last executing test programs: 4.629172231s ago: executing program 1 (id=672): socket(0x10, 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f00004ea000/0x3000)=nil, 0x3000, 0xd) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0x2, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x9, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x37, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x9c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1000001, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x10000200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0x1d9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x42, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x1, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) readv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x2) 3.434432127s ago: executing program 1 (id=680): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000980000/0x2000)=nil, 0x2000, 0xb, 0x28011, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) 3.125430992s ago: executing program 2 (id=684): socket(0x40000000015, 0x805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.124564612s ago: executing program 4 (id=685): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfb}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.95320412s ago: executing program 4 (id=686): socket(0x40000000015, 0x805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@any, 0x1}) listen(r2, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') write(0xffffffffffffffff, 0x0, 0x0) 2.869040024s ago: executing program 2 (id=687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f01c80f20e035200000000f22e0c4e1fa2a0d1adad9ac0f01cb660fe19a717e000066ba4200edb8000000000f23d00f21f835300000050f23f8b9800000c00f3235004000000f300f209a360f017fb2", 0x50}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.580610298s ago: executing program 2 (id=688): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x675f, 0x9, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r10}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb", 0x17}], 0x1}, 0x4005) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x22, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x10004000}, 0x4041080) 2.563888309s ago: executing program 1 (id=689): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x101, @local, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="02", 0x1}, {0x0, 0x12}], 0x2}, 0x24009080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x375ee909000c88aa, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 2.074856282s ago: executing program 2 (id=690): socket(0x10, 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f00004ea000/0x3000)=nil, 0x3000, 0xd) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0x2, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x9, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x37, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x9c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1000001, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x10000200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0x1d9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x42, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x1, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20040001}, 0x4800) readv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x2) 2.073128252s ago: executing program 1 (id=691): socket(0x10, 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f00004ea000/0x3000)=nil, 0x3000, 0xd) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0x2, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x9, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x37, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x9c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1000001, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x10000200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0x1d9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x42, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x1, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) readv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x2) 1.983988076s ago: executing program 4 (id=694): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfb}}, 0x10}, 0x1c) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.935282629s ago: executing program 3 (id=695): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x800) r1 = gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000440)=0x0) getgroups(0x8, &(0x7f0000000480)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee00, 0x0, 0xee00, 0xffffffffffffffff, 0xee00]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000680)={0x0, 0x1, 0xffffffffffffffff}) r7 = syz_open_dev$ndb(&(0x7f0000000940), 0x0, 0x200) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000980)={0x0, 0x0}) lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a80), 0x20000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) getresgid(&(0x7f0000000b00), &(0x7f0000000b40)=0x0, &(0x7f0000000b80)) r16 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000bc0), 0x80000) r17 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00), 0x14080, 0x0) r18 = io_uring_setup(0x2211, &(0x7f0000000c40)={0x0, 0x9514, 0x200, 0x1, 0xf0}) r19 = socket$isdn(0x22, 0x3, 0x22) r20 = getpgrp(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000cc0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000000dc0)=0xe8) r22 = getgid() ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000f00)={0xffffffffffffffff, &(0x7f0000000e00)=':-\x00', 0x40000, &(0x7f0000000e40)={@align=0x3ff, {0x6, 0x7a, 0x7fff, 0xc0}}, 0x200, &(0x7f0000000e80)={@_ha_fsid}, &(0x7f0000000ec0)=0x8f8e}) sendmmsg$unix(r0, &(0x7f0000001040)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)="696bc6938b2877593abb450fc707d9bd7b3d8c2a08c4507e420a123d3cfd82b23a1af39449a51189602724a1dc908b9d74c00ceb47b7324cbb7a81e7a45f9801c5b2908a650755d6fd94dcdb8c3b7dd8f34762377442ab16ca551c3de8899d8ea11bf9ca04f7fd6443e21f04c86ca94c1942888b360fd25645a19a0ff149664d95707afe005d9977aa2034fb2d908033761c2a6c76c531a0fab2f8d0a9398835f771e9375b6427ddaefb5d0a1e35148036c144eb26ff0dc964c1124be6c04ffc45c57883db79aa5686744bebf92c12d6b2696a5c18", 0xd5}, {&(0x7f0000000240)="283f2a3ae37a6168cebe7d8b6f7fda5ceb451d6641d80f44eb19a3c6c081e5c87d7bd1693b3a3e0ece5227ce9afbc1ee373cfa7a4da977bfbf84bfa7392547a8ee0ae90b36d85aaa60b4064d1dc360b0c3c4ace97f9175136dfe970dcb5d1b5942bce27c978140b95120cd173f9782bb4894d20e8764dd73a144fd54fdb555b9e563380ca1f995b5591121e256661d4aec593847db6e8c4bb0d4a5b31dc5941c34", 0xa1}, {&(0x7f0000000300)="3e62f97542e360c0d85758e4e06c418a2f905fe3535a60ace5cfe2c81804045a3c516b350c83ce0721e8e2f0f045f9e39c1caf24da85", 0x36}, {&(0x7f0000000340)}, {&(0x7f0000000380)="28b0b385876712e9a12ceb05d41f7601872d1d4d6f008eb3eb0f33", 0x1b}], 0x5, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x58, 0x84}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)="b78d98ad4daab0b9b907277ef6e63e80b7149efdf34305aa9aad173a46df67d8887c750e90742b7200147bb611f3e53b2aa6a7e55f55ff9675445d20c766a469ef592f4ef4445882c0c6c9ff6d354ecea8780aa4135f6153e6e9c8912595e3e5c5b43ba6df5cf4e09095ba2a5e7c6ebb4349ccffad450c83e26c3aaa5040d34f225d3280bffe47b47bf130b42b2c2ab82214a676bba3223d0e97d64d2424650d33a8ad122ab7ad30774eb128cefa4bdc691f3d87fe863099066819e7570c6714", 0xc0}, {&(0x7f0000000800)="77f031515ac9682ea677bbe33a38e6f9260cdc05235f9d6bd75f86eb3e143d3d0843a386289b52c4e6adcd1734cf4f6251d0cfbca531ca4e07d124c2438d7f65b79d5ee88bd29be265dbfc1e5a813973602bc87b1af5f445364c490e0c1bb2d68c35303d7ff74324d7f9ca9f0f11adc41dfd9b5e36a9d86e2516c5fa3358ed0657a82401e91606b9718ec5feb1344d758891b127d519410782508e03650e3ffac6eca73170db4ac63c33", 0xaa}, {&(0x7f00000008c0)="e27b09f48c429501828a2a6f836f9d5011a96717ec067d535e50f9865b25e6866de7f24fb4a1e17ef3deeaa6f60e8deb907a6d8b5627e5", 0x37}], 0x3, &(0x7f0000000f40)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, r11}}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r13, r15}}}, @rights={{0x20, 0x1, 0x1, [r16, r17, r18, r19]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @rights={{0x14, 0x1, 0x1, [r23]}}], 0xe0, 0x20000850}}], 0x2, 0x8001) r24 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r17) sendmsg$NL80211_CMD_GET_KEY(r19, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x40, r24, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2a}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c5) getsockopt$inet6_tcp_int(r23, 0x6, 0x11, &(0x7f0000001200), &(0x7f0000001240)=0x4) r25 = syz_open_dev$vcsu(&(0x7f0000001280), 0xc3d0, 0x8000) read$proc_mixer(r25, &(0x7f00000012c0)=""/102, 0x66) syz_mount_image$fuse(&(0x7f0000001340), &(0x7f0000001380)='./file0\x00', 0x81000, &(0x7f00000013c0)={{'fd', 0x3d, r23}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r14}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x65bc}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize}], [{@dont_appraise}, {@fsname={'fsname', 0x3d, '/dev/vcsu#\x00'}}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@audit}, {@euid_gt={'euid>', r10}}, {@seclabel}]}}, 0x0, 0x0, &(0x7f0000001540)="07932fe4272113ca493bf8dd5600e3f2aaa2514eca4f5159f1e0141ecd24ef1e7510a74b588d24e5575ab7541d3304a13292e9efee19210da0ef8f1c185909039cbf7fa349a8bdf69b2699b14d6cfc7be7464a9a6a8d00c6fd719f506a8dee62ff368e1704fae034c8ebd643ca4d2a51e371e2253ce3281c3afc366904606b5b48ab051c0b95219306c28863eb2cdcbb4f131ad9fd72d33413019f9cd5470d2494d43c20675392d67044c0cd3f1d3b5f9f50d822d30e21896ae78ab07ffb27a812993de9a5305a520ace296c") writev(r12, &(0x7f0000004900)=[{&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="537fce287a24f6aa99f9503f9df425621a392e1f445fcea720f39abfe6501ffeacb56a923357e13af03be3b42a55b8c238bcb1dfb3f227e257e74e202c387ff7e534b838c2660b32c869110405712ab472ce8c713cd2d167e077902da2bd87fc371338b2794c6a17cbf3a7a64956503a219846eb4b84787a2a0fe1a95b4310fbe2af5a6bac38d30943e344293c17e080450d926fe7bf14a094e5e0", 0x9b}, {&(0x7f0000002700)="5b8cb2a9b822effc049bd10304cf4b61ddb1c97542c4d70cbbd59fefc015dbeede085b522113dc2381d01a5d1bccb3b1e7f8ffaa7bf5a562e5ff8533cd24a88b0bba0ae9b4f997f536a043c81e0e043d51ccebfbd89511a19cac27f6fcb80f18319b109ad56bb738f656912d070e9eb6892dbea3b2", 0x75}, {&(0x7f0000002780)="3f7148941cf53822e84362d2f434aa904542d2adaa4fcca67633cd5169f5fb680cf8efa3b18cf5ff503695ba68433cb8f42cb8b91079866923d33669e2c66e206a770ca52bb207b0e71012abb80c585e06bda8b38d923d83aa0a3c327f0e0b50aa", 0x61}, {&(0x7f0000002800)="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", 0x1000}, {&(0x7f0000003800)="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", 0xfa}, {&(0x7f0000003900)="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", 0x1000}], 0x7) 1.874329661s ago: executing program 4 (id=696): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x35, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xffff6775, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x46, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x47, 0x5, 0x3, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.832069663s ago: executing program 0 (id=697): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfb}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.802200725s ago: executing program 3 (id=698): socket(0x40000000015, 0x805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.669483031s ago: executing program 3 (id=699): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000980000/0x2000)=nil, 0x2000, 0xb, 0x28011, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) 1.513131588s ago: executing program 0 (id=700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f01c80f20e035200000000f22e0c4e1fa2a0d1adad9ac0f01cb660fe19a717e000066ba4200edb8000000000f23d00f21f835300000050f23f8b9800000c00f3235004000000f300f209a360f017fb2", 0x50}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 1.077877229s ago: executing program 2 (id=701): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x675f, 0x9, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r10}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327d", 0x23}], 0x1}, 0x4005) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x22, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x10004000}, 0x4041080) 1.077447719s ago: executing program 1 (id=702): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000980000/0x2000)=nil, 0x2000, 0xb, 0x28011, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="588d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 920.504706ms ago: executing program 0 (id=703): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x101, @local, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="02", 0x1}, {0x0, 0x12}], 0x2}, 0x24009080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x375ee909000c88aa, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 919.459917ms ago: executing program 4 (id=704): socket$igmp(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{0x0}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r1, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32, @ANYBLOB="01000000000000002400128009000100626f6e64000000001400028005000100060000", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x404c800}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15f19d0a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000100)=""/15, 0xf}], 0x1, 0x1, 0xaadd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x80101) 905.919967ms ago: executing program 2 (id=705): socket(0x40000000015, 0x805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@any, 0x1}) listen(r2, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') write(0xffffffffffffffff, 0x0, 0x0) 476.588218ms ago: executing program 3 (id=706): socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 410.771281ms ago: executing program 0 (id=707): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfb}}, 0x10}, 0x1c) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 397.942942ms ago: executing program 3 (id=708): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfb}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 238.221869ms ago: executing program 0 (id=709): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x68, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6394bc11539d"}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "70853e6e9a117572dab64fe551"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x3, 0x0}}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000004c0)={r6, 0x43, "4eda9e6ee1c183c928c0e3d8d3043a60874361ea0699f9675607276ddf08837a421b48ab2cb4c3db079f01c235f5dad40fa097d83fb5b5e3f1b8da0f5efc69609d8dd3"}, &(0x7f0000000200)=0x4b) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180100002b00010000000000ffdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8983, &(0x7f0000000080)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00010027bd7000fcdbdf2500000000", @ANYRES32=r9, @ANYBLOB="0300001b"], 0x1c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r10, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @short={0x2, 0x0, 0xffff}}, 0x9, &(0x7f000000b880)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x2008000) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) 209.45401ms ago: executing program 3 (id=710): socket(0x40000000015, 0x805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 169.073112ms ago: executing program 1 (id=711): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfb}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 850.22µs ago: executing program 0 (id=712): socket(0x10, 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f00004ea000/0x3000)=nil, 0x3000, 0xd) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0x2, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x9, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x37, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x9c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1000001, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x10000200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0x1d9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x42, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x1, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20040001}, 0x4800) readv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x2) 0s ago: executing program 4 (id=713): socket(0x10, 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f00004ea000/0x3000)=nil, 0x3000, 0xd) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0x2, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x9, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x37, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x9c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1000001, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x10000200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0x1d9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x42, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x1, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) readv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x2) kernel console output (not intermixed with test programs): ogle 07/24/2026 [ 102.694118][ T4875] Call Trace: [ 102.697411][ T4875] [ 102.700356][ T4875] dump_stack_lvl+0x188/0x250 [ 102.705073][ T4875] ? show_regs_print_info+0x20/0x20 [ 102.710287][ T4875] ? load_image+0x410/0x410 [ 102.714808][ T4875] ? __might_sleep+0xf0/0xf0 [ 102.719410][ T4875] ? __lock_acquire+0x7b50/0x7b50 [ 102.724456][ T4875] should_fail+0x383/0x4b0 [ 102.728895][ T4875] should_failslab+0x5/0x20 [ 102.733413][ T4875] slab_pre_alloc_hook+0x51/0xc0 [ 102.738387][ T4875] __kmalloc+0x6b/0x340 [ 102.742554][ T4875] ? tomoyo_encode+0x28a/0x550 [ 102.747346][ T4875] tomoyo_encode+0x28a/0x550 [ 102.752001][ T4875] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 102.757639][ T4875] tomoyo_path_number_perm+0x251/0x6b0 [ 102.763097][ T4875] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 102.768617][ T4875] ? do_futex+0xdc2/0x12b0 [ 102.773095][ T4875] security_file_ioctl+0x6c/0xa0 [ 102.778064][ T4875] __se_sys_ioctl+0x48/0x170 [ 102.782675][ T4875] do_syscall_64+0x4c/0xa0 [ 102.787101][ T4875] ? clear_bhb_loop+0x30/0x80 [ 102.791786][ T4875] ? clear_bhb_loop+0x30/0x80 [ 102.796475][ T4875] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.802391][ T4875] RIP: 0033:0x7fdaf439d159 [ 102.806817][ T4875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.826431][ T4875] RSP: 002b:00007fdaf25f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.834867][ T4875] RAX: ffffffffffffffda RBX: 00007fdaf4624fa0 RCX: 00007fdaf439d159 [ 102.842907][ T4875] RDX: 0000200000000140 RSI: 00000000c06864b8 RDI: 0000000000000007 [ 102.850911][ T4875] RBP: 00007fdaf443403b R08: 0000000000000000 R09: 0000000000000000 [ 102.858900][ T4875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.866888][ T4875] R13: 00007fdaf4625038 R14: 00007fdaf4624fa0 R15: 00007ffd314f83b8 [ 102.874888][ T4875] [ 102.937923][ T4876] loop3: detected capacity change from 0 to 512 [ 102.976145][ T4875] ERROR: Out of memory at tomoyo_realpath_from_path. [ 103.060841][ T4888] CIFS: Attempting to mount \\127.0.0.1\share [ 103.068956][ T4876] ======================================================= [ 103.068956][ T4876] WARNING: The mand mount option has been deprecated and [ 103.068956][ T4876] and is ignored by this kernel. Remove the mand [ 103.068956][ T4876] option from the mount to silence this warning. [ 103.068956][ T4876] ======================================================= [ 103.873394][ T4876] EXT4-fs (loop3): Invalid commit interval 536871081, must be smaller than 21474836 [ 103.884158][ T4888] CIFS: VFS: Could not allocate crypto cmac(aes) [ 103.929376][ T4888] CIFS: VFS: cifs_mount failed w/return code = -512 [ 103.979631][ T4897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.161'. [ 103.996886][ T4897] netlink: 34959 bytes leftover after parsing attributes in process `syz.4.161'. [ 104.212786][ T4905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 104.229658][ T4905] netlink: 34959 bytes leftover after parsing attributes in process `syz.2.165'. [ 104.305249][ T4910] input: syz1 as /devices/virtual/input/input14 [ 104.386711][ T4915] loop0: detected capacity change from 0 to 64 [ 105.352566][ T4928] input: syz0 as /devices/virtual/input/input15 [ 105.535378][ T4930] loop0: detected capacity change from 0 to 4096 [ 106.368045][ T4941] FAULT_INJECTION: forcing a failure. [ 106.368045][ T4941] name failslab, interval 1, probability 0, space 0, times 0 [ 106.383208][ T4940] FAULT_INJECTION: forcing a failure. [ 106.383208][ T4940] name failslab, interval 1, probability 0, space 0, times 0 [ 106.448046][ T4951] loop2: detected capacity change from 0 to 7 [ 106.461853][ T4940] CPU: 1 PID: 4940 Comm: syz.3.175 Not tainted syzkaller #0 [ 106.469174][ T4940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.479240][ T4940] Call Trace: [ 106.482525][ T4940] [ 106.485460][ T4940] dump_stack_lvl+0x188/0x250 [ 106.490150][ T4940] ? ____sys_recvmsg+0x2ca/0x5b0 [ 106.495102][ T4940] ? show_regs_print_info+0x20/0x20 [ 106.500312][ T4940] ? load_image+0x410/0x410 [ 106.504835][ T4940] ? smc_diag_dump+0x90/0x90 [ 106.509444][ T4940] should_fail+0x383/0x4b0 [ 106.513883][ T4940] should_failslab+0x5/0x20 [ 106.518405][ T4940] slab_pre_alloc_hook+0x51/0xc0 [ 106.523354][ T4940] ? skb_clone+0x1bd/0x350 [ 106.527800][ T4940] kmem_cache_alloc+0x3d/0x280 [ 106.532581][ T4940] skb_clone+0x1bd/0x350 [ 106.536182][ T4946] loop1: detected capacity change from 0 to 512 [ 106.536832][ T4940] __netlink_deliver_tap+0x3cb/0x7c0 [ 106.548370][ T4940] netlink_deliver_tap+0x16c/0x180 [ 106.553497][ T4940] __netlink_sendskb+0x4b/0x90 [ 106.558285][ T4940] netlink_dump+0x9d4/0xdd0 [ 106.562816][ T4940] ? netlink_lookup+0x1d0/0x1d0 [ 106.567696][ T4940] netlink_recvmsg+0x685/0xe50 [ 106.572470][ T4940] ? netlink_sendmsg+0xbe0/0xbe0 [ 106.577406][ T4940] ? aa_sk_perm+0x7dc/0x910 [ 106.581902][ T4940] ? aa_af_perm+0x340/0x340 [ 106.586419][ T4940] ? __lock_acquire+0x1305/0x7b50 [ 106.591448][ T4940] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 106.596725][ T4940] ? security_socket_recvmsg+0x85/0xb0 [ 106.602173][ T4940] ? netlink_sendmsg+0xbe0/0xbe0 [ 106.607110][ T4940] ____sys_recvmsg+0x2ca/0x5b0 [ 106.611872][ T4940] ? __sys_recvmsg_sock+0x40/0x40 [ 106.616900][ T4940] ? import_iovec+0x6f/0xa0 [ 106.621399][ T4940] ___sys_recvmsg+0x213/0x5c0 [ 106.626070][ T4940] ? __sys_recvmsg+0x280/0x280 [ 106.630835][ T4940] ? __fget_files+0x402/0x470 [ 106.635534][ T4940] __x64_sys_recvmsg+0x201/0x2d0 [ 106.640461][ T4940] ? ___sys_recvmsg+0x5c0/0x5c0 [ 106.645294][ T4940] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 106.651278][ T4940] ? lockdep_hardirqs_on+0x94/0x140 [ 106.656493][ T4940] do_syscall_64+0x4c/0xa0 [ 106.660888][ T4940] ? clear_bhb_loop+0x30/0x80 [ 106.665548][ T4940] ? clear_bhb_loop+0x30/0x80 [ 106.670210][ T4940] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.676085][ T4940] RIP: 0033:0x7fdaf439d159 [ 106.680486][ T4940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.700077][ T4940] RSP: 002b:00007fdaf25f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 106.708484][ T4940] RAX: ffffffffffffffda RBX: 00007fdaf4624fa0 RCX: 00007fdaf439d159 [ 106.716460][ T4940] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 106.724419][ T4940] RBP: 00007fdaf443403b R08: 0000000000000000 R09: 0000000000000000 [ 106.732373][ T4940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.740324][ T4940] R13: 00007fdaf4625038 R14: 00007fdaf4624fa0 R15: 00007ffd314f83b8 [ 106.748287][ T4940] [ 106.765118][ T4951] loop2: [ 106.770422][ T4951] loop2: partition table partially beyond EOD, truncated [ 106.796927][ T4941] CPU: 1 PID: 4941 Comm: syz.1.174 Not tainted syzkaller #0 [ 106.804245][ T4941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.814311][ T4941] Call Trace: [ 106.817603][ T4941] [ 106.820541][ T4941] dump_stack_lvl+0x188/0x250 [ 106.825252][ T4941] ? ____sys_recvmsg+0x2ca/0x5b0 [ 106.830209][ T4941] ? show_regs_print_info+0x20/0x20 [ 106.835424][ T4941] ? load_image+0x410/0x410 [ 106.839946][ T4941] ? smc_diag_dump+0x90/0x90 [ 106.842574][ T4946] EXT4-fs (loop1): Invalid commit interval 536871081, must be smaller than 21474836 [ 106.844550][ T4941] should_fail+0x383/0x4b0 [ 106.844585][ T4941] should_failslab+0x5/0x20 [ 106.862826][ T4941] slab_pre_alloc_hook+0x51/0xc0 [ 106.862930][ T4956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 106.867768][ T4941] ? skb_clone+0x1bd/0x350 [ 106.867793][ T4941] kmem_cache_alloc+0x3d/0x280 [ 106.867815][ T4941] skb_clone+0x1bd/0x350 [ 106.867834][ T4941] __netlink_deliver_tap+0x3cb/0x7c0 [ 106.879904][ T4956] netlink: 34959 bytes leftover after parsing attributes in process `syz.2.180'. [ 106.880986][ T4941] netlink_deliver_tap+0x16c/0x180 [ 106.881012][ T4941] __netlink_sendskb+0x4b/0x90 [ 106.914151][ T4941] netlink_dump+0x9d4/0xdd0 [ 106.918648][ T4941] ? netlink_lookup+0x1d0/0x1d0 [ 106.923488][ T4941] netlink_recvmsg+0x685/0xe50 [ 106.928238][ T4941] ? netlink_sendmsg+0xbe0/0xbe0 [ 106.933175][ T4941] ? aa_sk_perm+0x7dc/0x910 [ 106.937671][ T4941] ? aa_af_perm+0x340/0x340 [ 106.942156][ T4941] ? __lock_acquire+0x1305/0x7b50 [ 106.947176][ T4941] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 106.952448][ T4941] ? security_socket_recvmsg+0x85/0xb0 [ 106.957914][ T4941] ? netlink_sendmsg+0xbe0/0xbe0 [ 106.962834][ T4941] ____sys_recvmsg+0x2ca/0x5b0 [ 106.967589][ T4941] ? __sys_recvmsg_sock+0x40/0x40 [ 106.972605][ T4941] ? import_iovec+0x6f/0xa0 [ 106.977090][ T4941] ___sys_recvmsg+0x213/0x5c0 [ 106.981749][ T4941] ? __sys_recvmsg+0x280/0x280 [ 106.986504][ T4941] ? __fget_files+0x402/0x470 [ 106.991174][ T4941] __x64_sys_recvmsg+0x201/0x2d0 [ 106.996103][ T4941] ? ___sys_recvmsg+0x5c0/0x5c0 [ 107.000941][ T4941] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 107.006931][ T4941] ? lockdep_hardirqs_on+0x94/0x140 [ 107.012144][ T4941] do_syscall_64+0x4c/0xa0 [ 107.016566][ T4941] ? clear_bhb_loop+0x30/0x80 [ 107.021244][ T4941] ? clear_bhb_loop+0x30/0x80 [ 107.025903][ T4941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.031778][ T4941] RIP: 0033:0x7f1f6dec4159 [ 107.036176][ T4941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.055760][ T4941] RSP: 002b:00007f1f6c11c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 107.064163][ T4941] RAX: ffffffffffffffda RBX: 00007f1f6e14bfa0 RCX: 00007f1f6dec4159 [ 107.072136][ T4941] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 107.080093][ T4941] RBP: 00007f1f6df5b03b R08: 0000000000000000 R09: 0000000000000000 [ 107.088049][ T4941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.096018][ T4941] R13: 00007f1f6e14c038 R14: 00007f1f6e14bfa0 R15: 00007ffee7993ba8 [ 107.104006][ T4941] [ 107.134575][ T4961] input: syz1 as /devices/virtual/input/input16 [ 107.194612][ T4963] input: syz0 as /devices/virtual/input/input17 [ 107.411127][ T4968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 107.820273][ T4975] CIFS: Attempting to mount \\127.0.0.1\share [ 107.831440][ T4975] CIFS: VFS: Error connecting to socket. Aborting operation. [ 107.838989][ T4975] CIFS: VFS: cifs_mount failed w/return code = -111 [ 108.179381][ T4976] FAULT_INJECTION: forcing a failure. [ 108.179381][ T4976] name failslab, interval 1, probability 0, space 0, times 0 [ 108.525503][ T4976] CPU: 0 PID: 4976 Comm: syz.2.187 Not tainted syzkaller #0 [ 108.532828][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.542887][ T4976] Call Trace: [ 108.546166][ T4976] [ 108.549098][ T4976] dump_stack_lvl+0x188/0x250 [ 108.553789][ T4976] ? show_regs_print_info+0x20/0x20 [ 108.558994][ T4976] ? load_image+0x410/0x410 [ 108.563510][ T4976] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 108.569152][ T4976] ? lockdep_hardirqs_on+0x94/0x140 [ 108.574361][ T4976] should_fail+0x383/0x4b0 [ 108.578782][ T4976] should_failslab+0x5/0x20 [ 108.583283][ T4976] slab_pre_alloc_hook+0x51/0xc0 [ 108.588219][ T4976] ? skb_clone+0x1bd/0x350 [ 108.592635][ T4976] kmem_cache_alloc+0x3d/0x280 [ 108.597408][ T4976] skb_clone+0x1bd/0x350 [ 108.601655][ T4976] __netlink_deliver_tap+0x3cb/0x7c0 [ 108.606998][ T4976] netlink_deliver_tap+0x16c/0x180 [ 108.612116][ T4976] __netlink_sendskb+0x4b/0x90 [ 108.616879][ T4976] netlink_dump+0x9d4/0xdd0 [ 108.621390][ T4976] ? netlink_lookup+0x1d0/0x1d0 [ 108.626271][ T4976] netlink_recvmsg+0x685/0xe50 [ 108.631046][ T4976] ? netlink_sendmsg+0xbe0/0xbe0 [ 108.635983][ T4976] ? aa_sk_perm+0x7dc/0x910 [ 108.640496][ T4976] ? aa_af_perm+0x340/0x340 [ 108.645004][ T4976] ? release_firmware_map_entry+0x190/0x190 [ 108.650900][ T4976] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 108.656184][ T4976] ? security_socket_recvmsg+0x85/0xb0 [ 108.661647][ T4976] ? netlink_sendmsg+0xbe0/0xbe0 [ 108.666583][ T4976] ____sys_recvmsg+0x2ca/0x5b0 [ 108.671365][ T4976] ? __sys_recvmsg_sock+0x40/0x40 [ 108.676412][ T4976] ? import_iovec+0x6f/0xa0 [ 108.680919][ T4976] ___sys_recvmsg+0x213/0x5c0 [ 108.685604][ T4976] ? __sys_recvmsg+0x280/0x280 [ 108.690392][ T4976] ? __fget_files+0x402/0x470 [ 108.695082][ T4976] __x64_sys_recvmsg+0x201/0x2d0 [ 108.700022][ T4976] ? ___sys_recvmsg+0x5c0/0x5c0 [ 108.704868][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.710861][ T4976] ? lockdep_hardirqs_on+0x94/0x140 [ 108.716075][ T4976] do_syscall_64+0x4c/0xa0 [ 108.720487][ T4976] ? clear_bhb_loop+0x30/0x80 [ 108.725164][ T4976] ? clear_bhb_loop+0x30/0x80 [ 108.729842][ T4976] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.735741][ T4976] RIP: 0033:0x7f4b7cd71159 [ 108.740170][ T4976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.759783][ T4976] RSP: 002b:00007f4b7afc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 108.768208][ T4976] RAX: ffffffffffffffda RBX: 00007f4b7cff8fa0 RCX: 00007f4b7cd71159 [ 108.776182][ T4976] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 108.784164][ T4976] RBP: 00007f4b7ce0803b R08: 0000000000000000 R09: 0000000000000000 [ 108.792142][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.800116][ T4976] R13: 00007f4b7cff9038 R14: 00007f4b7cff8fa0 R15: 00007ffc79840348 [ 108.808110][ T4976] [ 108.854433][ T4977] loop2: detected capacity change from 0 to 512 [ 108.894821][ T4977] EXT4-fs (loop2): Invalid commit interval 536871081, must be smaller than 21474836 [ 109.165908][ T4992] input: syz1 as /devices/virtual/input/input18 [ 109.220153][ T4990] FAULT_INJECTION: forcing a failure. [ 109.220153][ T4990] name failslab, interval 1, probability 0, space 0, times 0 [ 109.250210][ T4990] CPU: 0 PID: 4990 Comm: syz.4.192 Not tainted syzkaller #0 [ 109.257549][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.267623][ T4990] Call Trace: [ 109.270911][ T4990] [ 109.273856][ T4990] dump_stack_lvl+0x188/0x250 [ 109.278550][ T4990] ? ____sys_recvmsg+0x2ca/0x5b0 [ 109.283508][ T4990] ? show_regs_print_info+0x20/0x20 [ 109.288721][ T4990] ? load_image+0x410/0x410 [ 109.293243][ T4990] ? smc_diag_dump+0x90/0x90 [ 109.297846][ T4990] should_fail+0x383/0x4b0 [ 109.302281][ T4990] should_failslab+0x5/0x20 [ 109.306790][ T4990] slab_pre_alloc_hook+0x51/0xc0 [ 109.311735][ T4990] ? skb_clone+0x1bd/0x350 [ 109.316161][ T4990] kmem_cache_alloc+0x3d/0x280 [ 109.320942][ T4990] skb_clone+0x1bd/0x350 [ 109.325204][ T4990] __netlink_deliver_tap+0x3cb/0x7c0 [ 109.330519][ T4990] netlink_deliver_tap+0x16c/0x180 [ 109.335652][ T4990] __netlink_sendskb+0x4b/0x90 [ 109.340429][ T4990] netlink_dump+0x9d4/0xdd0 [ 109.344959][ T4990] ? netlink_lookup+0x1d0/0x1d0 [ 109.349835][ T4990] netlink_recvmsg+0x685/0xe50 [ 109.354615][ T4990] ? netlink_sendmsg+0xbe0/0xbe0 [ 109.359566][ T4990] ? aa_sk_perm+0x7dc/0x910 [ 109.364084][ T4990] ? aa_af_perm+0x340/0x340 [ 109.368590][ T4990] ? __lock_acquire+0x1305/0x7b50 [ 109.373636][ T4990] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 109.378938][ T4990] ? security_socket_recvmsg+0x85/0xb0 [ 109.384410][ T4990] ? netlink_sendmsg+0xbe0/0xbe0 [ 109.389358][ T4990] ____sys_recvmsg+0x2ca/0x5b0 [ 109.394147][ T4990] ? __sys_recvmsg_sock+0x40/0x40 [ 109.399196][ T4990] ? import_iovec+0x6f/0xa0 [ 109.403713][ T4990] ___sys_recvmsg+0x213/0x5c0 [ 109.408408][ T4990] ? __sys_recvmsg+0x280/0x280 [ 109.413196][ T4990] ? __fget_files+0x402/0x470 [ 109.417896][ T4990] __x64_sys_recvmsg+0x201/0x2d0 [ 109.422842][ T4990] ? ___sys_recvmsg+0x5c0/0x5c0 [ 109.427708][ T4990] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 109.433713][ T4990] ? lockdep_hardirqs_on+0x94/0x140 [ 109.438928][ T4990] do_syscall_64+0x4c/0xa0 [ 109.443353][ T4990] ? clear_bhb_loop+0x30/0x80 [ 109.448061][ T4990] ? clear_bhb_loop+0x30/0x80 [ 109.452751][ T4990] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.458658][ T4990] RIP: 0033:0x7f87a6e5f159 [ 109.463086][ T4990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.482729][ T4990] RSP: 002b:00007f87a50b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 109.491173][ T4990] RAX: ffffffffffffffda RBX: 00007f87a70e6fa0 RCX: 00007f87a6e5f159 [ 109.499334][ T4990] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 109.507318][ T4990] RBP: 00007f87a6ef603b R08: 0000000000000000 R09: 0000000000000000 [ 109.515299][ T4990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.523282][ T4990] R13: 00007f87a70e7038 R14: 00007f87a70e6fa0 R15: 00007fff52429a48 [ 109.531281][ T4990] [ 109.713154][ T5001] input: syz1 as /devices/virtual/input/input19 [ 109.840167][ T5004] loop2: detected capacity change from 0 to 7 [ 109.851424][ T4179] loop2: [ 109.857766][ T4179] loop2: partition table partially beyond EOD, truncated [ 109.870856][ T5004] loop2: [ 109.873828][ T5004] loop2: partition table partially beyond EOD, truncated [ 109.986829][ T5006] input: syz0 as /devices/virtual/input/input20 [ 110.079796][ T4718] udevd[4718]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 110.206184][ T5009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.396057][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 110.441911][ T5013] netlink: 34959 bytes leftover after parsing attributes in process `syz.1.197'. [ 110.504170][ T5017] input: syz1 as /devices/virtual/input/input21 [ 110.524980][ T5000] FAULT_INJECTION: forcing a failure. [ 110.524980][ T5000] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 110.539131][ T5000] CPU: 1 PID: 5000 Comm: syz.2.205 Not tainted syzkaller #0 [ 110.546436][ T5000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.556497][ T5000] Call Trace: [ 110.559785][ T5000] [ 110.562725][ T5000] dump_stack_lvl+0x188/0x250 [ 110.567416][ T5000] ? show_regs_print_info+0x20/0x20 [ 110.572624][ T5000] ? load_image+0x410/0x410 [ 110.577143][ T5000] ? uncharge_page+0x490/0x490 [ 110.581919][ T5000] should_fail+0x383/0x4b0 [ 110.586344][ T5000] prepare_alloc_pages+0x1e3/0x5b0 [ 110.591473][ T5000] __alloc_pages+0x11b/0x480 [ 110.596070][ T5000] ? zone_statistics+0x170/0x170 [ 110.601011][ T5000] ? rcu_lock_acquire+0x30/0x30 [ 110.605877][ T5000] ? alloc_pages+0x452/0x560 [ 110.610482][ T5000] __get_free_pages+0x8/0x30 [ 110.615070][ T5000] __tlb_remove_page_size+0x1f2/0x3f0 [ 110.620452][ T5000] unmap_page_range+0xfcf/0x2410 [ 110.625419][ T5000] unmap_vmas+0x131/0x250 [ 110.629758][ T5000] ? unmap_page_range+0x2410/0x2410 [ 110.634977][ T5000] ? __mutex_lock_common+0x435/0x2400 [ 110.640352][ T5000] ? exit_mm_release+0x16/0x30 [ 110.645129][ T5000] exit_mmap+0x3b9/0x640 [ 110.649381][ T5000] ? vm_brk+0x20/0x20 [ 110.653383][ T5000] ? uprobe_clear_state+0x2f6/0x460 [ 110.658590][ T5000] __mmput+0x115/0x390 [ 110.662669][ T5000] exit_mm+0x632/0x7b0 [ 110.666737][ T5000] ? perf_pmu_migrate_context+0xb70/0xb70 [ 110.672460][ T5000] ? do_exit+0x2110/0x2110 [ 110.676879][ T5000] ? __ia32_sys_timer_delete+0x40/0x40 [ 110.682342][ T5000] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 110.687810][ T5000] ? tty_audit_exit+0x149/0x1f0 [ 110.692679][ T5000] do_exit+0x5b8/0x2110 [ 110.696846][ T5000] ? put_task_struct+0x80/0x80 [ 110.701616][ T5000] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.707608][ T5000] ? _raw_spin_lock_irq+0xb7/0xf0 [ 110.712637][ T5000] do_group_exit+0x12c/0x2f0 [ 110.717235][ T5000] ? lockdep_hardirqs_on+0x94/0x140 [ 110.722439][ T5000] get_signal+0x7eb/0x12e0 [ 110.726882][ T5000] arch_do_signal_or_restart+0xe6/0x12a0 [ 110.732534][ T5000] ? kick_process+0xd4/0x140 [ 110.737134][ T5000] ? get_sigframe_size+0x10/0x10 [ 110.742088][ T5000] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.748075][ T5000] ? exit_to_user_mode_loop+0x3b/0x130 [ 110.753539][ T5000] exit_to_user_mode_loop+0x9e/0x130 [ 110.758830][ T5000] exit_to_user_mode_prepare+0xee/0x180 [ 110.764386][ T5000] syscall_exit_to_user_mode+0x16/0x40 [ 110.769860][ T5000] do_syscall_64+0x58/0xa0 [ 110.774277][ T5000] ? clear_bhb_loop+0x30/0x80 [ 110.778959][ T5000] ? clear_bhb_loop+0x30/0x80 [ 110.783643][ T5000] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.789535][ T5000] RIP: 0033:0x7f4b7cd71159 [ 110.793951][ T5000] Code: Unable to access opcode bytes at RIP 0x7f4b7cd7112f. [ 110.801309][ T5000] RSP: 002b:00007f4b7afc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 110.809733][ T5000] RAX: fffffffffffffe00 RBX: 00007f4b7cff8fa0 RCX: 00007f4b7cd71159 [ 110.817716][ T5000] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 110.825695][ T5000] RBP: 00007f4b7ce0803b R08: 0000000000000000 R09: 0000000000000000 [ 110.833677][ T5000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.841655][ T5000] R13: 00007f4b7cff9038 R14: 00007f4b7cff8fa0 R15: 00007ffc79840348 [ 110.849645][ T5000] [ 111.671620][ T5032] input: syz1 as /devices/virtual/input/input22 [ 111.767183][ T5035] loop4: detected capacity change from 0 to 64 [ 111.965146][ T5037] loop2: detected capacity change from 0 to 7 [ 112.043601][ T3558] loop2: [ 112.046608][ T3558] loop2: partition table partially beyond EOD, truncated [ 112.076050][ T5037] loop2: [ 112.079041][ T5037] loop2: partition table partially beyond EOD, truncated [ 112.109999][ T5040] input: syz1 as /devices/virtual/input/input23 [ 112.175044][ T5042] input: syz0 as /devices/virtual/input/input24 [ 112.766137][ T5050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.214'. [ 112.785394][ T5050] netlink: 34959 bytes leftover after parsing attributes in process `syz.4.214'. [ 112.938095][ T5056] loop2: detected capacity change from 0 to 7 [ 112.954348][ T5056] loop2: [ 112.957478][ T5056] loop2: partition table partially beyond EOD, truncated [ 113.107401][ T5062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.126139][ T5058] loop0: detected capacity change from 0 to 512 [ 113.190084][ T5058] EXT4-fs warning (device loop0): read_mmp_block:115: Error -74 while reading MMP block 17 [ 113.226274][ T5047] FAULT_INJECTION: forcing a failure. [ 113.226274][ T5047] name fail_futex, interval 1, probability 0, space 0, times 1 [ 113.239744][ T5047] CPU: 0 PID: 5047 Comm: syz.2.213 Not tainted syzkaller #0 [ 113.247054][ T5047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.257118][ T5047] Call Trace: [ 113.260413][ T5047] [ 113.263347][ T5047] dump_stack_lvl+0x188/0x250 [ 113.268045][ T5047] ? show_regs_print_info+0x20/0x20 [ 113.273251][ T5047] ? load_image+0x410/0x410 [ 113.277772][ T5047] should_fail+0x383/0x4b0 [ 113.282202][ T5047] get_futex_key+0x1a1/0x12d0 [ 113.286889][ T5047] ? futex_wait_restart+0x250/0x250 [ 113.292102][ T5047] futex_wake+0x101/0x540 [ 113.296442][ T5047] ? verify_lock_unused+0x140/0x140 [ 113.301649][ T5047] ? verify_lock_unused+0x140/0x140 [ 113.306859][ T5047] ? futex_wait+0x680/0x680 [ 113.311373][ T5047] do_futex+0xd83/0x12b0 [ 113.315634][ T5047] ? __might_sleep+0xf0/0xf0 [ 113.320231][ T5047] ? __might_fault+0xb7/0x110 [ 113.324915][ T5047] ? futex_exit_release+0x1c0/0x1c0 [ 113.330117][ T5047] ? __lock_acquire+0x7b50/0x7b50 [ 113.335171][ T5047] mm_release+0x278/0x3c0 [ 113.339518][ T5047] ? exit_mm_release+0x30/0x30 [ 113.344290][ T5047] ? lockdep_hardirqs_on+0x94/0x140 [ 113.349501][ T5047] exit_mm+0xaf/0x7b0 [ 113.353486][ T5047] ? perf_pmu_migrate_context+0xb70/0xb70 [ 113.359218][ T5047] ? do_exit+0x2110/0x2110 [ 113.363640][ T5047] ? rcu_is_watching+0x11/0xa0 [ 113.368405][ T5047] ? mm_trace_rss_stat+0x81/0x1c0 [ 113.373441][ T5047] ? sync_mm_rss+0x211/0x350 [ 113.378036][ T5047] do_exit+0x5b8/0x2110 [ 113.382201][ T5047] ? put_task_struct+0x80/0x80 [ 113.386971][ T5047] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 113.392958][ T5047] ? _raw_spin_lock_irq+0xb7/0xf0 [ 113.397990][ T5047] do_group_exit+0x12c/0x2f0 [ 113.402581][ T5047] ? lockdep_hardirqs_on+0x94/0x140 [ 113.407787][ T5047] get_signal+0x7eb/0x12e0 [ 113.412221][ T5047] arch_do_signal_or_restart+0xe6/0x12a0 [ 113.417870][ T5047] ? kick_process+0xd4/0x140 [ 113.422470][ T5047] ? get_sigframe_size+0x10/0x10 [ 113.427421][ T5047] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 113.433416][ T5047] ? exit_to_user_mode_loop+0x3b/0x130 [ 113.438882][ T5047] exit_to_user_mode_loop+0x9e/0x130 [ 113.444193][ T5047] exit_to_user_mode_prepare+0xee/0x180 [ 113.449752][ T5047] syscall_exit_to_user_mode+0x16/0x40 [ 113.455308][ T5047] do_syscall_64+0x58/0xa0 [ 113.459729][ T5047] ? clear_bhb_loop+0x30/0x80 [ 113.464409][ T5047] ? clear_bhb_loop+0x30/0x80 [ 113.469095][ T5047] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.474998][ T5047] RIP: 0033:0x7f4b7cd71159 [ 113.479416][ T5047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.499051][ T5047] RSP: 002b:00007f4b7afc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 113.507475][ T5047] RAX: fffffffffffffe00 RBX: 00007f4b7cff8fa0 RCX: 00007f4b7cd71159 [ 113.515455][ T5047] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 113.523429][ T5047] RBP: 00007f4b7ce0803b R08: 0000000000000000 R09: 0000000000000000 [ 113.531406][ T5047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.539380][ T5047] R13: 00007f4b7cff9038 R14: 00007f4b7cff8fa0 R15: 00007ffc79840348 [ 113.547371][ T5047] [ 113.724957][ T5071] input: syz1 as /devices/virtual/input/input25 [ 113.777115][ T5072] device syzkaller0 entered promiscuous mode [ 113.798300][ T5074] input: syz0 as /devices/virtual/input/input26 [ 113.988877][ T5080] loop2: detected capacity change from 0 to 64 [ 114.113782][ T5085] input: syz1 as /devices/virtual/input/input27 [ 114.186089][ T5087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.900804][ T5097] loop1: detected capacity change from 0 to 64 [ 115.073859][ T5099] loop2: detected capacity change from 0 to 64 [ 115.155292][ T5095] FAULT_INJECTION: forcing a failure. [ 115.155292][ T5095] name fail_futex, interval 1, probability 0, space 0, times 0 [ 115.185191][ T5095] CPU: 0 PID: 5095 Comm: syz.3.230 Not tainted syzkaller #0 [ 115.192520][ T5095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.202586][ T5095] Call Trace: [ 115.205873][ T5095] [ 115.206249][ T5102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 115.208807][ T5095] dump_stack_lvl+0x188/0x250 [ 115.208836][ T5095] ? show_regs_print_info+0x20/0x20 [ 115.208854][ T5095] ? load_image+0x410/0x410 [ 115.208882][ T5095] should_fail+0x383/0x4b0 [ 115.236339][ T5095] get_futex_key+0x1cf/0x12d0 [ 115.237856][ T5102] netlink: 34959 bytes leftover after parsing attributes in process `syz.4.232'. [ 115.241062][ T5095] ? futex_wait_restart+0x250/0x250 [ 115.241097][ T5095] futex_wake+0x101/0x540 [ 115.241113][ T5095] ? verify_lock_unused+0x140/0x140 [ 115.241131][ T5095] ? verify_lock_unused+0x140/0x140 [ 115.241149][ T5095] ? futex_wait+0x680/0x680 [ 115.241170][ T5095] do_futex+0xd83/0x12b0 [ 115.241192][ T5095] ? __might_sleep+0xf0/0xf0 [ 115.241208][ T5095] ? __might_fault+0xb7/0x110 [ 115.241227][ T5095] ? futex_exit_release+0x1c0/0x1c0 [ 115.241245][ T5095] ? __lock_acquire+0x7b50/0x7b50 [ 115.241268][ T5095] mm_release+0x278/0x3c0 [ 115.241288][ T5095] ? exit_mm_release+0x30/0x30 [ 115.241303][ T5095] ? lockdep_hardirqs_on+0x94/0x140 [ 115.241334][ T5095] exit_mm+0xaf/0x7b0 [ 115.241349][ T5095] ? perf_pmu_migrate_context+0xb70/0xb70 [ 115.241372][ T5095] ? do_exit+0x2110/0x2110 [ 115.241386][ T5095] ? rcu_is_watching+0x11/0xa0 [ 115.241401][ T5095] ? mm_trace_rss_stat+0x81/0x1c0 [ 115.241416][ T5095] ? sync_mm_rss+0x211/0x350 [ 115.241435][ T5095] do_exit+0x5b8/0x2110 [ 115.241454][ T5095] ? put_task_struct+0x80/0x80 [ 115.241467][ T5095] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 115.241488][ T5095] ? _raw_spin_lock_irq+0xb7/0xf0 [ 115.361526][ T5095] do_group_exit+0x12c/0x2f0 [ 115.366106][ T5095] ? lockdep_hardirqs_on+0x94/0x140 [ 115.371297][ T5095] get_signal+0x7eb/0x12e0 [ 115.375718][ T5095] arch_do_signal_or_restart+0xe6/0x12a0 [ 115.381357][ T5095] ? kick_process+0xd4/0x140 [ 115.385952][ T5095] ? get_sigframe_size+0x10/0x10 [ 115.390907][ T5095] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 115.396913][ T5095] ? exit_to_user_mode_loop+0x3b/0x130 [ 115.402370][ T5095] exit_to_user_mode_loop+0x9e/0x130 [ 115.407645][ T5095] exit_to_user_mode_prepare+0xee/0x180 [ 115.413198][ T5095] syscall_exit_to_user_mode+0x16/0x40 [ 115.418670][ T5095] do_syscall_64+0x58/0xa0 [ 115.423071][ T5095] ? clear_bhb_loop+0x30/0x80 [ 115.427838][ T5095] ? clear_bhb_loop+0x30/0x80 [ 115.432528][ T5095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.438409][ T5095] RIP: 0033:0x7fdaf439d159 [ 115.442846][ T5095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.462469][ T5095] RSP: 002b:00007fdaf25f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 115.470896][ T5095] RAX: fffffffffffffe00 RBX: 00007fdaf4624fa0 RCX: 00007fdaf439d159 [ 115.478882][ T5095] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 115.486894][ T5095] RBP: 00007fdaf443403b R08: 0000000000000000 R09: 0000000000000000 [ 115.494905][ T5095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.502888][ T5095] R13: 00007fdaf4625038 R14: 00007fdaf4624fa0 R15: 00007ffd314f83b8 [ 115.511056][ T5095] [ 116.460156][ T5113] CIFS: Attempting to mount \\127.0.0.1\share [ 117.192453][ T5113] CIFS: VFS: cifs_mount failed w/return code = -112 [ 117.455092][ T5121] device syzkaller0 entered promiscuous mode [ 117.625024][ T5130] input: syz0 as /devices/virtual/input/input28 [ 117.714436][ T5134] CIFS: Attempting to mount \\127.0.0.1\share [ 117.721596][ T5134] CIFS: VFS: Error connecting to socket. Aborting operation. [ 117.729004][ T5134] CIFS: VFS: cifs_mount failed w/return code = -111 [ 117.813181][ T5137] input: syz1 as /devices/virtual/input/input29 [ 118.095112][ T5146] loop2: detected capacity change from 0 to 4096 [ 118.949036][ T5159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 119.045442][ T5159] netlink: 34959 bytes leftover after parsing attributes in process `syz.4.250'. [ 119.206618][ T5168] input: syz0 as /devices/virtual/input/input30 [ 119.338136][ T5171] loop0: detected capacity change from 0 to 64 [ 120.447123][ T5175] device syzkaller0 entered promiscuous mode [ 120.463383][ T5177] CIFS: Attempting to mount \\127.0.0.1\share [ 120.470348][ T5177] CIFS: VFS: Error connecting to socket. Aborting operation. [ 120.479156][ T5177] CIFS: VFS: cifs_mount failed w/return code = -111 [ 120.598146][ T5183] bond1: option mode: unable to set because the bond device is up [ 120.726134][ T5192] input: syz1 as /devices/virtual/input/input31 [ 120.789925][ T5196] input: syz1 as /devices/virtual/input/input32 [ 121.010171][ T5203] loop2: detected capacity change from 0 to 7 [ 121.048549][ T5203] loop2: [ 121.063640][ T5203] loop2: partition table partially beyond EOD, truncated [ 121.230667][ T5205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 121.265575][ T5205] netlink: 34959 bytes leftover after parsing attributes in process `syz.2.266'. [ 121.562654][ T5209] loop3: detected capacity change from 0 to 64 [ 122.535256][ T5219] CIFS: Attempting to mount \\127.0.0.1\share [ 122.542200][ T5219] CIFS: VFS: Error connecting to socket. Aborting operation. [ 122.549581][ T5219] CIFS: VFS: cifs_mount failed w/return code = -111 [ 122.705290][ T5225] device syzkaller0 entered promiscuous mode [ 122.871845][ T5235] bond1: option mode: unable to set because the bond device is up [ 122.928346][ T5237] loop2: detected capacity change from 0 to 7 [ 122.944818][ T3558] loop2: [ 122.947929][ T3558] loop2: partition table partially beyond EOD, truncated [ 122.962406][ T5237] loop2: [ 122.964900][ T5241] bond1: option mode: unable to set because the bond device is up [ 122.965921][ T5237] loop2: partition table partially beyond EOD, truncated [ 122.984083][ T3558] loop2: [ 122.988587][ T3558] loop2: partition table partially beyond EOD, truncated [ 123.533149][ T5249] loop1: detected capacity change from 0 to 64 [ 123.981455][ T5262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 124.501315][ T5255] CIFS: Attempting to mount \\127.0.0.1\share [ 124.508369][ T5255] CIFS: VFS: Error connecting to socket. Aborting operation. [ 124.515822][ T5255] CIFS: VFS: cifs_mount failed w/return code = -111 [ 124.527971][ T5262] netlink: 34959 bytes leftover after parsing attributes in process `syz.2.284'. [ 124.577356][ T5259] FAULT_INJECTION: forcing a failure. [ 124.577356][ T5259] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.613053][ T5259] CPU: 1 PID: 5259 Comm: syz.4.285 Not tainted syzkaller #0 [ 124.620383][ T5259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.630446][ T5259] Call Trace: [ 124.633736][ T5259] [ 124.636669][ T5259] dump_stack_lvl+0x188/0x250 [ 124.641362][ T5259] ? show_regs_print_info+0x20/0x20 [ 124.646609][ T5259] ? load_image+0x410/0x410 [ 124.651128][ T5259] ? __lock_acquire+0x7b50/0x7b50 [ 124.656176][ T5259] should_fail+0x383/0x4b0 [ 124.660608][ T5259] strncpy_from_user+0x32/0x350 [ 124.665453][ T5259] getname_flags+0xf2/0x4f0 [ 124.669959][ T5259] do_sys_openat2+0xdd/0x500 [ 124.674540][ T5259] ? __lock_acquire+0x7b50/0x7b50 [ 124.679561][ T5259] ? do_sys_open+0xe0/0xe0 [ 124.683961][ T5259] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.689929][ T5259] ? lock_chain_count+0x20/0x20 [ 124.694768][ T5259] __x64_sys_openat+0x135/0x160 [ 124.699606][ T5259] do_syscall_64+0x4c/0xa0 [ 124.704006][ T5259] ? clear_bhb_loop+0x30/0x80 [ 124.708665][ T5259] ? clear_bhb_loop+0x30/0x80 [ 124.713323][ T5259] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.719236][ T5259] RIP: 0033:0x7f87a6e1f98e [ 124.723639][ T5259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 124.743234][ T5259] RSP: 002b:00007f87a50b6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 124.751636][ T5259] RAX: ffffffffffffffda RBX: 00007f87a50b76c0 RCX: 00007f87a6e1f98e [ 124.759622][ T5259] RDX: 0000000000000000 RSI: 00007f87a50b6c00 RDI: ffffffffffffff9c [ 124.767578][ T5259] RBP: 00007f87a50b6c00 R08: 0000000000000000 R09: 0000000000000000 [ 124.775532][ T5259] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 124.783492][ T5259] R13: 00007f87a70e7038 R14: 00007f87a70e6fa0 R15: 00007fff52429a48 [ 124.791458][ T5259] [ 124.816650][ T5268] bond1: option mode: unable to set because the bond device is up [ 124.843424][ T5259] loop4: detected capacity change from 0 to 512 [ 124.904287][ T5259] EXT4-fs (loop4): Invalid commit interval 536871081, must be smaller than 21474836 [ 124.979439][ T5278] device syzkaller0 entered promiscuous mode [ 125.105282][ T5283] input: syz1 as /devices/virtual/input/input38 [ 125.901197][ T5291] loop2: detected capacity change from 0 to 7 [ 125.927320][ T4179] Dev loop2: unable to read RDB block 7 [ 125.943387][ T4179] loop2: AHDI p1 p2 p3 [ 125.947593][ T4179] loop2: partition table partially beyond EOD, truncated [ 125.981128][ T4179] loop2: p1 start 1601398130 is beyond EOD, truncated [ 125.998093][ T4179] loop2: p2 start 1702059890 is beyond EOD, truncated [ 126.030371][ T5291] Dev loop2: unable to read RDB block 7 [ 126.037109][ T5291] loop2: AHDI p1 p2 p3 [ 126.053144][ T5291] loop2: partition table partially beyond EOD, truncated [ 126.078472][ T5291] loop2: p1 start 1601398130 is beyond EOD, truncated [ 126.105431][ T5291] loop2: p2 start 1702059890 is beyond EOD, truncated [ 126.266051][ T5295] bond1: option mode: unable to set because the bond device is up [ 126.339902][ T5297] loop0: detected capacity change from 0 to 64 [ 126.408497][ T5300] input: syz1 as /devices/virtual/input/input39 [ 127.410137][ T5311] loop2: detected capacity change from 0 to 7 [ 127.461998][ T5314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 127.477795][ T5311] loop2: [ 127.482123][ T5311] loop2: partition table partially beyond EOD, truncated [ 127.505230][ T5314] netlink: 34959 bytes leftover after parsing attributes in process `syz.3.302'. [ 127.590051][ T5316] FAULT_INJECTION: forcing a failure. [ 127.590051][ T5316] name failslab, interval 1, probability 0, space 0, times 0 [ 127.598967][ T5318] loop2: detected capacity change from 0 to 7 [ 127.617421][ T5320] loop4: detected capacity change from 0 to 512 [ 127.628765][ T5316] CPU: 0 PID: 5316 Comm: syz.4.303 Not tainted syzkaller #0 [ 127.636101][ T5316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.646169][ T5316] Call Trace: [ 127.649456][ T5316] [ 127.652391][ T5316] dump_stack_lvl+0x188/0x250 [ 127.657081][ T5316] ? ____sys_recvmsg+0x2ca/0x5b0 [ 127.662027][ T5316] ? show_regs_print_info+0x20/0x20 [ 127.667235][ T5316] ? load_image+0x410/0x410 [ 127.671755][ T5316] ? smc_diag_dump+0x90/0x90 [ 127.676366][ T5316] should_fail+0x383/0x4b0 [ 127.680800][ T5316] should_failslab+0x5/0x20 [ 127.685309][ T5316] slab_pre_alloc_hook+0x51/0xc0 [ 127.690255][ T5316] ? skb_clone+0x1bd/0x350 [ 127.694677][ T5316] kmem_cache_alloc+0x3d/0x280 [ 127.699452][ T5316] skb_clone+0x1bd/0x350 [ 127.703709][ T5316] __netlink_deliver_tap+0x3cb/0x7c0 [ 127.709018][ T5316] netlink_deliver_tap+0x16c/0x180 [ 127.714128][ T5316] __netlink_sendskb+0x4b/0x90 [ 127.718914][ T5316] netlink_dump+0x9d4/0xdd0 [ 127.721461][ T4179] Dev loop2: unable to read RDB block 7 [ 127.723433][ T5316] ? netlink_lookup+0x1d0/0x1d0 [ 127.729036][ T4179] loop2: unable to read partition table [ 127.733858][ T5316] netlink_recvmsg+0x685/0xe50 [ 127.733890][ T5316] ? netlink_sendmsg+0xbe0/0xbe0 [ 127.733907][ T5316] ? aa_sk_perm+0x7dc/0x910 [ 127.733928][ T5316] ? aa_af_perm+0x340/0x340 [ 127.733942][ T5316] ? __lock_acquire+0x1305/0x7b50 [ 127.733967][ T5316] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 127.740588][ T4179] loop2: partition table beyond EOD, [ 127.744321][ T5316] ? security_socket_recvmsg+0x85/0xb0 [ 127.744350][ T5316] ? netlink_sendmsg+0xbe0/0xbe0 [ 127.749311][ T4179] truncated [ 127.753748][ T5316] ____sys_recvmsg+0x2ca/0x5b0 [ 127.753789][ T5316] ? __sys_recvmsg_sock+0x40/0x40 [ 127.753819][ T5316] ? import_iovec+0x6f/0xa0 [ 127.766080][ T5318] Dev loop2: unable to read RDB block 7 [ 127.768614][ T5316] ___sys_recvmsg+0x213/0x5c0 [ 127.768646][ T5316] ? __sys_recvmsg+0x280/0x280 [ 127.768679][ T5316] ? __fget_files+0x402/0x470 [ 127.776003][ T5318] loop2: unable to read partition table [ 127.779503][ T5316] __x64_sys_recvmsg+0x201/0x2d0 [ 127.779535][ T5316] ? ___sys_recvmsg+0x5c0/0x5c0 [ 127.785050][ T5318] loop2: partition table beyond EOD, [ 127.787690][ T5316] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 127.787780][ T5316] ? lockdep_hardirqs_on+0x94/0x140 [ 127.792698][ T5318] truncated [ 127.797570][ T5316] do_syscall_64+0x4c/0xa0 [ 127.797598][ T5316] ? clear_bhb_loop+0x30/0x80 [ 127.797615][ T5316] ? clear_bhb_loop+0x30/0x80 [ 127.797631][ T5316] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.797649][ T5316] RIP: 0033:0x7f87a6e5f159 [ 127.809470][ T5318] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 127.812328][ T5316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.812345][ T5316] RSP: 002b:00007f87a50b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 127.812364][ T5316] RAX: ffffffffffffffda RBX: 00007f87a70e6fa0 RCX: 00007f87a6e5f159 [ 127.812376][ T5316] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 127.812386][ T5316] RBP: 00007f87a6ef603b R08: 0000000000000000 R09: 0000000000000000 [ 127.812396][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.812405][ T5316] R13: 00007f87a70e7038 R14: 00007f87a70e6fa0 R15: 00007fff52429a48 [ 127.812434][ T5316] [ 127.860636][ T5323] bond1: option mode: unable to set because the bond device is up [ 127.986016][ T5320] EXT4-fs (loop4): Invalid commit interval 536871081, must be smaller than 21474836 [ 128.278707][ T5336] CIFS: Attempting to mount \\127.0.0.1\share [ 128.286085][ T5336] CIFS: VFS: Error connecting to socket. Aborting operation. [ 128.293554][ T5336] CIFS: VFS: cifs_mount failed w/return code = -111 [ 128.488294][ T5338] device syzkaller0 entered promiscuous mode [ 128.716298][ T5343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 128.771807][ T5343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 129.141933][ T5351] CIFS: Attempting to mount \\127.0.0.1\share [ 129.153462][ T5351] CIFS: VFS: Error connecting to socket. Aborting operation. [ 129.161297][ T5351] CIFS: VFS: cifs_mount failed w/return code = -111 [ 130.225523][ T5361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 130.285912][ T5362] loop2: detected capacity change from 0 to 7 [ 130.294177][ T5362] Dev loop2: unable to read RDB block 7 [ 130.299792][ T5362] loop2: unable to read partition table [ 130.313973][ T5362] loop2: partition table beyond EOD, truncated [ 130.320172][ T5362] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 130.500979][ T5370] CIFS: Attempting to mount \\127.0.0.1\share [ 130.512030][ T5370] CIFS: VFS: Error connecting to socket. Aborting operation. [ 130.519659][ T5370] CIFS: VFS: cifs_mount failed w/return code = -111 [ 132.208609][ T5373] CIFS: Attempting to mount \\127.0.0.1\share [ 132.218609][ T5373] CIFS: VFS: Error connecting to socket. Aborting operation. [ 132.226803][ T5373] CIFS: VFS: cifs_mount failed w/return code = -111 [ 132.642285][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.648648][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.881099][ T5381] CIFS: Attempting to mount \\127.0.0.1\share [ 133.891452][ T5381] CIFS: VFS: Error connecting to socket. Aborting operation. [ 133.898993][ T5381] CIFS: VFS: cifs_mount failed w/return code = -111 [ 134.232151][ T5382] device syzkaller0 entered promiscuous mode [ 134.481195][ T5384] loop2: detected capacity change from 0 to 7 [ 134.665872][ T5384] Dev loop2: unable to read RDB block 7 [ 134.744064][ T5384] loop2: unable to read partition table [ 134.749899][ T5384] loop2: partition table beyond EOD, truncated [ 134.756238][ T5384] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 134.761317][ T5379] input: syz1 as /devices/virtual/input/input42 [ 134.818786][ T5386] device syzkaller0 entered promiscuous mode [ 135.001624][ T5397] input: syz1 as /devices/virtual/input/input43 [ 135.551741][ T5405] CIFS: Attempting to mount \\127.0.0.1\share [ 136.415128][ T5405] CIFS: VFS: cifs_mount failed w/return code = -112 [ 136.509582][ T5410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 136.521731][ T5410] netlink: 65011 bytes leftover after parsing attributes in process `syz.2.334'. [ 136.598284][ T5408] loop1: detected capacity change from 0 to 512 [ 136.610284][ T5417] loop0: detected capacity change from 0 to 64 [ 136.638076][ T5408] EXT4-fs warning (device loop1): read_mmp_block:115: Error -74 while reading MMP block 17 [ 137.102739][ T5431] CIFS: Attempting to mount \\127.0.0.1\share [ 137.854131][ T5431] CIFS: VFS: cifs_mount failed w/return code = -112 [ 137.895816][ T5441] loop2: detected capacity change from 0 to 7 [ 137.956580][ T5441] Dev loop2: unable to read RDB block 7 [ 137.965613][ T5441] loop2: AHDI p1 p2 p3 [ 137.969816][ T5441] loop2: partition table partially beyond EOD, truncated [ 137.988334][ T5441] loop2: p1 start 1601398130 is beyond EOD, truncated [ 138.002075][ T5441] loop2: p2 start 1702059890 is beyond EOD, truncated [ 138.017635][ T5445] input: syz1 as /devices/virtual/input/input44 [ 138.358831][ T5453] loop2: detected capacity change from 0 to 64 [ 138.393866][ T5452] input: syz1 as /devices/virtual/input/input45 [ 138.966575][ T5457] input: syz1 as /devices/virtual/input/input46 [ 139.176612][ T5461] CIFS: Attempting to mount \\127.0.0.1\share [ 140.049292][ T5461] CIFS: VFS: cifs_mount failed w/return code = -112 [ 140.234224][ T5468] device syzkaller0 entered promiscuous mode [ 140.416029][ T5474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 140.437415][ T5473] CIFS: Attempting to mount \\127.0.0.1\share [ 140.484488][ T5474] netlink: 65011 bytes leftover after parsing attributes in process `syz.3.351'. [ 141.217398][ T5473] CIFS: VFS: cifs_mount failed w/return code = -112 [ 141.356807][ T5488] FAULT_INJECTION: forcing a failure. [ 141.356807][ T5488] name failslab, interval 1, probability 0, space 0, times 0 [ 141.357409][ T5490] loop2: detected capacity change from 0 to 7 [ 141.384460][ T4179] loop2: [ 141.387623][ T4179] loop2: partition table partially beyond EOD, truncated [ 141.400846][ T5488] CPU: 0 PID: 5488 Comm: syz.4.355 Not tainted syzkaller #0 [ 141.408166][ T5488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.418317][ T5488] Call Trace: [ 141.421611][ T5488] [ 141.424562][ T5488] dump_stack_lvl+0x188/0x250 [ 141.429263][ T5488] ? ____sys_recvmsg+0x2ca/0x5b0 [ 141.434222][ T5488] ? show_regs_print_info+0x20/0x20 [ 141.439440][ T5488] ? load_image+0x410/0x410 [ 141.443968][ T5488] ? smc_diag_dump+0x90/0x90 [ 141.448578][ T5488] should_fail+0x383/0x4b0 [ 141.453021][ T5488] should_failslab+0x5/0x20 [ 141.457576][ T5488] slab_pre_alloc_hook+0x51/0xc0 [ 141.462532][ T5488] ? skb_clone+0x1bd/0x350 [ 141.466965][ T5488] kmem_cache_alloc+0x3d/0x280 [ 141.471747][ T5488] skb_clone+0x1bd/0x350 [ 141.476008][ T5488] __netlink_deliver_tap+0x3cb/0x7c0 [ 141.481324][ T5488] netlink_deliver_tap+0x16c/0x180 [ 141.486458][ T5488] __netlink_sendskb+0x4b/0x90 [ 141.491249][ T5488] netlink_dump+0x9d4/0xdd0 [ 141.495789][ T5488] ? netlink_lookup+0x1d0/0x1d0 [ 141.500670][ T5488] netlink_recvmsg+0x685/0xe50 [ 141.505457][ T5488] ? netlink_sendmsg+0xbe0/0xbe0 [ 141.510404][ T5488] ? aa_sk_perm+0x7dc/0x910 [ 141.514930][ T5488] ? aa_af_perm+0x340/0x340 [ 141.519452][ T5488] ? __lock_acquire+0x1305/0x7b50 [ 141.524501][ T5488] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 141.529794][ T5488] ? security_socket_recvmsg+0x85/0xb0 [ 141.535266][ T5488] ? netlink_sendmsg+0xbe0/0xbe0 [ 141.540216][ T5488] ____sys_recvmsg+0x2ca/0x5b0 [ 141.545003][ T5488] ? __sys_recvmsg_sock+0x40/0x40 [ 141.550055][ T5488] ? import_iovec+0x6f/0xa0 [ 141.554578][ T5488] ___sys_recvmsg+0x213/0x5c0 [ 141.559281][ T5488] ? __sys_recvmsg+0x280/0x280 [ 141.564077][ T5488] ? __fget_files+0x402/0x470 [ 141.568780][ T5488] __x64_sys_recvmsg+0x201/0x2d0 [ 141.573735][ T5488] ? ___sys_recvmsg+0x5c0/0x5c0 [ 141.578605][ T5488] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 141.584615][ T5488] ? lockdep_hardirqs_on+0x94/0x140 [ 141.589832][ T5488] do_syscall_64+0x4c/0xa0 [ 141.594263][ T5488] ? clear_bhb_loop+0x30/0x80 [ 141.598958][ T5488] ? clear_bhb_loop+0x30/0x80 [ 141.603655][ T5488] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.609561][ T5488] RIP: 0033:0x7f87a6e5f159 [ 141.613987][ T5488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.633606][ T5488] RSP: 002b:00007f87a50b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 141.642038][ T5488] RAX: ffffffffffffffda RBX: 00007f87a70e6fa0 RCX: 00007f87a6e5f159 [ 141.650025][ T5488] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 141.658010][ T5488] RBP: 00007f87a6ef603b R08: 0000000000000000 R09: 0000000000000000 [ 141.665995][ T5488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.673977][ T5488] R13: 00007f87a70e7038 R14: 00007f87a70e6fa0 R15: 00007fff52429a48 [ 141.681985][ T5488] [ 141.701549][ T5490] loop2: [ 141.706181][ T5490] loop2: partition table partially beyond EOD, truncated [ 142.013549][ T5495] input: syz1 as /devices/virtual/input/input47 [ 142.066103][ T5493] CIFS: Attempting to mount \\127.0.0.1\share [ 142.079179][ T5493] CIFS: VFS: Error connecting to socket. Aborting operation. [ 142.095806][ T5493] CIFS: VFS: cifs_mount failed w/return code = -111 [ 142.197204][ T5499] input: syz1 as /devices/virtual/input/input48 [ 142.430703][ T5504] input: syz1 as /devices/virtual/input/input49 [ 143.241581][ T5507] loop2: detected capacity change from 0 to 7 [ 143.317057][ T4179] Dev loop2: unable to read RDB block 7 [ 143.322837][ T4179] loop2: unable to read partition table [ 143.355945][ T4179] loop2: partition table beyond EOD, truncated [ 143.386032][ T5507] Dev loop2: unable to read RDB block 7 [ 143.400249][ T5507] loop2: unable to read partition table [ 143.459725][ T5507] loop2: partition table beyond EOD, truncated [ 143.468142][ T5510] device syzkaller0 entered promiscuous mode [ 143.474316][ T5507] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 143.516132][ T3558] Dev loop2: unable to read RDB block 7 [ 143.533218][ T5511] device syzkaller0 entered promiscuous mode [ 143.539394][ T3558] loop2: unable to read partition table [ 143.553524][ T3558] loop2: partition table beyond EOD, truncated [ 143.998495][ T5519] device syzkaller0 entered promiscuous mode [ 144.112514][ T5524] CIFS: Attempting to mount \\127.0.0.1\share [ 144.123735][ T5524] CIFS: VFS: Error connecting to socket. Aborting operation. [ 144.132539][ T5524] CIFS: VFS: cifs_mount failed w/return code = -111 [ 145.994659][ T5525] CIFS: Attempting to mount \\127.0.0.1\share [ 146.154037][ T5525] CIFS: VFS: cifs_mount failed w/return code = -112 [ 146.184587][ T5530] loop2: detected capacity change from 0 to 7 [ 146.196836][ T5528] Dev loop2: unable to read RDB block 7 [ 146.208252][ T5528] loop2: unable to read partition table [ 146.214299][ T5528] loop2: partition table beyond EOD, truncated [ 146.226784][ T5530] Dev loop2: unable to read RDB block 7 [ 146.262152][ T5530] loop2: unable to read partition table [ 146.267948][ T5530] loop2: partition table beyond EOD, truncated [ 146.290058][ T5530] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 146.366305][ T5537] device syzkaller0 entered promiscuous mode [ 146.538069][ T5541] CIFS: Attempting to mount \\127.0.0.1\share [ 146.552155][ T5541] CIFS: VFS: Error connecting to socket. Aborting operation. [ 146.574638][ T5541] CIFS: VFS: cifs_mount failed w/return code = -111 [ 146.748708][ T5546] input: syz1 as /devices/virtual/input/input50 [ 147.589659][ T5556] CIFS: Attempting to mount \\127.0.0.1\share [ 147.601591][ T5556] CIFS: VFS: Error connecting to socket. Aborting operation. [ 147.609134][ T5556] CIFS: VFS: cifs_mount failed w/return code = -111 [ 148.563713][ T5558] input: syz1 as /devices/virtual/input/input51 [ 148.685304][ T5565] CIFS: Attempting to mount \\127.0.0.1\share [ 149.019302][ T5573] loop2: detected capacity change from 0 to 7 [ 149.045298][ T5573] loop2: [ 149.053190][ T5573] loop2: partition table partially beyond EOD, truncated [ 149.225723][ T5575] loop2: detected capacity change from 0 to 7 [ 149.254070][ T4179] Dev loop2: unable to read RDB block 7 [ 149.259903][ T4179] loop2: unable to read partition table [ 149.268603][ T4179] loop2: partition table beyond EOD, truncated [ 149.278137][ T5575] Dev loop2: unable to read RDB block 7 [ 149.296467][ T5575] loop2: unable to read partition table [ 149.315016][ T5575] loop2: partition table beyond EOD, truncated [ 149.339407][ T5575] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 149.470239][ T5577] device syzkaller0 entered promiscuous mode [ 149.497810][ T5565] CIFS: VFS: cifs_mount failed w/return code = -112 [ 149.624125][ T5582] input: syz1 as /devices/virtual/input/input52 [ 150.285494][ T5588] device syzkaller0 entered promiscuous mode [ 150.538767][ T5592] CIFS: Attempting to mount \\127.0.0.1\share [ 150.551780][ T5592] CIFS: VFS: Error connecting to socket. Aborting operation. [ 150.559440][ T5592] CIFS: VFS: cifs_mount failed w/return code = -111 [ 151.452146][ T5594] input: syz1 as /devices/virtual/input/input53 [ 151.580847][ T5599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 151.628999][ T5599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 151.687466][ T5604] loop2: detected capacity change from 0 to 7 [ 151.696476][ T4190] Dev loop2: unable to read RDB block 7 [ 151.707755][ T4190] loop2: unable to read partition table [ 151.714181][ T4190] loop2: partition table beyond EOD, truncated [ 151.745989][ T5604] Dev loop2: unable to read RDB block 7 [ 151.753033][ T5604] loop2: unable to read partition table [ 151.758989][ T5604] loop2: partition table beyond EOD, truncated [ 151.776893][ T5604] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 151.800280][ T3558] Dev loop2: unable to read RDB block 7 [ 151.807756][ T3558] loop2: unable to read partition table [ 151.815860][ T3558] loop2: partition table beyond EOD, truncated [ 151.987891][ T5612] CIFS: Attempting to mount \\127.0.0.1\share [ 152.857340][ T5612] CIFS: VFS: cifs_mount failed w/return code = -112 [ 152.945099][ T5617] loop2: detected capacity change from 0 to 7 [ 152.979280][ T4179] Dev loop2: unable to read RDB block 7 [ 153.111543][ T5614] CIFS: Attempting to mount \\127.0.0.1\share [ 153.119844][ T4179] loop2: unable to read partition table [ 153.128079][ T4179] loop2: partition table beyond EOD, truncated [ 153.139389][ T5617] Dev loop2: unable to read RDB block 7 [ 153.143005][ T5620] device syzkaller0 entered promiscuous mode [ 153.145168][ T5617] loop2: unable to read partition table [ 153.157079][ T5617] loop2: partition table beyond EOD, truncated [ 153.163800][ T5617] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 153.263790][ T5629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 153.264292][ T5614] CIFS: VFS: cifs_mount failed w/return code = -112 [ 153.278613][ T5627] input: syz1 as /devices/virtual/input/input54 [ 153.483143][ T5636] input: syz1 as /devices/virtual/input/input55 [ 153.707073][ T5639] input: syz1 as /devices/virtual/input/input56 [ 154.159542][ T5643] CIFS: Attempting to mount \\127.0.0.1\share [ 154.170112][ T5643] CIFS: VFS: Error connecting to socket. Aborting operation. [ 154.178110][ T5643] CIFS: VFS: cifs_mount failed w/return code = -111 [ 155.197572][ T5645] loop2: detected capacity change from 0 to 7 [ 155.211176][ T5645] Dev loop2: unable to read RDB block 7 [ 155.216776][ T5645] loop2: AHDI p1 p2 p3 [ 155.235068][ T5645] loop2: partition table partially beyond EOD, truncated [ 155.243959][ T5645] loop2: p1 start 1601398130 is beyond EOD, truncated [ 155.251462][ T5645] loop2: p2 start 1702059890 is beyond EOD, truncated [ 155.390224][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.415'. [ 155.453406][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.415'. [ 155.488356][ T5656] CIFS: Attempting to mount \\127.0.0.1\share [ 156.339569][ T5656] CIFS: VFS: cifs_mount failed w/return code = -112 [ 156.472783][ T5664] device syzkaller0 entered promiscuous mode [ 156.593643][ T5668] input: syz1 as /devices/virtual/input/input57 [ 156.758838][ T5666] CIFS: Attempting to mount \\127.0.0.1\share [ 157.337303][ T5666] CIFS: VFS: cifs_mount failed w/return code = -112 [ 157.427256][ T5680] input: syz1 as /devices/virtual/input/input58 [ 157.561662][ T5684] CIFS: Attempting to mount \\127.0.0.1\share [ 157.571880][ T5684] CIFS: VFS: Error connecting to socket. Aborting operation. [ 157.579445][ T5684] CIFS: VFS: cifs_mount failed w/return code = -111 [ 158.814002][ T5686] input: syz1 as /devices/virtual/input/input59 [ 158.969215][ T5690] CIFS: Attempting to mount \\127.0.0.1\share [ 158.979912][ T5690] CIFS: VFS: Error connecting to socket. Aborting operation. [ 158.987592][ T5690] CIFS: VFS: cifs_mount failed w/return code = -111 [ 159.905670][ T5696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 159.926775][ T5698] CIFS: Attempting to mount \\127.0.0.1\share [ 159.933816][ T5697] loop2: detected capacity change from 0 to 7 [ 159.946387][ T5698] CIFS: VFS: Error connecting to socket. Aborting operation. [ 159.994598][ T5697] Dev loop2: unable to read RDB block 7 [ 160.016602][ T5698] CIFS: VFS: cifs_mount failed w/return code = -111 [ 160.030892][ T5697] loop2: AHDI p1 p2 p3 [ 160.035252][ T5697] loop2: partition table partially beyond EOD, truncated [ 160.059704][ T5697] loop2: p1 start 1601398130 is beyond EOD, truncated [ 160.086355][ T5697] loop2: p2 start 1702059890 is beyond EOD, truncated [ 160.567881][ T3558] Dev loop2: unable to read RDB block 7 [ 160.778989][ T3558] loop2: AHDI p1 p2 p3 [ 160.797325][ T3558] loop2: partition table partially beyond EOD, truncated [ 160.828090][ T3558] loop2: p1 start 1601398130 is beyond EOD, truncated [ 160.908753][ T5708] CIFS: Attempting to mount \\127.0.0.1\share [ 160.915163][ T3558] loop2: p2 start 1702059890 is beyond EOD, truncated [ 161.778414][ T5708] CIFS: VFS: cifs_mount failed w/return code = -112 [ 161.844268][ T5718] CIFS: Attempting to mount \\127.0.0.1\share [ 161.854679][ T5718] CIFS: VFS: Error connecting to socket. Aborting operation. [ 161.862294][ T5718] CIFS: VFS: cifs_mount failed w/return code = -111 [ 162.077529][ T5715] device syzkaller0 entered promiscuous mode [ 162.191132][ T5721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 162.527970][ T5721] netlink: 34959 bytes leftover after parsing attributes in process `syz.3.433'. [ 162.801294][ T5725] CIFS: Attempting to mount \\127.0.0.1\share [ 162.836548][ T5734] input: syz1 as /devices/virtual/input/input61 [ 162.856396][ T5730] input: syz0 as /devices/virtual/input/input60 [ 162.858729][ T5729] input: syz1 as /devices/virtual/input/input62 [ 163.047123][ T5740] input: syz0 as /devices/virtual/input/input63 [ 163.054790][ T5739] input: syz1 as /devices/virtual/input/input64 [ 163.408672][ T5725] CIFS: VFS: cifs_mount failed w/return code = -112 [ 163.958554][ T5752] CIFS: Attempting to mount \\127.0.0.1\share [ 164.113625][ T5755] CIFS: Attempting to mount \\127.0.0.1\share [ 164.120772][ T5755] CIFS: VFS: Error connecting to socket. Aborting operation. [ 164.128263][ T5755] CIFS: VFS: cifs_mount failed w/return code = -111 [ 164.397233][ T5764] CIFS: Attempting to mount \\127.0.0.1\share [ 164.409808][ T5764] CIFS: VFS: Error connecting to socket. Aborting operation. [ 164.417587][ T5764] CIFS: VFS: cifs_mount failed w/return code = -111 [ 165.243285][ T5765] CIFS: Attempting to mount \\127.0.0.1\share [ 165.606457][ T5752] CIFS: VFS: cifs_mount failed w/return code = -112 [ 165.923048][ T5765] CIFS: VFS: error -4 create cifsd thread [ 165.972321][ T5769] input: syz1 as /devices/virtual/input/input65 [ 165.993957][ T5768] CIFS: Attempting to mount \\127.0.0.1\share [ 166.001077][ T5768] CIFS: VFS: Error connecting to socket. Aborting operation. [ 166.008570][ T5768] CIFS: VFS: cifs_mount failed w/return code = -111 [ 166.030758][ T5765] CIFS: VFS: cifs_mount failed w/return code = -4 [ 166.103420][ T5771] CIFS: Attempting to mount \\127.0.0.1\share [ 166.217993][ T5781] CIFS: Attempting to mount \\127.0.0.1\share [ 166.227702][ T5781] CIFS: VFS: Error connecting to socket. Aborting operation. [ 166.235586][ T5781] CIFS: VFS: cifs_mount failed w/return code = -111 [ 167.123039][ T5774] device syzkaller0 entered promiscuous mode [ 167.135317][ T5771] CIFS: VFS: cifs_mount failed w/return code = -112 [ 167.291697][ T5786] input: syz1 as /devices/virtual/input/input66 [ 167.390815][ T5788] input: syz0 as /devices/virtual/input/input67 [ 167.483320][ T5790] input: syz1 as /devices/virtual/input/input68 [ 167.653741][ T5795] CIFS: Attempting to mount \\127.0.0.1\share [ 168.519198][ T5795] CIFS: VFS: cifs_mount failed w/return code = -112 [ 169.373439][ T5794] CIFS: Attempting to mount \\127.0.0.1\share [ 169.411109][ T5794] CIFS: VFS: Error connecting to socket. Aborting operation. [ 169.457993][ T5794] CIFS: VFS: cifs_mount failed w/return code = -111 [ 169.634302][ T5803] CIFS: Attempting to mount \\127.0.0.1\share [ 169.740209][ T5816] CIFS: Attempting to mount \\127.0.0.1\share [ 169.750064][ T5816] CIFS: VFS: Error connecting to socket. Aborting operation. [ 169.757826][ T5816] CIFS: VFS: cifs_mount failed w/return code = -111 [ 170.364788][ T5803] CIFS: VFS: cifs_mount failed w/return code = -112 [ 170.476612][ T5822] loop2: detected capacity change from 0 to 7 [ 170.580895][ T5826] CIFS: Attempting to mount \\127.0.0.1\share [ 170.591241][ T5826] CIFS: VFS: Error connecting to socket. Aborting operation. [ 170.598807][ T5826] CIFS: VFS: cifs_mount failed w/return code = -111 [ 170.624108][ T5822] Dev loop2: unable to read RDB block 7 [ 170.647765][ T5822] loop2: unable to read partition table [ 171.412511][ T5822] loop2: partition table beyond EOD, truncated [ 171.418703][ T5822] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 171.484206][ T5824] device syzkaller0 entered promiscuous mode [ 171.509492][ T5830] CIFS: Attempting to mount \\127.0.0.1\share [ 171.521151][ T5830] CIFS: VFS: Error connecting to socket. Aborting operation. [ 171.528699][ T5830] CIFS: VFS: cifs_mount failed w/return code = -111 [ 171.738257][ T5831] input: syz0 as /devices/virtual/input/input69 [ 171.884248][ T5836] input: syz1 as /devices/virtual/input/input70 [ 171.896068][ T5833] input: syz1 as /devices/virtual/input/input71 [ 172.072099][ T5843] input: syz1 as /devices/virtual/input/input72 [ 172.339294][ T5850] CIFS: Attempting to mount \\127.0.0.1\share [ 173.201920][ T5850] CIFS: VFS: cifs_mount failed w/return code = -112 [ 173.257040][ T5854] input: syz1 as /devices/virtual/input/input73 [ 173.620873][ T5860] CIFS: Attempting to mount \\127.0.0.1\share [ 173.631196][ T5865] input: syz1 as /devices/virtual/input/input74 [ 173.684989][ T5867] CIFS: Attempting to mount \\127.0.0.1\share [ 173.692519][ T5867] CIFS: VFS: Error connecting to socket. Aborting operation. [ 173.699907][ T5867] CIFS: VFS: cifs_mount failed w/return code = -111 [ 173.919881][ T5875] loop2: detected capacity change from 0 to 7 [ 173.937665][ T5876] input: syz1 as /devices/virtual/input/input75 [ 173.966034][ T5875] Dev loop2: unable to read RDB block 7 [ 174.001319][ T5875] loop2: unable to read partition table [ 174.018307][ T5875] loop2: partition table beyond EOD, truncated [ 174.039630][ T5875] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 174.089932][ T5860] CIFS: VFS: cifs_mount failed w/return code = -112 [ 174.266774][ T5886] loop2: detected capacity change from 0 to 7 [ 174.278174][ T5885] device syzkaller0 entered promiscuous mode [ 174.295044][ T5886] Dev loop2: unable to read RDB block 7 [ 174.327739][ T5886] loop2: unable to read partition table [ 174.360812][ T5886] loop2: partition table beyond EOD, truncated [ 174.391723][ T5886] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 174.449764][ T3558] Dev loop2: unable to read RDB block 7 [ 174.477097][ T3558] loop2: unable to read partition table [ 174.499604][ T3558] loop2: partition table beyond EOD, truncated [ 174.601462][ T5890] input: syz0 as /devices/virtual/input/input76 [ 174.633775][ T5894] input: syz1 as /devices/virtual/input/input77 [ 174.746411][ T5899] CIFS: Attempting to mount \\127.0.0.1\share [ 175.612029][ T5899] CIFS: VFS: cifs_mount failed w/return code = -112 [ 175.670628][ T4234] Bluetooth: hci0: command 0x0406 tx timeout [ 175.676716][ T4234] Bluetooth: hci2: command 0x0406 tx timeout [ 175.688628][ T4234] Bluetooth: hci1: command 0x0406 tx timeout [ 175.695470][ T4234] Bluetooth: hci3: command 0x0406 tx timeout [ 175.701630][ T4234] Bluetooth: hci4: command 0x0406 tx timeout [ 175.836056][ T5908] input: syz1 as /devices/virtual/input/input79 [ 175.852814][ T5915] CIFS: Attempting to mount \\127.0.0.1\share [ 175.860410][ T5915] CIFS: VFS: Error connecting to socket. Aborting operation. [ 175.888958][ T5911] input: syz1 as /devices/virtual/input/input80 [ 177.440602][ T5915] CIFS: VFS: cifs_mount failed w/return code = -111 [ 177.456929][ T5909] CIFS: Attempting to mount \\127.0.0.1\share [ 177.597810][ T5920] loop2: detected capacity change from 0 to 7 [ 177.612030][ T5920] Dev loop2: unable to read RDB block 7 [ 177.617780][ T5920] loop2: unable to read partition table [ 177.629395][ T5920] loop2: partition table beyond EOD, truncated [ 177.635987][ T5909] CIFS: VFS: cifs_mount failed w/return code = -112 [ 177.651197][ T5920] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 177.758893][ T5922] CIFS: Attempting to mount \\127.0.0.1\share [ 177.770905][ T5922] CIFS: VFS: Error connecting to socket. Aborting operation. [ 177.778592][ T5922] CIFS: VFS: cifs_mount failed w/return code = -111 [ 178.623187][ T5927] device syzkaller0 entered promiscuous mode [ 178.663952][ T5938] input: syz0 as /devices/virtual/input/input82 [ 178.677515][ T5933] loop2: detected capacity change from 0 to 7 [ 178.693993][ T5933] Dev loop2: unable to read RDB block 7 [ 178.706739][ T5933] loop2: unable to read partition table [ 178.762157][ T5933] loop2: partition table beyond EOD, truncated [ 178.801326][ T5933] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 178.941374][ T5944] input: syz1 as /devices/virtual/input/input83 [ 179.225299][ T5950] FAULT_INJECTION: forcing a failure. [ 179.225299][ T5950] name failslab, interval 1, probability 0, space 0, times 0 [ 179.266233][ T5954] CIFS: Attempting to mount \\127.0.0.1\share [ 179.498428][ T5950] CPU: 0 PID: 5950 Comm: syz.2.504 Not tainted syzkaller #0 [ 179.505763][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.515824][ T5950] Call Trace: [ 179.519107][ T5950] [ 179.522039][ T5950] dump_stack_lvl+0x188/0x250 [ 179.526743][ T5950] ? release_firmware_map_entry+0x190/0x190 [ 179.532646][ T5950] ? show_regs_print_info+0x20/0x20 [ 179.537856][ T5950] ? load_image+0x410/0x410 [ 179.542366][ T5950] ? mark_lock+0x94/0x320 [ 179.546708][ T5950] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 179.552706][ T5950] should_fail+0x383/0x4b0 [ 179.557131][ T5950] should_failslab+0x5/0x20 [ 179.561670][ T5950] slab_pre_alloc_hook+0x51/0xc0 [ 179.566620][ T5950] ? skb_clone+0x1bd/0x350 [ 179.571045][ T5950] kmem_cache_alloc+0x3d/0x280 [ 179.575816][ T5950] skb_clone+0x1bd/0x350 [ 179.580059][ T5950] __netlink_deliver_tap+0x3cb/0x7c0 [ 179.585361][ T5950] netlink_deliver_tap+0x16c/0x180 [ 179.590483][ T5950] __netlink_sendskb+0x4b/0x90 [ 179.595774][ T5950] netlink_dump+0x9d4/0xdd0 [ 179.600296][ T5950] ? netlink_lookup+0x1d0/0x1d0 [ 179.605166][ T5950] netlink_recvmsg+0x685/0xe50 [ 179.609942][ T5950] ? netlink_sendmsg+0xbe0/0xbe0 [ 179.614882][ T5950] ? aa_sk_perm+0x7dc/0x910 [ 179.619403][ T5950] ? aa_af_perm+0x340/0x340 [ 179.623906][ T5950] ? __lock_acquire+0x1305/0x7b50 [ 179.628942][ T5950] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 179.634237][ T5950] ? security_socket_recvmsg+0x85/0xb0 [ 179.639739][ T5950] ? netlink_sendmsg+0xbe0/0xbe0 [ 179.644681][ T5950] ____sys_recvmsg+0x2ca/0x5b0 [ 179.649465][ T5950] ? __sys_recvmsg_sock+0x40/0x40 [ 179.654516][ T5950] ? import_iovec+0x6f/0xa0 [ 179.659047][ T5950] ___sys_recvmsg+0x213/0x5c0 [ 179.663762][ T5950] ? __sys_recvmsg+0x280/0x280 [ 179.668554][ T5950] ? __fget_files+0x402/0x470 [ 179.673249][ T5950] __x64_sys_recvmsg+0x201/0x2d0 [ 179.678192][ T5950] ? ___sys_recvmsg+0x5c0/0x5c0 [ 179.683043][ T5950] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 179.689042][ T5950] ? lockdep_hardirqs_on+0x94/0x140 [ 179.694254][ T5950] do_syscall_64+0x4c/0xa0 [ 179.698670][ T5950] ? clear_bhb_loop+0x30/0x80 [ 179.703353][ T5950] ? clear_bhb_loop+0x30/0x80 [ 179.708036][ T5950] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.713941][ T5950] RIP: 0033:0x7f4b7cd71159 [ 179.718356][ T5950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.737972][ T5950] RSP: 002b:00007f4b7afc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 179.746394][ T5950] RAX: ffffffffffffffda RBX: 00007f4b7cff8fa0 RCX: 00007f4b7cd71159 [ 179.754380][ T5950] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 179.762360][ T5950] RBP: 00007f4b7ce0803b R08: 0000000000000000 R09: 0000000000000000 [ 179.770346][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.778326][ T5950] R13: 00007f4b7cff9038 R14: 00007f4b7cff8fa0 R15: 00007ffc79840348 [ 179.786322][ T5950] [ 180.150064][ T5954] CIFS: VFS: cifs_mount failed w/return code = -112 [ 181.808024][ T5960] CIFS: Attempting to mount \\127.0.0.1\share [ 182.108290][ T5960] CIFS: VFS: error -4 create cifsd thread [ 182.114484][ T5960] CIFS: VFS: cifs_mount failed w/return code = -4 [ 182.225447][ T5965] CIFS: Attempting to mount \\127.0.0.1\share [ 182.235874][ T5965] CIFS: VFS: Error connecting to socket. Aborting operation. [ 182.243522][ T5965] CIFS: VFS: cifs_mount failed w/return code = -111 [ 183.194702][ T5969] CIFS: Attempting to mount \\127.0.0.1\share [ 183.457539][ T5969] CIFS: VFS: error -4 create cifsd thread [ 183.523274][ T5969] CIFS: VFS: cifs_mount failed w/return code = -4 [ 183.553936][ T5977] CIFS: Attempting to mount \\127.0.0.1\share [ 184.419873][ T5977] CIFS: VFS: cifs_mount failed w/return code = -112 [ 184.492862][ T5984] input: syz1 as /devices/virtual/input/input84 [ 184.524639][ T5991] loop2: detected capacity change from 0 to 7 [ 184.530057][ T5990] netlink: 36 bytes leftover after parsing attributes in process `syz.4.512'. [ 184.544123][ T5991] loop2: [ 184.548343][ T5991] loop2: partition table partially beyond EOD, truncated [ 184.714787][ T5998] CIFS: Attempting to mount \\127.0.0.1\share [ 184.925767][ T6000] loop2: detected capacity change from 0 to 7 [ 185.078017][ T6000] loop2: [ 185.123753][ T6000] loop2: partition table partially beyond EOD, truncated [ 185.579613][ T5998] CIFS: VFS: cifs_mount failed w/return code = -112 [ 185.854592][ T6004] device syzkaller0 entered promiscuous mode [ 185.863164][ T6007] CIFS: Attempting to mount \\127.0.0.1\share [ 187.471143][ T6007] CIFS: VFS: cifs_mount failed w/return code = -112 [ 187.614081][ T6012] CIFS: Attempting to mount \\127.0.0.1\share [ 187.673148][ T6012] CIFS: VFS: Error connecting to socket. Aborting operation. [ 187.685825][ T6012] CIFS: VFS: cifs_mount failed w/return code = -111 [ 187.871166][ T6029] netlink: 36 bytes leftover after parsing attributes in process `syz.3.527'. [ 187.911304][ T6034] loop2: detected capacity change from 0 to 7 [ 187.928796][ T6031] FAULT_INJECTION: forcing a failure. [ 187.928796][ T6031] name failslab, interval 1, probability 0, space 0, times 0 [ 187.955140][ T6034] loop2: [ 187.958127][ T6034] loop2: partition table partially beyond EOD, truncated [ 187.965418][ T6031] CPU: 0 PID: 6031 Comm: syz.0.526 Not tainted syzkaller #0 [ 187.972720][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.982820][ T6031] Call Trace: [ 187.986142][ T6031] [ 187.989087][ T6031] dump_stack_lvl+0x188/0x250 [ 187.993767][ T6031] ? ____sys_recvmsg+0x2ca/0x5b0 [ 187.998785][ T6031] ? show_regs_print_info+0x20/0x20 [ 188.003981][ T6031] ? load_image+0x410/0x410 [ 188.008482][ T6031] ? smc_diag_dump+0x90/0x90 [ 188.013076][ T6031] should_fail+0x383/0x4b0 [ 188.017616][ T6031] should_failslab+0x5/0x20 [ 188.022139][ T6031] slab_pre_alloc_hook+0x51/0xc0 [ 188.027074][ T6031] ? skb_clone+0x1bd/0x350 [ 188.031485][ T6031] kmem_cache_alloc+0x3d/0x280 [ 188.036279][ T6031] skb_clone+0x1bd/0x350 [ 188.040545][ T6031] __netlink_deliver_tap+0x3cb/0x7c0 [ 188.045857][ T6031] netlink_deliver_tap+0x16c/0x180 [ 188.050966][ T6031] __netlink_sendskb+0x4b/0x90 [ 188.055724][ T6031] netlink_dump+0x9d4/0xdd0 [ 188.060222][ T6031] ? netlink_lookup+0x1d0/0x1d0 [ 188.065070][ T6031] netlink_recvmsg+0x685/0xe50 [ 188.069831][ T6031] ? netlink_sendmsg+0xbe0/0xbe0 [ 188.074759][ T6031] ? aa_sk_perm+0x7dc/0x910 [ 188.079279][ T6031] ? aa_af_perm+0x340/0x340 [ 188.083780][ T6031] ? release_firmware_map_entry+0x190/0x190 [ 188.089756][ T6031] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 188.095030][ T6031] ? security_socket_recvmsg+0x85/0xb0 [ 188.100481][ T6031] ? netlink_sendmsg+0xbe0/0xbe0 [ 188.105411][ T6031] ____sys_recvmsg+0x2ca/0x5b0 [ 188.110169][ T6031] ? __sys_recvmsg_sock+0x40/0x40 [ 188.115190][ T6031] ? import_iovec+0x6f/0xa0 [ 188.119682][ T6031] ___sys_recvmsg+0x213/0x5c0 [ 188.124347][ T6031] ? __sys_recvmsg+0x280/0x280 [ 188.129195][ T6031] ? __fget_files+0x402/0x470 [ 188.133871][ T6031] __x64_sys_recvmsg+0x201/0x2d0 [ 188.138801][ T6031] ? ___sys_recvmsg+0x5c0/0x5c0 [ 188.143647][ T6031] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 188.149626][ T6031] ? lockdep_hardirqs_on+0x94/0x140 [ 188.154811][ T6031] do_syscall_64+0x4c/0xa0 [ 188.159241][ T6031] ? clear_bhb_loop+0x30/0x80 [ 188.163903][ T6031] ? clear_bhb_loop+0x30/0x80 [ 188.168568][ T6031] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.174445][ T6031] RIP: 0033:0x7f2f8d728159 [ 188.178845][ T6031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.198439][ T6031] RSP: 002b:00007f2f8b980028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 188.206842][ T6031] RAX: ffffffffffffffda RBX: 00007f2f8d9affa0 RCX: 00007f2f8d728159 [ 188.214814][ T6031] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 188.222771][ T6031] RBP: 00007f2f8d7bf03b R08: 0000000000000000 R09: 0000000000000000 [ 188.230726][ T6031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.238680][ T6031] R13: 00007f2f8d9b0038 R14: 00007f2f8d9affa0 R15: 00007ffc2dcc2d18 [ 188.246649][ T6031] [ 188.429848][ T6039] loop2: detected capacity change from 0 to 7 [ 188.453159][ T6039] loop2: [ 188.456179][ T6039] loop2: partition table partially beyond EOD, truncated [ 188.781795][ T6042] device syzkaller0 entered promiscuous mode [ 188.886663][ T6048] CIFS: Attempting to mount \\127.0.0.1\share [ 189.894423][ T6048] CIFS: VFS: error -4 create cifsd thread [ 189.971254][ T6048] CIFS: VFS: cifs_mount failed w/return code = -4 [ 189.989304][ T6053] CIFS: Attempting to mount \\127.0.0.1\share [ 190.353250][ T6053] CIFS: VFS: cifs_mount failed w/return code = -112 [ 190.469872][ T6065] input: syz1 as /devices/virtual/input/input87 [ 191.364838][ T6069] CIFS: Attempting to mount \\127.0.0.1\share [ 192.101658][ T6066] CIFS: Attempting to mount \\127.0.0.1\share [ 192.108742][ T6066] CIFS: VFS: Error connecting to socket. Aborting operation. [ 192.175011][ T6066] CIFS: VFS: cifs_mount failed w/return code = -111 [ 192.242234][ T6069] CIFS: VFS: cifs_mount failed w/return code = -112 [ 192.296682][ T6073] loop2: detected capacity change from 0 to 7 [ 192.316434][ T6074] loop2: [ 192.319530][ T6074] loop2: partition table partially beyond EOD, truncated [ 192.338715][ T6073] loop2: [ 192.341974][ T6073] loop2: partition table partially beyond EOD, truncated [ 192.365528][ T3558] loop2: [ 192.368521][ T3558] loop2: partition table partially beyond EOD, truncated [ 192.448742][ T6083] netlink: 36 bytes leftover after parsing attributes in process `syz.3.545'. [ 192.486294][ T6079] FAULT_INJECTION: forcing a failure. [ 192.486294][ T6079] name fail_futex, interval 1, probability 0, space 0, times 0 [ 192.514234][ T6079] CPU: 0 PID: 6079 Comm: syz.4.544 Not tainted syzkaller #0 [ 192.521559][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.531622][ T6079] Call Trace: [ 192.534942][ T6079] [ 192.537882][ T6079] dump_stack_lvl+0x188/0x250 [ 192.542586][ T6079] ? show_regs_print_info+0x20/0x20 [ 192.547804][ T6079] ? load_image+0x410/0x410 [ 192.552330][ T6079] ? cgroup_rstat_updated+0xce/0x350 [ 192.557632][ T6079] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 192.563627][ T6079] should_fail+0x383/0x4b0 [ 192.568055][ T6079] get_futex_key+0x1a1/0x12d0 [ 192.572751][ T6079] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 192.578736][ T6079] ? futex_wait_restart+0x250/0x250 [ 192.583925][ T6079] ? lock_chain_count+0x20/0x20 [ 192.588772][ T6079] futex_wait_setup+0x4b/0x520 [ 192.593523][ T6079] ? lockdep_hardirqs_on+0x94/0x140 [ 192.598717][ T6079] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 192.604601][ T6079] futex_wait+0x22f/0x680 [ 192.608928][ T6079] ? do_futex+0x12b0/0x12b0 [ 192.613432][ T6079] ? verify_lock_unused+0x140/0x140 [ 192.618624][ T6079] ? verify_lock_unused+0x140/0x140 [ 192.623816][ T6079] do_futex+0xdc2/0x12b0 [ 192.628066][ T6079] ? futex_exit_release+0x1c0/0x1c0 [ 192.633285][ T6079] ? __context_tracking_exit+0x4c/0x80 [ 192.638742][ T6079] __se_sys_futex+0x389/0x420 [ 192.643415][ T6079] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 192.649391][ T6079] ? __x64_sys_futex+0xf0/0xf0 [ 192.654148][ T6079] ? __x64_sys_futex+0x1d/0xf0 [ 192.658938][ T6079] do_syscall_64+0x4c/0xa0 [ 192.663346][ T6079] ? clear_bhb_loop+0x30/0x80 [ 192.668028][ T6079] ? clear_bhb_loop+0x30/0x80 [ 192.672695][ T6079] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.678580][ T6079] RIP: 0033:0x7f87a6e5f159 [ 192.682999][ T6079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.702613][ T6079] RSP: 002b:00007f87a50b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 192.711019][ T6079] RAX: ffffffffffffffda RBX: 00007f87a70e6fa8 RCX: 00007f87a6e5f159 [ 192.719005][ T6079] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f87a70e6fa8 [ 192.726964][ T6079] RBP: 00007f87a70e6fa0 R08: 0000000000000000 R09: 0000000000000000 [ 192.734927][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.742884][ T6079] R13: 00007f87a70e7038 R14: 00007fff52429960 R15: 00007fff52429a48 [ 192.750886][ T6079] [ 193.109988][ T6095] device syzkaller0 entered promiscuous mode [ 193.189433][ T6100] CIFS: Attempting to mount \\127.0.0.1\share [ 193.203471][ T6100] CIFS: VFS: Error connecting to socket. Aborting operation. [ 193.211251][ T6100] CIFS: VFS: cifs_mount failed w/return code = -111 [ 194.087214][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.093673][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.149000][ T6106] CIFS: Attempting to mount \\127.0.0.1\share [ 195.731606][ T6106] CIFS: VFS: \\127.0.0.1 Error -104 sending data on socket to server [ 195.740550][ T6106] CIFS: VFS: cifs_mount failed w/return code = -104 [ 195.854363][ T6115] loop2: detected capacity change from 0 to 7 [ 195.863258][ T6109] CIFS: Attempting to mount \\127.0.0.1\share [ 195.882697][ T4179] loop2: [ 195.885749][ T4179] loop2: partition table partially beyond EOD, truncated [ 196.020848][ T6115] loop2: [ 196.030777][ T6115] loop2: partition table partially beyond EOD, truncated [ 196.145558][ T6109] CIFS: VFS: cifs_mount failed w/return code = -112 [ 196.152672][ T6113] CIFS: Attempting to mount \\127.0.0.1\share [ 196.178071][ T6113] CIFS: VFS: Error connecting to socket. Aborting operation. [ 196.186509][ T6113] CIFS: VFS: cifs_mount failed w/return code = -111 [ 196.251807][ T6124] loop2: detected capacity change from 0 to 7 [ 196.269031][ T6124] loop2: [ 196.273857][ T6124] loop2: partition table partially beyond EOD, truncated [ 196.316936][ T6128] FAULT_INJECTION: forcing a failure. [ 196.316936][ T6128] name fail_futex, interval 1, probability 0, space 0, times 0 [ 196.422917][ T6134] CIFS: Attempting to mount \\127.0.0.1\share [ 198.097961][ T6138] CIFS: Attempting to mount \\127.0.0.1\share [ 198.105784][ T6128] CPU: 1 PID: 6128 Comm: syz.0.559 Not tainted syzkaller #0 [ 198.113102][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.123265][ T6128] Call Trace: [ 198.126561][ T6128] [ 198.129497][ T6128] dump_stack_lvl+0x188/0x250 [ 198.134204][ T6128] ? show_regs_print_info+0x20/0x20 [ 198.139421][ T6128] ? load_image+0x410/0x410 [ 198.143937][ T6128] should_fail+0x383/0x4b0 [ 198.148370][ T6128] get_futex_key+0x1a1/0x12d0 [ 198.153073][ T6128] ? futex_wait_restart+0x250/0x250 [ 198.158287][ T6128] futex_wake+0x101/0x540 [ 198.162627][ T6128] ? verify_lock_unused+0x140/0x140 [ 198.167955][ T6128] ? verify_lock_unused+0x140/0x140 [ 198.173179][ T6128] ? futex_wait+0x680/0x680 [ 198.177703][ T6128] do_futex+0xd83/0x12b0 [ 198.181982][ T6128] ? __might_sleep+0xf0/0xf0 [ 198.186666][ T6128] ? __might_fault+0xb7/0x110 [ 198.191367][ T6128] ? futex_exit_release+0x1c0/0x1c0 [ 198.196584][ T6128] ? __lock_acquire+0x7b50/0x7b50 [ 198.201639][ T6128] mm_release+0x278/0x3c0 [ 198.205990][ T6128] ? exit_mm_release+0x30/0x30 [ 198.210786][ T6128] ? lockdep_hardirqs_on+0x94/0x140 [ 198.216044][ T6128] exit_mm+0xaf/0x7b0 [ 198.220054][ T6128] ? perf_pmu_migrate_context+0xb70/0xb70 [ 198.225796][ T6128] ? do_exit+0x2110/0x2110 [ 198.230222][ T6128] ? rcu_is_watching+0x11/0xa0 [ 198.234994][ T6128] ? mm_trace_rss_stat+0x81/0x1c0 [ 198.240035][ T6128] ? sync_mm_rss+0x211/0x350 [ 198.244651][ T6128] do_exit+0x5b8/0x2110 [ 198.248857][ T6128] ? put_task_struct+0x80/0x80 [ 198.253631][ T6128] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 198.259634][ T6128] ? _raw_spin_lock_irq+0xb7/0xf0 [ 198.264733][ T6128] do_group_exit+0x12c/0x2f0 [ 198.269349][ T6128] ? lockdep_hardirqs_on+0x94/0x140 [ 198.274571][ T6128] get_signal+0x7eb/0x12e0 [ 198.279035][ T6128] arch_do_signal_or_restart+0xe6/0x12a0 [ 198.284692][ T6128] ? futex_exit_release+0x1c0/0x1c0 [ 198.289912][ T6128] ? get_sigframe_size+0x10/0x10 [ 198.294895][ T6128] ? __context_tracking_exit+0x4c/0x80 [ 198.300405][ T6128] ? exit_to_user_mode_loop+0x3b/0x130 [ 198.305881][ T6128] exit_to_user_mode_loop+0x9e/0x130 [ 198.311180][ T6128] exit_to_user_mode_prepare+0xee/0x180 [ 198.316746][ T6128] syscall_exit_to_user_mode+0x16/0x40 [ 198.322223][ T6128] do_syscall_64+0x58/0xa0 [ 198.326687][ T6128] ? clear_bhb_loop+0x30/0x80 [ 198.331381][ T6128] ? clear_bhb_loop+0x30/0x80 [ 198.336065][ T6128] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.341966][ T6128] RIP: 0033:0x7f2f8d728159 [ 198.346393][ T6128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.366035][ T6128] RSP: 002b:00007f2f8b9800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 198.374494][ T6128] RAX: 0000000000000001 RBX: 00007f2f8d9affa8 RCX: 00007f2f8d728159 [ 198.383009][ T6128] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2f8d9affac [ 198.391009][ T6128] RBP: 00007f2f8d9affa0 R08: 00112488555fadea R09: 0000000000000000 [ 198.399003][ T6128] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 198.406987][ T6128] R13: 00007f2f8d9b0038 R14: 00007ffc2dcc2c30 R15: 00007ffc2dcc2d18 [ 198.414984][ T6128] [ 198.539353][ T6134] CIFS: VFS: cifs_mount failed w/return code = -112 [ 198.547294][ T6138] CIFS: VFS: Error connecting to socket. Aborting operation. [ 198.617745][ T6138] CIFS: VFS: cifs_mount failed w/return code = -4 [ 198.769547][ T6146] device syzkaller0 entered promiscuous mode [ 198.792966][ T6149] input: syz1 as /devices/virtual/input/input94 [ 199.044088][ T6161] loop2: detected capacity change from 0 to 7 [ 199.071027][ T4179] loop2: [ 199.074124][ T4179] loop2: partition table partially beyond EOD, truncated [ 199.098672][ T6161] loop2: [ 199.102323][ T6161] loop2: partition table partially beyond EOD, truncated [ 199.113387][ T6164] input: syz1 as /devices/virtual/input/input96 [ 199.551214][ T6167] CIFS: Attempting to mount \\127.0.0.1\share [ 199.622692][ T6167] CIFS: VFS: Error connecting to socket. Aborting operation. [ 199.630930][ T6167] CIFS: VFS: cifs_mount failed w/return code = -111 [ 199.776561][ T6171] loop2: detected capacity change from 0 to 7 [ 199.810369][ T6171] Dev loop2: unable to read RDB block 7 [ 199.850644][ T6171] loop2: unable to read partition table [ 199.861136][ T6171] loop2: partition table beyond EOD, truncated [ 199.867613][ T6171] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 199.908679][ T3558] Dev loop2: unable to read RDB block 7 [ 199.914728][ T3558] loop2: unable to read partition table [ 199.921456][ T3558] loop2: partition table beyond EOD, truncated [ 199.946912][ T6177] FAULT_INJECTION: forcing a failure. [ 199.946912][ T6177] name failslab, interval 1, probability 0, space 0, times 0 [ 199.980579][ T6177] CPU: 1 PID: 6177 Comm: syz.2.575 Not tainted syzkaller #0 [ 199.987953][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.998030][ T6177] Call Trace: [ 200.001327][ T6177] [ 200.004274][ T6177] dump_stack_lvl+0x188/0x250 [ 200.008981][ T6177] ? ____sys_recvmsg+0x2ca/0x5b0 [ 200.013954][ T6177] ? show_regs_print_info+0x20/0x20 [ 200.019188][ T6177] ? load_image+0x410/0x410 [ 200.023731][ T6177] ? smc_diag_dump+0x90/0x90 [ 200.028362][ T6177] should_fail+0x383/0x4b0 [ 200.032820][ T6177] should_failslab+0x5/0x20 [ 200.037346][ T6177] slab_pre_alloc_hook+0x51/0xc0 [ 200.042311][ T6177] ? skb_clone+0x1bd/0x350 [ 200.046749][ T6177] kmem_cache_alloc+0x3d/0x280 [ 200.051537][ T6177] skb_clone+0x1bd/0x350 [ 200.055810][ T6177] __netlink_deliver_tap+0x3cb/0x7c0 [ 200.061177][ T6177] netlink_deliver_tap+0x16c/0x180 [ 200.066323][ T6177] __netlink_sendskb+0x4b/0x90 [ 200.071125][ T6177] netlink_dump+0x9d4/0xdd0 [ 200.075669][ T6177] ? netlink_lookup+0x1d0/0x1d0 [ 200.080568][ T6177] netlink_recvmsg+0x685/0xe50 [ 200.085372][ T6177] ? netlink_sendmsg+0xbe0/0xbe0 [ 200.090333][ T6177] ? aa_sk_perm+0x7dc/0x910 [ 200.094866][ T6177] ? aa_af_perm+0x340/0x340 [ 200.099388][ T6177] ? __lock_acquire+0x1305/0x7b50 [ 200.104445][ T6177] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 200.109756][ T6177] ? security_socket_recvmsg+0x85/0xb0 [ 200.115242][ T6177] ? netlink_sendmsg+0xbe0/0xbe0 [ 200.120206][ T6177] ____sys_recvmsg+0x2ca/0x5b0 [ 200.125052][ T6177] ? __sys_recvmsg_sock+0x40/0x40 [ 200.130121][ T6177] ? import_iovec+0x6f/0xa0 [ 200.134655][ T6177] ___sys_recvmsg+0x213/0x5c0 [ 200.139448][ T6177] ? __sys_recvmsg+0x280/0x280 [ 200.144267][ T6177] ? __fget_files+0x402/0x470 [ 200.148989][ T6177] __x64_sys_recvmsg+0x201/0x2d0 [ 200.153963][ T6177] ? ___sys_recvmsg+0x5c0/0x5c0 [ 200.158837][ T6177] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 200.164871][ T6177] ? lockdep_hardirqs_on+0x94/0x140 [ 200.170220][ T6177] do_syscall_64+0x4c/0xa0 [ 200.174665][ T6177] ? clear_bhb_loop+0x30/0x80 [ 200.179370][ T6177] ? clear_bhb_loop+0x30/0x80 [ 200.184071][ T6177] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.189997][ T6177] RIP: 0033:0x7f4b7cd71159 [ 200.194434][ T6177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.214064][ T6177] RSP: 002b:00007f4b7afc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 200.222513][ T6177] RAX: ffffffffffffffda RBX: 00007f4b7cff8fa0 RCX: 00007f4b7cd71159 [ 200.230503][ T6177] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 200.238529][ T6177] RBP: 00007f4b7ce0803b R08: 0000000000000000 R09: 0000000000000000 [ 200.246551][ T6177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.249991][ T6190] device syzkaller0 entered promiscuous mode [ 200.254543][ T6177] R13: 00007f4b7cff9038 R14: 00007f4b7cff8fa0 R15: 00007ffc79840348 [ 200.254576][ T6177] [ 200.351289][ T6188] CIFS: Attempting to mount \\127.0.0.1\share [ 201.029522][ T6188] CIFS: VFS: cifs_mount failed w/return code = -112 [ 201.229859][ T6204] loop2: detected capacity change from 0 to 7 [ 201.331513][ T6199] CIFS: Attempting to mount \\127.0.0.1\share [ 201.373266][ T6204] loop2: [ 201.400307][ T6204] loop2: partition table partially beyond EOD, truncated [ 201.409571][ T6199] CIFS: VFS: Error connecting to socket. Aborting operation. [ 201.418710][ T6199] CIFS: VFS: cifs_mount failed w/return code = -111 [ 201.755575][ T6220] loop2: detected capacity change from 0 to 7 [ 201.797699][ T6220] Dev loop2: unable to read RDB block 7 [ 201.817598][ T6220] loop2: AHDI p1 p2 p3 [ 201.840751][ T6220] loop2: partition table partially beyond EOD, truncated [ 201.872240][ T6220] loop2: p1 start 1601398130 is beyond EOD, truncated [ 201.879092][ T6220] loop2: p2 start 1702059890 is beyond EOD, truncated [ 202.132499][ T6223] loop2: detected capacity change from 0 to 7 [ 202.163073][ T6223] Dev loop2: unable to read RDB block 7 [ 202.168721][ T6223] loop2: unable to read partition table [ 202.210005][ T6223] loop2: partition table beyond EOD, truncated [ 202.259711][ T6223] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 202.277460][ T6227] input: syz1 as /devices/virtual/input/input100 [ 202.526286][ T6234] input: syz1 as /devices/virtual/input/input102 [ 202.553256][ T6237] device syzkaller0 entered promiscuous mode [ 202.859441][ T6240] CIFS: Attempting to mount \\127.0.0.1\share [ 203.284359][ T6245] CIFS: Attempting to mount \\127.0.0.1\share [ 203.296053][ T6245] CIFS: VFS: Error connecting to socket. Aborting operation. [ 203.303954][ T6245] CIFS: VFS: cifs_mount failed w/return code = -111 [ 204.072889][ T6231] FAULT_INJECTION: forcing a failure. [ 204.072889][ T6231] name fail_futex, interval 1, probability 0, space 0, times 0 [ 204.086352][ T6240] CIFS: VFS: cifs_mount failed w/return code = -112 [ 204.093797][ T6231] CPU: 0 PID: 6231 Comm: syz.1.593 Not tainted syzkaller #0 [ 204.101103][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.111174][ T6231] Call Trace: [ 204.114474][ T6231] [ 204.117419][ T6231] dump_stack_lvl+0x188/0x250 [ 204.122131][ T6231] ? show_regs_print_info+0x20/0x20 [ 204.127359][ T6231] ? load_image+0x410/0x410 [ 204.131894][ T6231] ? get_user_pages_fast_only+0x40/0x40 [ 204.137472][ T6231] should_fail+0x383/0x4b0 [ 204.141922][ T6231] get_futex_key+0xbd4/0x12d0 [ 204.146649][ T6231] ? futex_wait_restart+0x250/0x250 [ 204.151893][ T6231] futex_wake+0x101/0x540 [ 204.156245][ T6231] ? verify_lock_unused+0x140/0x140 [ 204.161463][ T6231] ? verify_lock_unused+0x140/0x140 [ 204.166688][ T6231] ? futex_wait+0x680/0x680 [ 204.171245][ T6231] do_futex+0xd83/0x12b0 [ 204.175530][ T6231] ? __might_sleep+0xf0/0xf0 [ 204.180162][ T6231] ? __might_fault+0xb7/0x110 [ 204.184871][ T6231] ? futex_exit_release+0x1c0/0x1c0 [ 204.190124][ T6231] ? __lock_acquire+0x7b50/0x7b50 [ 204.195182][ T6231] mm_release+0x278/0x3c0 [ 204.196249][ T6247] loop2: detected capacity change from 0 to 7 [ 204.199549][ T6231] ? exit_mm_release+0x30/0x30 [ 204.199581][ T6231] ? lockdep_hardirqs_on+0x94/0x140 [ 204.199605][ T6231] exit_mm+0xaf/0x7b0 [ 204.199620][ T6231] ? perf_pmu_migrate_context+0xb70/0xb70 [ 204.199642][ T6231] ? do_exit+0x2110/0x2110 [ 204.229766][ T6231] ? rcu_is_watching+0x11/0xa0 [ 204.234521][ T6231] ? mm_trace_rss_stat+0x81/0x1c0 [ 204.239527][ T6231] ? sync_mm_rss+0x211/0x350 [ 204.244114][ T6231] do_exit+0x5b8/0x2110 [ 204.248278][ T6231] ? put_task_struct+0x80/0x80 [ 204.253059][ T6231] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 204.259051][ T6231] ? _raw_spin_lock_irq+0xb7/0xf0 [ 204.264067][ T6231] do_group_exit+0x12c/0x2f0 [ 204.268661][ T6231] ? lockdep_hardirqs_on+0x94/0x140 [ 204.273858][ T6231] get_signal+0x7eb/0x12e0 [ 204.278277][ T6231] arch_do_signal_or_restart+0xe6/0x12a0 [ 204.283905][ T6231] ? kick_process+0xd4/0x140 [ 204.288496][ T6231] ? get_sigframe_size+0x10/0x10 [ 204.293550][ T6231] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 204.299542][ T6231] ? exit_to_user_mode_loop+0x3b/0x130 [ 204.305019][ T6231] exit_to_user_mode_loop+0x9e/0x130 [ 204.310304][ T6231] exit_to_user_mode_prepare+0xee/0x180 [ 204.315857][ T6231] syscall_exit_to_user_mode+0x16/0x40 [ 204.321421][ T6231] do_syscall_64+0x58/0xa0 [ 204.325840][ T6231] ? clear_bhb_loop+0x30/0x80 [ 204.330513][ T6231] ? clear_bhb_loop+0x30/0x80 [ 204.335208][ T6231] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 204.341088][ T6231] RIP: 0033:0x7f1f6dec4159 [ 204.345494][ T6231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.365095][ T6231] RSP: 002b:00007f1f6c11c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 204.373509][ T6231] RAX: fffffffffffffe00 RBX: 00007f1f6e14bfa0 RCX: 00007f1f6dec4159 [ 204.381466][ T6231] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 204.389425][ T6231] RBP: 00007f1f6df5b03b R08: 0000000000000000 R09: 0000000000000000 [ 204.397400][ T6231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.405359][ T6231] R13: 00007f1f6e14c038 R14: 00007f1f6e14bfa0 R15: 00007ffee7993ba8 [ 204.413337][ T6231] [ 204.441444][ T6247] loop2: [ 204.444444][ T6247] loop2: partition table partially beyond EOD, truncated [ 204.535795][ T6251] input: syz0 as /devices/virtual/input/input103 [ 204.851311][ T6261] loop2: detected capacity change from 0 to 7 [ 204.875287][ T4179] Dev loop2: unable to read RDB block 7 [ 204.887946][ T4179] loop2: unable to read partition table [ 204.934219][ T4179] loop2: partition table beyond EOD, truncated [ 204.963161][ T6261] Dev loop2: unable to read RDB block 7 [ 204.979298][ T6261] loop2: unable to read partition table [ 204.999093][ T6261] loop2: partition table beyond EOD, truncated [ 205.010565][ T6261] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 205.219259][ T6269] device syzkaller0 entered promiscuous mode [ 205.825286][ T6275] CIFS: Attempting to mount \\127.0.0.1\share [ 205.942247][ T6280] CIFS: Attempting to mount \\127.0.0.1\share [ 205.955624][ T6280] CIFS: VFS: Error connecting to socket. Aborting operation. [ 205.963615][ T6280] CIFS: VFS: cifs_mount failed w/return code = -111 [ 206.441767][ T6275] CIFS: VFS: \\127.0.0.1 Error -104 sending data on socket to server [ 206.733589][ T6275] CIFS: VFS: cifs_mount failed w/return code = -104 [ 206.814871][ T6287] loop2: detected capacity change from 0 to 7 [ 206.832704][ T6290] input: syz0 as /devices/virtual/input/input106 [ 206.867376][ T6287] loop2: [ 206.897146][ T6287] loop2: partition table partially beyond EOD, truncated [ 207.152817][ T6300] loop2: detected capacity change from 0 to 7 [ 207.170915][ T6302] input: syz1 as /devices/virtual/input/input108 [ 207.197479][ T6300] Dev loop2: unable to read RDB block 7 [ 207.227077][ T6300] loop2: unable to read partition table [ 207.252898][ T6300] loop2: partition table beyond EOD, truncated [ 207.290821][ T6300] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 207.329350][ T3558] Dev loop2: unable to read RDB block 7 [ 207.338635][ T3558] loop2: unable to read partition table [ 207.358987][ T3558] loop2: partition table beyond EOD, truncated [ 207.508987][ T6305] device syzkaller0 entered promiscuous mode [ 207.939179][ T6312] CIFS: Attempting to mount \\127.0.0.1\share [ 207.946246][ T6312] CIFS: VFS: Error connecting to socket. Aborting operation. [ 207.953700][ T6312] CIFS: VFS: cifs_mount failed w/return code = -111 [ 208.319247][ T6317] CIFS: Attempting to mount \\127.0.0.1\share [ 208.371890][ T6323] loop2: detected capacity change from 0 to 7 [ 208.384195][ T6323] loop2: [ 208.387335][ T6323] loop2: partition table partially beyond EOD, truncated [ 208.451585][ T6326] input: syz0 as /devices/virtual/input/input110 [ 208.639818][ T6329] input: syz1 as /devices/virtual/input/input111 [ 208.788698][ T6332] loop2: detected capacity change from 0 to 7 [ 208.809687][ T6332] Dev loop2: unable to read RDB block 7 [ 208.817081][ T6332] loop2: unable to read partition table [ 208.824070][ T6332] loop2: partition table beyond EOD, truncated [ 208.832143][ T6332] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 208.957550][ T6317] CIFS: VFS: cifs_mount failed w/return code = -112 [ 208.982714][ T6336] device syzkaller0 entered promiscuous mode [ 209.137075][ T6341] input: syz1 as /devices/virtual/input/input112 [ 209.157506][ T6343] CIFS: Attempting to mount \\127.0.0.1\share [ 209.164881][ T6343] CIFS: VFS: Error connecting to socket. Aborting operation. [ 209.172541][ T6343] CIFS: VFS: cifs_mount failed w/return code = -111 [ 209.267798][ T6348] loop3: detected capacity change from 0 to 128 [ 209.320781][ T6348] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 209.349279][ T6348] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.376233][ T6348] FAULT_INJECTION: forcing a failure. [ 209.376233][ T6348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.400416][ T6348] CPU: 1 PID: 6348 Comm: syz.3.638 Not tainted syzkaller #0 [ 209.407748][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.417827][ T6348] Call Trace: [ 209.421129][ T6348] [ 209.424081][ T6348] dump_stack_lvl+0x188/0x250 [ 209.428827][ T6348] ? show_regs_print_info+0x20/0x20 [ 209.434060][ T6348] ? load_image+0x410/0x410 [ 209.438598][ T6348] ? __lock_acquire+0x7b50/0x7b50 [ 209.443659][ T6348] should_fail+0x383/0x4b0 [ 209.448349][ T6348] _copy_from_user+0x2e/0x170 [ 209.453062][ T6348] __sys_bind+0x1ee/0x3e0 [ 209.457423][ T6348] ? __ia32_sys_socketpair+0xb0/0xb0 [ 209.462863][ T6348] __x64_sys_bind+0x76/0x80 [ 209.467402][ T6348] do_syscall_64+0x4c/0xa0 [ 209.471857][ T6348] ? clear_bhb_loop+0x30/0x80 [ 209.476571][ T6348] ? clear_bhb_loop+0x30/0x80 [ 209.481284][ T6348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.487318][ T6348] RIP: 0033:0x7fdaf439d159 [ 209.491760][ T6348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.511386][ T6348] RSP: 002b:00007fdaf25f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 209.519825][ T6348] RAX: ffffffffffffffda RBX: 00007fdaf4624fa0 RCX: 00007fdaf439d159 [ 209.527817][ T6348] RDX: 000000000000006e RSI: 0000200000000300 RDI: 0000000000000004 [ 209.535809][ T6348] RBP: 00007fdaf25f5090 R08: 0000000000000000 R09: 0000000000000000 [ 209.543891][ T6348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.551879][ T6348] R13: 00007fdaf4625038 R14: 00007fdaf4624fa0 R15: 00007ffd314f83b8 [ 209.559884][ T6348] [ 209.640094][ T6352] loop2: detected capacity change from 0 to 7 [ 209.661592][ T4179] loop2: [ 209.666892][ T4179] loop2: partition table partially beyond EOD, truncated [ 209.692447][ T6352] loop2: [ 209.695517][ T6352] loop2: partition table partially beyond EOD, truncated [ 209.763915][ T6334] FAULT_INJECTION: forcing a failure. [ 209.763915][ T6334] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 209.777486][ T6334] CPU: 0 PID: 6334 Comm: syz.0.632 Not tainted syzkaller #0 [ 209.784789][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.794858][ T6334] Call Trace: [ 209.798151][ T6334] [ 209.801096][ T6334] dump_stack_lvl+0x188/0x250 [ 209.805792][ T6334] ? verify_lock_unused+0x140/0x140 [ 209.811012][ T6334] ? show_regs_print_info+0x20/0x20 [ 209.816221][ T6334] ? load_image+0x410/0x410 [ 209.820748][ T6334] should_fail+0x383/0x4b0 [ 209.825193][ T6334] prepare_alloc_pages+0x1e3/0x5b0 [ 209.830331][ T6334] __alloc_pages+0x11b/0x480 [ 209.834972][ T6334] ? zone_statistics+0x170/0x170 [ 209.839939][ T6334] ? rcu_lock_acquire+0x30/0x30 [ 209.844824][ T6334] ? alloc_pages+0x452/0x560 [ 209.849440][ T6334] __get_free_pages+0x8/0x30 [ 209.854066][ T6334] __tlb_remove_page_size+0x1f2/0x3f0 [ 209.859533][ T6334] unmap_page_range+0xfcf/0x2410 [ 209.864532][ T6334] unmap_vmas+0x131/0x250 [ 209.868885][ T6334] ? unmap_page_range+0x2410/0x2410 [ 209.874110][ T6334] ? __mutex_lock_common+0x435/0x2400 [ 209.879514][ T6334] ? exit_mm_release+0x16/0x30 [ 209.884309][ T6334] exit_mmap+0x3b9/0x640 [ 209.887953][ T6354] input: syz0 as /devices/virtual/input/input114 [ 209.888576][ T6334] ? vm_brk+0x20/0x20 [ 209.898904][ T6334] ? uprobe_clear_state+0x2f6/0x460 [ 209.904134][ T6334] __mmput+0x115/0x390 [ 209.908227][ T6334] exit_mm+0x632/0x7b0 [ 209.912324][ T6334] ? perf_pmu_migrate_context+0xb70/0xb70 [ 209.918075][ T6334] ? do_exit+0x2110/0x2110 [ 209.922517][ T6334] ? __ia32_sys_timer_delete+0x40/0x40 [ 209.928003][ T6334] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 209.933489][ T6334] ? tty_audit_exit+0x149/0x1f0 [ 209.938352][ T6334] do_exit+0x5b8/0x2110 [ 209.942514][ T6334] ? put_task_struct+0x80/0x80 [ 209.947284][ T6334] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 209.953282][ T6334] ? _raw_spin_lock_irq+0xb7/0xf0 [ 209.958378][ T6334] do_group_exit+0x12c/0x2f0 [ 209.962994][ T6334] ? lockdep_hardirqs_on+0x94/0x140 [ 209.968215][ T6334] get_signal+0x7eb/0x12e0 [ 209.972670][ T6334] arch_do_signal_or_restart+0xe6/0x12a0 [ 209.978336][ T6334] ? kick_process+0xd4/0x140 [ 209.982953][ T6334] ? get_sigframe_size+0x10/0x10 [ 209.987916][ T6334] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 209.993922][ T6334] ? exit_to_user_mode_loop+0x3b/0x130 [ 209.999403][ T6334] exit_to_user_mode_loop+0x9e/0x130 [ 210.004711][ T6334] exit_to_user_mode_prepare+0xee/0x180 [ 210.010297][ T6334] syscall_exit_to_user_mode+0x16/0x40 [ 210.015775][ T6334] do_syscall_64+0x58/0xa0 [ 210.020204][ T6334] ? clear_bhb_loop+0x30/0x80 [ 210.024903][ T6334] ? clear_bhb_loop+0x30/0x80 [ 210.029618][ T6334] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.035542][ T6334] RIP: 0033:0x7f2f8d728159 [ 210.039976][ T6334] Code: Unable to access opcode bytes at RIP 0x7f2f8d72812f. [ 210.047350][ T6334] RSP: 002b:00007f2f8b980028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 210.055787][ T6334] RAX: fffffffffffffe00 RBX: 00007f2f8d9affa0 RCX: 00007f2f8d728159 [ 210.063780][ T6334] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 210.071771][ T6334] RBP: 00007f2f8d7bf03b R08: 0000000000000000 R09: 0000000000000000 [ 210.079755][ T6334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.087745][ T6334] R13: 00007f2f8d9b0038 R14: 00007f2f8d9affa0 R15: 00007ffc2dcc2d18 [ 210.095753][ T6334] [ 210.250779][ T6362] loop2: detected capacity change from 0 to 7 [ 210.280664][ T4179] Dev loop2: unable to read RDB block 7 [ 210.287492][ T4179] loop2: unable to read partition table [ 210.297843][ T4179] loop2: partition table beyond EOD, truncated [ 210.307052][ T6362] Dev loop2: unable to read RDB block 7 [ 210.322822][ T6362] loop2: unable to read partition table [ 210.329766][ T6362] loop2: partition table beyond EOD, truncated [ 210.346800][ T6362] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 210.425353][ T6370] device syzkaller0 entered promiscuous mode [ 210.740877][ T6374] CIFS: Attempting to mount \\127.0.0.1\share [ 210.747975][ T6374] CIFS: VFS: Error connecting to socket. Aborting operation. [ 210.755429][ T6374] CIFS: VFS: cifs_mount failed w/return code = -111 [ 210.849997][ T6372] CIFS: Attempting to mount \\127.0.0.1\share [ 210.933397][ T6378] input: syz1 as /devices/virtual/input/input115 [ 211.026167][ T6380] input: syz1 as /devices/virtual/input/input116 [ 211.173524][ T6382] loop2: detected capacity change from 0 to 7 [ 211.183775][ T6382] loop2: [ 211.186937][ T6382] loop2: partition table partially beyond EOD, truncated [ 211.252532][ T6386] input: syz0 as /devices/virtual/input/input117 [ 211.319072][ T6388] netlink: 'syz.0.654': attribute type 1 has an invalid length. [ 211.340396][ T6388] netlink: 'syz.0.654': attribute type 2 has an invalid length. [ 211.359269][ T6388] netlink: 'syz.0.654': attribute type 2 has an invalid length. [ 211.372422][ T6390] loop0: detected capacity change from 0 to 16 [ 211.376864][ T6388] netlink: 'syz.0.654': attribute type 2 has an invalid length. [ 211.415677][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.654'. [ 211.416371][ T6390] erofs: (device loop0): mounted with root inode @ nid 36. [ 211.435283][ T6372] CIFS: VFS: cifs_mount failed w/return code = -112 [ 211.557226][ T6396] loop2: detected capacity change from 0 to 7 [ 211.571790][ T4179] Dev loop2: unable to read RDB block 7 [ 211.577667][ T4179] loop2: unable to read partition table [ 211.584153][ T4179] loop2: partition table beyond EOD, truncated [ 211.593509][ T6396] Dev loop2: unable to read RDB block 7 [ 211.599289][ T6396] loop2: unable to read partition table [ 211.606424][ T6396] loop2: partition table beyond EOD, truncated [ 211.619933][ T6396] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 211.637368][ T3558] Dev loop2: unable to read RDB block 7 [ 211.647544][ T3558] loop2: unable to read partition table [ 211.654959][ T3558] loop2: partition table beyond EOD, truncated [ 211.709441][ T6398] device syzkaller0 entered promiscuous mode [ 211.810735][ T2300] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 211.952094][ T6401] input: syz1 as /devices/virtual/input/input118 [ 211.961556][ T6404] CIFS: Attempting to mount \\127.0.0.1\share [ 211.968640][ T6404] CIFS: VFS: Error connecting to socket. Aborting operation. [ 211.976162][ T6404] CIFS: VFS: cifs_mount failed w/return code = -111 [ 211.995398][ T6403] device syzkaller0 entered promiscuous mode [ 212.210650][ T2300] usb 1-1: unable to get BOS descriptor or descriptor too short [ 212.300750][ T2300] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.321603][ T2300] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.331737][ T2300] usb 1-1: config 1 has no interface number 0 [ 212.448413][ T6418] loop2: detected capacity change from 0 to 7 [ 212.457614][ T6418] loop2: [ 212.467055][ T6418] loop2: partition table partially beyond EOD, truncated [ 212.491298][ T2300] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 212.516175][ T2300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.534779][ T2300] usb 1-1: Product: syz [ 212.543740][ T2300] usb 1-1: Manufacturer: syz [ 212.543916][ T6420] input: syz0 as /devices/virtual/input/input119 [ 212.554937][ T2300] usb 1-1: SerialNumber: syz [ 212.822325][ T6388] process 'syz.0.654' launched './file1' with NULL argv: empty string added [ 212.843776][ T6422] CIFS: Attempting to mount \\127.0.0.1\share [ 212.851565][ T6388] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 212.864780][ T6388] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 212.925903][ T2300] usb 1-1: selecting invalid altsetting 1 [ 212.948646][ T2300] usb_set_interface error [ 212.974352][ T2300] snd-usb-us122l: probe of 1-1:1.1 failed with error -22 [ 213.043272][ T6428] loop2: detected capacity change from 0 to 7 [ 213.052594][ T2300] usb 1-1: USB disconnect, device number 2 [ 213.056970][ T6430] input: syz1 as /devices/virtual/input/input120 [ 213.077551][ T6428] Dev loop2: unable to read RDB block 7 [ 213.094487][ T6428] loop2: unable to read partition table [ 213.111689][ T6428] loop2: partition table beyond EOD, truncated [ 213.125312][ T6428] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 213.143137][ T6432] input: syz1 as /devices/virtual/input/input121 [ 213.250141][ T6434] CIFS: Attempting to mount \\127.0.0.1\share [ 213.257224][ T6434] CIFS: VFS: Error connecting to socket. Aborting operation. [ 213.264803][ T6434] CIFS: VFS: cifs_mount failed w/return code = -111 [ 213.399680][ T6436] loop2: detected capacity change from 0 to 4096 [ 213.474518][ T6422] CIFS: VFS: cifs_mount failed w/return code = -112 [ 213.523780][ T6436] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 213.540862][ T6436] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 213.578960][ T6436] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 213.596282][ T6436] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 213.605719][ T6438] device syzkaller0 entered promiscuous mode [ 213.639791][ T6436] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 213.662234][ T6436] ntfs: volume version 3.1. [ 213.669677][ T6436] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 213.691332][ T6436] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 213.711543][ T6436] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 213.733017][ T6436] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 213.750208][ T6436] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 213.808159][ T6444] FAULT_INJECTION: forcing a failure. [ 213.808159][ T6444] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 213.821650][ T6444] CPU: 1 PID: 6444 Comm: syz.0.677 Not tainted syzkaller #0 [ 213.828954][ T6444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.839034][ T6444] Call Trace: [ 213.842332][ T6444] [ 213.845285][ T6444] dump_stack_lvl+0x188/0x250 [ 213.850001][ T6444] ? show_regs_print_info+0x20/0x20 [ 213.855314][ T6444] ? load_image+0x410/0x410 [ 213.859853][ T6444] ? uncharge_page+0x490/0x490 [ 213.864652][ T6444] should_fail+0x383/0x4b0 [ 213.869110][ T6444] prepare_alloc_pages+0x1e3/0x5b0 [ 213.874259][ T6444] __alloc_pages+0x11b/0x480 [ 213.878874][ T6444] ? zone_statistics+0x170/0x170 [ 213.883837][ T6444] ? rcu_lock_acquire+0x30/0x30 [ 213.888707][ T6444] ? alloc_pages+0x452/0x560 [ 213.893320][ T6444] __get_free_pages+0x8/0x30 [ 213.897929][ T6444] __tlb_remove_page_size+0x1f2/0x3f0 [ 213.903323][ T6444] unmap_page_range+0xfcf/0x2410 [ 213.908305][ T6444] unmap_vmas+0x131/0x250 [ 213.912653][ T6444] ? unmap_page_range+0x2410/0x2410 [ 213.917868][ T6444] ? __mutex_lock_common+0x435/0x2400 [ 213.923263][ T6444] ? exit_mm_release+0x16/0x30 [ 213.928054][ T6444] exit_mmap+0x3b9/0x640 [ 213.932324][ T6444] ? vm_brk+0x20/0x20 [ 213.936341][ T6444] ? uprobe_clear_state+0x2f6/0x460 [ 213.941600][ T6444] __mmput+0x115/0x390 [ 213.945702][ T6444] exit_mm+0x632/0x7b0 [ 213.949796][ T6444] ? perf_pmu_migrate_context+0xb70/0xb70 [ 213.955543][ T6444] ? do_exit+0x2110/0x2110 [ 213.959976][ T6444] ? __ia32_sys_timer_delete+0x40/0x40 [ 213.965454][ T6444] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 213.970938][ T6444] ? tty_audit_exit+0x149/0x1f0 [ 213.975805][ T6444] do_exit+0x5b8/0x2110 [ 213.979983][ T6444] ? put_task_struct+0x80/0x80 [ 213.984767][ T6444] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 213.990770][ T6444] ? _raw_spin_lock_irq+0xb7/0xf0 [ 213.995828][ T6444] do_group_exit+0x12c/0x2f0 [ 214.000441][ T6444] ? lockdep_hardirqs_on+0x94/0x140 [ 214.005676][ T6444] get_signal+0x7eb/0x12e0 [ 214.010126][ T6444] arch_do_signal_or_restart+0xe6/0x12a0 [ 214.015797][ T6444] ? futex_exit_release+0x1c0/0x1c0 [ 214.021026][ T6444] ? get_sigframe_size+0x10/0x10 [ 214.025987][ T6444] ? __context_tracking_exit+0x4c/0x80 [ 214.031475][ T6444] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 214.037484][ T6444] ? exit_to_user_mode_loop+0x3b/0x130 [ 214.042960][ T6444] exit_to_user_mode_loop+0x9e/0x130 [ 214.048259][ T6444] exit_to_user_mode_prepare+0xee/0x180 [ 214.053820][ T6444] syscall_exit_to_user_mode+0x16/0x40 [ 214.059295][ T6444] do_syscall_64+0x58/0xa0 [ 214.063726][ T6444] ? clear_bhb_loop+0x30/0x80 [ 214.068441][ T6444] ? clear_bhb_loop+0x30/0x80 [ 214.073140][ T6444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.079048][ T6444] RIP: 0033:0x7f2f8d728159 [ 214.083477][ T6444] Code: Unable to access opcode bytes at RIP 0x7f2f8d72812f. [ 214.090852][ T6444] RSP: 002b:00007f2f8b9800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 214.099284][ T6444] RAX: fffffffffffffe00 RBX: 00007f2f8d9affa8 RCX: 00007f2f8d728159 [ 214.107269][ T6444] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2f8d9affa8 [ 214.115252][ T6444] RBP: 00007f2f8d9affa0 R08: 0000000000000000 R09: 0000000000000000 [ 214.123238][ T6444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.131232][ T6444] R13: 00007f2f8d9b0038 R14: 00007ffc2dcc2c30 R15: 00007ffc2dcc2d18 [ 214.139234][ T6444] [ 214.183903][ T6436] 9pnet: Insufficient options for proto=fd [ 214.287061][ T6451] input: syz0 as /devices/virtual/input/input122 [ 214.301993][ T6452] kvm: MONITOR instruction emulated as NOP! [ 214.583050][ T6462] loop2: detected capacity change from 0 to 7 [ 214.599373][ T6462] Dev loop2: unable to read RDB block 7 [ 214.605184][ T6462] loop2: unable to read partition table [ 214.611356][ T6462] loop2: partition table beyond EOD, truncated [ 214.617629][ T6462] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 214.647422][ T6466] CIFS: Attempting to mount \\127.0.0.1\share [ 214.655429][ T6466] CIFS: VFS: Error connecting to socket. Aborting operation. [ 214.662964][ T6466] CIFS: VFS: cifs_mount failed w/return code = -111 [ 214.688521][ T3558] Dev loop2: unable to read RDB block 7 [ 214.703773][ T3558] loop2: unable to read partition table [ 214.709664][ T3558] loop2: partition table beyond EOD, truncated [ 214.789121][ T6468] CIFS: Attempting to mount \\127.0.0.1\share [ 215.157371][ T6476] device syzkaller0 entered promiscuous mode [ 215.214836][ T6478] FAULT_INJECTION: forcing a failure. [ 215.214836][ T6478] name fail_futex, interval 1, probability 0, space 0, times 0 [ 215.236169][ T6478] CPU: 1 PID: 6478 Comm: syz.1.689 Not tainted syzkaller #0 [ 215.243490][ T6478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.253560][ T6478] Call Trace: [ 215.256854][ T6478] [ 215.259793][ T6478] dump_stack_lvl+0x188/0x250 [ 215.264489][ T6478] ? show_regs_print_info+0x20/0x20 [ 215.269709][ T6478] ? load_image+0x410/0x410 [ 215.274243][ T6478] ? get_user_pages_fast_only+0x40/0x40 [ 215.279817][ T6478] should_fail+0x383/0x4b0 [ 215.284257][ T6478] get_futex_key+0xbd4/0x12d0 [ 215.288979][ T6478] ? futex_wait_restart+0x250/0x250 [ 215.294203][ T6478] futex_wake+0x101/0x540 [ 215.298800][ T6478] ? verify_lock_unused+0x140/0x140 [ 215.304012][ T6478] ? verify_lock_unused+0x140/0x140 [ 215.309218][ T6478] ? futex_wait+0x680/0x680 [ 215.313722][ T6478] do_futex+0xd83/0x12b0 [ 215.317983][ T6478] ? __might_sleep+0xf0/0xf0 [ 215.322556][ T6478] ? __might_fault+0xb7/0x110 [ 215.327214][ T6478] ? futex_exit_release+0x1c0/0x1c0 [ 215.332412][ T6478] ? __lock_acquire+0x7b50/0x7b50 [ 215.337549][ T6478] mm_release+0x278/0x3c0 [ 215.341885][ T6478] ? exit_mm_release+0x30/0x30 [ 215.346637][ T6478] ? lockdep_hardirqs_on+0x94/0x140 [ 215.351824][ T6478] exit_mm+0xaf/0x7b0 [ 215.355792][ T6478] ? perf_pmu_migrate_context+0xb70/0xb70 [ 215.361495][ T6478] ? do_exit+0x2110/0x2110 [ 215.365924][ T6478] ? rcu_is_watching+0x11/0xa0 [ 215.370687][ T6478] ? mm_trace_rss_stat+0x81/0x1c0 [ 215.375722][ T6478] ? sync_mm_rss+0x211/0x350 [ 215.380339][ T6478] do_exit+0x5b8/0x2110 [ 215.384497][ T6478] ? put_task_struct+0x80/0x80 [ 215.389270][ T6478] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 215.395245][ T6478] ? _raw_spin_lock_irq+0xb7/0xf0 [ 215.400262][ T6478] do_group_exit+0x12c/0x2f0 [ 215.404841][ T6478] ? lockdep_hardirqs_on+0x94/0x140 [ 215.410036][ T6478] get_signal+0x7eb/0x12e0 [ 215.414458][ T6478] arch_do_signal_or_restart+0xe6/0x12a0 [ 215.420104][ T6478] ? futex_exit_release+0x1c0/0x1c0 [ 215.425286][ T6478] ? get_sigframe_size+0x10/0x10 [ 215.430218][ T6478] ? __context_tracking_exit+0x4c/0x80 [ 215.435673][ T6478] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 215.441642][ T6478] ? exit_to_user_mode_loop+0x3b/0x130 [ 215.447095][ T6478] exit_to_user_mode_loop+0x9e/0x130 [ 215.452373][ T6478] exit_to_user_mode_prepare+0xee/0x180 [ 215.457926][ T6478] syscall_exit_to_user_mode+0x16/0x40 [ 215.463420][ T6478] do_syscall_64+0x58/0xa0 [ 215.467860][ T6478] ? clear_bhb_loop+0x30/0x80 [ 215.472527][ T6478] ? clear_bhb_loop+0x30/0x80 [ 215.477198][ T6478] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 215.483071][ T6478] RIP: 0033:0x7f1f6dec4159 [ 215.487490][ T6478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.507098][ T6478] RSP: 002b:00007f1f6c11c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 215.515528][ T6478] RAX: fffffffffffffe00 RBX: 00007f1f6e14bfa8 RCX: 00007f1f6dec4159 [ 215.523489][ T6478] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1f6e14bfa8 [ 215.531448][ T6478] RBP: 00007f1f6e14bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 215.539419][ T6478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.547378][ T6478] R13: 00007f1f6e14c038 R14: 00007ffee7993ac0 R15: 00007ffee7993ba8 [ 215.555362][ T6478] [ 215.594005][ T6468] CIFS: VFS: cifs_mount failed w/return code = -112 [ 215.649504][ T6481] loop2: detected capacity change from 0 to 7 [ 215.682277][ T3558] loop2: [ 215.685263][ T3558] loop2: partition table partially beyond EOD, truncated [ 215.702745][ T6484] input: syz1 as /devices/virtual/input/input123 [ 215.707830][ T6486] input: syz0 as /devices/virtual/input/input124 [ 215.719365][ T3558] loop2: [ 215.723544][ T3558] loop2: partition table partially beyond EOD, truncated [ 215.746295][ T6488] input: syz1 as /devices/virtual/input/input125 [ 215.755852][ T6481] loop2: [ 215.759317][ T6481] loop2: partition table partially beyond EOD, truncated [ 215.914893][ T6498] CIFS: Attempting to mount \\127.0.0.1\share [ 215.922127][ T6498] CIFS: VFS: Error connecting to socket. Aborting operation. [ 215.929709][ T6498] CIFS: VFS: cifs_mount failed w/return code = -111 [ 215.943533][ T6496] loop2: detected capacity change from 0 to 7 [ 215.960387][ T6496] Dev loop2: unable to read RDB block 7 [ 216.027061][ T6496] loop2: unable to read partition table [ 216.063486][ T6496] loop2: partition table beyond EOD, truncated [ 216.070751][ T6496] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 216.294089][ T6504] FAULT_INJECTION: forcing a failure. [ 216.294089][ T6504] name failslab, interval 1, probability 0, space 0, times 0 [ 216.330747][ T6504] CPU: 1 PID: 6504 Comm: syz.0.700 Not tainted syzkaller #0 [ 216.338073][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.348124][ T6504] Call Trace: [ 216.351401][ T6504] [ 216.354342][ T6504] dump_stack_lvl+0x188/0x250 [ 216.359019][ T6504] ? show_regs_print_info+0x20/0x20 [ 216.364213][ T6504] ? load_image+0x410/0x410 [ 216.368707][ T6504] ? __might_sleep+0xf0/0xf0 [ 216.373281][ T6504] ? __lock_acquire+0x7b50/0x7b50 [ 216.378302][ T6504] should_fail+0x383/0x4b0 [ 216.382708][ T6504] should_failslab+0x5/0x20 [ 216.387222][ T6504] slab_pre_alloc_hook+0x51/0xc0 [ 216.392147][ T6504] __kmalloc+0x6b/0x340 [ 216.396284][ T6504] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 216.401998][ T6504] tomoyo_realpath_from_path+0xed/0x5e0 [ 216.407542][ T6504] tomoyo_path_number_perm+0x251/0x6b0 [ 216.412996][ T6504] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 216.418440][ T6504] ? ksys_write+0x1d4/0x260 [ 216.422958][ T6504] security_file_ioctl+0x6c/0xa0 [ 216.427888][ T6504] __se_sys_ioctl+0x48/0x170 [ 216.432463][ T6504] do_syscall_64+0x4c/0xa0 [ 216.436867][ T6504] ? clear_bhb_loop+0x30/0x80 [ 216.441528][ T6504] ? clear_bhb_loop+0x30/0x80 [ 216.446189][ T6504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.452067][ T6504] RIP: 0033:0x7f2f8d728159 [ 216.456472][ T6504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.476062][ T6504] RSP: 002b:00007f2f8b95f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.484462][ T6504] RAX: ffffffffffffffda RBX: 00007f2f8d9b0090 RCX: 00007f2f8d728159 [ 216.492420][ T6504] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 216.500388][ T6504] RBP: 00007f2f8b95f090 R08: 0000000000000000 R09: 0000000000000000 [ 216.508369][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.516327][ T6504] R13: 00007f2f8d9b0128 R14: 00007f2f8d9b0090 R15: 00007ffc2dcc2d18 [ 216.524296][ T6504] [ 216.553084][ T6504] ERROR: Out of memory at tomoyo_realpath_from_path. [ 216.666278][ T6506] device syzkaller0 entered promiscuous mode [ 216.817174][ T6515] CIFS: Attempting to mount \\127.0.0.1\share [ 216.849601][ T6513] FAULT_INJECTION: forcing a failure. [ 216.849601][ T6513] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 216.863281][ T6513] CPU: 1 PID: 6513 Comm: syz.0.703 Not tainted syzkaller #0 [ 216.870595][ T6513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.880681][ T6513] Call Trace: [ 216.883954][ T6513] [ 216.886880][ T6513] dump_stack_lvl+0x188/0x250 [ 216.891551][ T6513] ? show_regs_print_info+0x20/0x20 [ 216.896737][ T6513] ? load_image+0x410/0x410 [ 216.901233][ T6513] ? uncharge_page+0x490/0x490 [ 216.905990][ T6513] should_fail+0x383/0x4b0 [ 216.910402][ T6513] prepare_alloc_pages+0x1e3/0x5b0 [ 216.915532][ T6513] __alloc_pages+0x11b/0x480 [ 216.920635][ T6513] ? zone_statistics+0x170/0x170 [ 216.925585][ T6513] ? rcu_lock_acquire+0x30/0x30 [ 216.930456][ T6513] ? alloc_pages+0x452/0x560 [ 216.935077][ T6513] __get_free_pages+0x8/0x30 [ 216.939660][ T6513] __tlb_remove_page_size+0x1f2/0x3f0 [ 216.945023][ T6513] unmap_page_range+0xfcf/0x2410 [ 216.949978][ T6513] unmap_vmas+0x131/0x250 [ 216.954297][ T6513] ? unmap_page_range+0x2410/0x2410 [ 216.959475][ T6513] ? __mutex_lock_common+0x435/0x2400 [ 216.964833][ T6513] ? exit_mm_release+0x16/0x30 [ 216.969599][ T6513] exit_mmap+0x3b9/0x640 [ 216.973824][ T6513] ? vm_brk+0x20/0x20 [ 216.977798][ T6513] ? uprobe_clear_state+0x2f6/0x460 [ 216.982979][ T6513] __mmput+0x115/0x390 [ 216.987047][ T6513] exit_mm+0x632/0x7b0 [ 216.991100][ T6513] ? perf_pmu_migrate_context+0xb70/0xb70 [ 216.996805][ T6513] ? do_exit+0x2110/0x2110 [ 217.001213][ T6513] ? __ia32_sys_timer_delete+0x40/0x40 [ 217.006670][ T6513] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 217.012135][ T6513] ? tty_audit_exit+0x149/0x1f0 [ 217.016997][ T6513] do_exit+0x5b8/0x2110 [ 217.021170][ T6513] ? put_task_struct+0x80/0x80 [ 217.025921][ T6513] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 217.031890][ T6513] ? _raw_spin_lock_irq+0xb7/0xf0 [ 217.036904][ T6513] do_group_exit+0x12c/0x2f0 [ 217.041486][ T6513] ? lockdep_hardirqs_on+0x94/0x140 [ 217.046696][ T6513] get_signal+0x7eb/0x12e0 [ 217.051111][ T6513] arch_do_signal_or_restart+0xe6/0x12a0 [ 217.056732][ T6513] ? futex_exit_release+0x1c0/0x1c0 [ 217.061910][ T6513] ? get_sigframe_size+0x10/0x10 [ 217.066833][ T6513] ? __context_tracking_exit+0x4c/0x80 [ 217.072297][ T6513] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 217.078278][ T6513] ? exit_to_user_mode_loop+0x3b/0x130 [ 217.083716][ T6513] exit_to_user_mode_loop+0x9e/0x130 [ 217.088980][ T6513] exit_to_user_mode_prepare+0xee/0x180 [ 217.094505][ T6513] syscall_exit_to_user_mode+0x16/0x40 [ 217.099950][ T6513] do_syscall_64+0x58/0xa0 [ 217.104360][ T6513] ? clear_bhb_loop+0x30/0x80 [ 217.109014][ T6513] ? clear_bhb_loop+0x30/0x80 [ 217.113705][ T6513] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.119590][ T6513] RIP: 0033:0x7f2f8d728159 [ 217.123985][ T6513] Code: Unable to access opcode bytes at RIP 0x7f2f8d72812f. [ 217.131358][ T6513] RSP: 002b:00007f2f8b9800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 217.139750][ T6513] RAX: fffffffffffffe00 RBX: 00007f2f8d9affa8 RCX: 00007f2f8d728159 [ 217.147701][ T6513] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2f8d9affa8 [ 217.155653][ T6513] RBP: 00007f2f8d9affa0 R08: 0000000000000000 R09: 0000000000000000 [ 217.163601][ T6513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.171558][ T6513] R13: 00007f2f8d9b0038 R14: 00007ffc2dcc2c30 R15: 00007ffc2dcc2d18 [ 217.179519][ T6513] [ 217.235358][ T6522] input: syz0 as /devices/virtual/input/input126 [ 217.357344][ T6526] loop2: detected capacity change from 0 to 7 [ 217.380335][ T6526] loop2: [ 217.387992][ T6526] loop2: partition table partially beyond EOD, truncated [ 217.488762][ T6528] netlink: 260 bytes leftover after parsing attributes in process `syz.0.709'. [ 217.562485][ T6530] CIFS: Attempting to mount \\127.0.0.1\share [ 217.569445][ T6530] CIFS: VFS: Error connecting to socket. Aborting operation. [ 217.577151][ T6530] CIFS: VFS: cifs_mount failed w/return code = -111 [ 217.595537][ T6533] loop2: detected capacity change from 0 to 7 [ 217.614064][ T6533] Dev loop2: unable to read RDB block 7 [ 217.630706][ T6533] loop2: unable to read partition table [ 217.636622][ T6533] loop2: partition table beyond EOD, truncated [ 217.654015][ T6515] CIFS: VFS: cifs_mount failed w/return code = -112 [ 217.661539][ T6516] ================================================================== [ 217.670229][ T6516] BUG: KASAN: use-after-free in string+0x204/0x290 [ 217.676750][ T6516] Read of size 1 at addr ffff88805f6b9940 by task cifsd/6516 [ 217.684141][ T6516] [ 217.686478][ T6516] CPU: 0 PID: 6516 Comm: cifsd Not tainted syzkaller #0 [ 217.693432][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.703500][ T6516] Call Trace: [ 217.706805][ T6516] [ 217.709749][ T6516] dump_stack_lvl+0x188/0x250 [ 217.714452][ T6516] ? show_regs_print_info+0x20/0x20 [ 217.719681][ T6516] ? _printk+0xda/0x130 [ 217.723873][ T6516] ? load_image+0x410/0x410 [ 217.728394][ T6516] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 217.733887][ T6516] print_address_description+0x60/0x2d0 [ 217.739470][ T6516] ? string+0x204/0x290 [ 217.743639][ T6516] kasan_report+0xdf/0x130 [ 217.746565][ T6533] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 217.748073][ T6516] ? string+0x204/0x290 [ 217.761440][ T6516] string+0x204/0x290 [ 217.765456][ T6516] vsnprintf+0x10db/0x1c20 [ 217.769891][ T6516] scnprintf+0xe5/0x180 [ 217.774063][ T6516] ? ret_from_fork+0x1f/0x30 [ 217.778669][ T6516] ? snprintf+0x140/0x140 [ 217.783018][ T6516] reconn_set_ipaddr_from_hostname+0x112/0x580 [ 217.789164][ T6516] ? cifs_mark_tcp_ses_conns_for_reconnect+0x13a0/0x13a0 [ 217.796183][ T6516] ? cifs_tree_connect+0x4f0/0x4f0 [ 217.801280][ T6516] ? tcp_recvmsg+0x28a/0x760 [ 217.805864][ T6516] ? do_raw_spin_unlock+0x11d/0x230 [ 217.811055][ T6516] cifs_reconnect+0x470/0x1350 [ 217.815819][ T6516] ? inet_recvmsg+0x18b/0x200 [ 217.820490][ T6516] ? cifs_mount_params_proc_show+0x1a0/0x1a0 [ 217.826468][ T6516] ? inet_sendpage+0x2e0/0x2e0 [ 217.831222][ T6516] ? security_socket_recvmsg+0x85/0xb0 [ 217.836676][ T6516] ? sock_recvmsg+0x6f/0xf0 [ 217.841167][ T6516] cifs_readv_from_socket+0x7c4/0x8b0 [ 217.846539][ T6516] cifs_demultiplex_thread+0x53b/0x35b0 [ 217.852088][ T6516] ? cifs_resolve_server+0x110/0x110 [ 217.857364][ T6516] ? finish_lock_switch+0x12d/0x290 [ 217.862548][ T6516] ? lockdep_hardirqs_on+0x94/0x140 [ 217.867736][ T6516] ? finish_lock_switch+0x12d/0x290 [ 217.872923][ T6516] ? finish_task_switch+0x12f/0x650 [ 217.878119][ T6516] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 217.884093][ T6516] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 217.889985][ T6516] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 217.895866][ T6516] ? _raw_spin_unlock+0x40/0x40 [ 217.900699][ T6516] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 217.906586][ T6516] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 217.912466][ T6516] ? __kthread_parkme+0x14e/0x1b0 [ 217.917479][ T6516] kthread+0x42e/0x520 [ 217.921533][ T6516] ? cifs_resolve_server+0x110/0x110 [ 217.926807][ T6516] ? kthread_blkcg+0xd0/0xd0 [ 217.931386][ T6516] ret_from_fork+0x1f/0x30 [ 217.935800][ T6516] [ 217.938803][ T6516] [ 217.941115][ T6516] Allocated by task 6515: [ 217.945421][ T6516] __kasan_kmalloc+0xaf/0xe0 [ 217.950001][ T6516] kstrdup+0x32/0x70 [ 217.953902][ T6516] cifs_get_tcp_session+0xde/0x18f0 [ 217.959097][ T6516] mount_get_conns+0xc3/0xe00 [ 217.963754][ T6516] cifs_mount+0x162/0x1380 [ 217.968153][ T6516] cifs_smb3_do_mount+0x366/0x760 [ 217.973161][ T6516] smb3_get_tree+0x59a/0xa80 [ 217.977734][ T6516] vfs_get_tree+0x88/0x270 [ 217.982146][ T6516] do_new_mount+0x247/0xa40 [ 217.986631][ T6516] __se_sys_mount+0x2e3/0x3d0 [ 217.991291][ T6516] do_syscall_64+0x4c/0xa0 [ 217.995692][ T6516] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.001570][ T6516] [ 218.003876][ T6516] Freed by task 6515: [ 218.007836][ T6516] kasan_set_track+0x4b/0x70 [ 218.012418][ T6516] kasan_set_free_info+0x1f/0x40 [ 218.017340][ T6516] ____kasan_slab_free+0xd5/0x110 [ 218.022357][ T6516] slab_free_freelist_hook+0xec/0x170 [ 218.027747][ T6516] kfree+0xef/0x2a0 [ 218.031555][ T6516] cifs_put_tcp_session+0x2e1/0x3d0 [ 218.036743][ T6516] mount_put_conns+0xb0/0x270 [ 218.041407][ T6516] cifs_mount+0xbf5/0x1380 [ 218.045803][ T6516] cifs_smb3_do_mount+0x366/0x760 [ 218.050813][ T6516] smb3_get_tree+0x59a/0xa80 [ 218.055384][ T6516] vfs_get_tree+0x88/0x270 [ 218.059791][ T6516] do_new_mount+0x247/0xa40 [ 218.064277][ T6516] __se_sys_mount+0x2e3/0x3d0 [ 218.068942][ T6516] do_syscall_64+0x4c/0xa0 [ 218.073339][ T6516] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.079214][ T6516] [ 218.081520][ T6516] The buggy address belongs to the object at ffff88805f6b9940 [ 218.081520][ T6516] which belongs to the cache kmalloc-16 of size 16 [ 218.095388][ T6516] The buggy address is located 0 bytes inside of [ 218.095388][ T6516] 16-byte region [ffff88805f6b9940, ffff88805f6b9950) [ 218.108385][ T6516] The buggy address belongs to the page: [ 218.113997][ T6516] page:ffffea00017dae40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f6b9 [ 218.124143][ T6516] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 218.131705][ T6516] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888016c413c0 [ 218.140273][ T6516] raw: 0000000000000000 0000000000800080 00000001ffffffff 0000000000000000 [ 218.148831][ T6516] page dumped because: kasan: bad access detected [ 218.155232][ T6516] page_owner tracks the page as allocated [ 218.160934][ T6516] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4191, ts 140363085160, free_ts 140357605695 [ 218.177077][ T6516] get_page_from_freelist+0x24f6/0x2670 [ 218.182615][ T6516] __alloc_pages+0x1ee/0x480 [ 218.187190][ T6516] new_slab+0xb6/0x4b0 [ 218.191245][ T6516] ___slab_alloc+0x807/0xdd0 [ 218.195823][ T6516] __kmalloc_node+0x142/0x3a0 [ 218.200480][ T6516] kvmalloc_node+0x84/0x130 [ 218.204961][ T6516] xt_replace_table+0x160/0x750 [ 218.209793][ T6516] __do_replace+0x16f/0xa00 [ 218.214283][ T6516] do_ip6t_set_ctl+0xaa4/0xd90 [ 218.219033][ T6516] nf_setsockopt+0x25f/0x280 [ 218.223620][ T6516] ipv6_setsockopt+0x20ba/0x3cc0 [ 218.228539][ T6516] tcp_setsockopt+0x229/0x1e60 [ 218.233286][ T6516] __sys_setsockopt+0x2bf/0x3d0 [ 218.238122][ T6516] __x64_sys_setsockopt+0xb1/0xc0 [ 218.243125][ T6516] do_syscall_64+0x4c/0xa0 [ 218.247522][ T6516] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.253398][ T6516] page last free stack trace: [ 218.258053][ T6516] free_unref_page_prepare+0x637/0x6c0 [ 218.263495][ T6516] free_unref_page+0x8f/0x2a0 [ 218.268155][ T6516] __unfreeze_partials+0x188/0x1e0 [ 218.273254][ T6516] put_cpu_partial+0x12d/0x190 [ 218.277998][ T6516] qlist_free_all+0x35/0x90 [ 218.282480][ T6516] kasan_quarantine_reduce+0x150/0x160 [ 218.287923][ T6516] __kasan_slab_alloc+0x2f/0xc0 [ 218.292756][ T6516] slab_post_alloc_hook+0x4c/0x380 [ 218.297845][ T6516] kmem_cache_alloc+0x15d/0x280 [ 218.302709][ T6516] __d_alloc+0x27/0x6d0 [ 218.306857][ T6516] d_alloc_cursor+0x40/0xd0 [ 218.311346][ T6516] dcache_dir_open+0x37/0x70 [ 218.315919][ T6516] do_dentry_open+0x7f7/0xf90 [ 218.320573][ T6516] path_openat+0x2718/0x2fb0 [ 218.325144][ T6516] do_filp_open+0x1df/0x400 [ 218.329639][ T6516] do_sys_openat2+0x14b/0x500 [ 218.334311][ T6516] [ 218.336618][ T6516] Memory state around the buggy address: [ 218.342227][ T6516] ffff88805f6b9800: 00 00 fc fc fa fb fc fc 00 00 fc fc fa fb fc fc [ 218.350268][ T6516] ffff88805f6b9880: 00 00 fc fc 00 00 fc fc fa fb fc fc fa fb fc fc [ 218.358312][ T6516] >ffff88805f6b9900: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 218.366355][ T6516] ^ [ 218.372485][ T6516] ffff88805f6b9980: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 218.380524][ T6516] ffff88805f6b9a00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 218.388562][ T6516] ================================================================== [ 218.396599][ T6516] Disabling lock debugging due to kernel taint [ 218.415036][ T6516] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 218.422349][ T6516] CPU: 1 PID: 6516 Comm: cifsd Tainted: G B syzkaller #0 [ 218.428673][ T6536] input: syz1 as /devices/virtual/input/input127 [ 218.430675][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.430686][ T6516] Call Trace: [ 218.430691][ T6516] [ 218.430697][ T6516] dump_stack_lvl+0x188/0x250 [ 218.439965][ T6538] input: syz1 as /devices/virtual/input/input128 [ 218.447054][ T6516] ? show_regs_print_info+0x20/0x20 [ 218.447080][ T6516] ? load_image+0x410/0x410 [ 218.447098][ T6516] panic+0x2f8/0x850 [ 218.447111][ T6516] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 218.447130][ T6516] ? bpf_jit_dump+0xd0/0xd0 [ 218.447145][ T6516] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 218.447160][ T6516] ? _raw_spin_unlock+0x40/0x40 [ 218.447174][ T6516] ? string+0x204/0x290 [ 218.447189][ T6516] check_panic_on_warn+0x80/0xa0 [ 218.447206][ T6516] ? string+0x204/0x290 [ 218.447220][ T6516] end_report+0x6d/0xf0 [ 218.447237][ T6516] kasan_report+0x102/0x130 [ 218.447252][ T6516] ? string+0x204/0x290 [ 218.447268][ T6516] string+0x204/0x290 [ 218.447284][ T6516] vsnprintf+0x10db/0x1c20 [ 218.447303][ T6516] scnprintf+0xe5/0x180 [ 218.447319][ T6516] ? ret_from_fork+0x1f/0x30 [ 218.447334][ T6516] ? snprintf+0x140/0x140 [ 218.447353][ T6516] reconn_set_ipaddr_from_hostname+0x112/0x580 [ 218.447372][ T6516] ? cifs_mark_tcp_ses_conns_for_reconnect+0x13a0/0x13a0 [ 218.559699][ T6516] ? cifs_tree_connect+0x4f0/0x4f0 [ 218.564808][ T6516] ? tcp_recvmsg+0x28a/0x760 [ 218.569379][ T6516] ? do_raw_spin_unlock+0x11d/0x230 [ 218.574554][ T6516] cifs_reconnect+0x470/0x1350 [ 218.579315][ T6516] ? inet_recvmsg+0x18b/0x200 [ 218.583966][ T6516] ? cifs_mount_params_proc_show+0x1a0/0x1a0 [ 218.589924][ T6516] ? inet_sendpage+0x2e0/0x2e0 [ 218.594684][ T6516] ? security_socket_recvmsg+0x85/0xb0 [ 218.600119][ T6516] ? sock_recvmsg+0x6f/0xf0 [ 218.604599][ T6516] cifs_readv_from_socket+0x7c4/0x8b0 [ 218.609963][ T6516] cifs_demultiplex_thread+0x53b/0x35b0 [ 218.615491][ T6516] ? cifs_resolve_server+0x110/0x110 [ 218.620754][ T6516] ? finish_lock_switch+0x12d/0x290 [ 218.625929][ T6516] ? lockdep_hardirqs_on+0x94/0x140 [ 218.631129][ T6516] ? finish_lock_switch+0x12d/0x290 [ 218.636317][ T6516] ? finish_task_switch+0x12f/0x650 [ 218.641491][ T6516] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 218.647453][ T6516] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 218.653324][ T6516] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 218.659193][ T6516] ? _raw_spin_unlock+0x40/0x40 [ 218.664014][ T6516] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 218.669881][ T6516] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 218.675748][ T6516] ? __kthread_parkme+0x14e/0x1b0 [ 218.680766][ T6516] kthread+0x42e/0x520 [ 218.684829][ T6516] ? cifs_resolve_server+0x110/0x110 [ 218.690088][ T6516] ? kthread_blkcg+0xd0/0xd0 [ 218.694667][ T6516] ret_from_fork+0x1f/0x30 [ 218.699063][ T6516] [ 218.702285][ T6516] Kernel Offset: disabled [ 218.706597][ T6516] Rebooting in 86400 seconds..