.286601][T10087] RAX: ffffffffffffffda RBX: 00007f789f226180 RCX: 00007f789ef9e159 [ 816.294602][T10087] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 816.302589][T10087] RBP: 00007f789f03503b R08: 0000000000000000 R09: 0000000000000000 [ 816.310574][T10087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.318569][T10087] R13: 00007f789f226218 R14: 00007f789f226180 R15: 00007ffc23ec6fd8 [ 816.326579][T10087] [ 816.399500][ T9920] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.509697][T10087] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 816.543342][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.550592][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.882552][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.889730][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.016809][ T9920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.205438][ T9920] veth0_vlan: entered promiscuous mode [ 818.247049][ T9920] veth1_vlan: entered promiscuous mode [ 818.346023][ T9920] veth0_macvtap: entered promiscuous mode [ 818.380871][ T9920] veth1_macvtap: entered promiscuous mode [ 818.455331][ T9920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.482455][ T9920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.311546][ T9920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.382903][ T9920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.434260][ T9920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.475300][ T9920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.513030][ T9920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.606300][ T9920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.628894][ T9920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.681414][ T9920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.711532][ T9920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.741691][ T9920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.171377][ T9920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.223960][ T9920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.465790][ T9920] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.495409][ T9920] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.506239][ T9920] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.461501][ T9920] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.593382][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.601266][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.754101][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.793502][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.577080][T10150] jffs2: notice: (10150) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 832.332241][T10178] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 833.043702][T10187] CIFS: Attempting to mount //127.0.0.1/share [ 833.110609][T10187] CIFS: VFS: Error connecting to socket. Aborting operation. [ 833.147758][T10187] CIFS: VFS: cifs_mount failed w/return code = -111 [ 839.171344][T10229] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 839.179917][T10229] CPU: 0 PID: 10229 Comm: syz.4.1076 Not tainted syzkaller #0 [ 839.187407][T10229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 839.197494][T10229] Call Trace: [ 839.200810][T10229] [ 839.203780][T10229] dump_stack_lvl+0x18c/0x250 [ 839.208510][T10229] ? show_regs_print_info+0x20/0x20 [ 839.213754][T10229] ? load_image+0x420/0x420 [ 839.218323][T10229] sysfs_create_dir_ns+0x26e/0x2a0 [ 839.223489][T10229] ? __lock_acquire+0x7d80/0x7d80 [ 839.228553][T10229] ? sysfs_warn_dup+0xa0/0xa0 [ 839.233276][T10229] ? do_raw_spin_unlock+0x121/0x230 [ 839.238524][T10229] kobject_add_internal+0x617/0xc90 [ 839.243768][T10229] kobject_add+0x164/0x240 [ 839.248234][T10229] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 839.253911][T10229] ? kobject_init+0x1d0/0x1d0 [ 839.258639][T10229] ? get_device_parent+0x366/0x390 [ 839.263795][T10229] device_add+0x3fa/0xc40 [ 839.268170][T10229] tty_register_device_attr+0x425/0x950 [ 839.273768][T10229] ? tty_register_device+0x30/0x30 [ 839.278934][T10229] ? tty_port_init+0x132/0x1a0 [ 839.283730][T10229] ? gsm_dlci_alloc+0x32a/0x630 [ 839.288620][T10229] gsm_activate_mux+0x110/0x2a0 [ 839.293518][T10229] gsmld_ioctl+0x12ca/0x1900 [ 839.298155][T10229] ? gsmld_write+0x120/0x120 [ 839.302794][T10229] ? __init_ldsem+0x150/0x150 [ 839.307519][T10229] ? __fget_files+0x28/0x460 [ 839.312187][T10229] ? gsmld_write+0x120/0x120 [ 839.316827][T10229] tty_ioctl+0x9b5/0xdc0 [ 839.321125][T10229] ? tty_get_icount+0xb0/0xb0 [ 839.325843][T10229] __se_sys_ioctl+0xfd/0x170 [ 839.330483][T10229] do_syscall_64+0x55/0xb0 [ 839.334935][T10229] ? clear_bhb_loop+0x40/0x90 [ 839.339660][T10229] ? clear_bhb_loop+0x40/0x90 [ 839.344381][T10229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 839.350319][T10229] RIP: 0033:0x7feb4739e159 [ 839.354775][T10229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.374422][T10229] RSP: 002b:00007feb48265028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 839.382883][T10229] RAX: ffffffffffffffda RBX: 00007feb47626180 RCX: 00007feb4739e159 [ 839.390883][T10229] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 839.398883][T10229] RBP: 00007feb4743503b R08: 0000000000000000 R09: 0000000000000000 [ 839.406899][T10229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.414908][T10229] R13: 00007feb47626218 R14: 00007feb47626180 R15: 00007ffc4cdba248 [ 839.422936][T10229] [ 839.429650][T10229] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 844.056095][T10258] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 854.116677][T10320] trusted_key: encrypted_key: key trusted:syz not found [ 859.121246][T10342] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 859.137022][T10342] CPU: 0 PID: 10342 Comm: syz.1.1096 Not tainted syzkaller #0 [ 859.144525][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 859.154618][T10342] Call Trace: [ 859.157950][T10342] [ 859.160921][T10342] dump_stack_lvl+0x18c/0x250 [ 859.165646][T10342] ? show_regs_print_info+0x20/0x20 [ 859.170897][T10342] ? load_image+0x420/0x420 [ 859.175452][T10342] sysfs_create_dir_ns+0x26e/0x2a0 [ 859.180614][T10342] ? __lock_acquire+0x7d80/0x7d80 [ 859.185682][T10342] ? sysfs_warn_dup+0xa0/0xa0 [ 859.190420][T10342] ? rcu_is_watching+0x15/0xb0 [ 859.195237][T10342] ? do_raw_spin_unlock+0x121/0x230 [ 859.200493][T10342] kobject_add_internal+0x617/0xc90 [ 859.205745][T10342] kobject_add+0x164/0x240 [ 859.210219][T10342] ? kobject_init+0x1d0/0x1d0 [ 859.214950][T10342] ? get_device_parent+0x366/0x390 [ 859.220109][T10342] device_add+0x3fa/0xc40 [ 859.224483][T10342] tty_register_device_attr+0x425/0x950 [ 859.230111][T10342] ? tty_register_device+0x30/0x30 [ 859.235270][T10342] ? tty_port_init+0x132/0x1a0 [ 859.240079][T10342] ? gsm_dlci_alloc+0x32a/0x630 [ 859.244983][T10342] ? __might_fault+0xaa/0x120 [ 859.249702][T10342] gsm_activate_mux+0x110/0x2a0 [ 859.254596][T10342] gsmld_ioctl+0x12ca/0x1900 [ 859.259238][T10342] ? gsmld_write+0x120/0x120 [ 859.263889][T10342] ? __init_ldsem+0x150/0x150 [ 859.268605][T10342] ? __fget_files+0x28/0x460 [ 859.273243][T10342] ? gsmld_write+0x120/0x120 [ 859.277875][T10342] tty_ioctl+0x9b5/0xdc0 [ 859.282157][T10342] ? tty_get_icount+0xb0/0xb0 [ 859.287026][T10342] __se_sys_ioctl+0xfd/0x170 [ 859.291684][T10342] do_syscall_64+0x55/0xb0 [ 859.296140][T10342] ? clear_bhb_loop+0x40/0x90 [ 859.300944][T10342] ? clear_bhb_loop+0x40/0x90 [ 859.305672][T10342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 859.311605][T10342] RIP: 0033:0x7f8874b9e159 [ 859.316074][T10342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.335723][T10342] RSP: 002b:00007f88759b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 859.344175][T10342] RAX: ffffffffffffffda RBX: 00007f8874e26180 RCX: 00007f8874b9e159 [ 859.352181][T10342] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 859.360188][T10342] RBP: 00007f8874c3503b R08: 0000000000000000 R09: 0000000000000000 [ 859.368212][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.376223][T10342] R13: 00007f8874e26218 R14: 00007f8874e26180 R15: 00007ffea40ab108 [ 859.384260][T10342] [ 859.443578][T10342] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 865.827798][T10372] siw: device registration error -23 [ 868.827766][T10384] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 868.836569][T10384] CPU: 0 PID: 10384 Comm: syz.3.1114 Not tainted syzkaller #0 [ 868.844081][T10384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 868.854173][T10384] Call Trace: [ 868.857498][T10384] [ 868.860470][T10384] dump_stack_lvl+0x18c/0x250 [ 868.865210][T10384] ? show_regs_print_info+0x20/0x20 [ 868.870460][T10384] ? load_image+0x420/0x420 [ 868.875018][T10384] sysfs_create_dir_ns+0x26e/0x2a0 [ 868.880170][T10384] ? __lock_acquire+0x7d80/0x7d80 [ 868.885243][T10384] ? sysfs_warn_dup+0xa0/0xa0 [ 868.889996][T10384] ? do_raw_spin_unlock+0x121/0x230 [ 868.895261][T10384] kobject_add_internal+0x617/0xc90 [ 868.900522][T10384] kobject_add+0x164/0x240 [ 868.904992][T10384] ? kobject_init+0x1d0/0x1d0 [ 868.909721][T10384] ? get_device_parent+0x366/0x390 [ 868.914885][T10384] device_add+0x3fa/0xc40 [ 868.919276][T10384] tty_register_device_attr+0x425/0x950 [ 868.924898][T10384] ? tty_register_device+0x30/0x30 [ 868.930064][T10384] ? tty_port_init+0x132/0x1a0 [ 868.934867][T10384] ? gsm_dlci_alloc+0x32a/0x630 [ 868.939780][T10384] ? __might_fault+0xaa/0x120 [ 868.944527][T10384] gsm_activate_mux+0x110/0x2a0 [ 868.949434][T10384] gsmld_ioctl+0x12ca/0x1900 [ 868.954081][T10384] ? gsmld_write+0x120/0x120 [ 868.958738][T10384] ? __init_ldsem+0x150/0x150 [ 868.963472][T10384] ? __fget_files+0x28/0x460 [ 868.968121][T10384] ? gsmld_write+0x120/0x120 [ 868.972755][T10384] tty_ioctl+0x9b5/0xdc0 [ 868.977050][T10384] ? tty_get_icount+0xb0/0xb0 [ 868.981790][T10384] __se_sys_ioctl+0xfd/0x170 [ 868.986432][T10384] do_syscall_64+0x55/0xb0 [ 868.990900][T10384] ? clear_bhb_loop+0x40/0x90 [ 868.995630][T10384] ? clear_bhb_loop+0x40/0x90 [ 869.000380][T10384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 869.006321][T10384] RIP: 0033:0x7f26b719e159 [ 869.010778][T10384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.030459][T10384] RSP: 002b:00007f26b80f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 869.038929][T10384] RAX: ffffffffffffffda RBX: 00007f26b7426180 RCX: 00007f26b719e159 [ 869.046945][T10384] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 869.054957][T10384] RBP: 00007f26b723503b R08: 0000000000000000 R09: 0000000000000000 [ 869.062960][T10384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.070966][T10384] R13: 00007f26b7426218 R14: 00007f26b7426180 R15: 00007fff32e2c0f8 [ 869.078989][T10384] [ 869.135762][T10384] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 870.400691][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.546783][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.538153][T10407] ip_tables: iptables: counters copy to user failed while replacing table [ 878.808982][T10443] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 878.817672][T10443] CPU: 1 PID: 10443 Comm: syz.4.1126 Not tainted syzkaller #0 [ 878.825169][T10443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 878.835259][T10443] Call Trace: [ 878.838573][T10443] [ 878.841531][T10443] dump_stack_lvl+0x18c/0x250 [ 878.846263][T10443] ? show_regs_print_info+0x20/0x20 [ 878.851522][T10443] ? load_image+0x420/0x420 [ 878.856085][T10443] sysfs_create_dir_ns+0x26e/0x2a0 [ 878.861242][T10443] ? __lock_acquire+0x7d80/0x7d80 [ 878.866309][T10443] ? sysfs_warn_dup+0xa0/0xa0 [ 878.871032][T10443] ? rcu_is_watching+0x15/0xb0 [ 878.875854][T10443] ? do_raw_spin_unlock+0x121/0x230 [ 878.881127][T10443] kobject_add_internal+0x617/0xc90 [ 878.886401][T10443] kobject_add+0x164/0x240 [ 878.890887][T10443] ? kobject_init+0x1d0/0x1d0 [ 878.895616][T10443] ? get_device_parent+0x366/0x390 [ 878.900771][T10443] device_add+0x3fa/0xc40 [ 878.905179][T10443] tty_register_device_attr+0x425/0x950 [ 878.910789][T10443] ? tty_register_device+0x30/0x30 [ 878.915957][T10443] ? tty_port_init+0x132/0x1a0 [ 878.920811][T10443] ? gsm_dlci_alloc+0x32a/0x630 [ 878.925716][T10443] ? __might_fault+0xaa/0x120 [ 878.930435][T10443] gsm_activate_mux+0x110/0x2a0 [ 878.935344][T10443] gsmld_ioctl+0x12ca/0x1900 [ 878.939994][T10443] ? gsmld_write+0x120/0x120 [ 878.944646][T10443] ? __init_ldsem+0x150/0x150 [ 878.949372][T10443] ? __fget_files+0x28/0x460 [ 878.954057][T10443] ? gsmld_write+0x120/0x120 [ 878.958705][T10443] tty_ioctl+0x9b5/0xdc0 [ 878.963027][T10443] ? tty_get_icount+0xb0/0xb0 [ 878.967753][T10443] __se_sys_ioctl+0xfd/0x170 [ 878.972400][T10443] do_syscall_64+0x55/0xb0 [ 878.976857][T10443] ? clear_bhb_loop+0x40/0x90 [ 878.981576][T10443] ? clear_bhb_loop+0x40/0x90 [ 878.986305][T10443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 878.992255][T10443] RIP: 0033:0x7feb4739e159 [ 878.996710][T10443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.016375][T10443] RSP: 002b:00007feb48265028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 879.024835][T10443] RAX: ffffffffffffffda RBX: 00007feb47626180 RCX: 00007feb4739e159 [ 879.032845][T10443] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 879.040851][T10443] RBP: 00007feb4743503b R08: 0000000000000000 R09: 0000000000000000 [ 879.048864][T10443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.056882][T10443] R13: 00007feb47626218 R14: 00007feb47626180 R15: 00007ffc4cdba248 [ 879.064922][T10443] [ 879.069200][T10443] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 884.642236][T10467] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 887.897007][T10474] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 887.905597][T10474] CPU: 0 PID: 10474 Comm: syz.2.1137 Not tainted syzkaller #0 [ 887.913084][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 887.923179][T10474] Call Trace: [ 887.926491][T10474] [ 887.929459][T10474] dump_stack_lvl+0x18c/0x250 [ 887.934199][T10474] ? show_regs_print_info+0x20/0x20 [ 887.939441][T10474] ? load_image+0x420/0x420 [ 887.944000][T10474] sysfs_create_dir_ns+0x26e/0x2a0 [ 887.949149][T10474] ? __lock_acquire+0x7d80/0x7d80 [ 887.954243][T10474] ? sysfs_warn_dup+0xa0/0xa0 [ 887.958991][T10474] ? rcu_is_watching+0x15/0xb0 [ 887.963802][T10474] ? do_raw_spin_unlock+0x121/0x230 [ 887.969063][T10474] kobject_add_internal+0x617/0xc90 [ 887.974345][T10474] kobject_add+0x164/0x240 [ 887.978814][T10474] ? kobject_init+0x1d0/0x1d0 [ 887.983538][T10474] ? get_device_parent+0x366/0x390 [ 887.988701][T10474] device_add+0x3fa/0xc40 [ 887.993079][T10474] tty_register_device_attr+0x425/0x950 [ 887.998698][T10474] ? tty_register_device+0x30/0x30 [ 888.003863][T10474] ? tty_port_init+0x132/0x1a0 [ 888.008671][T10474] ? gsm_dlci_alloc+0x32a/0x630 [ 888.013575][T10474] ? __might_fault+0xaa/0x120 [ 888.018327][T10474] gsm_activate_mux+0x110/0x2a0 [ 888.023236][T10474] gsmld_ioctl+0x12ca/0x1900 [ 888.027918][T10474] ? gsmld_write+0x120/0x120 [ 888.032564][T10474] ? __init_ldsem+0x150/0x150 [ 888.037277][T10474] ? lockdep_hardirqs_on+0x98/0x150 [ 888.042530][T10474] ? gsmld_write+0x120/0x120 [ 888.047190][T10474] tty_ioctl+0x9b5/0xdc0 [ 888.051485][T10474] ? tty_get_icount+0xb0/0xb0 [ 888.056202][T10474] __se_sys_ioctl+0xfd/0x170 [ 888.060848][T10474] do_syscall_64+0x55/0xb0 [ 888.065310][T10474] ? clear_bhb_loop+0x40/0x90 [ 888.070031][T10474] ? clear_bhb_loop+0x40/0x90 [ 888.074763][T10474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 888.080700][T10474] RIP: 0033:0x7f789ef9e159 [ 888.085147][T10474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.104794][T10474] RSP: 002b:00007f789fd80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 888.113274][T10474] RAX: ffffffffffffffda RBX: 00007f789f226180 RCX: 00007f789ef9e159 [ 888.121369][T10474] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 888.129371][T10474] RBP: 00007f789f03503b R08: 0000000000000000 R09: 0000000000000000 [ 888.137374][T10474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.145384][T10474] R13: 00007f789f226218 R14: 00007f789f226180 R15: 00007ffc23ec6fd8 [ 888.153417][T10474] [ 888.157858][T10474] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 892.412944][T10485] syz.1.1134: attempt to access beyond end of device [ 892.412944][T10485] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 892.426748][T10485] gfs2: error 10 reading superblock [ 897.026315][T10503] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 898.360091][T10510] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 898.368824][T10510] CPU: 1 PID: 10510 Comm: syz.1.1146 Not tainted syzkaller #0 [ 898.376370][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 898.386467][T10510] Call Trace: [ 898.389778][T10510] [ 898.392748][T10510] dump_stack_lvl+0x18c/0x250 [ 898.397460][T10510] ? show_regs_print_info+0x20/0x20 [ 898.402672][T10510] ? load_image+0x420/0x420 [ 898.407201][T10510] sysfs_create_dir_ns+0x26e/0x2a0 [ 898.412346][T10510] ? __lock_acquire+0x7d80/0x7d80 [ 898.417390][T10510] ? sysfs_warn_dup+0xa0/0xa0 [ 898.422094][T10510] ? do_raw_spin_unlock+0x121/0x230 [ 898.427319][T10510] kobject_add_internal+0x617/0xc90 [ 898.432568][T10510] kobject_add+0x164/0x240 [ 898.437009][T10510] ? kobject_init+0x1d0/0x1d0 [ 898.441712][T10510] ? get_device_parent+0x366/0x390 [ 898.446894][T10510] device_add+0x3fa/0xc40 [ 898.451291][T10510] tty_register_device_attr+0x425/0x950 [ 898.456883][T10510] ? tty_register_device+0x30/0x30 [ 898.462026][T10510] ? tty_port_init+0x132/0x1a0 [ 898.466818][T10510] ? gsm_dlci_alloc+0x32a/0x630 [ 898.471697][T10510] ? __might_fault+0xaa/0x120 [ 898.476429][T10510] gsm_activate_mux+0x110/0x2a0 [ 898.481348][T10510] gsmld_ioctl+0x12ca/0x1900 [ 898.485976][T10510] ? gsmld_write+0x120/0x120 [ 898.490615][T10510] ? __init_ldsem+0x150/0x150 [ 898.495306][T10510] ? __fget_files+0x28/0x460 [ 898.499926][T10510] ? gsmld_write+0x120/0x120 [ 898.504537][T10510] tty_ioctl+0x9b5/0xdc0 [ 898.508835][T10510] ? tty_get_icount+0xb0/0xb0 [ 898.513530][T10510] __se_sys_ioctl+0xfd/0x170 [ 898.518224][T10510] do_syscall_64+0x55/0xb0 [ 898.522662][T10510] ? clear_bhb_loop+0x40/0x90 [ 898.527357][T10510] ? clear_bhb_loop+0x40/0x90 [ 898.532078][T10510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 898.538001][T10510] RIP: 0033:0x7f8874b9e159 [ 898.542440][T10510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.562057][T10510] RSP: 002b:00007f88759b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 898.570480][T10510] RAX: ffffffffffffffda RBX: 00007f8874e26180 RCX: 00007f8874b9e159 [ 898.578477][T10510] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 898.586550][T10510] RBP: 00007f8874c3503b R08: 0000000000000000 R09: 0000000000000000 [ 898.594534][T10510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.602529][T10510] R13: 00007f8874e26218 R14: 00007f8874e26180 R15: 00007ffea40ab108 [ 898.610519][T10510] [ 898.722906][T10510] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 912.393560][T10559] ======================================================= [ 912.393560][T10559] WARNING: The mand mount option has been deprecated and [ 912.393560][T10559] and is ignored by this kernel. Remove the mand [ 912.393560][T10559] option from the mount to silence this warning. [ 912.393560][T10559] ======================================================= [ 912.469814][T10559] jffs2: notice: (10559) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 913.528158][ T28] audit: type=1800 audit(1789158557.240:25): pid=10569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1159" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 915.178198][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 916.135307][T10587] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 916.144055][T10587] CPU: 1 PID: 10587 Comm: syz.1.1156 Not tainted syzkaller #0 [ 916.151565][T10587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 916.161659][T10587] Call Trace: [ 916.164970][T10587] [ 916.167945][T10587] dump_stack_lvl+0x18c/0x250 [ 916.172676][T10587] ? show_regs_print_info+0x20/0x20 [ 916.177961][T10587] ? load_image+0x420/0x420 [ 916.182503][T10587] sysfs_create_dir_ns+0x26e/0x2a0 [ 916.187647][T10587] ? __lock_acquire+0x7d80/0x7d80 [ 916.192720][T10587] ? sysfs_warn_dup+0xa0/0xa0 [ 916.197440][T10587] ? do_raw_spin_unlock+0x121/0x230 [ 916.202700][T10587] kobject_add_internal+0x617/0xc90 [ 916.207953][T10587] kobject_add+0x164/0x240 [ 916.212430][T10587] ? kobject_init+0x1d0/0x1d0 [ 916.217191][T10587] ? get_device_parent+0x366/0x390 [ 916.222358][T10587] device_add+0x3fa/0xc40 [ 916.226760][T10587] tty_register_device_attr+0x425/0x950 [ 916.232365][T10587] ? tty_register_device+0x30/0x30 [ 916.237559][T10587] ? gsm_activate_mux+0x5a/0x2a0 [ 916.242553][T10587] gsm_activate_mux+0x110/0x2a0 [ 916.247464][T10587] gsmld_ioctl+0x12ca/0x1900 [ 916.252114][T10587] ? gsmld_write+0x120/0x120 [ 916.256769][T10587] ? __init_ldsem+0x150/0x150 [ 916.261506][T10587] ? __fget_files+0x28/0x460 [ 916.266159][T10587] ? gsmld_write+0x120/0x120 [ 916.270795][T10587] tty_ioctl+0x9b5/0xdc0 [ 916.275113][T10587] ? tty_get_icount+0xb0/0xb0 [ 916.279825][T10587] __se_sys_ioctl+0xfd/0x170 [ 916.284462][T10587] do_syscall_64+0x55/0xb0 [ 916.288923][T10587] ? clear_bhb_loop+0x40/0x90 [ 916.293636][T10587] ? clear_bhb_loop+0x40/0x90 [ 916.298371][T10587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 916.304335][T10587] RIP: 0033:0x7f8874b9e159 [ 916.308806][T10587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.328456][T10587] RSP: 002b:00007f88759b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 916.336919][T10587] RAX: ffffffffffffffda RBX: 00007f8874e26180 RCX: 00007f8874b9e159 [ 916.344930][T10587] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 916.352975][T10587] RBP: 00007f8874c3503b R08: 0000000000000000 R09: 0000000000000000 [ 916.360992][T10587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.369005][T10587] R13: 00007f8874e26218 R14: 00007f8874e26180 R15: 00007ffea40ab108 [ 916.377038][T10587] [ 916.381885][T10587] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 921.627907][T10615] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 921.636558][T10615] CPU: 1 PID: 10615 Comm: syz.1.1168 Not tainted syzkaller #0 [ 921.644066][T10615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 921.654158][T10615] Call Trace: [ 921.657489][T10615] [ 921.660464][T10615] dump_stack_lvl+0x18c/0x250 [ 921.665206][T10615] ? show_regs_print_info+0x20/0x20 [ 921.670452][T10615] ? load_image+0x420/0x420 [ 921.675017][T10615] sysfs_create_dir_ns+0x26e/0x2a0 [ 921.680178][T10615] ? __lock_acquire+0x7d80/0x7d80 [ 921.685251][T10615] ? sysfs_warn_dup+0xa0/0xa0 [ 921.689978][T10615] ? rcu_is_watching+0x15/0xb0 [ 921.694788][T10615] ? do_raw_spin_unlock+0x121/0x230 [ 921.700038][T10615] kobject_add_internal+0x617/0xc90 [ 921.705283][T10615] kobject_add+0x164/0x240 [ 921.709747][T10615] ? kobject_init+0x1d0/0x1d0 [ 921.714490][T10615] ? get_device_parent+0x366/0x390 [ 921.719651][T10615] device_add+0x3fa/0xc40 [ 921.724033][T10615] tty_register_device_attr+0x425/0x950 [ 921.729644][T10615] ? tty_register_device+0x30/0x30 [ 921.734821][T10615] ? tty_port_init+0x132/0x1a0 [ 921.739629][T10615] ? gsm_dlci_alloc+0x32a/0x630 [ 921.744539][T10615] ? __might_fault+0xaa/0x120 [ 921.749293][T10615] gsm_activate_mux+0x110/0x2a0 [ 921.754226][T10615] gsmld_ioctl+0x12ca/0x1900 [ 921.758894][T10615] ? gsmld_write+0x120/0x120 [ 921.763598][T10615] ? __init_ldsem+0x150/0x150 [ 921.768327][T10615] ? __fget_files+0x28/0x460 [ 921.772982][T10615] ? gsmld_write+0x120/0x120 [ 921.777629][T10615] tty_ioctl+0x9b5/0xdc0 [ 921.781919][T10615] ? tty_get_icount+0xb0/0xb0 [ 921.786649][T10615] __se_sys_ioctl+0xfd/0x170 [ 921.791291][T10615] do_syscall_64+0x55/0xb0 [ 921.795760][T10615] ? clear_bhb_loop+0x40/0x90 [ 921.800480][T10615] ? clear_bhb_loop+0x40/0x90 [ 921.805202][T10615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 921.811133][T10615] RIP: 0033:0x7f8874b9e159 [ 921.815581][T10615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.835224][T10615] RSP: 002b:00007f88759b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 921.843682][T10615] RAX: ffffffffffffffda RBX: 00007f8874e26180 RCX: 00007f8874b9e159 [ 921.851727][T10615] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 921.859742][T10615] RBP: 00007f8874c3503b R08: 0000000000000000 R09: 0000000000000000 [ 921.867759][T10615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.875768][T10615] R13: 00007f8874e26218 R14: 00007f8874e26180 R15: 00007ffea40ab108 [ 921.883783][T10615] [ 921.887819][T10615] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 927.675896][T10631] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 927.684599][T10631] CPU: 0 PID: 10631 Comm: syz.3.1173 Not tainted syzkaller #0 [ 927.692101][T10631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 927.702206][T10631] Call Trace: [ 927.705517][T10631] [ 927.708485][T10631] dump_stack_lvl+0x18c/0x250 [ 927.713217][T10631] ? show_regs_print_info+0x20/0x20 [ 927.718455][T10631] ? load_image+0x420/0x420 [ 927.723010][T10631] sysfs_create_dir_ns+0x26e/0x2a0 [ 927.728170][T10631] ? __lock_acquire+0x7d80/0x7d80 [ 927.733242][T10631] ? sysfs_warn_dup+0xa0/0xa0 [ 927.737953][T10631] ? rcu_is_watching+0x15/0xb0 [ 927.742779][T10631] ? do_raw_spin_unlock+0x121/0x230 [ 927.748039][T10631] kobject_add_internal+0x617/0xc90 [ 927.753295][T10631] kobject_add+0x164/0x240 [ 927.757760][T10631] ? kobject_init+0x1d0/0x1d0 [ 927.762499][T10631] ? get_device_parent+0x366/0x390 [ 927.767680][T10631] device_add+0x3fa/0xc40 [ 927.772055][T10631] tty_register_device_attr+0x425/0x950 [ 927.777660][T10631] ? tty_register_device+0x30/0x30 [ 927.782840][T10631] ? tty_port_init+0x132/0x1a0 [ 927.787646][T10631] ? gsm_dlci_alloc+0x32a/0x630 [ 927.792542][T10631] ? __might_fault+0xaa/0x120 [ 927.797288][T10631] gsm_activate_mux+0x110/0x2a0 [ 927.802190][T10631] gsmld_ioctl+0x12ca/0x1900 [ 927.806853][T10631] ? gsmld_write+0x120/0x120 [ 927.811518][T10631] ? __init_ldsem+0x150/0x150 [ 927.816239][T10631] ? lockdep_hardirqs_on+0x98/0x150 [ 927.821503][T10631] ? gsmld_write+0x120/0x120 [ 927.826137][T10631] tty_ioctl+0x9b5/0xdc0 [ 927.830425][T10631] ? tty_get_icount+0xb0/0xb0 [ 927.835164][T10631] __se_sys_ioctl+0xfd/0x170 [ 927.839803][T10631] do_syscall_64+0x55/0xb0 [ 927.844262][T10631] ? clear_bhb_loop+0x40/0x90 [ 927.849007][T10631] ? clear_bhb_loop+0x40/0x90 [ 927.853737][T10631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 927.859683][T10631] RIP: 0033:0x7f26b719e159 [ 927.864134][T10631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.883792][T10631] RSP: 002b:00007f26b80f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 927.892238][T10631] RAX: ffffffffffffffda RBX: 00007f26b7426180 RCX: 00007f26b719e159 [ 927.900255][T10631] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 927.908297][T10631] RBP: 00007f26b723503b R08: 0000000000000000 R09: 0000000000000000 [ 927.916308][T10631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.924314][T10631] R13: 00007f26b7426218 R14: 00007f26b7426180 R15: 00007fff32e2c0f8 [ 927.932327][T10631] [ 927.936792][T10631] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 932.161832][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.168202][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.671045][T10651] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 932.679604][T10651] CPU: 0 PID: 10651 Comm: syz.2.1178 Not tainted syzkaller #0 [ 932.687102][T10651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 932.697209][T10651] Call Trace: [ 932.700543][T10651] [ 932.703508][T10651] dump_stack_lvl+0x18c/0x250 [ 932.708234][T10651] ? show_regs_print_info+0x20/0x20 [ 932.713494][T10651] ? load_image+0x420/0x420 [ 932.718085][T10651] sysfs_create_dir_ns+0x26e/0x2a0 [ 932.723245][T10651] ? __lock_acquire+0x7d80/0x7d80 [ 932.728321][T10651] ? sysfs_warn_dup+0xa0/0xa0 [ 932.733053][T10651] ? rcu_is_watching+0x15/0xb0 [ 932.737873][T10651] ? do_raw_spin_unlock+0x121/0x230 [ 932.743133][T10651] kobject_add_internal+0x617/0xc90 [ 932.748428][T10651] kobject_add+0x164/0x240 [ 932.752904][T10651] ? kobject_init+0x1d0/0x1d0 [ 932.757635][T10651] ? get_device_parent+0x366/0x390 [ 932.762793][T10651] device_add+0x3fa/0xc40 [ 932.767204][T10651] tty_register_device_attr+0x425/0x950 [ 932.772806][T10651] ? tty_register_device+0x30/0x30 [ 932.777975][T10651] ? tty_port_init+0x132/0x1a0 [ 932.782785][T10651] ? gsm_dlci_alloc+0x32a/0x630 [ 932.787700][T10651] ? __might_fault+0xaa/0x120 [ 932.792427][T10651] gsm_activate_mux+0x110/0x2a0 [ 932.797332][T10651] gsmld_ioctl+0x12ca/0x1900 [ 932.801983][T10651] ? gsmld_write+0x120/0x120 [ 932.806627][T10651] ? __init_ldsem+0x150/0x150 [ 932.811375][T10651] ? __fget_files+0x28/0x460 [ 932.816079][T10651] ? gsmld_write+0x120/0x120 [ 932.820714][T10651] tty_ioctl+0x9b5/0xdc0 [ 932.825005][T10651] ? tty_get_icount+0xb0/0xb0 [ 932.829753][T10651] __se_sys_ioctl+0xfd/0x170 [ 932.834398][T10651] do_syscall_64+0x55/0xb0 [ 932.838862][T10651] ? clear_bhb_loop+0x40/0x90 [ 932.843585][T10651] ? clear_bhb_loop+0x40/0x90 [ 932.848302][T10651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 932.854292][T10651] RIP: 0033:0x7f789ef9e159 [ 932.858785][T10651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.878437][T10651] RSP: 002b:00007f789fd80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 932.886898][T10651] RAX: ffffffffffffffda RBX: 00007f789f226180 RCX: 00007f789ef9e159 [ 932.894914][T10651] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 932.902930][T10651] RBP: 00007f789f03503b R08: 0000000000000000 R09: 0000000000000000 [ 932.910953][T10651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 932.918965][T10651] R13: 00007f789f226218 R14: 00007f789f226180 R15: 00007ffc23ec6fd8 [ 932.927016][T10651] [ 932.931160][T10651] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 938.966589][T10674] NILFS (nullb0): couldn't find nilfs on the device [ 946.027039][T10702] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 946.035652][T10702] CPU: 0 PID: 10702 Comm: syz.1.1182 Not tainted syzkaller #0 [ 946.043157][T10702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 946.053254][T10702] Call Trace: [ 946.056590][T10702] [ 946.059554][T10702] dump_stack_lvl+0x18c/0x250 [ 946.064303][T10702] ? show_regs_print_info+0x20/0x20 [ 946.069554][T10702] ? load_image+0x420/0x420 [ 946.074127][T10702] sysfs_create_dir_ns+0x26e/0x2a0 [ 946.079292][T10702] ? __lock_acquire+0x7d80/0x7d80 [ 946.084393][T10702] ? sysfs_warn_dup+0xa0/0xa0 [ 946.089116][T10702] ? rcu_is_watching+0x15/0xb0 [ 946.093933][T10702] ? do_raw_spin_unlock+0x121/0x230 [ 946.099185][T10702] kobject_add_internal+0x617/0xc90 [ 946.104445][T10702] kobject_add+0x164/0x240 [ 946.108912][T10702] ? kobject_init+0x1d0/0x1d0 [ 946.113633][T10702] ? get_device_parent+0x366/0x390 [ 946.118789][T10702] device_add+0x3fa/0xc40 [ 946.123169][T10702] tty_register_device_attr+0x425/0x950 [ 946.128783][T10702] ? tty_register_device+0x30/0x30 [ 946.133952][T10702] ? tty_port_init+0x132/0x1a0 [ 946.138749][T10702] ? gsm_dlci_alloc+0x32a/0x630 [ 946.143641][T10702] ? __might_fault+0xaa/0x120 [ 946.148367][T10702] gsm_activate_mux+0x110/0x2a0 [ 946.153263][T10702] gsmld_ioctl+0x12ca/0x1900 [ 946.157906][T10702] ? gsmld_write+0x120/0x120 [ 946.162551][T10702] ? __init_ldsem+0x150/0x150 [ 946.167286][T10702] ? __fget_files+0x28/0x460 [ 946.171923][T10702] ? gsmld_write+0x120/0x120 [ 946.176558][T10702] tty_ioctl+0x9b5/0xdc0 [ 946.180845][T10702] ? tty_get_icount+0xb0/0xb0 [ 946.185582][T10702] __se_sys_ioctl+0xfd/0x170 [ 946.190218][T10702] do_syscall_64+0x55/0xb0 [ 946.194670][T10702] ? clear_bhb_loop+0x40/0x90 [ 946.199384][T10702] ? clear_bhb_loop+0x40/0x90 [ 946.204110][T10702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 946.210043][T10702] RIP: 0033:0x7f8874b9e159 [ 946.214487][T10702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.234131][T10702] RSP: 002b:00007f88759b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 946.242582][T10702] RAX: ffffffffffffffda RBX: 00007f8874e26180 RCX: 00007f8874b9e159 [ 946.250588][T10702] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 946.258600][T10702] RBP: 00007f8874c3503b R08: 0000000000000000 R09: 0000000000000000 [ 946.266613][T10702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.274619][T10702] R13: 00007f8874e26218 R14: 00007f8874e26180 R15: 00007ffea40ab108 [ 946.282636][T10702] [ 946.287139][T10702] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 947.233943][T10712] binder: 10711:10712 ioctl c0306201 0 returned -14 [ 957.660449][T10755] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 957.669040][T10755] CPU: 1 PID: 10755 Comm: syz.4.1203 Not tainted syzkaller #0 [ 957.676538][T10755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 957.686638][T10755] Call Trace: [ 957.689967][T10755] [ 957.692929][T10755] dump_stack_lvl+0x18c/0x250 [ 957.697688][T10755] ? show_regs_print_info+0x20/0x20 [ 957.702936][T10755] ? load_image+0x420/0x420 [ 957.707499][T10755] sysfs_create_dir_ns+0x26e/0x2a0 [ 957.712659][T10755] ? __lock_acquire+0x7d80/0x7d80 [ 957.717727][T10755] ? sysfs_warn_dup+0xa0/0xa0 [ 957.722459][T10755] ? do_raw_spin_unlock+0x121/0x230 [ 957.727713][T10755] kobject_add_internal+0x617/0xc90 [ 957.732990][T10755] kobject_add+0x164/0x240 [ 957.737465][T10755] ? kobject_init+0x1d0/0x1d0 [ 957.742199][T10755] ? get_device_parent+0x366/0x390 [ 957.747360][T10755] device_add+0x3fa/0xc40 [ 957.751745][T10755] tty_register_device_attr+0x425/0x950 [ 957.757368][T10755] ? tty_register_device+0x30/0x30 [ 957.762536][T10755] ? tty_port_init+0x132/0x1a0 [ 957.767330][T10755] ? gsm_dlci_alloc+0x32a/0x630 [ 957.772227][T10755] ? __might_fault+0xaa/0x120 [ 957.776955][T10755] gsm_activate_mux+0x110/0x2a0 [ 957.781865][T10755] gsmld_ioctl+0x12ca/0x1900 [ 957.786523][T10755] ? gsmld_write+0x120/0x120 [ 957.791173][T10755] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 957.796865][T10755] ? __init_ldsem+0x150/0x150 [ 957.801605][T10755] ? tty_jobctrl_ioctl+0x5a8/0xba0 [ 957.806773][T10755] ? gsmld_write+0x120/0x120 [ 957.811414][T10755] tty_ioctl+0x9b5/0xdc0 [ 957.815699][T10755] ? tty_get_icount+0xb0/0xb0 [ 957.820432][T10755] __se_sys_ioctl+0xfd/0x170 [ 957.825070][T10755] do_syscall_64+0x55/0xb0 [ 957.829534][T10755] ? clear_bhb_loop+0x40/0x90 [ 957.834261][T10755] ? clear_bhb_loop+0x40/0x90 [ 957.838981][T10755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 957.844924][T10755] RIP: 0033:0x7feb4739e159 [ 957.849377][T10755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.869033][T10755] RSP: 002b:00007feb48265028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 957.877483][T10755] RAX: ffffffffffffffda RBX: 00007feb47626180 RCX: 00007feb4739e159 [ 957.885495][T10755] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 957.893508][T10755] RBP: 00007feb4743503b R08: 0000000000000000 R09: 0000000000000000 [ 957.901508][T10755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 957.909504][T10755] R13: 00007feb47626218 R14: 00007feb47626180 R15: 00007ffc4cdba248 [ 957.917542][T10755] [ 957.976970][T10755] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 959.362455][T10762] CIFS: Attempting to mount //127.0.0.1/share [ 959.532347][T10764] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 960.994322][T10762] CIFS: VFS: \\127.0.0.1 smb3_crypto_aead_allocate: Failed alloc encrypt aead [ 961.041704][T10762] CIFS: VFS: \\127.0.0.1 SMB2_negotiate: crypto alloc failed, rc=-2 [ 961.050040][T10762] CIFS: VFS: cifs_mount failed w/return code = -2 [ 961.883803][T10780] syz.2.1208[10780]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 965.291809][ T5838] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 971.709220][T10817] syz.4.1218: attempt to access beyond end of device [ 971.709220][T10817] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 971.723263][T10817] gfs2: error 10 reading superblock [ 991.437566][T10891] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 991.446178][T10891] CPU: 1 PID: 10891 Comm: syz.1.1234 Not tainted syzkaller #0 [ 991.453686][T10891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 991.463769][T10891] Call Trace: [ 991.467084][T10891] [ 991.470054][T10891] dump_stack_lvl+0x18c/0x250 [ 991.474783][T10891] ? show_regs_print_info+0x20/0x20 [ 991.480031][T10891] ? load_image+0x420/0x420 [ 991.484576][T10891] sysfs_create_dir_ns+0x26e/0x2a0 [ 991.489755][T10891] ? __lock_acquire+0x7d80/0x7d80 [ 991.494825][T10891] ? sysfs_warn_dup+0xa0/0xa0 [ 991.499536][T10891] ? rcu_is_watching+0x15/0xb0 [ 991.504345][T10891] ? do_raw_spin_unlock+0x121/0x230 [ 991.509603][T10891] kobject_add_internal+0x617/0xc90 [ 991.514866][T10891] kobject_add+0x164/0x240 [ 991.519327][T10891] ? kobject_init+0x1d0/0x1d0 [ 991.524048][T10891] ? get_device_parent+0x366/0x390 [ 991.529229][T10891] device_add+0x3fa/0xc40 [ 991.533650][T10891] tty_register_device_attr+0x425/0x950 [ 991.539243][T10891] ? tty_register_device+0x30/0x30 [ 991.544402][T10891] ? tty_port_init+0x132/0x1a0 [ 991.549201][T10891] ? gsm_dlci_alloc+0x32a/0x630 [ 991.554101][T10891] ? __might_fault+0xaa/0x120 [ 991.558824][T10891] gsm_activate_mux+0x110/0x2a0 [ 991.563736][T10891] gsmld_ioctl+0x12ca/0x1900 [ 991.568385][T10891] ? gsmld_write+0x120/0x120 [ 991.573044][T10891] ? __init_ldsem+0x150/0x150 [ 991.577766][T10891] ? __fget_files+0x28/0x460 [ 991.582415][T10891] ? gsmld_write+0x120/0x120 [ 991.587050][T10891] tty_ioctl+0x9b5/0xdc0 [ 991.591341][T10891] ? tty_get_icount+0xb0/0xb0 [ 991.596084][T10891] __se_sys_ioctl+0xfd/0x170 [ 991.600731][T10891] do_syscall_64+0x55/0xb0 [ 991.605187][T10891] ? clear_bhb_loop+0x40/0x90 [ 991.609923][T10891] ? clear_bhb_loop+0x40/0x90 [ 991.614649][T10891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 991.620583][T10891] RIP: 0033:0x7f8874b9e159 [ 991.625037][T10891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.644673][T10891] RSP: 002b:00007f88759b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 991.653124][T10891] RAX: ffffffffffffffda RBX: 00007f8874e26180 RCX: 00007f8874b9e159 [ 991.661150][T10891] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 991.669157][T10891] RBP: 00007f8874c3503b R08: 0000000000000000 R09: 0000000000000000 [ 991.677192][T10891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 991.685209][T10891] R13: 00007f8874e26218 R14: 00007f8874e26180 R15: 00007ffea40ab108 [ 991.693239][T10891] [ 991.697459][T10891] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 993.667692][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.674299][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.033229][T10909] CIFS: Attempting to mount //127.0.0.1/share [ 996.854602][T10909] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1002.744566][T10938] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1002.753977][T10938] CPU: 1 PID: 10938 Comm: syz.1.1245 Not tainted syzkaller #0 [ 1002.761507][T10938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1002.771641][T10938] Call Trace: [ 1002.774984][T10938] [ 1002.777959][T10938] dump_stack_lvl+0x18c/0x250 [ 1002.782746][T10938] ? show_regs_print_info+0x20/0x20 [ 1002.788029][T10938] ? load_image+0x420/0x420 [ 1002.792613][T10938] sysfs_create_dir_ns+0x26e/0x2a0 [ 1002.797881][T10938] ? __lock_acquire+0x7d80/0x7d80 [ 1002.802979][T10938] ? sysfs_warn_dup+0xa0/0xa0 [ 1002.807728][T10938] ? do_raw_spin_unlock+0x121/0x230 [ 1002.813029][T10938] kobject_add_internal+0x617/0xc90 [ 1002.818317][T10938] kobject_add+0x164/0x240 [ 1002.822854][T10938] ? kobject_init+0x1d0/0x1d0 [ 1002.827610][T10938] ? get_device_parent+0x366/0x390 [ 1002.832883][T10938] device_add+0x3fa/0xc40 [ 1002.837286][T10938] tty_register_device_attr+0x425/0x950 [ 1002.842910][T10938] ? tty_register_device+0x30/0x30 [ 1002.848107][T10938] ? tty_port_init+0x132/0x1a0 [ 1002.852940][T10938] ? gsm_dlci_alloc+0x32a/0x630 [ 1002.857878][T10938] ? __might_fault+0xaa/0x120 [ 1002.862719][T10938] gsm_activate_mux+0x110/0x2a0 [ 1002.867654][T10938] gsmld_ioctl+0x12ca/0x1900 [ 1002.872330][T10938] ? gsmld_write+0x120/0x120 [ 1002.877001][T10938] ? __init_ldsem+0x150/0x150 [ 1002.881750][T10938] ? __fget_files+0x28/0x460 [ 1002.886423][T10938] ? gsmld_write+0x120/0x120 [ 1002.891082][T10938] tty_ioctl+0x9b5/0xdc0 [ 1002.895391][T10938] ? tty_get_icount+0xb0/0xb0 [ 1002.900129][T10938] __se_sys_ioctl+0xfd/0x170 [ 1002.904790][T10938] do_syscall_64+0x55/0xb0 [ 1002.909269][T10938] ? clear_bhb_loop+0x40/0x90 [ 1002.914019][T10938] ? clear_bhb_loop+0x40/0x90 [ 1002.918783][T10938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1002.924744][T10938] RIP: 0033:0x7f8874b9e159 [ 1002.929221][T10938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.948895][T10938] RSP: 002b:00007f88759b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1002.957377][T10938] RAX: ffffffffffffffda RBX: 00007f8874e26180 RCX: 00007f8874b9e159 [ 1002.965405][T10938] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1002.973436][T10938] RBP: 00007f8874c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1002.981461][T10938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1002.989490][T10938] R13: 00007f8874e26218 R14: 00007f8874e26180 R15: 00007ffea40ab108 [ 1002.997540][T10938] [ 1003.002019][T10938] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1006.871308][T10952] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1008.536752][T10961] siw: device registration error -23 [ 1012.141971][T10983] syz.1.1249: attempt to access beyond end of device [ 1012.141971][T10983] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1012.155399][T10983] gfs2: error 10 reading superblock [ 1018.868516][T11004] siw: device registration error -23 [ 1029.653368][T11063] siw: device registration error -23 [ 1033.835774][T11081] libceph: resolve ' [ 1033.835774][T11081] -&fYǝa2i [ 1033.835774][T11081] .?&*&' (ret=-3): failed [ 1039.204698][T11107] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1039.216208][T11107] rtrs_client L2075: : Failed to resolve address, err: -19 [ 1039.224051][T11107] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1048.141547][T11146] siw: device registration error -23 [ 1049.022638][T11151] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1049.034616][T11151] rtrs_client L2075: : Failed to resolve address, err: -19 [ 1049.042455][T11151] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1049.481319][ T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1049.675464][ T27] usb 5-1: config 0 has no interfaces? [ 1049.687393][ T27] usb 5-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1049.699101][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.714047][ T27] usb 5-1: Product: syz [ 1049.719932][ T27] usb 5-1: Manufacturer: syz [ 1049.724692][ T27] usb 5-1: SerialNumber: syz [ 1049.740074][ T27] usb 5-1: config 0 descriptor?? [ 1049.967143][ T9106] usb 5-1: USB disconnect, device number 5 [ 1052.663786][T11173] syz.1.1300: attempt to access beyond end of device [ 1052.663786][T11173] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1052.677132][T11173] gfs2: error 10 reading superblock [ 1054.715756][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.722333][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.567079][T11194] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1058.578572][T11194] rtrs_client L2075: : Failed to resolve address, err: -19 [ 1058.586646][T11194] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1060.793628][T11207] siw: device registration error -23 [ 1074.707992][T11261] siw: device registration error -23 [ 1080.525512][T11282] syz.4.1333: attempt to access beyond end of device [ 1080.525512][T11282] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1080.538819][T11282] gfs2: error 10 reading superblock [ 1081.993587][T11290] siw: device registration error -23 [ 1084.291692][T11294] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1084.303090][T11294] rtrs_client L2075: : Failed to resolve address, err: -19 [ 1084.310731][T11294] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1088.934850][T11322] siw: device registration error -23 [ 1091.633516][T11328] jffs2: notice: (11328) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1097.692400][T11358] CIFS: Attempting to mount //127.0.0.1/share [ 1098.613920][T11358] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1100.402620][T11368] jffs2: notice: (11368) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1100.704058][T11372] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1100.715447][T11372] rtrs_client L2075: : Failed to resolve address, err: -19 [ 1100.723150][T11372] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1102.481247][T11383] libceph: resolve ' [ 1102.481247][T11383] -&fYǝa2i [ 1102.481247][T11383] .?&*&' (ret=-3): failed [ 1104.639032][T11395] syz.3.1355: attempt to access beyond end of device [ 1104.639032][T11395] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1104.652561][T11395] gfs2: error 10 reading superblock [ 1107.266701][T11409] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1107.329299][T11409] CPU: 1 PID: 11409 Comm: syz.1.1362 Not tainted syzkaller #0 [ 1107.336841][T11409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1107.346952][T11409] Call Trace: [ 1107.350269][T11409] [ 1107.353343][T11409] dump_stack_lvl+0x18c/0x250 [ 1107.358172][T11409] ? show_regs_print_info+0x20/0x20 [ 1107.363424][T11409] ? load_image+0x420/0x420 [ 1107.367986][T11409] sysfs_create_dir_ns+0x26e/0x2a0 [ 1107.373158][T11409] ? __lock_acquire+0x7d80/0x7d80 [ 1107.378261][T11409] ? sysfs_warn_dup+0xa0/0xa0 [ 1107.382983][T11409] ? rcu_is_watching+0x15/0xb0 [ 1107.387796][T11409] ? do_raw_spin_unlock+0x121/0x230 [ 1107.393049][T11409] kobject_add_internal+0x617/0xc90 [ 1107.398298][T11409] kobject_add+0x164/0x240 [ 1107.402761][T11409] ? kobject_init+0x1d0/0x1d0 [ 1107.407494][T11409] ? get_device_parent+0x366/0x390 [ 1107.412643][T11409] device_add+0x3fa/0xc40 [ 1107.417105][T11409] tty_register_device_attr+0x425/0x950 [ 1107.422709][T11409] ? tty_register_device+0x30/0x30 [ 1107.427871][T11409] ? tty_port_init+0x132/0x1a0 [ 1107.432663][T11409] ? gsm_dlci_alloc+0x32a/0x630 [ 1107.437544][T11409] ? __might_fault+0xaa/0x120 [ 1107.442245][T11409] gsm_activate_mux+0x110/0x2a0 [ 1107.447125][T11409] gsmld_ioctl+0x12ca/0x1900 [ 1107.451752][T11409] ? gsmld_write+0x120/0x120 [ 1107.456380][T11409] ? __init_ldsem+0x150/0x150 [ 1107.461087][T11409] ? __fget_files+0x28/0x460 [ 1107.465704][T11409] ? gsmld_write+0x120/0x120 [ 1107.470315][T11409] tty_ioctl+0x9b5/0xdc0 [ 1107.474577][T11409] ? tty_get_icount+0xb0/0xb0 [ 1107.479271][T11409] __se_sys_ioctl+0xfd/0x170 [ 1107.483892][T11409] do_syscall_64+0x55/0xb0 [ 1107.488323][T11409] ? clear_bhb_loop+0x40/0x90 [ 1107.493019][T11409] ? clear_bhb_loop+0x40/0x90 [ 1107.497716][T11409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1107.503635][T11409] RIP: 0033:0x7f8874b9e159 [ 1107.508082][T11409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.527706][T11409] RSP: 002b:00007f88759b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1107.536149][T11409] RAX: ffffffffffffffda RBX: 00007f8874e26180 RCX: 00007f8874b9e159 [ 1107.544254][T11409] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1107.552332][T11409] RBP: 00007f8874c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1107.560331][T11409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1107.568313][T11409] R13: 00007f8874e26218 R14: 00007f8874e26180 R15: 00007ffea40ab108 [ 1107.576324][T11409] [ 1107.602195][T11409] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1110.113726][T11435] syz.1.1372: attempt to access beyond end of device [ 1110.113726][T11435] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1110.127508][T11435] gfs2: error 10 reading superblock [ 1111.149545][T11442] jffs2: notice: (11442) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1116.156373][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.162827][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.911554][T11470] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1119.945231][T11470] CPU: 1 PID: 11470 Comm: syz.4.1380 Not tainted syzkaller #0 [ 1119.952754][T11470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1119.962854][T11470] Call Trace: [ 1119.966194][T11470] [ 1119.969161][T11470] dump_stack_lvl+0x18c/0x250 [ 1119.973885][T11470] ? show_regs_print_info+0x20/0x20 [ 1119.979133][T11470] ? load_image+0x420/0x420 [ 1119.983767][T11470] sysfs_create_dir_ns+0x26e/0x2a0 [ 1119.988918][T11470] ? __lock_acquire+0x7d80/0x7d80 [ 1119.993976][T11470] ? sysfs_warn_dup+0xa0/0xa0 [ 1119.998686][T11470] ? rcu_is_watching+0x15/0xb0 [ 1120.003491][T11470] ? do_raw_spin_unlock+0x121/0x230 [ 1120.008730][T11470] kobject_add_internal+0x617/0xc90 [ 1120.014159][T11470] kobject_add+0x164/0x240 [ 1120.018621][T11470] ? kobject_init+0x1d0/0x1d0 [ 1120.023344][T11470] ? get_device_parent+0x366/0x390 [ 1120.028495][T11470] device_add+0x3fa/0xc40 [ 1120.032868][T11470] tty_register_device_attr+0x425/0x950 [ 1120.038491][T11470] ? tty_register_device+0x30/0x30 [ 1120.043653][T11470] ? tty_port_init+0x132/0x1a0 [ 1120.048446][T11470] ? gsm_dlci_alloc+0x32a/0x630 [ 1120.053324][T11470] ? __might_fault+0xaa/0x120 [ 1120.058027][T11470] gsm_activate_mux+0x110/0x2a0 [ 1120.062942][T11470] gsmld_ioctl+0x12ca/0x1900 [ 1120.067587][T11470] ? gsmld_write+0x120/0x120 [ 1120.072236][T11470] ? __init_ldsem+0x150/0x150 [ 1120.076952][T11470] ? lockdep_hardirqs_on+0x98/0x150 [ 1120.082213][T11470] ? gsmld_write+0x120/0x120 [ 1120.086843][T11470] tty_ioctl+0x9b5/0xdc0 [ 1120.091132][T11470] ? tty_get_icount+0xb0/0xb0 [ 1120.095841][T11470] __se_sys_ioctl+0xfd/0x170 [ 1120.100483][T11470] do_syscall_64+0x55/0xb0 [ 1120.105033][T11470] ? clear_bhb_loop+0x40/0x90 [ 1120.109758][T11470] ? clear_bhb_loop+0x40/0x90 [ 1120.114477][T11470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1120.120414][T11470] RIP: 0033:0x7feb4739e159 [ 1120.124876][T11470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.144511][T11470] RSP: 002b:00007feb482a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1120.152926][T11470] RAX: ffffffffffffffda RBX: 00007feb47625fa0 RCX: 00007feb4739e159 [ 1120.160902][T11470] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1120.168879][T11470] RBP: 00007feb4743503b R08: 0000000000000000 R09: 0000000000000000 [ 1120.176860][T11470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1120.184847][T11470] R13: 00007feb47626038 R14: 00007feb47625fa0 R15: 00007ffc4cdba248 [ 1120.192857][T11470] [ 1121.749180][T11470] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1127.810411][T11503] syz.3.1382: attempt to access beyond end of device [ 1127.810411][T11503] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1127.824132][T11503] gfs2: error 10 reading superblock [ 1133.141677][T11527] binder: BINDER_SET_CONTEXT_MGR already set [ 1133.161261][T11527] binder: 11526:11527 ioctl 4018620d 200000004a80 returned -16 [ 1140.400845][T11547] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1140.410409][T11547] CPU: 1 PID: 11547 Comm: syz.1.1398 Not tainted syzkaller #0 [ 1140.417945][T11547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1140.428065][T11547] Call Trace: [ 1140.431389][T11547] [ 1140.434370][T11547] dump_stack_lvl+0x18c/0x250 [ 1140.439204][T11547] ? show_regs_print_info+0x20/0x20 [ 1140.444543][T11547] ? load_image+0x420/0x420 [ 1140.449114][T11547] sysfs_create_dir_ns+0x26e/0x2a0 [ 1140.454286][T11547] ? __lock_acquire+0x7d80/0x7d80 [ 1140.459544][T11547] ? sysfs_warn_dup+0xa0/0xa0 [ 1140.464309][T11547] ? rcu_is_watching+0x15/0xb0 [ 1140.469138][T11547] ? do_raw_spin_unlock+0x121/0x230 [ 1140.474582][T11547] kobject_add_internal+0x617/0xc90 [ 1140.479944][T11547] kobject_add+0x164/0x240 [ 1140.484613][T11547] ? kobject_init+0x1d0/0x1d0 [ 1140.489358][T11547] ? get_device_parent+0x366/0x390 [ 1140.494964][T11547] device_add+0x3fa/0xc40 [ 1140.499384][T11547] tty_register_device_attr+0x425/0x950 [ 1140.505043][T11547] ? tty_register_device+0x30/0x30 [ 1140.510236][T11547] ? tty_port_init+0x132/0x1a0 [ 1140.515064][T11547] ? gsm_dlci_alloc+0x32a/0x630 [ 1140.519980][T11547] ? __might_fault+0xaa/0x120 [ 1140.524725][T11547] gsm_activate_mux+0x110/0x2a0 [ 1140.529653][T11547] gsmld_ioctl+0x12ca/0x1900 [ 1140.534322][T11547] ? gsmld_write+0x120/0x120 [ 1140.538995][T11547] ? __init_ldsem+0x150/0x150 [ 1140.543742][T11547] ? __fget_files+0x28/0x460 [ 1140.548410][T11547] ? gsmld_write+0x120/0x120 [ 1140.553070][T11547] tty_ioctl+0x9b5/0xdc0 [ 1140.557389][T11547] ? tty_get_icount+0xb0/0xb0 [ 1140.562144][T11547] __se_sys_ioctl+0xfd/0x170 [ 1140.566833][T11547] do_syscall_64+0x55/0xb0 [ 1140.571306][T11547] ? clear_bhb_loop+0x40/0x90 [ 1140.576040][T11547] ? clear_bhb_loop+0x40/0x90 [ 1140.580779][T11547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1140.586732][T11547] RIP: 0033:0x7f8874b9e159 [ 1140.591205][T11547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1140.610883][T11547] RSP: 002b:00007f88759b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1140.619369][T11547] RAX: ffffffffffffffda RBX: 00007f8874e26180 RCX: 00007f8874b9e159 [ 1140.627394][T11547] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1140.635424][T11547] RBP: 00007f8874c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1140.643445][T11547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1140.651468][T11547] R13: 00007f8874e26218 R14: 00007f8874e26180 R15: 00007ffea40ab108 [ 1140.659529][T11547] [ 1140.716656][T11547] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1143.895349][T11560] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1150.767908][T11591] jffs2: notice: (11591) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1150.847771][T11595] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1150.857064][T11595] CPU: 1 PID: 11595 Comm: syz.3.1410 Not tainted syzkaller #0 [ 1150.864603][T11595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1150.874729][T11595] Call Trace: [ 1150.878077][T11595] [ 1150.881084][T11595] dump_stack_lvl+0x18c/0x250 [ 1150.885837][T11595] ? show_regs_print_info+0x20/0x20 [ 1150.891112][T11595] ? load_image+0x420/0x420 [ 1150.895694][T11595] sysfs_create_dir_ns+0x26e/0x2a0 [ 1150.900881][T11595] ? __lock_acquire+0x7d80/0x7d80 [ 1150.905998][T11595] ? sysfs_warn_dup+0xa0/0xa0 [ 1150.910734][T11595] ? rcu_is_watching+0x15/0xb0 [ 1150.915578][T11595] ? do_raw_spin_unlock+0x121/0x230 [ 1150.920936][T11595] kobject_add_internal+0x617/0xc90 [ 1150.926212][T11595] kobject_add+0x164/0x240 [ 1150.930712][T11595] ? kobject_init+0x1d0/0x1d0 [ 1150.935475][T11595] ? get_device_parent+0x366/0x390 [ 1150.940662][T11595] device_add+0x3fa/0xc40 [ 1150.945062][T11595] tty_register_device_attr+0x425/0x950 [ 1150.950689][T11595] ? tty_register_device+0x30/0x30 [ 1150.955873][T11595] ? tty_port_init+0x132/0x1a0 [ 1150.960694][T11595] ? gsm_dlci_alloc+0x32a/0x630 [ 1150.965604][T11595] ? __might_fault+0xaa/0x120 [ 1150.970514][T11595] gsm_activate_mux+0x110/0x2a0 [ 1150.975489][T11595] gsmld_ioctl+0x12ca/0x1900 [ 1150.980157][T11595] ? gsmld_write+0x120/0x120 [ 1150.984817][T11595] ? __init_ldsem+0x150/0x150 [ 1150.989561][T11595] ? __fget_files+0x28/0x460 [ 1150.994221][T11595] ? gsmld_write+0x120/0x120 [ 1150.998869][T11595] tty_ioctl+0x9b5/0xdc0 [ 1151.003175][T11595] ? tty_get_icount+0xb0/0xb0 [ 1151.008089][T11595] __se_sys_ioctl+0xfd/0x170 [ 1151.012754][T11595] do_syscall_64+0x55/0xb0 [ 1151.017232][T11595] ? clear_bhb_loop+0x40/0x90 [ 1151.021969][T11595] ? clear_bhb_loop+0x40/0x90 [ 1151.026715][T11595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1151.032671][T11595] RIP: 0033:0x7f26b719e159 [ 1151.037141][T11595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.056826][T11595] RSP: 002b:00007f26b8115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1151.065308][T11595] RAX: ffffffffffffffda RBX: 00007f26b7426090 RCX: 00007f26b719e159 [ 1151.073419][T11595] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 1151.081431][T11595] RBP: 00007f26b723503b R08: 0000000000000000 R09: 0000000000000000 [ 1151.089554][T11595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1151.097570][T11595] R13: 00007f26b7426128 R14: 00007f26b7426090 R15: 00007fff32e2c0f8 [ 1151.105613][T11595] [ 1151.110633][T11595] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1151.659396][T11603] syz.2.1412: attempt to access beyond end of device [ 1151.659396][T11603] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1151.672826][T11603] gfs2: error 10 reading superblock [ 1152.834214][T11608] geneve0: entered promiscuous mode [ 1152.851344][T11608] geneve0: entered allmulticast mode [ 1154.224907][T11614] trusted_key: encrypted_key: key user:syz not found [ 1162.906280][ T5440] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1163.047190][ T5440] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1163.055637][ T5440] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1163.067463][T11654] syz.4.1423: attempt to access beyond end of device [ 1163.067463][T11654] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1163.080867][T11654] gfs2: error 10 reading superblock [ 1163.348678][ T5440] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20001 - 0 [ 1164.288844][T11657] trusted_key: encrypted_key: key user:syz not found [ 1167.564346][T11673] jffs2: notice: (11673) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1177.556559][T11726] netlink: 4852 bytes leftover after parsing attributes in process `syz.1.1434'. [ 1177.596227][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.602753][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.692260][T11731] jffs2: notice: (11731) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1182.516422][T11755] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1182.530418][T11755] CPU: 0 PID: 11755 Comm: syz.3.1431 Not tainted syzkaller #0 [ 1182.537934][T11755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1182.548016][T11755] Call Trace: [ 1182.551434][T11755] [ 1182.554393][T11755] dump_stack_lvl+0x18c/0x250 [ 1182.559113][T11755] ? show_regs_print_info+0x20/0x20 [ 1182.564437][T11755] ? load_image+0x420/0x420 [ 1182.568989][T11755] sysfs_create_dir_ns+0x26e/0x2a0 [ 1182.574158][T11755] ? __lock_acquire+0x7d80/0x7d80 [ 1182.579224][T11755] ? sysfs_warn_dup+0xa0/0xa0 [ 1182.583928][T11755] ? rcu_is_watching+0x15/0xb0 [ 1182.588762][T11755] ? do_raw_spin_unlock+0x121/0x230 [ 1182.594010][T11755] kobject_add_internal+0x617/0xc90 [ 1182.599254][T11755] kobject_add+0x164/0x240 [ 1182.603733][T11755] ? kobject_init+0x1d0/0x1d0 [ 1182.608483][T11755] ? get_device_parent+0x366/0x390 [ 1182.613630][T11755] device_add+0x3fa/0xc40 [ 1182.618013][T11755] tty_register_device_attr+0x425/0x950 [ 1182.623603][T11755] ? tty_register_device+0x30/0x30 [ 1182.628758][T11755] ? tty_port_init+0x132/0x1a0 [ 1182.633567][T11755] ? gsm_dlci_alloc+0x32a/0x630 [ 1182.638457][T11755] ? __might_fault+0xaa/0x120 [ 1182.643172][T11755] gsm_activate_mux+0x110/0x2a0 [ 1182.648066][T11755] gsmld_ioctl+0x12ca/0x1900 [ 1182.652703][T11755] ? gsmld_write+0x120/0x120 [ 1182.657367][T11755] ? __init_ldsem+0x150/0x150 [ 1182.662100][T11755] ? __fget_files+0x28/0x460 [ 1182.666754][T11755] ? gsmld_write+0x120/0x120 [ 1182.671389][T11755] tty_ioctl+0x9b5/0xdc0 [ 1182.675663][T11755] ? tty_get_icount+0xb0/0xb0 [ 1182.680405][T11755] __se_sys_ioctl+0xfd/0x170 [ 1182.685054][T11755] do_syscall_64+0x55/0xb0 [ 1182.689504][T11755] ? clear_bhb_loop+0x40/0x90 [ 1182.694223][T11755] ? clear_bhb_loop+0x40/0x90 [ 1182.698937][T11755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1182.704864][T11755] RIP: 0033:0x7f26b719e159 [ 1182.709318][T11755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.729142][T11755] RSP: 002b:00007f26b8115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1182.737609][T11755] RAX: ffffffffffffffda RBX: 00007f26b7426090 RCX: 00007f26b719e159 [ 1182.745621][T11755] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 1182.753810][T11755] RBP: 00007f26b723503b R08: 0000000000000000 R09: 0000000000000000 [ 1182.761817][T11755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1182.769819][T11755] R13: 00007f26b7426128 R14: 00007f26b7426090 R15: 00007fff32e2c0f8 [ 1182.777882][T11755] [ 1183.018364][T11755] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1191.189442][T11810] siw: device registration error -23 [ 1193.836551][T11820] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1193.845293][T11820] CPU: 0 PID: 11820 Comm: syz.2.1452 Not tainted syzkaller #0 [ 1193.852792][T11820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1193.862891][T11820] Call Trace: [ 1193.866205][T11820] [ 1193.869168][T11820] dump_stack_lvl+0x18c/0x250 [ 1193.873889][T11820] ? show_regs_print_info+0x20/0x20 [ 1193.879122][T11820] ? load_image+0x420/0x420 [ 1193.883662][T11820] sysfs_create_dir_ns+0x26e/0x2a0 [ 1193.888814][T11820] ? __lock_acquire+0x7d80/0x7d80 [ 1193.893883][T11820] ? sysfs_warn_dup+0xa0/0xa0 [ 1193.898590][T11820] ? rcu_is_watching+0x15/0xb0 [ 1193.903397][T11820] ? do_raw_spin_unlock+0x121/0x230 [ 1193.908646][T11820] kobject_add_internal+0x617/0xc90 [ 1193.913896][T11820] kobject_add+0x164/0x240 [ 1193.918362][T11820] ? kobject_init+0x1d0/0x1d0 [ 1193.923086][T11820] ? get_device_parent+0x366/0x390 [ 1193.928244][T11820] device_add+0x3fa/0xc40 [ 1193.932628][T11820] tty_register_device_attr+0x425/0x950 [ 1193.938227][T11820] ? tty_register_device+0x30/0x30 [ 1193.943395][T11820] ? tty_port_init+0x132/0x1a0 [ 1193.948189][T11820] ? gsm_dlci_alloc+0x32a/0x630 [ 1193.953088][T11820] ? __might_fault+0xaa/0x120 [ 1193.957800][T11820] gsm_activate_mux+0x110/0x2a0 [ 1193.962692][T11820] gsmld_ioctl+0x12ca/0x1900 [ 1193.967335][T11820] ? gsmld_write+0x120/0x120 [ 1193.971995][T11820] ? __init_ldsem+0x150/0x150 [ 1193.976711][T11820] ? __fget_files+0x28/0x460 [ 1193.981365][T11820] ? gsmld_write+0x120/0x120 [ 1193.985996][T11820] tty_ioctl+0x9b5/0xdc0 [ 1193.990274][T11820] ? tty_get_icount+0xb0/0xb0 [ 1193.994988][T11820] __se_sys_ioctl+0xfd/0x170 [ 1193.999617][T11820] do_syscall_64+0x55/0xb0 [ 1194.004063][T11820] ? clear_bhb_loop+0x40/0x90 [ 1194.008777][T11820] ? clear_bhb_loop+0x40/0x90 [ 1194.013491][T11820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1194.019415][T11820] RIP: 0033:0x7f789ef9e159 [ 1194.023859][T11820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.043500][T11820] RSP: 002b:00007f789fda1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1194.051962][T11820] RAX: ffffffffffffffda RBX: 00007f789f226090 RCX: 00007f789ef9e159 [ 1194.059983][T11820] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 1194.067997][T11820] RBP: 00007f789f03503b R08: 0000000000000000 R09: 0000000000000000 [ 1194.076028][T11820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1194.084039][T11820] R13: 00007f789f226128 R14: 00007f789f226090 R15: 00007ffc23ec6fd8 [ 1194.092072][T11820] [ 1194.177451][T11820] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1204.346233][T11884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1465'. [ 1205.915038][T11893] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1205.924158][T11893] CPU: 1 PID: 11893 Comm: syz.3.1461 Not tainted syzkaller #0 [ 1205.931707][T11893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1205.942000][T11893] Call Trace: [ 1205.945329][T11893] [ 1205.948304][T11893] dump_stack_lvl+0x18c/0x250 [ 1205.953045][T11893] ? show_regs_print_info+0x20/0x20 [ 1205.958302][T11893] ? load_image+0x420/0x420 [ 1205.962896][T11893] sysfs_create_dir_ns+0x26e/0x2a0 [ 1205.968076][T11893] ? __lock_acquire+0x7d80/0x7d80 [ 1205.973165][T11893] ? sysfs_warn_dup+0xa0/0xa0 [ 1205.977885][T11893] ? rcu_is_watching+0x15/0xb0 [ 1205.982721][T11893] ? do_raw_spin_unlock+0x121/0x230 [ 1205.987998][T11893] kobject_add_internal+0x617/0xc90 [ 1205.993286][T11893] kobject_add+0x164/0x240 [ 1205.997775][T11893] ? kobject_init+0x1d0/0x1d0 [ 1206.002531][T11893] ? get_device_parent+0x366/0x390 [ 1206.007757][T11893] device_add+0x3fa/0xc40 [ 1206.012169][T11893] tty_register_device_attr+0x425/0x950 [ 1206.017798][T11893] ? tty_register_device+0x30/0x30 [ 1206.022999][T11893] ? tty_port_init+0x132/0x1a0 [ 1206.027866][T11893] ? gsm_dlci_alloc+0x32a/0x630 [ 1206.032808][T11893] ? __might_fault+0xaa/0x120 [ 1206.037522][T11893] gsm_activate_mux+0x110/0x2a0 [ 1206.042400][T11893] gsmld_ioctl+0x12ca/0x1900 [ 1206.047014][T11893] ? gsmld_write+0x120/0x120 [ 1206.051711][T11893] ? __init_ldsem+0x150/0x150 [ 1206.056419][T11893] ? __fget_files+0x28/0x460 [ 1206.061044][T11893] ? gsmld_write+0x120/0x120 [ 1206.065653][T11893] tty_ioctl+0x9b5/0xdc0 [ 1206.069965][T11893] ? tty_get_icount+0xb0/0xb0 [ 1206.074673][T11893] __se_sys_ioctl+0xfd/0x170 [ 1206.079324][T11893] do_syscall_64+0x55/0xb0 [ 1206.083784][T11893] ? clear_bhb_loop+0x40/0x90 [ 1206.088531][T11893] ? clear_bhb_loop+0x40/0x90 [ 1206.093292][T11893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1206.099255][T11893] RIP: 0033:0x7f26b719e159 [ 1206.103739][T11893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.123413][T11893] RSP: 002b:00007f26b8115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1206.131910][T11893] RAX: ffffffffffffffda RBX: 00007f26b7426090 RCX: 00007f26b719e159 [ 1206.139940][T11893] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 1206.147973][T11893] RBP: 00007f26b723503b R08: 0000000000000000 R09: 0000000000000000 [ 1206.156019][T11893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1206.164057][T11893] R13: 00007f26b7426128 R14: 00007f26b7426090 R15: 00007fff32e2c0f8 [ 1206.172193][T11893] [ 1206.189901][T11893] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1211.390986][T11915] CIFS: Attempting to mount //127.0.0.1/share [ 1212.369480][T11915] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1212.616055][T11918] CIFS: Attempting to mount //127.0.0.1/share [ 1212.656868][T11918] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1212.711639][T11918] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1219.150603][T11950] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1219.159288][T11950] CPU: 0 PID: 11950 Comm: syz.2.1479 Not tainted syzkaller #0 [ 1219.166783][T11950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1219.176867][T11950] Call Trace: [ 1219.180168][T11950] [ 1219.183120][T11950] dump_stack_lvl+0x18c/0x250 [ 1219.187863][T11950] ? show_regs_print_info+0x20/0x20 [ 1219.193095][T11950] ? load_image+0x420/0x420 [ 1219.197621][T11950] sysfs_create_dir_ns+0x26e/0x2a0 [ 1219.202751][T11950] ? __lock_acquire+0x7d80/0x7d80 [ 1219.207799][T11950] ? sysfs_warn_dup+0xa0/0xa0 [ 1219.212501][T11950] ? rcu_is_watching+0x15/0xb0 [ 1219.217298][T11950] ? do_raw_spin_unlock+0x121/0x230 [ 1219.222553][T11950] kobject_add_internal+0x617/0xc90 [ 1219.227785][T11950] kobject_add+0x164/0x240 [ 1219.232237][T11950] ? kobject_init+0x1d0/0x1d0 [ 1219.236945][T11950] ? get_device_parent+0x366/0x390 [ 1219.242098][T11950] device_add+0x3fa/0xc40 [ 1219.246469][T11950] tty_register_device_attr+0x425/0x950 [ 1219.252055][T11950] ? tty_register_device+0x30/0x30 [ 1219.257204][T11950] ? tty_port_init+0x132/0x1a0 [ 1219.261993][T11950] ? gsm_dlci_alloc+0x32a/0x630 [ 1219.266864][T11950] ? __might_fault+0xaa/0x120 [ 1219.271566][T11950] gsm_activate_mux+0x110/0x2a0 [ 1219.276450][T11950] gsmld_ioctl+0x12ca/0x1900 [ 1219.281088][T11950] ? gsmld_write+0x120/0x120 [ 1219.285714][T11950] ? __init_ldsem+0x150/0x150 [ 1219.290414][T11950] ? __fget_files+0x28/0x460 [ 1219.295035][T11950] ? gsmld_write+0x120/0x120 [ 1219.299645][T11950] tty_ioctl+0x9b5/0xdc0 [ 1219.303924][T11950] ? tty_get_icount+0xb0/0xb0 [ 1219.308623][T11950] __se_sys_ioctl+0xfd/0x170 [ 1219.313234][T11950] do_syscall_64+0x55/0xb0 [ 1219.317664][T11950] ? clear_bhb_loop+0x40/0x90 [ 1219.322358][T11950] ? clear_bhb_loop+0x40/0x90 [ 1219.327057][T11950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1219.332980][T11950] RIP: 0033:0x7f789ef9e159 [ 1219.337421][T11950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.357060][T11950] RSP: 002b:00007f789fda1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1219.365500][T11950] RAX: ffffffffffffffda RBX: 00007f789f226090 RCX: 00007f789ef9e159 [ 1219.373533][T11950] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 1219.381529][T11950] RBP: 00007f789f03503b R08: 0000000000000000 R09: 0000000000000000 [ 1219.389533][T11950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1219.397553][T11950] R13: 00007f789f226128 R14: 00007f789f226090 R15: 00007ffc23ec6fd8 [ 1219.405555][T11950] [ 1219.419103][T11950] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1229.767057][T12000] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1229.775896][T12000] CPU: 0 PID: 12000 Comm: syz.4.1490 Not tainted syzkaller #0 [ 1229.783437][T12000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1229.793547][T12000] Call Trace: [ 1229.796872][T12000] [ 1229.799847][T12000] dump_stack_lvl+0x18c/0x250 [ 1229.804601][T12000] ? show_regs_print_info+0x20/0x20 [ 1229.809865][T12000] ? load_image+0x420/0x420 [ 1229.814445][T12000] sysfs_create_dir_ns+0x26e/0x2a0 [ 1229.819614][T12000] ? __lock_acquire+0x7d80/0x7d80 [ 1229.824702][T12000] ? sysfs_warn_dup+0xa0/0xa0 [ 1229.829431][T12000] ? rcu_is_watching+0x15/0xb0 [ 1229.834302][T12000] ? do_raw_spin_unlock+0x121/0x230 [ 1229.839572][T12000] kobject_add_internal+0x617/0xc90 [ 1229.844819][T12000] kobject_add+0x164/0x240 [ 1229.849282][T12000] ? kobject_init+0x1d0/0x1d0 [ 1229.854001][T12000] ? get_device_parent+0x366/0x390 [ 1229.859156][T12000] device_add+0x3fa/0xc40 [ 1229.863520][T12000] tty_register_device_attr+0x425/0x950 [ 1229.869131][T12000] ? tty_register_device+0x30/0x30 [ 1229.874291][T12000] ? tty_port_init+0x132/0x1a0 [ 1229.879084][T12000] ? gsm_dlci_alloc+0x32a/0x630 [ 1229.883975][T12000] ? __might_fault+0xaa/0x120 [ 1229.888689][T12000] gsm_activate_mux+0x110/0x2a0 [ 1229.893583][T12000] gsmld_ioctl+0x12ca/0x1900 [ 1229.898223][T12000] ? gsmld_write+0x120/0x120 [ 1229.902863][T12000] ? __init_ldsem+0x150/0x150 [ 1229.907581][T12000] ? __fget_files+0x28/0x460 [ 1229.912217][T12000] ? gsmld_write+0x120/0x120 [ 1229.916842][T12000] tty_ioctl+0x9b5/0xdc0 [ 1229.921122][T12000] ? tty_get_icount+0xb0/0xb0 [ 1229.925834][T12000] __se_sys_ioctl+0xfd/0x170 [ 1229.930461][T12000] do_syscall_64+0x55/0xb0 [ 1229.934918][T12000] ? clear_bhb_loop+0x40/0x90 [ 1229.939635][T12000] ? clear_bhb_loop+0x40/0x90 [ 1229.944349][T12000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1229.950272][T12000] RIP: 0033:0x7feb4739e159 [ 1229.954709][T12000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1229.974346][T12000] RSP: 002b:00007feb48286028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1229.982795][T12000] RAX: ffffffffffffffda RBX: 00007feb47626090 RCX: 00007feb4739e159 [ 1229.990787][T12000] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1229.998774][T12000] RBP: 00007feb4743503b R08: 0000000000000000 R09: 0000000000000000 [ 1230.006763][T12000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1230.014751][T12000] R13: 00007feb47626128 R14: 00007feb47626090 R15: 00007ffc4cdba248 [ 1230.022750][T12000] [ 1230.038395][T12000] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1236.571956][T12045] syz.4.1498: attempt to access beyond end of device [ 1236.571956][T12045] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1236.585269][T12045] gfs2: error 10 reading superblock [ 1239.041312][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.057759][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1247.491577][T12088] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1247.500311][T12088] CPU: 1 PID: 12088 Comm: syz.1.1499 Not tainted syzkaller #0 [ 1247.507826][T12088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1247.517923][T12088] Call Trace: [ 1247.521248][T12088] [ 1247.524224][T12088] dump_stack_lvl+0x18c/0x250 [ 1247.528955][T12088] ? show_regs_print_info+0x20/0x20 [ 1247.534212][T12088] ? load_image+0x420/0x420 [ 1247.538772][T12088] sysfs_create_dir_ns+0x26e/0x2a0 [ 1247.543936][T12088] ? __lock_acquire+0x7d80/0x7d80 [ 1247.549007][T12088] ? sysfs_warn_dup+0xa0/0xa0 [ 1247.553714][T12088] ? rcu_is_watching+0x15/0xb0 [ 1247.558565][T12088] ? do_raw_spin_unlock+0x121/0x230 [ 1247.563848][T12088] kobject_add_internal+0x617/0xc90 [ 1247.569108][T12088] kobject_add+0x164/0x240 [ 1247.573585][T12088] ? kobject_init+0x1d0/0x1d0 [ 1247.578305][T12088] ? get_device_parent+0x366/0x390 [ 1247.583450][T12088] device_add+0x3fa/0xc40 [ 1247.587815][T12088] tty_register_device_attr+0x425/0x950 [ 1247.593418][T12088] ? tty_register_device+0x30/0x30 [ 1247.598564][T12088] ? tty_port_init+0x132/0x1a0 [ 1247.603353][T12088] ? gsm_dlci_alloc+0x32a/0x630 [ 1247.608229][T12088] ? __might_fault+0xaa/0x120 [ 1247.612928][T12088] gsm_activate_mux+0x110/0x2a0 [ 1247.617818][T12088] gsmld_ioctl+0x12ca/0x1900 [ 1247.622443][T12088] ? gsmld_write+0x120/0x120 [ 1247.627077][T12088] ? __init_ldsem+0x150/0x150 [ 1247.631792][T12088] ? __fget_files+0x28/0x460 [ 1247.636424][T12088] ? gsmld_write+0x120/0x120 [ 1247.641051][T12088] tty_ioctl+0x9b5/0xdc0 [ 1247.645329][T12088] ? tty_get_icount+0xb0/0xb0 [ 1247.650030][T12088] __se_sys_ioctl+0xfd/0x170 [ 1247.654665][T12088] do_syscall_64+0x55/0xb0 [ 1247.659129][T12088] ? clear_bhb_loop+0x40/0x90 [ 1247.663842][T12088] ? clear_bhb_loop+0x40/0x90 [ 1247.668610][T12088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1247.674529][T12088] RIP: 0033:0x7f8874b9e159 [ 1247.678965][T12088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.698591][T12088] RSP: 002b:00007f88759d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1247.707031][T12088] RAX: ffffffffffffffda RBX: 00007f8874e26090 RCX: 00007f8874b9e159 [ 1247.715030][T12088] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1247.723016][T12088] RBP: 00007f8874c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1247.731006][T12088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1247.738991][T12088] R13: 00007f8874e26128 R14: 00007f8874e26090 R15: 00007ffea40ab108 [ 1247.746998][T12088] [ 1247.977311][T12088] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1252.320871][T12110] syz.2.1509: attempt to access beyond end of device [ 1252.320871][T12110] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1252.334247][T12110] gfs2: error 10 reading superblock [ 1264.769024][T12148] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1264.778402][T12148] CPU: 1 PID: 12148 Comm: syz.2.1520 Not tainted syzkaller #0 [ 1264.786031][T12148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1264.796147][T12148] Call Trace: [ 1264.799473][T12148] [ 1264.802448][T12148] dump_stack_lvl+0x18c/0x250 [ 1264.807193][T12148] ? show_regs_print_info+0x20/0x20 [ 1264.812445][T12148] ? load_image+0x420/0x420 [ 1264.817012][T12148] sysfs_create_dir_ns+0x26e/0x2a0 [ 1264.822176][T12148] ? __lock_acquire+0x7d80/0x7d80 [ 1264.827283][T12148] ? sysfs_warn_dup+0xa0/0xa0 [ 1264.832026][T12148] ? rcu_is_watching+0x15/0xb0 [ 1264.836868][T12148] ? do_raw_spin_unlock+0x121/0x230 [ 1264.842154][T12148] kobject_add_internal+0x617/0xc90 [ 1264.847454][T12148] kobject_add+0x164/0x240 [ 1264.851962][T12148] ? kobject_init+0x1d0/0x1d0 [ 1264.856705][T12148] ? get_device_parent+0x366/0x390 [ 1264.861885][T12148] device_add+0x3fa/0xc40 [ 1264.866285][T12148] tty_register_device_attr+0x425/0x950 [ 1264.871934][T12148] ? tty_register_device+0x30/0x30 [ 1264.877130][T12148] ? tty_port_init+0x132/0x1a0 [ 1264.881955][T12148] ? gsm_dlci_alloc+0x32a/0x630 [ 1264.886905][T12148] ? __might_fault+0xaa/0x120 [ 1264.891679][T12148] gsm_activate_mux+0x110/0x2a0 [ 1264.896625][T12148] gsmld_ioctl+0x12ca/0x1900 [ 1264.901305][T12148] ? gsmld_write+0x120/0x120 [ 1264.905993][T12148] ? __init_ldsem+0x150/0x150 [ 1264.910742][T12148] ? __fget_files+0x28/0x460 [ 1264.915386][T12148] ? gsmld_write+0x120/0x120 [ 1264.920010][T12148] tty_ioctl+0x9b5/0xdc0 [ 1264.924290][T12148] ? tty_get_icount+0xb0/0xb0 [ 1264.929169][T12148] __se_sys_ioctl+0xfd/0x170 [ 1264.933857][T12148] do_syscall_64+0x55/0xb0 [ 1264.938324][T12148] ? clear_bhb_loop+0x40/0x90 [ 1264.943039][T12148] ? clear_bhb_loop+0x40/0x90 [ 1264.947750][T12148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1264.953682][T12148] RIP: 0033:0x7f789ef9e159 [ 1264.958128][T12148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.977786][T12148] RSP: 002b:00007f789fda1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1264.986258][T12148] RAX: ffffffffffffffda RBX: 00007f789f226090 RCX: 00007f789ef9e159 [ 1264.994288][T12148] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1265.002317][T12148] RBP: 00007f789f03503b R08: 0000000000000000 R09: 0000000000000000 [ 1265.010335][T12148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1265.018339][T12148] R13: 00007f789f226128 R14: 00007f789f226090 R15: 00007ffc23ec6fd8 [ 1265.026358][T12148] [ 1266.879962][T12148] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1286.145548][T12238] libceph: resolve ' [ 1286.145548][T12238] -&fYǝa2i [ 1286.145548][T12238] .?&*&' (ret=-3): failed [ 1288.370781][T12247] syz.3.1548: attempt to access beyond end of device [ 1288.370781][T12247] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1288.384434][T12247] gfs2: error 10 reading superblock [ 1301.212140][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.233646][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.498758][T12331] rnbd_client L127: Can't parse path ip:127.0.: -22 [ 1313.824204][T12353] syz.1.1574 (12353) used greatest stack depth: 19088 bytes left [ 1317.022902][T12372] rnbd_client L127: Can't parse path ip:127.0.: -22 [ 1329.066653][T12421] rnbd_client L127: Can't parse path ip:127.0.: -22 [ 1332.247372][T12434] syz.1.1589: attempt to access beyond end of device [ 1332.247372][T12434] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1332.261409][T12434] gfs2: error 10 reading superblock [ 1337.101645][T12458] rnbd_client L127: Can't parse path ip:127.0.0.: -22 [ 1346.779224][T12507] rnbd_client L127: Can't parse path ip:127.0.0.: -22 [ 1359.981408][T12572] rnbd_client L127: Can't parse path ip:127.0.0.: -22 [ 1361.905034][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.911747][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1376.180826][T12664] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1376.250124][T12664] CIFS: Attempting to mount //127.0.0.1/share [ 1376.272272][T12664] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1376.279776][T12664] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1379.344776][T12672] libceph: resolve ' [ 1379.344776][T12672] -&fYǝa2i [ 1379.344776][T12672] .?&*&' (ret=-3): failed [ 1379.627295][T12687] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1379.642720][T12687] rtrs_client L2075: : Failed to resolve address, err: -19 [ 1379.650837][T12687] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1387.813716][T12712] libceph: resolve ' [ 1387.813716][T12712] -&fYǝa2i [ 1387.813716][T12712] .?&*&' (ret=-3): failed [ 1397.161753][T12744] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1397.180907][T12744] rtrs_client L2075: : Failed to resolve address, err: -19 [ 1397.189260][T12744] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1402.263140][T12766] libceph: resolve ' [ 1402.263140][T12766] -&fYǝa2i [ 1402.263140][T12766] .?&*&' (ret=-3): failed [ 1409.170774][T12787] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1409.197238][T12787] rtrs_client L2075: : Failed to resolve address, err: -19 [ 1409.205490][T12787] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1413.967661][T12803] loop1: detected capacity change from 0 to 2048 [ 1414.382991][T12803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1414.465397][T12803] ext4 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1415.086454][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1416.309310][T12817] syz.2.1701: attempt to access beyond end of device [ 1416.309310][T12817] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1416.322642][T12817] gfs2: error 10 reading superblock [ 1419.983356][T12827] syz.2.1704: attempt to access beyond end of device [ 1419.983356][T12827] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1419.997050][T12827] gfs2: error 10 reading superblock [ 1421.793329][ T28] audit: type=1326 audit(1789159066.344:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.3.1705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b719e159 code=0x7ffc0000 [ 1421.827892][ T28] audit: type=1326 audit(1789159066.374:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.3.1705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b719e159 code=0x7ffc0000 [ 1421.873121][ T28] audit: type=1326 audit(1789159066.374:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.3.1705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b719e159 code=0x7ffc0000 [ 1421.961776][ T28] audit: type=1326 audit(1789159066.374:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.3.1705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f26b719e159 code=0x7ffc0000 [ 1422.214517][ T28] audit: type=1326 audit(1789159066.374:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.3.1705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b719e159 code=0x7ffc0000 [ 1422.506470][ T28] audit: type=1326 audit(1789159066.374:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.3.1705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b719e159 code=0x7ffc0000 [ 1422.790502][ T28] audit: type=1326 audit(1789159066.374:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.3.1705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b719e159 code=0x7ffc0000 [ 1422.814803][ T28] audit: type=1326 audit(1789159066.374:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.3.1705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f26b719e159 code=0x7ffc0000 [ 1422.839308][ T28] audit: type=1326 audit(1789159066.374:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.3.1705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b719e159 code=0x7ffc0000 [ 1422.864318][ T28] audit: type=1326 audit(1789159066.374:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.3.1705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b719e159 code=0x7ffc0000 [ 1423.344160][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.350978][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.259940][T12864] syz.1.1712: attempt to access beyond end of device [ 1426.259940][T12864] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1426.273352][T12864] gfs2: error 10 reading superblock [ 1440.802972][T12922] CIFS: Attempting to mount //127.0.0.1/share [ 1442.781194][T12922] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1444.071893][T12934] syz.3.1726: attempt to access beyond end of device [ 1444.071893][T12934] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1444.086432][T12934] gfs2: error 10 reading superblock [ 1448.286415][ T56] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1448.456336][ T56] usb 2-1: device descriptor read/64, error -71 [ 1448.766199][ T56] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1450.235186][ T56] usb 2-1: device descriptor read/64, error -71 [ 1450.426154][ T56] usb usb2-port1: attempt power cycle [ 1450.836091][ T56] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1451.197848][ T56] usb 2-1: device descriptor read/8, error -71 [ 1455.260482][T12978] syz.3.1741: attempt to access beyond end of device [ 1455.260482][T12978] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 1455.273980][T12978] gfs2: error 10 reading superblock [ 1456.417728][T12980] CIFS: Attempting to mount //127.0.0.1/share [ 1457.866971][T12980] ================================================================== [ 1457.875269][T12980] BUG: KASAN: slab-use-after-free in cifs_free_hash+0xcc/0x100 [ 1457.883016][T12980] Write of size 8 at addr ffff88807b0ac468 by task syz.3.1743/12980 [ 1457.891061][T12980] [ 1457.893492][T12980] CPU: 0 PID: 12980 Comm: syz.3.1743 Not tainted syzkaller #0 [ 1457.901040][T12980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1457.911135][T12980] Call Trace: [ 1457.914512][T12980] [ 1457.917562][T12980] dump_stack_lvl+0x18c/0x250 [ 1457.922436][T12980] ? __lock_acquire+0x7d80/0x7d80 [ 1457.927564][T12980] ? show_regs_print_info+0x20/0x20 [ 1457.932812][T12980] ? load_image+0x420/0x420 [ 1457.937402][T12980] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1457.942985][T12980] ? __virt_addr_valid+0x10c/0x380 [ 1457.948162][T12980] ? __virt_addr_valid+0x10c/0x380 [ 1457.953326][T12980] ? __virt_addr_valid+0x10c/0x380 [ 1457.958496][T12980] ? __virt_addr_valid+0x10c/0x380 [ 1457.963662][T12980] print_report+0xa8/0x210 [ 1457.968124][T12980] ? cifs_free_hash+0xcc/0x100 [ 1457.972939][T12980] kasan_report+0x117/0x150 [ 1457.977517][T12980] ? slab_free_freelist_hook+0x130/0x1a0 [ 1457.983241][T12980] ? cifs_free_hash+0xcc/0x100 [ 1457.988058][T12980] cifs_free_hash+0xcc/0x100 [ 1457.992698][T12980] cifs_crypto_secmech_release+0x32/0x110 [ 1457.998500][T12980] cifs_put_tcp_session+0x20b/0x320 [ 1458.003753][T12980] cifs_mount_put_conns+0xb4/0x280 [ 1458.008919][T12980] cifs_mount+0xdc/0x650 [ 1458.013214][T12980] ? __rwlock_init+0x150/0x150 [ 1458.018030][T12980] ? cifs_is_path_remote+0x6f0/0x6f0 [ 1458.023363][T12980] ? do_raw_spin_unlock+0x121/0x230 [ 1458.028609][T12980] ? smb3_update_mnt_flags+0x52f/0xc10 [ 1458.034132][T12980] ? cifs_setup_cifs_sb+0x52f/0x840 [ 1458.039396][T12980] cifs_smb3_do_mount+0x2e5/0x710 [ 1458.044487][T12980] ? cifs_sb_deactive+0x80/0x80 [ 1458.049395][T12980] ? vfs_parse_fs_string+0x10f/0x170 [ 1458.054753][T12980] smb3_get_tree+0x5a5/0xa90 [ 1458.059417][T12980] vfs_get_tree+0x8c/0x280 [ 1458.063892][T12980] do_new_mount+0x24a/0xa40 [ 1458.068446][T12980] __se_sys_mount+0x2e7/0x3d0 [ 1458.073174][T12980] ? __x64_sys_mount+0xc0/0xc0 [ 1458.077990][T12980] ? lockdep_hardirqs_on+0x98/0x150 [ 1458.083260][T12980] ? __x64_sys_mount+0x20/0xc0 [ 1458.088068][T12980] do_syscall_64+0x55/0xb0 [ 1458.092532][T12980] ? clear_bhb_loop+0x40/0x90 [ 1458.097332][T12980] ? clear_bhb_loop+0x40/0x90 [ 1458.102067][T12980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1458.108011][T12980] RIP: 0033:0x7f26b719e159 [ 1458.112563][T12980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.132261][T12980] RSP: 002b:00007f26b8136028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1458.140743][T12980] RAX: ffffffffffffffda RBX: 00007f26b7425fa0 RCX: 00007f26b719e159 [ 1458.148754][T12980] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000500 [ 1458.156770][T12980] RBP: 00007f26b723503b R08: 0000200000000300 R09: 0000000000000000 [ 1458.164791][T12980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1458.172802][T12980] R13: 00007f26b7426038 R14: 00007f26b7425fa0 R15: 00007fff32e2c0f8 [ 1458.180821][T12980] [ 1458.183882][T12980] [ 1458.186239][T12980] Allocated by task 12980: [ 1458.190797][T12980] kasan_set_track+0x4e/0x70 [ 1458.195425][T12980] __kasan_kmalloc+0x8f/0xa0 [ 1458.200054][T12980] cifs_get_tcp_session+0xb5/0x1a10 [ 1458.205325][T12980] cifs_mount_get_session+0xae/0x440 [ 1458.210654][T12980] dfs_mount_share+0x1e9/0x7b0 [ 1458.215459][T12980] cifs_mount+0xbc/0x650 [ 1458.219755][T12980] cifs_smb3_do_mount+0x2e5/0x710 [ 1458.224834][T12980] smb3_get_tree+0x5a5/0xa90 [ 1458.229504][T12980] vfs_get_tree+0x8c/0x280 [ 1458.233962][T12980] do_new_mount+0x24a/0xa40 [ 1458.238502][T12980] __se_sys_mount+0x2e7/0x3d0 [ 1458.243204][T12980] do_syscall_64+0x55/0xb0 [ 1458.247659][T12980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1458.253592][T12980] [ 1458.255941][T12980] Freed by task 12981: [ 1458.260038][T12980] kasan_set_track+0x4e/0x70 [ 1458.264682][T12980] kasan_save_free_info+0x28/0x40 [ 1458.269753][T12980] ____kasan_slab_free+0x126/0x1f0 [ 1458.274909][T12980] slab_free_freelist_hook+0x130/0x1a0 [ 1458.280405][T12980] __kmem_cache_free+0xba/0x1f0 [ 1458.285300][T12980] clean_demultiplex_info+0xb63/0xd60 [ 1458.290709][T12980] cifs_demultiplex_thread+0x274e/0x2a70 [ 1458.296395][T12980] kthread+0x2fa/0x390 [ 1458.300516][T12980] ret_from_fork+0x48/0x80 [ 1458.304978][T12980] ret_from_fork_asm+0x11/0x20 [ 1458.309835][T12980] [ 1458.312183][T12980] The buggy address belongs to the object at ffff88807b0ac000 [ 1458.312183][T12980] which belongs to the cache kmalloc-4k of size 4096 [ 1458.326325][T12980] The buggy address is located 1128 bytes inside of [ 1458.326325][T12980] freed 4096-byte region [ffff88807b0ac000, ffff88807b0ad000) [ 1458.340336][T12980] [ 1458.342697][T12980] The buggy address belongs to the physical page: [ 1458.349221][T12980] page:ffffea0001ec2a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b0a8 [ 1458.359422][T12980] head:ffffea0001ec2a00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1458.368401][T12980] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1458.376850][T12980] page_type: 0xffffffff() [ 1458.381248][T12980] raw: 00fff00000000840 ffff888017c42140 0000000000000000 dead000000000001 [ 1458.389861][T12980] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 1458.398468][T12980] page dumped because: kasan: bad access detected [ 1458.404904][T12980] page_owner tracks the page as allocated [ 1458.410651][T12980] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1132, tgid 1132 (kworker/u4:6), ts 1353627500252, free_ts 1353177274051 [ 1458.433192][T12980] post_alloc_hook+0x1c1/0x200 [ 1458.438031][T12980] get_page_from_freelist+0x2181/0x22a0 [ 1458.443627][T12980] __alloc_pages+0x1f0/0x460 [ 1458.448257][T12980] alloc_slab_page+0x5d/0x180 [ 1458.452981][T12980] new_slab+0x87/0x2d0 [ 1458.457087][T12980] ___slab_alloc+0xc5c/0x12f0 [ 1458.461809][T12980] __kmem_cache_alloc_node+0x11f/0x250 [ 1458.467321][T12980] __kmalloc_node_track_caller+0xa4/0x230 [ 1458.473095][T12980] kmalloc_reserve+0x116/0x240 [ 1458.477984][T12980] __alloc_skb+0x138/0x2c0 [ 1458.482438][T12980] nsim_dev_trap_report_work+0x253/0xa90 [ 1458.488141][T12980] process_scheduled_works+0xa60/0x1600 [ 1458.493728][T12980] worker_thread+0xa5e/0xfe0 [ 1458.498353][T12980] kthread+0x2fa/0x390 [ 1458.502453][T12980] ret_from_fork+0x48/0x80 [ 1458.506908][T12980] ret_from_fork_asm+0x11/0x20 [ 1458.511717][T12980] page last free stack trace: [ 1458.516413][T12980] free_unref_page_prepare+0x7d7/0x8f0 [ 1458.521908][T12980] free_unref_page+0x32/0x2e0 [ 1458.526624][T12980] __unfreeze_partials+0x1cf/0x210 [ 1458.531771][T12980] put_cpu_partial+0x17c/0x250 [ 1458.536575][T12980] __slab_free+0x319/0x400 [ 1458.541022][T12980] qlist_free_all+0x75/0xd0 [ 1458.545566][T12980] kasan_quarantine_reduce+0x143/0x160 [ 1458.551068][T12980] __kasan_slab_alloc+0x22/0x80 [ 1458.555972][T12980] slab_post_alloc_hook+0x6a/0x4d0 [ 1458.561134][T12980] kmem_cache_alloc+0x17e/0x2c0 [ 1458.566046][T12980] getname_flags+0xbb/0x500 [ 1458.570608][T12980] user_path_at_empty+0x2c/0x60 [ 1458.575487][T12980] do_readlinkat+0xdd/0x490 [ 1458.580025][T12980] __x64_sys_readlink+0x7f/0x90 [ 1458.584907][T12980] do_syscall_64+0x55/0xb0 [ 1458.589363][T12980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1458.595313][T12980] [ 1458.597657][T12980] Memory state around the buggy address: [ 1458.603366][T12980] ffff88807b0ac300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1458.611535][T12980] ffff88807b0ac380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1458.619632][T12980] >ffff88807b0ac400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1458.627722][T12980] ^ [ 1458.635200][T12980] ffff88807b0ac480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1458.643282][T12980] ffff88807b0ac500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1458.651364][T12980] ================================================================== [ 1459.427025][T12980] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1459.434295][T12980] CPU: 1 PID: 12980 Comm: syz.3.1743 Not tainted syzkaller #0 [ 1459.441802][T12980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1459.451908][T12980] Call Trace: [ 1459.455230][T12980] [ 1459.458193][T12980] dump_stack_lvl+0x18c/0x250 [ 1459.462921][T12980] ? show_regs_print_info+0x20/0x20 [ 1459.468187][T12980] ? load_image+0x420/0x420 [ 1459.472742][T12980] panic+0x2ca/0x720 [ 1459.476732][T12980] ? bpf_jit_dump+0xd0/0xd0 [ 1459.481290][T12980] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1459.487317][T12980] ? _raw_spin_unlock+0x40/0x40 [ 1459.492218][T12980] ? print_memory_metadata+0x314/0x400 [ 1459.497724][T12980] ? cifs_free_hash+0xcc/0x100 [ 1459.502536][T12980] check_panic_on_warn+0x84/0xa0 [ 1459.507539][T12980] ? cifs_free_hash+0xcc/0x100 [ 1459.512347][T12980] end_report+0x6f/0x130 [ 1459.516636][T12980] kasan_report+0x128/0x150 [ 1459.521192][T12980] ? slab_free_freelist_hook+0x130/0x1a0 [ 1459.526882][T12980] ? cifs_free_hash+0xcc/0x100 [ 1459.531698][T12980] cifs_free_hash+0xcc/0x100 [ 1459.536329][T12980] cifs_crypto_secmech_release+0x32/0x110 [ 1459.542114][T12980] cifs_put_tcp_session+0x20b/0x320 [ 1459.547345][T12980] cifs_mount_put_conns+0xb4/0x280 [ 1459.552485][T12980] cifs_mount+0xdc/0x650 [ 1459.556753][T12980] ? __rwlock_init+0x150/0x150 [ 1459.561542][T12980] ? cifs_is_path_remote+0x6f0/0x6f0 [ 1459.566858][T12980] ? do_raw_spin_unlock+0x121/0x230 [ 1459.572171][T12980] ? smb3_update_mnt_flags+0x52f/0xc10 [ 1459.577664][T12980] ? cifs_setup_cifs_sb+0x52f/0x840 [ 1459.582904][T12980] cifs_smb3_do_mount+0x2e5/0x710 [ 1459.587960][T12980] ? cifs_sb_deactive+0x80/0x80 [ 1459.592862][T12980] ? vfs_parse_fs_string+0x10f/0x170 [ 1459.598199][T12980] smb3_get_tree+0x5a5/0xa90 [ 1459.602843][T12980] vfs_get_tree+0x8c/0x280 [ 1459.607303][T12980] do_new_mount+0x24a/0xa40 [ 1459.611841][T12980] __se_sys_mount+0x2e7/0x3d0 [ 1459.616545][T12980] ? __x64_sys_mount+0xc0/0xc0 [ 1459.621343][T12980] ? lockdep_hardirqs_on+0x98/0x150 [ 1459.626571][T12980] ? __x64_sys_mount+0x20/0xc0 [ 1459.631383][T12980] do_syscall_64+0x55/0xb0 [ 1459.635842][T12980] ? clear_bhb_loop+0x40/0x90 [ 1459.640552][T12980] ? clear_bhb_loop+0x40/0x90 [ 1459.645293][T12980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1459.651226][T12980] RIP: 0033:0x7f26b719e159 [ 1459.655695][T12980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1459.675334][T12980] RSP: 002b:00007f26b8136028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1459.683774][T12980] RAX: ffffffffffffffda RBX: 00007f26b7425fa0 RCX: 00007f26b719e159 [ 1459.691767][T12980] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000500 [ 1459.699764][T12980] RBP: 00007f26b723503b R08: 0000200000000300 R09: 0000000000000000 [ 1459.707758][T12980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1459.715754][T12980] R13: 00007f26b7426038 R14: 00007f26b7425fa0 R15: 00007fff32e2c0f8 [ 1459.723756][T12980] [ 1459.727384][T12980] Kernel Offset: disabled [ 1459.731716][T12980] Rebooting in 86400 seconds..