last executing test programs: 11.243090818s ago: executing program 2 (id=513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 10.828165742s ago: executing program 2 (id=515): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0xb, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 9.741186675s ago: executing program 1 (id=518): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.551943516s ago: executing program 3 (id=520): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) getgroups(0x3, &(0x7f0000000180)=[0xee00, 0xee00, 0xffffffffffffffff]) fchownat(0xffffffffffffff9c, 0x0, 0xee01, r3, 0x1000) 9.396990505s ago: executing program 3 (id=521): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) readv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/7, 0x7}], 0x1) 8.728993634s ago: executing program 1 (id=522): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x8, 0x2) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000380), 0x0, 0x4c040) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0x6) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "10fcff", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 8.401911713s ago: executing program 3 (id=523): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@data_journal}, {@noload}, {@oldalloc}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42402, 0x14a) fallocate(r1, 0x8, 0x0, 0x8000) 8.401127603s ago: executing program 0 (id=524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 8.26933465s ago: executing program 0 (id=525): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0xc048aeca, &(0x7f00000002c0)={0x6, 0x0, [{0x9d6, 0x0, 0x80000004}, {0xc0000a8e, 0x0, 0xa}, {0x89d, 0x0, 0x400}, {0x21, 0x0, 0x10}, {0x1fb, 0x0, 0x200000}, {0x2b6, 0x1000000, 0x800007}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000"], 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r8, 0x0, 0x7}, 0x38) r9 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndmidi(0x0, 0x6, 0x20000) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) accept4$tipc(r7, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x80000) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000840)="27050200d40f00000600002f88a8080088a8", 0x5ea}], 0x1}, 0x20000014) 7.892673832s ago: executing program 3 (id=526): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1c917, &(0x7f0000000080)={[{@noauto_da_alloc}, {@noblock_validity}, {@nouid32}, {@data_err_ignore}, {@debug}, {@barrier}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9a, 0x4ef, &(0x7f0000000a40)="$eJzs3d9rHFsdAPDvTLL9mZoUfagFa7GVpGh3k8a2wYf6A9GnglqfbWOyCSGbbMhu2iYUTfEPEERUEASffBH8AwTpnyBCQd9FRbnc29770Id7u5fdne2PdDdJ6SYbsp8PnMyZMzP5nrPDzO6ZOcwE0LfOR8SFiHheq9UuRcRwVp5mKTabqb7e0ycPZuopiVrt1vtJRNIsq6829sr/PJltdiwifvi9iJ8kb8atrG8sTpdKxdVsvlBdWilU1jcuLyxNzxfni8uTkxPXpq5PXZ0a70o7hyLixnf+++tf/PG7N/761Xv/uv3/sZ8mWXnEy3Z0W7PpucZn0TIYEat7EawHBrL25FoFbfY1AAAHR+t3/pci4lIMx0Dj1xwAAABwmNS+MRQfJxE1AAAA4NBKG2NgkzSfjQMYijTN55tjeD8XJ9JSuVL9ylx5bXm2OVZ2JHLp3EKpOJ6NFR6JXFKfn2jkX85f2TI/GRGnI+JXw8cb8/mZcmm21xc/AAAAoE+c3NL//2i42f8HAAAADpmRXlcAAAAA2HP6/wAAAHD46f8DAADAofb9mzfrqdZ6//Xs3fW1xfLdy7PFymJ+aW0mP1NeXcnPl8vzjWf2Le30/0rl8srXYnntfqFarFQLlfWN20vlteXq7YXXXoENAAAA7KPTX3z0zyQiNr9+vJHqjvS6UsC+GHyblf+zd/UA9t9ArysA9Mxbff8Dh0qu1xUAei6JiN9vs7zj4J2/7U19AACA7hv9fPv7/+mO1wY2032qIrBHXP+D/uX+P/Qv9/+hf+ViIHTkob8lOyx/9/v/tdpbVQgAAOi6oUZK0nx2z38o0jSfjzjVeC1ALplbKBXHI+IzEfGP4dzR+vxEY8tkxz4DAAAAAAAAAAAAAAAAAAAAAAAAANBUqyVRAwAAAA61iPR/Sfb+r9Hhi0Nbrw8cSZ4NN6YRce93t35zf7paXZ2ol3/worz626z8Si+uYAAAAABbtfrprX48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTT0ycPZlppP+O+962IGGkXfzCONabHIhcRJz5MYvCV7ZKIGOhC/M2HEfHtH7eJn9SrFSNZLdrFP96t+GfatX/7+GlEnOxCfOhnj+rnn2+2O/7SON+Ybj3+jr7YdrAL8Tuf/9IX57+BNsd/vezULmOcffznQsf4DyPODrY//7TiJx3Ofxd2Gf/OjzY2Oi2r/SFitO33T/JarEJ1aaVQWd+4vLA0PV+cLy5PTk5cm7o+dXVqvDC3UCpmf9vG+OUX/vJ8u/af6BB/ZIf2X9xl+z95fP/JZ5vZXLv4Yxfa7/8zHeKn2f7/cpavLx9t5Teb+Ved+9Pfz23X/tkO7d9p/4/tsv2XfvDzf+9yVQBgH1TWNxanS6Xial9n3unTqP8sOhCtkNkpU8s6b62Snx2Uih3ATOuYeNabExMAANB1b/aBd+PO3lUIAAAAAAAAAAAAAAAAAAAA+lB3nhnWeib29k/Xa9lsTt54FjIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQC99GgAA///7fdEa") openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) 6.081584098s ago: executing program 0 (id=527): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) futimesat(r0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000440)={{}, {0x0, 0xea60}}) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$vbi(&(0x7f0000000180), 0x2, 0x2) ioctl$VIDIOC_ENUMSTD(r5, 0xc0405619, &(0x7f00000001c0)={0x685, 0x38b485eac21ffe77, "6192826bef962c4d6022cd1ccc75bd0f312115882ac601da", {0x0, 0x4}, 0x400040}) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) prctl$PR_GET_NAME(0x25, 0x0) 6.045521849s ago: executing program 3 (id=528): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0xb, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r4, 0x9, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xffff0018) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(r5, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) 5.250974385s ago: executing program 1 (id=529): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) getgroups(0x3, &(0x7f0000000180)=[0xee00, 0xee00, 0xffffffffffffffff]) fchownat(0xffffffffffffff9c, 0x0, 0xee01, r3, 0x1000) 5.219085127s ago: executing program 2 (id=530): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x31, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) lseek(r0, 0x851, 0x0) 4.961214752s ago: executing program 1 (id=531): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) readv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/7, 0x7}], 0x1) 4.337327339s ago: executing program 0 (id=532): r0 = socket$inet6(0x10, 0x2, 0x0) socket$inet6(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file0/file0\x00', 0x800000, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES16], 0x1, 0x1506, &(0x7f0000004000)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000680)={[{@debug}, {@auto_da_alloc}, {@nombcache}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time}, {@commit}, {@nodiscard}]}, 0x1, 0xbb9, &(0x7f0000006f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) getitimer(0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 4.337012498s ago: executing program 2 (id=533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 4.1446199s ago: executing program 2 (id=534): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$eJzs3T+LHGUcB/Df7O3tTrTYLaxEcEALq5BLa7OHJCBeZdhCLfQwCcjtIiRw4B+cTWUl2FhY+AoEwRdi4zsQbAU7IwRGZnYmM5vbXPbk9sTc59PcM8883+f5zdxwO1fccx+9Mj+6ncXdB1/+FmmaRG8Sk3iYxDh60VgUS/nycPJtAAD/Zw+LIv6sP9/PkksiIt1eWQDAFm32+d9vmz9fSFkAwBbdeu/9d/YPDm68m2Vp3Jx/fTwtf7Mvvy7P79+NT2IWd+JajOJRRPWisBvV20LZvFkURd7PSuN4fZ4fT8vk/MNf6vn3/4io8nsxinHV9fhto8q/fXBjL1vq5POyjhfq9Sdl/nqM4qXH4ZX89TX5mA7ijdc69V+NUfz6cXwas7hdFdHmv9rLsreK7/764oOyvDKf5MfTYTWuVex0j65czLcHAAAAAAAAAAAAAAAAAAAAAIDn1NV675xhVPv3lF31/js7j8qD3cga49X9eZb5pJmouz9QURR5ET80++tcy7KsqAe2+X683O9uLAgAAAAAAAAAAAAAAAAAAACX1/3PPj86nM3u3DuXRrMbQD8i/r4V8W/nmXR6Xo3TBw/rNQ9ns17dXB3T7/bETjMmiTi1jPIizum2PKtx5UTNdePHnzaaJ4lY1D3psxfdXb/WeTaap+voMFl/D4fR9KT1Q/L9IKIdM4inLbFY7Rk8rYwizvL4DdaeGm0W/6a+2nKeF6uevDm1OJmK5InCkqQz5s3fl3PVPcmTVzGo7uq6MiJtGm18dUy60fMc6TJ+8mdFYrcOAAAAAAAAAAAAAAAAAADYqvavf9ecfHBqtFcMt1YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyo9v//n6GR1+ENBg/i3v3/+BIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4BP4JAAD//47KXt4=") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f00000003c0)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000040)={{&(0x7f000014c000/0x1000)=nil, 0x1000}}) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000080)='./mnt\x00') 3.936290892s ago: executing program 1 (id=535): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0xc048aeca, &(0x7f00000002c0)={0x6, 0x0, [{0x9d6, 0x0, 0x80000004}, {0xc0000a8e, 0x0, 0xa}, {0x89d, 0x0, 0x400}, {0x21, 0x0, 0x10}, {0x1fb, 0x0, 0x200000}, {0x2b6, 0x1000000, 0x800007}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000"], 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r8, 0x0, 0x7}, 0x38) r9 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndmidi(0x0, 0x6, 0x20000) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) accept4$tipc(r7, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x80000) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000840)="27050200d40f00000600002f88a8080088a8", 0x5ea}], 0x1}, 0x20000014) 2.489543826s ago: executing program 0 (id=536): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0) 819.096313ms ago: executing program 2 (id=537): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x8, 0x2) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000380), 0x0, 0x4c040) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0x6) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "10fcff", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 165.379321ms ago: executing program 0 (id=538): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0xb, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 111.196614ms ago: executing program 1 (id=539): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x54}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r0, &(0x7f0000000640)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x5ce) 0s ago: executing program 3 (id=540): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) pipe(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) pwritev(r5, &(0x7f00000003c0)=[{&(0x7f0000000440)="07fd468efdb2b168c92b960743e2c888f73fd05f5cac7697e564d933784ce06b526d14a1c86a4d483c499f07b768851638606d6f990234dc97c976761e7505c91c50b0c01dc95db90a1fd46f5722636cbf65871219c3191f083cfda7c675980485faf2ffda68fe865e5674804940e716ce1030402f1dec00b19c77880935adff0e2d39c975e69179bd569c80a5ece8d97a6c101766b189b12bcd1f200fa12d95e791021862476abcd3d958d3de83015adafac8a124", 0xb5}, {&(0x7f0000000500)="604f6400eb842b6043beff1471a5823456e8ddf3814c65ac641917a765e0d3b1dd5bc64425b84010203cc2b774127b90549da5a92b02a5f90876c1ee9292be8c73726d9750dc3682832380f0bdcd50b1feb36ef98c1c19c61adbafa435f1297a3592d8136ccc59fba73fd7", 0x6b}, {&(0x7f00000001c0)}, {&(0x7f0000000300)="63ad4a9e70e0142836682ce42fcb67115b92eccf0a744962f078a7affd51dff1d51f2f9602eac9e098ace812e2c76ac972eba799b959ba606c60057d5936c73244055c06cea5cc4004b3fd7a", 0x4c}, {&(0x7f00000005c0)="882683cbf7c168b033bc98cad9943635c161864a13567505fbfb7cf76de64c2b0a13d9e3f6b69501ac924015639817ca41e31c9bbdba07a81a33b389721713fddf2baa563f9c19be1845c691555758a0365b1dad0d1d4912afe67f47fc40986015f8342ab9739c38534c5729a907821aac51948797a8a416cf681160a5f99490ea0b733c620a939c274d90a65cdf24652f8b4d088856a3544ef0ca2a94f8e4c795db8a1d7933ea3e476610f8c3fa0a43daeb39fe72b9711f8f4451e253a89d1f75398b41dc42fff6c06c1f485654b4b45e8c4877689e272d1ebf364e6a6fdf19f91958", 0xe3}], 0x5, 0xfffffffe, 0x4) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 82.660804][ T5759] cgroup: Unknown subsys name 'net' [ 82.803439][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.512732][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.212620][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.234200][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.262875][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.270319][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.275381][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.286004][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.294644][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.302624][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.309983][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.318016][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.325745][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.334489][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.345498][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.354054][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.356420][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.363651][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.373201][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.376872][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.385799][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.394118][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.404126][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.434376][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.445804][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.453726][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.914605][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 87.027337][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 87.082597][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 87.113835][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.121722][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.129767][ T5780] bridge_slave_0: entered allmulticast mode [ 87.137324][ T5780] bridge_slave_0: entered promiscuous mode [ 87.156821][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 87.197580][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.204867][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.212724][ T5780] bridge_slave_1: entered allmulticast mode [ 87.220297][ T5780] bridge_slave_1: entered promiscuous mode [ 87.332863][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.387695][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.407842][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.415465][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.423051][ T5778] bridge_slave_0: entered allmulticast mode [ 87.430810][ T5778] bridge_slave_0: entered promiscuous mode [ 87.440844][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.448112][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.455659][ T5778] bridge_slave_1: entered allmulticast mode [ 87.462941][ T5778] bridge_slave_1: entered promiscuous mode [ 87.507887][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.516225][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.523604][ T5773] bridge_slave_0: entered allmulticast mode [ 87.531143][ T5773] bridge_slave_0: entered promiscuous mode [ 87.583031][ T5780] team0: Port device team_slave_0 added [ 87.602615][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.611882][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.619298][ T5773] bridge_slave_1: entered allmulticast mode [ 87.627028][ T5773] bridge_slave_1: entered promiscuous mode [ 87.674370][ T5780] team0: Port device team_slave_1 added [ 87.682969][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.724696][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.774088][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.781328][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.790243][ T5771] bridge_slave_0: entered allmulticast mode [ 87.797958][ T5771] bridge_slave_0: entered promiscuous mode [ 87.807019][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.814301][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.821582][ T5771] bridge_slave_1: entered allmulticast mode [ 87.829321][ T5771] bridge_slave_1: entered promiscuous mode [ 87.839266][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.866307][ T5778] team0: Port device team_slave_0 added [ 87.915060][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.956794][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.964361][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.994133][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.017764][ T5778] team0: Port device team_slave_1 added [ 88.047659][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.058075][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.066606][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.093085][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.138840][ T5773] team0: Port device team_slave_0 added [ 88.147268][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.185851][ T5771] team0: Port device team_slave_0 added [ 88.192765][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.202340][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.229664][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.244850][ T5773] team0: Port device team_slave_1 added [ 88.253419][ T5771] team0: Port device team_slave_1 added [ 88.271706][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.281981][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.308532][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.360547][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.367634][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.393961][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.405382][ T5785] Bluetooth: hci1: command tx timeout [ 88.432607][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.439872][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.466209][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.477067][ T5785] Bluetooth: hci2: command tx timeout [ 88.482851][ T5785] Bluetooth: hci0: command tx timeout [ 88.491772][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.499140][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.526354][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.539356][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.546944][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.574001][ T5785] Bluetooth: hci3: command tx timeout [ 88.579788][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.599499][ T5780] hsr_slave_0: entered promiscuous mode [ 88.606392][ T5780] hsr_slave_1: entered promiscuous mode [ 88.672113][ T5778] hsr_slave_0: entered promiscuous mode [ 88.679499][ T5778] hsr_slave_1: entered promiscuous mode [ 88.686250][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.694243][ T5778] Cannot create hsr debugfs directory [ 88.772561][ T5773] hsr_slave_0: entered promiscuous mode [ 88.779523][ T5773] hsr_slave_1: entered promiscuous mode [ 88.785944][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.793880][ T5773] Cannot create hsr debugfs directory [ 88.815838][ T5771] hsr_slave_0: entered promiscuous mode [ 88.822385][ T5771] hsr_slave_1: entered promiscuous mode [ 88.828997][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.837373][ T5771] Cannot create hsr debugfs directory [ 89.294308][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.309634][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.321660][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.333456][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.430300][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.443472][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.458405][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.474758][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.574945][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.586711][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.607588][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.620151][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.713259][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.725496][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.741501][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.752151][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.773265][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.839927][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.862994][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.870499][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.911590][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.918865][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.949916][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.069788][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.096180][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.103414][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.156989][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.164356][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.212336][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.231339][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.312751][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.330042][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.359055][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.366360][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.401800][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.409084][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.462630][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.469960][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.485502][ T5785] Bluetooth: hci1: command tx timeout [ 90.505831][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.513079][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.553771][ T5785] Bluetooth: hci2: command tx timeout [ 90.557163][ T5782] Bluetooth: hci0: command tx timeout [ 90.634956][ T5782] Bluetooth: hci3: command tx timeout [ 90.647652][ T5773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.658543][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.705527][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.752780][ T5771] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.778605][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.991262][ T5780] veth0_vlan: entered promiscuous mode [ 91.042639][ T5780] veth1_vlan: entered promiscuous mode [ 91.130468][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.175278][ T5780] veth0_macvtap: entered promiscuous mode [ 91.193405][ T5780] veth1_macvtap: entered promiscuous mode [ 91.240843][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.267220][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.295663][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.308146][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.318081][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.327159][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.336653][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.473448][ T5778] veth0_vlan: entered promiscuous mode [ 91.499206][ T5773] veth0_vlan: entered promiscuous mode [ 91.527216][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.557621][ T5778] veth1_vlan: entered promiscuous mode [ 91.572965][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.592642][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.621568][ T5773] veth1_vlan: entered promiscuous mode [ 91.660100][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.672954][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.767474][ T5778] veth0_macvtap: entered promiscuous mode [ 91.787745][ T5773] veth0_macvtap: entered promiscuous mode [ 91.809183][ T5778] veth1_macvtap: entered promiscuous mode [ 91.828210][ T5771] veth0_vlan: entered promiscuous mode [ 91.854004][ T5773] veth1_macvtap: entered promiscuous mode [ 91.872523][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.889506][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.901542][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.929010][ T5771] veth1_vlan: entered promiscuous mode [ 91.962454][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.973192][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.983821][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.997345][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.010847][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.021337][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.038388][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.049799][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.069605][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.083351][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.094063][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.104610][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.117747][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.139751][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.150164][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.163069][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.178242][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.196353][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.205909][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.215256][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.224416][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.315992][ T5771] veth0_macvtap: entered promiscuous mode [ 92.336344][ T968] cfg80211: failed to load regulatory.db [ 92.384742][ T5771] veth1_macvtap: entered promiscuous mode [ 92.432379][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.433231][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.455121][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.462174][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.465089][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.485355][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.496916][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.508470][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.520142][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.550425][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.561900][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.572642][ T5782] Bluetooth: hci1: command tx timeout [ 92.578325][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.589128][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.599610][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.610367][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.622282][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.634085][ T5782] Bluetooth: hci0: command tx timeout [ 92.637536][ T5785] Bluetooth: hci2: command tx timeout [ 92.662265][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.678003][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.684441][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.695190][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.704537][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.713303][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.722826][ T5785] Bluetooth: hci3: command tx timeout [ 92.779146][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.794125][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.891079][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.906991][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.106462][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.123865][ T5869] syz.3.4[5869]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.133642][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.191437][ T5869] loop3: detected capacity change from 0 to 256 [ 93.242280][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.296373][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.305355][ T5869] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.638634][ T5785] Bluetooth: hci1: command tx timeout [ 94.714401][ T5785] Bluetooth: hci2: command tx timeout [ 94.714432][ T5782] Bluetooth: hci0: command tx timeout [ 94.852824][ T5785] Bluetooth: hci3: command tx timeout [ 95.275080][ T5883] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.859618][ T5886] loop1: detected capacity change from 0 to 256 [ 95.923054][ T5886] exfat: Deprecated parameter 'utf8' [ 95.989630][ T5886] exfat: Deprecated parameter 'namecase' [ 96.131860][ T5886] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 96.443510][ C0] sched: RT throttling activated [ 97.486920][ T5905] loop0: detected capacity change from 0 to 256 [ 97.557548][ T27] audit: type=1800 audit(1769848089.995:2): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14" name="bus" dev="loop0" ino=1048596 res=0 errno=0 [ 97.627223][ T27] audit: type=1804 audit(1769848090.015:3): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.14" name="/newroot/4/file0/bus" dev="loop0" ino=1048596 res=1 errno=0 [ 97.684131][ T5761] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.700856][ T5897] loop2: detected capacity change from 0 to 32768 [ 97.727024][ T27] audit: type=1800 audit(1769848090.015:4): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14" name="bus" dev="loop0" ino=1048596 res=0 errno=0 [ 97.787321][ T5897] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 97.946213][ T5761] usb 4-1: Using ep0 maxpacket: 16 [ 97.960722][ T5897] XFS (loop2): Ending clean mount [ 97.972603][ T5761] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.989363][ T5761] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.026796][ T5761] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.053703][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.080516][ T5761] usb 4-1: Product: syz [ 98.094624][ T5761] usb 4-1: Manufacturer: syz [ 98.113555][ T5761] usb 4-1: SerialNumber: syz [ 98.163958][ T787] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.226670][ T5773] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 98.380801][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 98.404594][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.443595][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.483653][ T787] usb 2-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00 [ 98.515815][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.571054][ T787] usb 2-1: config 0 descriptor?? [ 98.582919][ T5923] loop2: detected capacity change from 0 to 512 [ 98.591996][ T5761] usb 4-1: 0:2 : does not exist [ 98.725615][ T5923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.882298][ T5927] EXT4-fs (loop2): shut down requested (1) [ 98.923304][ T1206] usb 4-1: USB disconnect, device number 2 [ 99.061787][ T5930] loop0: detected capacity change from 0 to 512 [ 99.072011][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.094080][ T5930] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.123407][ T5930] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=843e018, mo2=0002] [ 99.135766][ T787] wacom 0003:056A:0302.0001: Unknown device_type for 'HID 056a:0302'. Assuming pen. [ 99.153130][ T787] wacom 0003:056A:0302.0001: hidraw0: USB HID v0.00 Device [HID 056a:0302] on usb-dummy_hcd.1-1/input0 [ 99.175837][ T787] input: Wacom Intuos PT S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0302.0001/input/input5 [ 99.178456][ T5930] EXT4-fs (loop0): orphan cleanup on readonly fs [ 99.217410][ T5930] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4047: comm syz.0.18: Allocating blocks 41-42 which overlap fs metadata [ 99.324129][ T5930] Quota error (device loop0): write_blk: dquota write failed [ 99.332095][ T5930] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 99.454786][ T5930] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.18: Failed to acquire dquot type 0 [ 99.464094][ T787] usb 2-1: USB disconnect, device number 2 [ 99.502900][ T5930] EXT4-fs error (device loop0): mb_free_blocks:1954: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 99.604866][ T5930] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #12: comm syz.0.18: corrupted inode contents [ 99.696490][ T5930] EXT4-fs error (device loop0): ext4_dirty_inode:6124: inode #12: comm syz.0.18: mark_inode_dirty error [ 99.712934][ T5934] fido_id[5934]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 99.747779][ T5930] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #12: comm syz.0.18: corrupted inode contents [ 99.797654][ T5930] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.18: mark_inode_dirty error [ 99.820607][ T5930] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #12: comm syz.0.18: corrupted inode contents [ 99.862240][ T5930] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 99.902636][ T5930] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #12: comm syz.0.18: corrupted inode contents [ 99.930435][ T5930] EXT4-fs error (device loop0): ext4_truncate:4294: inode #12: comm syz.0.18: mark_inode_dirty error [ 99.949835][ T5930] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 99.962035][ T5930] EXT4-fs (loop0): 1 truncate cleaned up [ 99.969847][ T5930] EXT4-fs (loop0): pa ffff888076e02658: logic 1, phys. 41, len 23 [ 99.978191][ T5930] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5388: group 0, free 22, pa_free 23 [ 99.992567][ T5930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.138750][ T5930] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.18: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 100.319105][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.353231][ T5950] loop1: detected capacity change from 0 to 512 [ 100.375854][ T5950] EXT4-fs: Ignoring removed oldalloc option [ 100.396222][ T5950] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.454679][ T5950] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.519938][ T5950] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 100.594711][ T5950] EXT4-fs (loop1): 1 truncate cleaned up [ 100.602483][ T5950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.801215][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.100571][ T5958] loop3: detected capacity change from 0 to 1024 [ 101.112073][ T5959] loop1: detected capacity change from 0 to 256 [ 101.124918][ T5958] EXT4-fs: Ignoring removed orlov option [ 101.151608][ T5958] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.174146][ T5959] ======================================================= [ 101.174146][ T5959] WARNING: The mand mount option has been deprecated and [ 101.174146][ T5959] and is ignored by this kernel. Remove the mand [ 101.174146][ T5959] option from the mount to silence this warning. [ 101.174146][ T5959] ======================================================= [ 101.261047][ T5958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.282285][ T5948] loop2: detected capacity change from 0 to 40427 [ 101.299783][ T5948] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 101.308069][ T5959] FAT-fs (loop1): Directory bread(block 64) failed [ 101.315100][ T5948] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 101.323465][ T5959] FAT-fs (loop1): Directory bread(block 65) failed [ 101.330496][ T5959] FAT-fs (loop1): Directory bread(block 66) failed [ 101.337267][ T5959] FAT-fs (loop1): Directory bread(block 67) failed [ 101.344137][ T5959] FAT-fs (loop1): Directory bread(block 68) failed [ 101.350822][ T5959] FAT-fs (loop1): Directory bread(block 69) failed [ 101.359100][ T5959] FAT-fs (loop1): Directory bread(block 70) failed [ 101.365980][ T5959] FAT-fs (loop1): Directory bread(block 71) failed [ 101.373274][ T5959] FAT-fs (loop1): Directory bread(block 72) failed [ 101.380099][ T5959] FAT-fs (loop1): Directory bread(block 73) failed [ 101.407213][ T5948] F2FS-fs (loop2): invalid crc value [ 101.462487][ T5958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.608586][ T5948] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 101.624632][ T5948] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.692562][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.774269][ T5964] loop0: detected capacity change from 0 to 512 [ 102.018741][ T5964] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 102.074648][ T5964] FAT-fs (loop0): Filesystem has been set read-only [ 102.315943][ T5971] capability: warning: `syz.3.31' uses 32-bit capabilities (legacy support in use) [ 102.503177][ T5975] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.651421][ T5967] binder: 5965:5967 unknown command 0 [ 102.662730][ T5967] binder: 5965:5967 ioctl c0306201 200000000080 returned -22 [ 102.698696][ T5978] loop2: detected capacity change from 0 to 256 [ 102.840412][ T5978] loop2: detected capacity change from 0 to 4096 [ 103.158109][ T5978] EXT4-fs (loop2): Test dummy encryption mode enabled [ 103.178480][ T5978] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0002] [ 103.208396][ T5978] System zones: 0-5 [ 103.220812][ T5989] loop1: detected capacity change from 0 to 1024 [ 103.271789][ T5978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.361040][ T5989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 103.862644][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 104.473929][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.39'. [ 104.568617][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.611086][ T5986] loop0: detected capacity change from 0 to 32768 [ 104.819162][ T5986] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 104.993319][ T6002] loop1: detected capacity change from 0 to 32768 [ 105.019992][ T6002] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.38 (6002) [ 105.059767][ T6002] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.070860][ T6002] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 105.081182][ T6002] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 105.099063][ T6002] BTRFS info (device loop1): trying to use backup root at mount time [ 105.108293][ T6002] BTRFS info (device loop1): setting nodatasum [ 105.155130][ T6002] BTRFS info (device loop1): disabling tree log [ 105.163927][ T6002] BTRFS info (device loop1): turning on flush-on-commit [ 105.194595][ T6002] BTRFS info (device loop1): enabling disk space caching [ 105.201926][ T6002] BTRFS error (device loop1): cannot disable free space tree [ 105.281055][ T6002] BTRFS error (device loop1): open_ctree failed: -22 [ 105.305575][ T5986] XFS (loop0): Ending clean mount [ 105.484237][ T5783] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (5783) [ 106.163308][ T6014] loop3: detected capacity change from 0 to 40427 [ 106.221353][ T6014] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 106.891099][ T5780] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 106.904660][ T6002] loop1: detected capacity change from 0 to 40427 [ 106.920118][ T6002] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 106.963543][ T6002] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 107.037391][ T6002] F2FS-fs (loop1): invalid crc value [ 107.135515][ T6002] F2FS-fs (loop1): Found nat_bits in checkpoint [ 107.390211][ T6002] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 107.427618][ T6028] binder: 6027:6028 unknown command 0 [ 107.433185][ T6028] binder: 6027:6028 ioctl c0306201 200000000080 returned -22 [ 107.434696][ T6002] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 107.645697][ T6022] loop3: detected capacity change from 0 to 32768 [ 107.701250][ T6022] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.44 (6022) [ 107.771632][ T6022] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.792422][ T6022] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 107.820125][ T6022] BTRFS info (device loop3): using free space tree [ 107.956646][ T6022] BTRFS info (device loop3): enabling ssd optimizations [ 107.991778][ T6018] syz.2.43: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 108.011177][ T6018] CPU: 0 PID: 6018 Comm: syz.2.43 Not tainted syzkaller #0 [ 108.018458][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.028579][ T6018] Call Trace: [ 108.031894][ T6018] [ 108.034856][ T6018] dump_stack_lvl+0x18c/0x250 [ 108.039598][ T6018] ? show_regs_print_info+0x20/0x20 [ 108.044843][ T6018] ? load_image+0x400/0x400 [ 108.049445][ T6018] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 108.055905][ T6018] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 108.062470][ T6018] warn_alloc+0x246/0x340 [ 108.066890][ T6018] ? zone_watermark_ok_safe+0x230/0x230 [ 108.072571][ T6018] ? _raw_spin_unlock+0x28/0x40 [ 108.077465][ T6018] __vmalloc_node_range+0x662/0x1330 [ 108.082810][ T6018] ? free_vm_area+0x50/0x50 [ 108.087368][ T6018] ? _raw_spin_unlock+0x28/0x40 [ 108.092255][ T6018] ? __kasan_kmalloc+0x8f/0xa0 [ 108.097055][ T6018] __vmalloc_node_range+0x568/0x1330 [ 108.102375][ T6018] ? hash_net_create+0x361/0xfe0 [ 108.107366][ T6018] ? __asan_memset+0x22/0x40 [ 108.112018][ T6018] ? free_vm_area+0x50/0x50 [ 108.116567][ T6018] ? kvmalloc_node+0x70/0x180 [ 108.121282][ T6018] ? rcu_is_watching+0x15/0xb0 [ 108.126084][ T6018] ? kvmalloc_node+0x70/0x180 [ 108.130799][ T6018] ? trace_kmalloc+0x1f/0x90 [ 108.135465][ T6018] kvmalloc_node+0x13f/0x180 [ 108.140096][ T6018] ? hash_net_create+0x361/0xfe0 [ 108.145069][ T6018] hash_net_create+0x361/0xfe0 [ 108.149863][ T6018] ? __lock_acquire+0x7d40/0x7d40 [ 108.154930][ T6018] ? __nla_parse+0x40/0x50 [ 108.159383][ T6018] ? hash_mac4_gc+0x5b0/0x5b0 [ 108.164123][ T6018] ip_set_create+0xad3/0x1970 [ 108.168830][ T6018] ? ip_set_create+0x4fe/0x1970 [ 108.173729][ T6018] ? ip_set_protocol+0x5b0/0x5b0 [ 108.178694][ T6018] ? trace_contention_end+0x39/0xe0 [ 108.183960][ T6018] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 108.189020][ T6018] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.195113][ T6018] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 108.200363][ T6018] ? nfnetlink_unbind+0x160/0x160 [ 108.205441][ T6018] ? __dev_queue_xmit+0x1ac2/0x36b0 [ 108.210676][ T6018] ? __netlink_deliver_tap+0x5ab/0x830 [ 108.216195][ T6018] ? netlink_deliver_tap+0x19c/0x1b0 [ 108.221533][ T6018] ? netlink_unicast+0x72c/0x8d0 [ 108.226515][ T6018] ? netlink_sendmsg+0x8d0/0xbf0 [ 108.231494][ T6018] ? ____sys_sendmsg+0x5ba/0x960 [ 108.236476][ T6018] ? ___sys_sendmsg+0x2a6/0x360 [ 108.241455][ T6018] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 108.246522][ T6018] ? do_syscall_64+0x55/0xa0 [ 108.251180][ T6018] netlink_rcv_skb+0x241/0x4d0 [ 108.255990][ T6018] ? nfnetlink_unbind+0x160/0x160 [ 108.261088][ T6018] ? netlink_ack+0x1180/0x1180 [ 108.265899][ T6018] ? apparmor_capable+0x137/0x1a0 [ 108.270956][ T6018] ? bpf_lsm_capable+0x9/0x10 [ 108.275675][ T6018] ? security_capable+0x89/0xb0 [ 108.280676][ T6018] nfnetlink_rcv+0x2c9/0x24a0 [ 108.285425][ T6018] ? __local_bh_enable_ip+0x13a/0x1c0 [ 108.290827][ T6018] ? lockdep_hardirqs_on+0x98/0x150 [ 108.296055][ T6018] ? __local_bh_enable_ip+0x13a/0x1c0 [ 108.301453][ T6018] ? _local_bh_enable+0xa0/0xa0 [ 108.306339][ T6018] ? __dev_queue_xmit+0x26b/0x36b0 [ 108.311495][ T6018] ? __dev_queue_xmit+0x26b/0x36b0 [ 108.316649][ T6018] ? __dev_queue_xmit+0x124f/0x36b0 [ 108.322009][ T6018] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 108.327634][ T6018] ? __dev_queue_xmit+0x26b/0x36b0 [ 108.332847][ T6018] ? ref_tracker_free+0x690/0x840 [ 108.337924][ T6018] ? refcount_inc+0x70/0x70 [ 108.342460][ T6018] ? __asan_memcpy+0x40/0x70 [ 108.347089][ T6018] ? __skb_clone+0x63/0x790 [ 108.351633][ T6018] ? __skb_clone+0x480/0x790 [ 108.356263][ T6018] ? __netlink_deliver_tap+0x7e8/0x830 [ 108.361760][ T6018] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.367004][ T6018] ? __lock_acquire+0x7d40/0x7d40 [ 108.372098][ T6018] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.377346][ T6018] netlink_unicast+0x751/0x8d0 [ 108.382155][ T6018] netlink_sendmsg+0x8d0/0xbf0 [ 108.386965][ T6018] ? netlink_getsockopt+0x590/0x590 [ 108.392205][ T6018] ? aa_sock_msg_perm+0x94/0x150 [ 108.397216][ T6018] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 108.402531][ T6018] ? security_socket_sendmsg+0x80/0xa0 [ 108.408025][ T6018] ? netlink_getsockopt+0x590/0x590 [ 108.413261][ T6018] ____sys_sendmsg+0x5ba/0x960 [ 108.418162][ T6018] ? __asan_memset+0x22/0x40 [ 108.422793][ T6018] ? __sys_sendmsg_sock+0x30/0x30 [ 108.427865][ T6018] ? __import_iovec+0x5f2/0x850 [ 108.432768][ T6018] ? import_iovec+0x73/0xa0 [ 108.437316][ T6018] ___sys_sendmsg+0x2a6/0x360 [ 108.442042][ T6018] ? __sys_sendmsg+0x2a0/0x2a0 [ 108.446872][ T6018] __se_sys_sendmsg+0x1c2/0x2b0 [ 108.451760][ T6018] ? __x64_sys_sendmsg+0x80/0x80 [ 108.456755][ T6018] ? lockdep_hardirqs_on+0x98/0x150 [ 108.461990][ T6018] do_syscall_64+0x55/0xa0 [ 108.466463][ T6018] ? clear_bhb_loop+0x40/0x90 [ 108.471197][ T6018] ? clear_bhb_loop+0x40/0x90 [ 108.475930][ T6018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.481950][ T6018] RIP: 0033:0x7ff7f739aeb9 [ 108.486408][ T6018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.506043][ T6018] RSP: 002b:00007ff7f82a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.514513][ T6018] RAX: ffffffffffffffda RBX: 00007ff7f7615fa0 RCX: 00007ff7f739aeb9 [ 108.522540][ T6018] RDX: 0000000000000044 RSI: 0000200000000040 RDI: 0000000000000004 [ 108.530578][ T6018] RBP: 00007ff7f7408c1f R08: 0000000000000000 R09: 0000000000000000 [ 108.538605][ T6018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.546979][ T6018] R13: 00007ff7f7616038 R14: 00007ff7f7615fa0 R15: 00007ffeba7961a8 [ 108.555205][ T6018] [ 108.560006][ T6022] BTRFS info (device loop3): auto enabling async discard [ 108.568318][ T6018] Mem-Info: [ 108.572739][ T6018] active_anon:14645 inactive_anon:0 isolated_anon:0 [ 108.572739][ T6018] active_file:1169 inactive_file:40039 isolated_file:0 [ 108.572739][ T6018] unevictable:768 dirty:13 writeback:0 [ 108.572739][ T6018] slab_reclaimable:10142 slab_unreclaimable:91892 [ 108.572739][ T6018] mapped:24455 shmem:10085 pagetables:589 [ 108.572739][ T6018] sec_pagetables:0 bounce:0 [ 108.572739][ T6018] kernel_misc_reclaimable:0 [ 108.572739][ T6018] free:1320207 free_pcp:10520 free_cma:0 [ 108.664231][ T6018] Node 0 active_anon:54876kB inactive_anon:0kB active_file:4676kB inactive_file:159984kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97780kB dirty:132kB writeback:0kB shmem:35188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11888kB pagetables:2416kB sec_pagetables:0kB all_unreclaimable? no [ 108.813657][ T27] audit: type=1800 audit(1769848101.235:5): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.44" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 108.843169][ T6018] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 108.930531][ T6018] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.055039][ T6018] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 109.071428][ T6018] Node 0 DMA32 free:1380372kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:40740kB inactive_anon:0kB active_file:5576kB inactive_file:160260kB unevictable:1536kB writepending:232kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:34720kB local_pcp:14212kB free_cma:0kB [ 109.169887][ T6018] lowmem_reserve[]: 0 0 0 0 0 [ 109.175084][ T6018] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 109.291954][ T6018] lowmem_reserve[]: 0 0 0 0 0 [ 109.299226][ T6018] Node 1 Normal free:3883584kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23520kB local_pcp:12832kB free_cma:0kB [ 109.371794][ T6018] lowmem_reserve[]: 0 0 0 0 0 [ 109.388994][ T6018] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 109.421811][ T6018] Node 0 DMA32: 27*4kB (M) 6*8kB (M) 3*16kB (M) 0*32kB 24*64kB (ME) 65*128kB (UME) 38*256kB (UM) 12*512kB (UME) 1*1024kB (M) 2*2048kB (ME) 329*4096kB (M) = 1378636kB [ 109.481313][ T6018] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 109.540904][ T6018] Node 1 Normal: 248*4kB (UE) 46*8kB (UME) 47*16kB (UME) 58*32kB (UME) 17*64kB (UE) 7*128kB (UME) 1*256kB (U) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 945*4096kB (M) = 3883584kB [ 109.627170][ T6018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.664152][ T6018] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.693908][ T6018] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.743988][ T6018] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.785384][ T6018] 46723 total pagecache pages [ 109.803616][ T6018] 0 pages in swap cache [ 109.807863][ T6018] Free swap = 124996kB [ 109.812063][ T6018] Total swap = 124996kB [ 109.843784][ T6018] 2097051 pages RAM [ 109.847824][ T6018] 0 pages HighMem/MovableOnly [ 109.852564][ T6018] 416922 pages reserved [ 109.883863][ T6018] 0 pages cma reserved [ 109.997869][ T5778] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.083683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 111.649431][ T6059] loop1: detected capacity change from 0 to 32768 [ 111.688840][ T6059] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.49 (6059) [ 111.787230][ T6059] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 111.829911][ T6062] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 111.843073][ T6059] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 111.887278][ T6059] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 111.928880][ T6059] BTRFS info (device loop1): use zstd compression, level 3 [ 111.955115][ T6059] BTRFS info (device loop1): use no compression [ 111.972972][ T6059] BTRFS info (device loop1): using free space tree [ 111.986015][ T6062] can0: slcan on ptm0. [ 112.155672][ T6059] BTRFS info (device loop1): enabling ssd optimizations [ 112.162735][ T6059] BTRFS info (device loop1): auto enabling async discard [ 112.238206][ T6060] can0 (unregistered): slcan off ptm0. [ 113.413314][ T6101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.755656][ T5771] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 114.162152][ T6120] 9pnet_fd: Insufficient options for proto=fd [ 114.318619][ T6122] Zero length message leads to an empty skb [ 115.850128][ T6133] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.676222][ T6154] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 117.838084][ T6154] can0: slcan on ptm0. [ 117.914233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 117.923649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 118.174573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.174572][ T6152] can0 (unregistered): slcan off ptm0. [ 118.314074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.402162][ T6141] syz.2.58 (6141): drop_caches: 2 [ 119.529191][ T6184] binder: 6182:6184 unknown command 0 [ 119.536890][ T6186] 9pnet_fd: Insufficient options for proto=fd [ 119.554062][ T6184] binder: 6182:6184 ioctl c0306201 200000000080 returned -22 [ 120.174039][ T6199] netlink: 'syz.3.68': attribute type 10 has an invalid length. [ 121.009651][ T6199] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 121.091798][ T6202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.152636][ T6203] bond_slave_0: entered promiscuous mode [ 121.159029][ T6203] bond_slave_1: entered promiscuous mode [ 121.164901][ T6203] syz_tun: entered promiscuous mode [ 121.220880][ T6203] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.277220][ T6203] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 121.323651][ T6203] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 121.346512][ T6203] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 121.474494][ T6199] syz.3.68 (6199) used greatest stack depth: 19656 bytes left [ 122.173988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.485312][ T6244] 9pnet_fd: Insufficient options for proto=fd [ 122.613943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.622644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.625284][ T6246] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 122.774485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.887409][ T6253] can0: slcan on ptm0. [ 122.940430][ T6223] syz.0.71 (6223): drop_caches: 2 [ 122.956323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.126111][ T6226] can0 (unregistered): slcan off ptm0. [ 123.560062][ T6248] binder: 6247:6248 unknown command 0 [ 123.569150][ T6248] binder: 6247:6248 ioctl c0306201 200000000080 returned -22 [ 124.828668][ T6294] 9pnet_fd: Insufficient options for proto=fd [ 125.043729][ T6299] usb usb7: selecting invalid altsetting 6 [ 125.333061][ T6284] loop2: detected capacity change from 0 to 32768 [ 125.409861][ T6284] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.486722][ T6316] netlink: 36 bytes leftover after parsing attributes in process `syz.0.89'. [ 125.899322][ T6284] XFS (loop2): Ending clean mount [ 127.032438][ T6338] binder: 6334:6338 unknown command 0 [ 127.047447][ T6338] binder: 6334:6338 ioctl c0306201 200000000080 returned -22 [ 127.215020][ T5773] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 127.234009][ T6320] syz.1.88 (6320): drop_caches: 2 [ 127.624486][ T6337] loop3: detected capacity change from 0 to 40427 [ 127.683379][ T6337] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 127.723823][ T6337] F2FS-fs (loop3): invalid crc value [ 127.755862][ T6337] F2FS-fs (loop3): Found nat_bits in checkpoint [ 128.006018][ T6347] 9pnet_fd: Insufficient options for proto=fd [ 128.118429][ T6337] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 128.269194][ T6337] F2FS-fs (loop3): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x12c0/0x3e60 [ 129.332215][ T6362] block device autoloading is deprecated and will be removed. [ 129.931339][ T6337] syz.3.91: attempt to access beyond end of device [ 129.931339][ T6337] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.009128][ T6337] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 130.393589][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.605717][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 130.619688][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.638939][ T6366] mmap: syz.2.99 (6366) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.658818][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.669388][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 130.679816][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.700270][ T9] usb 2-1: config 0 descriptor?? [ 130.951301][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 130.970713][ T9] usbhid: probe of 2-1:0.0 failed with error -71 [ 131.015272][ T9] usb 2-1: USB disconnect, device number 3 [ 131.171950][ T6373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.261544][ T6375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.893691][ T6373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.954179][ T6373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.043298][ T6369] binder: 6368:6369 unknown command 0 [ 133.050266][ T6369] binder: 6368:6369 ioctl c0306201 200000000080 returned -22 [ 133.278489][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.285716][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.404062][ T1145] bond0: (slave bond_slave_0): interface is now down [ 134.404653][ T6396] netlink: 'syz.2.109': attribute type 10 has an invalid length. [ 134.469838][ T1145] bond0: (slave bond_slave_1): interface is now down [ 134.486928][ T6396] syz_tun: entered promiscuous mode [ 134.513323][ T6396] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 134.525790][ T11] bond0: (slave bond_slave_0): interface is now down [ 134.532558][ T11] bond0: (slave bond_slave_1): interface is now down [ 134.562826][ T11] bond0: (slave syz_tun): interface is now down [ 134.593731][ T1145] bond0: (slave bond_slave_0): interface is now down [ 134.612522][ T1145] bond0: (slave bond_slave_1): interface is now down [ 134.623052][ T1145] bond0: (slave syz_tun): interface is now down [ 134.656808][ T1145] bond0: now running without any active interface! [ 134.830917][ T6382] syz.1.103 (6382): drop_caches: 2 [ 135.581380][ T6408] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 135.807876][ T6408] can0: slcan on ptm0. [ 135.818356][ T27] audit: type=1326 audit(1769848128.245:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.0.107" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2b699aeb9 code=0x0 [ 136.064078][ T6398] can0 (unregistered): slcan off ptm0. [ 137.383430][ T6424] binder: 6423:6424 unknown command 0 [ 137.403569][ T6424] binder: 6423:6424 ioctl c0306201 200000000080 returned -22 [ 138.205972][ T6442] loop2: detected capacity change from 0 to 8192 [ 138.291787][ T6442] loop2: p1 p2 p3 p4 [ 138.302040][ T6442] loop2: p1 size 108922248 extends beyond EOD, truncated [ 138.346949][ T6442] loop2: p2 start 861536256 is beyond EOD, truncated [ 138.382931][ T6442] loop2: p3 start 851968 is beyond EOD, truncated [ 138.414204][ T6442] loop2: p4 size 65536 extends beyond EOD, truncated [ 138.877966][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 138.898171][ T5783] udevd[5783]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 138.955084][ T9] IPVS: starting estimator thread 0... [ 139.063847][ T6458] IPVS: using max 20 ests per chain, 48000 per kthread [ 140.388471][ T6470] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 140.650242][ T6470] can0: slcan on ptm0. [ 140.995751][ T6467] can0 (unregistered): slcan off ptm0. [ 142.534201][ T6482] binder: 6480:6482 unknown command 0 [ 142.553675][ T6482] binder: 6480:6482 ioctl c0306201 200000000080 returned -22 [ 143.112220][ T6507] netlink: 'syz.1.131': attribute type 4 has an invalid length. [ 143.196758][ T6508] netlink: 36 bytes leftover after parsing attributes in process `syz.1.131'. [ 144.142367][ T6500] loop2: detected capacity change from 0 to 65536 [ 144.177347][ T6500] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 144.186780][ T6500] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 144.220741][ T6500] XFS (loop2): Ending clean mount [ 144.239765][ T23] XFS (loop2): Metadata CRC error detected at xfs_agi_read_verify+0x196/0x260, xfs_agi block 0x8002 [ 144.252608][ T23] XFS (loop2): Unmount and run xfs_repair [ 144.259264][ T23] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 144.267555][ T23] 00000000: 58 41 47 49 00 00 00 01 00 00 00 01 00 00 40 00 XAGI..........@. [ 144.276962][ T23] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00 ................ [ 144.286494][ T23] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.295974][ T23] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.305510][ T23] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.315044][ T23] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.324591][ T23] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.333926][ T23] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.343436][ T6500] XFS (loop2): metadata I/O error in "xfs_read_agi+0x289/0x5c0" at daddr 0x8002 len 1 error 74 [ 144.354499][ T6500] XFS (loop2): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 1 [ 144.454054][ T5773] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 146.081240][ T6550] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 146.324655][ T6550] can0: slcan on ptm0. [ 146.826310][ T6545] can0 (unregistered): slcan off ptm0. [ 146.959885][ T6543] syz.2.135 (6543): drop_caches: 2 [ 147.672811][ T6568] loop2: detected capacity change from 0 to 128 [ 147.770060][ T6568] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.878525][ T6568] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.019239][ T6568] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.141: No space for directory leaf checksum. Please run e2fsck -D. [ 148.092033][ T6568] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.141: checksumming directory block 0 [ 148.248221][ T5773] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.802408][ T6585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.891630][ T6585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.922516][ T6585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.096209][ T6601] warning: `syz.3.148' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 150.930177][ T6595] loop2: detected capacity change from 0 to 65536 [ 151.007091][ T6595] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 151.155950][ T6595] XFS (loop2): Ending clean mount [ 151.210175][ T6595] XFS (loop2): Quotacheck needed: Please wait. [ 151.276541][ T968] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 151.302537][ T968] XFS (loop2): Unmount and run xfs_repair [ 151.312161][ T968] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 151.528405][ T968] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 151.538366][ T968] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 151.547374][ T968] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 151.556318][ T968] 00000030: 00 00 00 00 ac fb 87 b1 00 00 00 0d 00 00 00 03 ................ [ 151.565345][ T968] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 151.575110][ T968] 00000050: 00 00 00 00 00 00 08 00 00 00 00 00 00 00 00 00 ................ [ 151.589363][ T968] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.598423][ T968] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.611883][ T1100] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 2 error 74 [ 151.790118][ T6595] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 153.528438][ T9] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 153.540638][ T6625] 9pnet_fd: Insufficient options for proto=fd [ 153.572943][ T9] XFS (loop2): Unmount and run xfs_repair [ 153.606408][ T9] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 153.634079][ T9] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 153.668083][ T9] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 153.705744][ T5773] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 153.717843][ T9] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 153.749969][ T9] 00000030: 00 00 00 00 ac fb 87 b1 00 00 00 0d 00 00 00 03 ................ [ 153.797165][ T9] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 153.899053][ T9] 00000050: 00 00 00 00 00 00 08 00 00 00 00 00 00 00 00 00 ................ [ 153.935288][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 153.944897][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 153.958451][ T787] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 2 error 74 [ 153.979525][ T787] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x183c/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 153.999412][ T787] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 154.250082][ T6639] netlink: 132 bytes leftover after parsing attributes in process `syz.3.157'. [ 154.813347][ T6643] netlink: 'syz.2.154': attribute type 4 has an invalid length. [ 155.061768][ T6647] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 155.147170][ T6647] can0: slcan on ptm0. [ 155.565047][ T6640] can0 (unregistered): slcan off ptm0. [ 157.278661][ T6676] 9pnet_fd: Insufficient options for proto=fd [ 157.717988][ T6687] binder: 6671:6687 unknown command 0 [ 157.743610][ T6687] binder: 6671:6687 ioctl c0306201 200000000080 returned -22 [ 158.602344][ T6672] binder_alloc: 6671: binder_alloc_buf, no vma [ 160.259751][ T6706] md: array md2 already has disks! [ 160.318056][ T6708] md: could not open device unknown-block(1,0). [ 160.383624][ T6708] md: error, md_import_device() returned -16 [ 160.484013][ T6711] netlink: 132 bytes leftover after parsing attributes in process `syz.1.168'. [ 160.783299][ T6709] syz.1.168 (6709): drop_caches: 2 [ 166.474370][ T6762] netlink: 132 bytes leftover after parsing attributes in process `syz.3.182'. [ 168.399671][ T6771] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 168.750802][ T6774] can0: slcan on ptm0. [ 169.314172][ T6764] can0 (unregistered): slcan off ptm0. [ 170.166597][ T6784] binder: 6783:6784 unknown command 0 [ 170.203716][ T6784] binder: 6783:6784 ioctl c0306201 200000000080 returned -22 [ 170.226408][ T6784] binder_alloc: 6783: binder_alloc_buf, no vma [ 172.272554][ T6839] netlink: 132 bytes leftover after parsing attributes in process `syz.0.198'. [ 172.341073][ T6838] syz.0.198 (6838): drop_caches: 2 [ 176.731179][ T6874] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 177.036800][ T6874] can0: slcan on ptm0. [ 177.494185][ T6859] can0 (unregistered): slcan off ptm0. [ 179.626591][ T6906] syz.0.212 (6906): drop_caches: 2 [ 179.853112][ T6906] netlink: 132 bytes leftover after parsing attributes in process `syz.0.212'. [ 181.563782][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 181.797546][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.831001][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.860749][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 181.893575][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.924843][ T9] usb 3-1: config 0 descriptor?? [ 182.356790][ T9] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 182.373296][ T6908] binder: 6907:6908 unknown command 0 [ 182.394630][ T6908] binder: 6907:6908 ioctl c0306201 200000000080 returned -22 [ 182.404251][ T9] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 182.459244][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0002/input/input8 [ 182.666906][ T9] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 182.757964][ T9] usb 3-1: USB disconnect, device number 2 [ 183.157032][ T6930] fido_id[6930]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 186.607292][ T6973] netlink: 132 bytes leftover after parsing attributes in process `syz.3.227'. [ 187.064671][ T6974] binder: 6972:6974 unknown command 0 [ 187.083687][ T6974] binder: 6972:6974 ioctl c0306201 200000000080 returned -22 [ 191.919891][ T7001] 9pnet: Could not find request transport: fd0x0000000000000003 [ 191.987518][ T7006] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 192.285799][ T7006] can0: slcan on ptm0. [ 192.765011][ T6990] can0 (unregistered): slcan off ptm0. [ 194.935359][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.941746][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.676901][ T7056] netlink: 132 bytes leftover after parsing attributes in process `syz.3.245'. [ 197.787862][ T7060] 9pnet: Could not find request transport: fd0x0000000000000003 [ 198.481015][ T7078] binder: 7073:7078 unknown command 0 [ 198.520016][ T7078] binder: 7073:7078 ioctl c0306201 200000000080 returned -22 [ 200.208563][ T7096] binder: BINDER_SET_CONTEXT_MGR already set [ 200.239726][ T7096] binder: 7073:7096 ioctl 4018620d 200000000040 returned -16 [ 200.873618][ T5879] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 202.018532][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.033724][ T5879] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 202.221196][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.243236][ T5879] usb 3-1: config 0 descriptor?? [ 202.700724][ T5879] sony 0003:1345:3008.0003: hiddev0,hidraw0: USB HID v90.00 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 202.747359][ T5879] sony 0003:1345:3008.0003: failed to claim input [ 202.940483][ T5879] usb 3-1: USB disconnect, device number 3 [ 205.644710][ T7156] syz.2.266 (7156): drop_caches: 2 [ 205.785629][ T7156] netlink: 132 bytes leftover after parsing attributes in process `syz.2.266'. [ 212.526054][ T7190] 9pnet: Could not find request transport: fd0x0000000000000003 [ 216.324169][ T7220] netlink: 132 bytes leftover after parsing attributes in process `syz.0.280'. [ 216.496841][ T7219] syz.0.280 (7219): drop_caches: 2 [ 218.437077][ T7238] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 218.850110][ T7238] can0: slcan on ptm0. [ 219.184371][ T7225] can0 (unregistered): slcan off ptm0. [ 219.761709][ T7252] 9pnet_fd: Insufficient options for proto=fd [ 224.909050][ T7300] netlink: 132 bytes leftover after parsing attributes in process `syz.2.292'. [ 225.039864][ T7298] syz.2.292 (7298): drop_caches: 2 [ 229.634679][ T7338] loop2: detected capacity change from 0 to 256 [ 229.667810][ T7338] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 230.403694][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 231.393558][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 231.403524][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 231.423404][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 231.441626][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 232.621536][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 232.650322][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 232.665558][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 232.775914][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 232.789951][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 232.804124][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 232.814435][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.832687][ T9] usb 3-1: config 0 descriptor?? [ 232.838677][ T7342] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 233.106367][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 233.121096][ T7362] syz.1.309 (7362): drop_caches: 2 [ 233.224584][ T7362] netlink: 132 bytes leftover after parsing attributes in process `syz.1.309'. [ 233.403318][ C0] usblp0: nonzero read bulk status received: -71 [ 233.444513][ T9] usb 3-1: USB disconnect, device number 4 [ 233.652451][ T7341] usblp0: removed [ 241.313016][ T7410] 9pnet_fd: Insufficient options for proto=fd [ 241.691850][ T7418] netlink: 132 bytes leftover after parsing attributes in process `syz.3.321'. [ 242.350467][ T7423] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 242.522628][ T7423] can0: slcan on ptm0. [ 242.925661][ T7413] can0 (unregistered): slcan off ptm0. [ 246.965985][ T7479] 9pnet_fd: Insufficient options for proto=fd [ 249.442353][ T7496] syz.0.333 (7496): drop_caches: 2 [ 249.453123][ T7496] netlink: 132 bytes leftover after parsing attributes in process `syz.0.333'. [ 252.449281][ T7521] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 252.832979][ T7522] can0: slcan on ptm0. [ 254.965839][ T7511] can0 (unregistered): slcan off ptm0. [ 256.064877][ T7551] 9pnet_fd: Insufficient options for proto=fd [ 256.161435][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.170019][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.616373][ T7588] netlink: 132 bytes leftover after parsing attributes in process `syz.3.347'. [ 263.982491][ T7614] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 264.059929][ T7614] can0: slcan on ptm0. [ 264.424050][ T7603] can0 (unregistered): slcan off ptm0. [ 265.029999][ T7623] 9pnet_fd: Insufficient options for proto=fd [ 267.460227][ T7651] syz.2.362 (7651): drop_caches: 2 [ 267.482881][ T7651] netlink: 132 bytes leftover after parsing attributes in process `syz.2.362'. [ 274.642078][ T7697] 9pnet_fd: Insufficient options for proto=fd [ 275.897251][ T7721] syz.2.377 (7721): drop_caches: 2 [ 275.968958][ T7721] netlink: 132 bytes leftover after parsing attributes in process `syz.2.377'. [ 282.970930][ T7765] syz.2.388 (7765): drop_caches: 2 [ 283.019764][ T7765] netlink: 132 bytes leftover after parsing attributes in process `syz.2.388'. [ 283.151832][ T7764] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 283.400745][ T7764] can0: slcan on ptm0. [ 283.712346][ T7745] can0 (unregistered): slcan off ptm0. [ 290.179664][ T7839] syz.0.399 (7839): drop_caches: 2 [ 290.413014][ T7839] netlink: 132 bytes leftover after parsing attributes in process `syz.0.399'. [ 298.337547][ T7895] syz.0.414 (7895): drop_caches: 2 [ 298.350746][ T7895] netlink: 132 bytes leftover after parsing attributes in process `syz.0.414'. [ 308.466355][ T7967] syz.0.430 (7967): drop_caches: 2 [ 308.497589][ T7967] netlink: 132 bytes leftover after parsing attributes in process `syz.0.430'. [ 314.445574][ T8012] binder: 8011:8012 unknown command 0 [ 314.464860][ T8012] binder: 8011:8012 ioctl c0306201 200000000080 returned -22 [ 314.492047][ T8012] binder: BINDER_SET_CONTEXT_MGR already set [ 314.499780][ T8012] binder: 8011:8012 ioctl 4018620d 200000000040 returned -16 [ 315.550006][ T8029] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 315.590503][ T8030] syz.2.447 (8030): drop_caches: 2 [ 315.632090][ T8030] netlink: 132 bytes leftover after parsing attributes in process `syz.2.447'. [ 315.896141][ T8029] can0: slcan on ptm0. [ 317.690669][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.698340][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.726240][ T1285] can0 selects TX queue 0, but real number of TX queues is 0 [ 317.784174][ T8023] can0 (unregistered): slcan off ptm0. [ 322.820124][ T8065] loop2: detected capacity change from 0 to 32768 [ 323.058983][ T8065] [ 323.058983][ T8065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.058983][ T8065] [ 323.110194][ T8065] [ 323.110194][ T8065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.110194][ T8065] [ 323.122871][ T8065] [ 323.122871][ T8065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.122871][ T8065] [ 323.184575][ T8065] [ 323.184575][ T8065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.184575][ T8065] [ 323.265786][ T8065] JFS: metapage_get_blocks failed [ 323.297929][ T8065] [ 323.297929][ T8065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.297929][ T8065] [ 323.361722][ T8084] ERROR: (device loop2): diWrite: ixpxd invalid [ 323.361722][ T8084] [ 323.376388][ T8084] ERROR: (device loop2): txCommit: [ 323.376388][ T8084] [ 323.384717][ T8084] ERROR: (device loop2): diFree: invalid inoext [ 323.384717][ T8084] [ 323.660280][ T42] ERROR: (device loop2): diWrite: ixpxd invalid [ 323.660280][ T42] [ 323.773530][ T42] ERROR: (device loop2): txCommit: [ 323.773530][ T42] [ 323.781160][ T42] jfs_write_inode: jfs_commit_inode failed! [ 323.800478][ T5773] [ 323.800478][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.800478][ T5773] [ 323.829097][ T5773] [ 323.829097][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.829097][ T5773] [ 323.936351][ T8091] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 324.479093][ T8091] can0: slcan on ptm0. [ 324.927181][ T8107] netlink: 132 bytes leftover after parsing attributes in process `syz.2.466'. [ 324.953615][ T8088] can0 (unregistered): slcan off ptm0. [ 325.323955][ T8104] syz.2.466 (8104): drop_caches: 2 [ 331.295011][ T8180] netlink: 132 bytes leftover after parsing attributes in process `syz.3.478'. [ 334.150572][ T8195] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 334.648215][ T8195] can0: slcan on ptm0. [ 334.934802][ T8182] can0 (unregistered): slcan off ptm0. [ 336.096120][ T8222] (null): rxe_set_mtu: Set mtu to 1024 [ 337.169586][ T8222] infiniband syz1: set active [ 337.189332][ T8222] infiniband syz1: added syz_tun [ 337.411104][ T8222] RDS/IB: syz1: added [ 337.420345][ T8222] smc: adding ib device syz1 with port count 1 [ 337.443480][ T8222] smc: ib device syz1 port 1 has pnetid [ 338.035412][ T8233] binder: BINDER_SET_CONTEXT_MGR already set [ 338.044967][ T8233] binder: 8231:8233 ioctl 4018620d 200000000040 returned -16 [ 341.513294][ T8270] netlink: 132 bytes leftover after parsing attributes in process `syz.3.493'. [ 341.993544][ T5840] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 342.206390][ T5840] usb 3-1: Using ep0 maxpacket: 8 [ 342.220298][ T5840] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 342.253531][ T5840] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 342.271714][ T5840] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 342.285073][ T5840] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.301597][ T5840] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 342.311307][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.564282][ T5840] usb 3-1: GET_CAPABILITIES returned 0 [ 342.569876][ T5840] usbtmc 3-1:16.0: can't read capabilities [ 343.017358][ T8282] binder: BINDER_SET_CONTEXT_MGR already set [ 343.040354][ T8282] binder: 8281:8282 ioctl 4018620d 200000000040 returned -16 [ 343.235623][ T5820] usb 3-1: USB disconnect, device number 5 [ 345.834502][ T8311] netlink: 132 bytes leftover after parsing attributes in process `syz.3.506'. [ 346.236913][ T8309] binder: BINDER_SET_CONTEXT_MGR already set [ 346.243270][ T8309] binder: 8308:8309 ioctl 4018620d 200000000040 returned -16 [ 346.459565][ T8302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.595909][ T8321] loop2: detected capacity change from 0 to 256 [ 346.609960][ T8321] exfat: Deprecated parameter 'utf8' [ 346.653904][ T8321] exfat: Deprecated parameter 'namecase' [ 346.682720][ T8321] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 346.731831][ T8302] bond0: (slave rose0): Enslaving as an active interface with an up link [ 350.504090][ T8375] binder: 8372:8375 unknown command 0 [ 350.515607][ T8375] binder: 8372:8375 ioctl c0306201 200000000080 returned -22 [ 350.848593][ T8398] syz.1.522 (8398): drop_caches: 2 [ 350.898322][ T8398] netlink: 132 bytes leftover after parsing attributes in process `syz.1.522'. [ 353.626989][ T8424] 9pnet_virtio: no channels available for device ./bus [ 355.171517][ T8441] loop2: detected capacity change from 0 to 256 [ 355.198543][ T8441] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 359.165262][ T8457] syz.2.537 (8457): drop_caches: 2 [ 359.248656][ T8457] netlink: 132 bytes leftover after parsing attributes in process `syz.2.537'. [ 359.523487][ T5840] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 359.705731][ T5840] usb 2-1: config 0 interface 0 has no altsetting 0 [ 359.722831][ T5840] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 359.751681][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 359.770560][ T5840] usb 2-1: Product: syz [ 359.781039][ T5840] usb 2-1: Manufacturer: syz [ 359.800124][ T5840] usb 2-1: SerialNumber: syz [ 359.836267][ T5840] usb 2-1: config 0 descriptor?? [ 359.894523][ T5840] usb 2-1: selecting invalid altsetting 0 [ 360.112965][ T8461] ================================================================== [ 360.121084][ T8461] BUG: KASAN: slab-out-of-bounds in copy_to_urb+0x255/0x440 [ 360.128594][ T8461] Write of size 264 at addr ffff88802f128300 by task syz.1.539/8461 [ 360.136588][ T8461] [ 360.138932][ T8461] CPU: 0 PID: 8461 Comm: syz.1.539 Not tainted syzkaller #0 [ 360.146228][ T8461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.156393][ T8461] Call Trace: [ 360.159683][ T8461] [ 360.162624][ T8461] dump_stack_lvl+0x18c/0x250 [ 360.167417][ T8461] ? read_lock_is_recursive+0x20/0x20 [ 360.173076][ T8461] ? show_regs_print_info+0x20/0x20 [ 360.178395][ T8461] ? load_image+0x400/0x400 [ 360.183009][ T8461] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 360.188749][ T8461] ? __virt_addr_valid+0x18c/0x540 [ 360.193908][ T8461] ? __virt_addr_valid+0x469/0x540 [ 360.199035][ T8461] print_report+0xa8/0x210 [ 360.203483][ T8461] ? copy_to_urb+0x255/0x440 [ 360.208101][ T8461] kasan_report+0x117/0x150 [ 360.212622][ T8461] ? copy_to_urb+0x255/0x440 [ 360.217327][ T8461] kasan_check_range+0x241/0x290 [ 360.222277][ T8461] ? copy_to_urb+0x255/0x440 [ 360.226891][ T8461] __asan_memcpy+0x40/0x70 [ 360.231326][ T8461] copy_to_urb+0x255/0x440 [ 360.235760][ T8461] ? snd_usb_endpoint_next_packet_size+0x333/0x520 [ 360.242304][ T8461] prepare_playback_urb+0x932/0x1380 [ 360.247609][ T8461] ? verify_lock_unused+0x140/0x140 [ 360.252848][ T8461] ? start_endpoints+0x270/0x270 [ 360.257984][ T8461] ? __lock_acquire+0x7d40/0x7d40 [ 360.263045][ T8461] ? start_endpoints+0x270/0x270 [ 360.268002][ T8461] prepare_outbound_urb+0x372/0xc60 [ 360.273222][ T8461] ? verify_lock_unused+0x140/0x140 [ 360.278454][ T8461] ? __asan_memcpy+0x40/0x70 [ 360.283072][ T8461] ? snd_usb_queue_pending_output_urbs+0xd00/0xd00 [ 360.289707][ T8461] ? _copy_from_iter+0xe79/0x12e0 [ 360.294753][ T8461] ? find_vmap_area+0xfc/0x110 [ 360.299540][ T8461] ? snd_usb_endpoint_start_quirk+0x1f7/0x310 [ 360.305631][ T8461] snd_usb_endpoint_start+0x4f1/0x1450 [ 360.311118][ T8461] ? snd_usb_endpoint_get_clock_rate+0x100/0x100 [ 360.317506][ T8461] ? do_raw_spin_lock+0x11f/0x2c0 [ 360.322643][ T8461] start_endpoints+0xa1/0x270 [ 360.327460][ T8461] ? snd_usb_substream_playback_trigger+0x3ce/0x790 [ 360.334276][ T8461] snd_usb_substream_playback_trigger+0x3e0/0x790 [ 360.340815][ T8461] snd_pcm_do_start+0xb1/0x170 [ 360.345700][ T8461] snd_pcm_action+0xda/0x230 [ 360.350339][ T8461] __snd_pcm_lib_xfer+0x16f7/0x1c50 [ 360.355607][ T8461] ? __lock_acquire+0x7d40/0x7d40 [ 360.360847][ T8461] ? verify_lock_unused+0x140/0x140 [ 360.366175][ T8461] ? __snd_pcm_lib_xfer+0x1c50/0x1c50 [ 360.371570][ T8461] ? fill_silence+0x240/0x240 [ 360.376274][ T8461] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 360.381933][ T8461] ? resample_expand+0x7e6/0x860 [ 360.387158][ T8461] ? pcm_lib_apply_appl_ptr+0x510/0x510 [ 360.392745][ T8461] snd_pcm_oss_write3+0x1bc/0x320 [ 360.397787][ T8461] snd_pcm_plug_write_transfer+0x2be/0x4b0 [ 360.403615][ T8461] ? __lock_acquire+0x7d40/0x7d40 [ 360.408698][ T8461] ? snd_pcm_plug_client_channels_buf+0x610/0x610 [ 360.415145][ T8461] ? snd_pcm_plug_client_channels_buf+0x46a/0x610 [ 360.421577][ T8461] snd_pcm_oss_write2+0x1a9/0x410 [ 360.426619][ T8461] ? snd_pcm_hw_param_max+0x6a0/0x6a0 [ 360.432010][ T8461] ? snd_pcm_do_prepare+0x230/0x230 [ 360.437223][ T8461] ? snd_pcm_action_nonatomic+0x24a/0x2a0 [ 360.443424][ T8461] snd_pcm_oss_write+0x6ae/0xaf0 [ 360.448406][ T8461] ? snd_pcm_oss_read+0x8c0/0x8c0 [ 360.453449][ T8461] vfs_write+0x296/0x990 [ 360.457894][ T8461] ? file_end_write+0x250/0x250 [ 360.462762][ T8461] ? __fget_files+0x28/0x4b0 [ 360.467398][ T8461] ? __fget_files+0x28/0x4b0 [ 360.472027][ T8461] ? __fget_files+0x43d/0x4b0 [ 360.476746][ T8461] ? __fdget_pos+0x1d8/0x330 [ 360.481347][ T8461] ? ksys_write+0x75/0x260 [ 360.485799][ T8461] ksys_write+0x150/0x260 [ 360.490167][ T8461] ? __ia32_sys_read+0x90/0x90 [ 360.494972][ T8461] ? lockdep_hardirqs_on+0x98/0x150 [ 360.500221][ T8461] do_syscall_64+0x55/0xa0 [ 360.504665][ T8461] ? clear_bhb_loop+0x40/0x90 [ 360.509374][ T8461] ? clear_bhb_loop+0x40/0x90 [ 360.514093][ T8461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.520013][ T8461] RIP: 0033:0x7fb49499aeb9 [ 360.524479][ T8461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.544125][ T8461] RSP: 002b:00007fb495847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 360.552579][ T8461] RAX: ffffffffffffffda RBX: 00007fb494c15fa0 RCX: 00007fb49499aeb9 [ 360.560567][ T8461] RDX: 00000000000005ce RSI: 0000200000000640 RDI: 0000000000000004 [ 360.568556][ T8461] RBP: 00007fb494a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 360.576624][ T8461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.584632][ T8461] R13: 00007fb494c16038 R14: 00007fb494c15fa0 R15: 00007ffd636bd6d8 [ 360.592619][ T8461] [ 360.595654][ T8461] [ 360.597996][ T8461] Allocated by task 8461: [ 360.602354][ T8461] kasan_set_track+0x4e/0x70 [ 360.606965][ T8461] __kasan_kmalloc+0x8f/0xa0 [ 360.611571][ T8461] __kmalloc+0xb4/0x230 [ 360.615746][ T8461] snd_usb_endpoint_set_params+0x163e/0x2b40 [ 360.621852][ T8461] snd_usb_hw_params+0x123d/0x19d0 [ 360.626990][ T8461] snd_pcm_hw_params+0x8a6/0x1ce0 [ 360.632032][ T8461] snd_pcm_oss_change_params_locked+0x2042/0x3cf0 [ 360.638468][ T8461] snd_pcm_oss_write+0x27e/0xaf0 [ 360.643419][ T8461] vfs_write+0x296/0x990 [ 360.647674][ T8461] ksys_write+0x150/0x260 [ 360.652122][ T8461] do_syscall_64+0x55/0xa0 [ 360.656594][ T8461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.662514][ T8461] [ 360.664912][ T8461] The buggy address belongs to the object at ffff88802f128300 [ 360.664912][ T8461] which belongs to the cache kmalloc-192 of size 192 [ 360.679077][ T8461] The buggy address is located 0 bytes inside of [ 360.679077][ T8461] allocated 144-byte region [ffff88802f128300, ffff88802f128390) [ 360.693064][ T8461] [ 360.695397][ T8461] The buggy address belongs to the physical page: [ 360.701822][ T8461] page:ffffea0000bc4a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f128 [ 360.711985][ T8461] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 360.719534][ T8461] page_type: 0xffffffff() [ 360.723872][ T8461] raw: 00fff00000000800 ffff888017c41a00 dead000000000122 0000000000000000 [ 360.732566][ T8461] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 360.741152][ T8461] page dumped because: kasan: bad access detected [ 360.747628][ T8461] page_owner tracks the page as allocated [ 360.753409][ T8461] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 5840, tgid 5840 (kworker/0:4), ts 359871256146, free_ts 348398436503 [ 360.773084][ T8461] post_alloc_hook+0x1c1/0x200 [ 360.777871][ T8461] get_page_from_freelist+0x1951/0x19e0 [ 360.783448][ T8461] __alloc_pages+0x1f0/0x460 [ 360.788054][ T8461] alloc_slab_page+0x5d/0x160 [ 360.792737][ T8461] new_slab+0x87/0x2d0 [ 360.796822][ T8461] ___slab_alloc+0xc5d/0x12f0 [ 360.801509][ T8461] __kmem_cache_alloc_node+0x19e/0x250 [ 360.806986][ T8461] __kmalloc+0xa4/0x230 [ 360.811159][ T8461] usb_alloc_urb+0x46/0x140 [ 360.815672][ T8461] usb_control_msg+0x119/0x3e0 [ 360.820449][ T8461] usb_set_configuration+0x1271/0x20c0 [ 360.825924][ T8461] usb_generic_driver_probe+0x8d/0x150 [ 360.831402][ T8461] usb_probe_device+0x13d/0x270 [ 360.836290][ T8461] really_probe+0x25b/0xb20 [ 360.840801][ T8461] __driver_probe_device+0x18c/0x330 [ 360.846193][ T8461] driver_probe_device+0x4f/0x420 [ 360.851238][ T8461] page last free stack trace: [ 360.855921][ T8461] free_unref_page_prepare+0x7b2/0x8c0 [ 360.861395][ T8461] free_unref_page+0x32/0x2e0 [ 360.866103][ T8461] __unfreeze_partials+0x1cf/0x210 [ 360.871221][ T8461] put_cpu_partial+0x17c/0x250 [ 360.875987][ T8461] __slab_free+0x319/0x400 [ 360.880406][ T8461] qlist_free_all+0x75/0xd0 [ 360.884922][ T8461] kasan_quarantine_reduce+0x143/0x160 [ 360.890394][ T8461] __kasan_slab_alloc+0x22/0x80 [ 360.895255][ T8461] slab_post_alloc_hook+0x6e/0x4b0 [ 360.900401][ T8461] kmem_cache_alloc+0x11a/0x2d0 [ 360.905454][ T8461] getname_flags+0xbb/0x500 [ 360.910080][ T8461] user_path_at_empty+0x2c/0x60 [ 360.914962][ T8461] __x64_sys_umount+0xfd/0x180 [ 360.919732][ T8461] do_syscall_64+0x55/0xa0 [ 360.924164][ T8461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.930065][ T8461] [ 360.932394][ T8461] Memory state around the buggy address: [ 360.938032][ T8461] ffff88802f128280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 360.946095][ T8461] ffff88802f128300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.954168][ T8461] >ffff88802f128380: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 360.962255][ T8461] ^ [ 360.966846][ T8461] ffff88802f128400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.974929][ T8461] ffff88802f128480: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 360.982996][ T8461] ================================================================== [ 360.991073][ T8461] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 360.998276][ T8461] CPU: 0 PID: 8461 Comm: syz.1.539 Not tainted syzkaller #0 [ 361.005564][ T8461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.015632][ T8461] Call Trace: [ 361.018919][ T8461] [ 361.021858][ T8461] dump_stack_lvl+0x18c/0x250 [ 361.026553][ T8461] ? show_regs_print_info+0x20/0x20 [ 361.031765][ T8461] ? load_image+0x400/0x400 [ 361.036390][ T8461] panic+0x2dc/0x730 [ 361.040491][ T8461] ? __lock_acquire+0x7d40/0x7d40 [ 361.045795][ T8461] ? bpf_jit_dump+0xd0/0xd0 [ 361.050311][ T8461] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 361.056212][ T8461] ? _raw_spin_unlock+0x40/0x40 [ 361.061075][ T8461] ? copy_to_urb+0x255/0x440 [ 361.065691][ T8461] check_panic_on_warn+0x84/0xa0 [ 361.070667][ T8461] ? copy_to_urb+0x255/0x440 [ 361.075282][ T8461] end_report+0x6f/0x130 [ 361.079542][ T8461] kasan_report+0x128/0x150 [ 361.084065][ T8461] ? copy_to_urb+0x255/0x440 [ 361.088690][ T8461] kasan_check_range+0x241/0x290 [ 361.093661][ T8461] ? copy_to_urb+0x255/0x440 [ 361.098309][ T8461] __asan_memcpy+0x40/0x70 [ 361.102743][ T8461] copy_to_urb+0x255/0x440 [ 361.107187][ T8461] ? snd_usb_endpoint_next_packet_size+0x333/0x520 [ 361.113723][ T8461] prepare_playback_urb+0x932/0x1380 [ 361.119047][ T8461] ? verify_lock_unused+0x140/0x140 [ 361.124357][ T8461] ? start_endpoints+0x270/0x270 [ 361.129333][ T8461] ? __lock_acquire+0x7d40/0x7d40 [ 361.134375][ T8461] ? start_endpoints+0x270/0x270 [ 361.139389][ T8461] prepare_outbound_urb+0x372/0xc60 [ 361.144608][ T8461] ? verify_lock_unused+0x140/0x140 [ 361.149816][ T8461] ? __asan_memcpy+0x40/0x70 [ 361.154427][ T8461] ? snd_usb_queue_pending_output_urbs+0xd00/0xd00 [ 361.160943][ T8461] ? _copy_from_iter+0xe79/0x12e0 [ 361.165977][ T8461] ? find_vmap_area+0xfc/0x110 [ 361.170754][ T8461] ? snd_usb_endpoint_start_quirk+0x1f7/0x310 [ 361.176839][ T8461] snd_usb_endpoint_start+0x4f1/0x1450 [ 361.182322][ T8461] ? snd_usb_endpoint_get_clock_rate+0x100/0x100 [ 361.188663][ T8461] ? do_raw_spin_lock+0x11f/0x2c0 [ 361.193738][ T8461] start_endpoints+0xa1/0x270 [ 361.198682][ T8461] ? snd_usb_substream_playback_trigger+0x3ce/0x790 [ 361.205293][ T8461] snd_usb_substream_playback_trigger+0x3e0/0x790 [ 361.211727][ T8461] snd_pcm_do_start+0xb1/0x170 [ 361.216512][ T8461] snd_pcm_action+0xda/0x230 [ 361.221157][ T8461] __snd_pcm_lib_xfer+0x16f7/0x1c50 [ 361.226374][ T8461] ? __lock_acquire+0x7d40/0x7d40 [ 361.231425][ T8461] ? verify_lock_unused+0x140/0x140 [ 361.236639][ T8461] ? __snd_pcm_lib_xfer+0x1c50/0x1c50 [ 361.242042][ T8461] ? fill_silence+0x240/0x240 [ 361.247080][ T8461] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 361.252733][ T8461] ? resample_expand+0x7e6/0x860 [ 361.257679][ T8461] ? pcm_lib_apply_appl_ptr+0x510/0x510 [ 361.263242][ T8461] snd_pcm_oss_write3+0x1bc/0x320 [ 361.268296][ T8461] snd_pcm_plug_write_transfer+0x2be/0x4b0 [ 361.274306][ T8461] ? __lock_acquire+0x7d40/0x7d40 [ 361.279346][ T8461] ? snd_pcm_plug_client_channels_buf+0x610/0x610 [ 361.285783][ T8461] ? snd_pcm_plug_client_channels_buf+0x46a/0x610 [ 361.292302][ T8461] snd_pcm_oss_write2+0x1a9/0x410 [ 361.297346][ T8461] ? snd_pcm_hw_param_max+0x6a0/0x6a0 [ 361.302909][ T8461] ? snd_pcm_do_prepare+0x230/0x230 [ 361.308131][ T8461] ? snd_pcm_action_nonatomic+0x24a/0x2a0 [ 361.314149][ T8461] snd_pcm_oss_write+0x6ae/0xaf0 [ 361.319214][ T8461] ? snd_pcm_oss_read+0x8c0/0x8c0 [ 361.324433][ T8461] vfs_write+0x296/0x990 [ 361.328721][ T8461] ? file_end_write+0x250/0x250 [ 361.333951][ T8461] ? __fget_files+0x28/0x4b0 [ 361.338664][ T8461] ? __fget_files+0x28/0x4b0 [ 361.343439][ T8461] ? __fget_files+0x43d/0x4b0 [ 361.348163][ T8461] ? __fdget_pos+0x1d8/0x330 [ 361.352870][ T8461] ? ksys_write+0x75/0x260 [ 361.357345][ T8461] ksys_write+0x150/0x260 [ 361.361713][ T8461] ? __ia32_sys_read+0x90/0x90 [ 361.366524][ T8461] ? lockdep_hardirqs_on+0x98/0x150 [ 361.371735][ T8461] do_syscall_64+0x55/0xa0 [ 361.376179][ T8461] ? clear_bhb_loop+0x40/0x90 [ 361.380875][ T8461] ? clear_bhb_loop+0x40/0x90 [ 361.385569][ T8461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.391475][ T8461] RIP: 0033:0x7fb49499aeb9 [ 361.395988][ T8461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.415797][ T8461] RSP: 002b:00007fb495847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 361.424334][ T8461] RAX: ffffffffffffffda RBX: 00007fb494c15fa0 RCX: 00007fb49499aeb9 [ 361.432318][ T8461] RDX: 00000000000005ce RSI: 0000200000000640 RDI: 0000000000000004 [ 361.440309][ T8461] RBP: 00007fb494a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 361.448315][ T8461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.456296][ T8461] R13: 00007fb494c16038 R14: 00007fb494c15fa0 R15: 00007ffd636bd6d8 [ 361.464340][ T8461] [ 361.467993][ T8461] Kernel Offset: disabled [ 361.472357][ T8461] Rebooting in 86400 seconds..