last executing test programs: 3.558285814s ago: executing program 2 (id=264): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.424525238s ago: executing program 2 (id=267): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098") 3.292655641s ago: executing program 0 (id=269): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002010}) 3.211881143s ago: executing program 2 (id=270): r0 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) writev(r0, &(0x7f0000000940)=[{&(0x7f00000007c0)="09643dff5a54", 0x6}], 0x1) r1 = fanotify_init(0x200, 0x1000) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x8001000, r2, 0x0) copy_file_range(r0, &(0x7f0000000080)=0x5, r0, 0x0, 0x5, 0x0) 3.029724477s ago: executing program 2 (id=273): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000008c0)={0x10, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4007, @fd=r1, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2.994761078s ago: executing program 1 (id=274): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000000000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011000180c2000000000010"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 2.821061202s ago: executing program 1 (id=277): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) 2.617545627s ago: executing program 0 (id=278): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r3}, 0x94) 2.602939777s ago: executing program 3 (id=279): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000000)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) 2.49056772s ago: executing program 0 (id=280): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x76, 0x1, 0x0, 0x0, 0x8, 0x10, 0xc, 0xff, 0x0, '\x00', 0x0, 0x7f}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x40000002, 0x0, 0x44}) 2.365650283s ago: executing program 1 (id=281): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) 2.282897985s ago: executing program 3 (id=282): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000b00)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6}, 0x6f, 0x0, 0x0) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) r0 = io_uring_setup(0x6858, &(0x7f0000000100)={0x0, 0x40f0ce, 0x3480, 0x0, 0x22d}) io_uring_enter(r0, 0x0, 0xcb, 0xf, &(0x7f0000000000)={[0x20]}, 0x18) 1.955602633s ago: executing program 1 (id=283): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.856857215s ago: executing program 3 (id=284): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1.748811188s ago: executing program 1 (id=285): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x6, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.165498692s ago: executing program 2 (id=286): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x240}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x90000014}) 823.23073ms ago: executing program 3 (id=287): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x8, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x6) 742.518412ms ago: executing program 1 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a1a40001010203010902470001010080320904000005000000000705810340000107058202000200070502020002000705830200020007050302"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb-serial/drivers/moschip7720/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0525 a4a1', 0x9) syz_usb_disconnect(r0) 727.881443ms ago: executing program 3 (id=289): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x4, 0x8, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 655.041184ms ago: executing program 3 (id=290): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4421, &(0x7f0000004500)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x130) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES64=r0], 0x2b) 457.691399ms ago: executing program 0 (id=291): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000240)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @mcast2, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "4fe846155ed9"}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) 329.819942ms ago: executing program 0 (id=292): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 235.602704ms ago: executing program 2 (id=293): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) setresuid(0xee00, 0xee00, 0x0) write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) 0s ago: executing program 0 (id=294): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 77.633081][ T5761] cgroup: Unknown subsys name 'net' [ 77.775184][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.482789][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.175073][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.184870][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.195554][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.205624][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.213278][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.267967][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.283260][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.291938][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.299675][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.308624][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.316578][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.317389][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.331638][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.334742][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.340335][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.353169][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.358129][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.362959][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.371023][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.385853][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.393000][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.408828][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.417328][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.424765][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.940540][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 82.010280][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 82.070747][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 82.090911][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 82.204333][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.212159][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.219736][ T5775] bridge_slave_0: entered allmulticast mode [ 82.228008][ T5775] bridge_slave_0: entered promiscuous mode [ 82.280236][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.287646][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.294870][ T5775] bridge_slave_1: entered allmulticast mode [ 82.302454][ T5775] bridge_slave_1: entered promiscuous mode [ 82.319890][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.328231][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.337715][ T5774] bridge_slave_0: entered allmulticast mode [ 82.349585][ T5774] bridge_slave_0: entered promiscuous mode [ 82.362504][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.369754][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.377305][ T5774] bridge_slave_1: entered allmulticast mode [ 82.384358][ T5774] bridge_slave_1: entered promiscuous mode [ 82.467877][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.483200][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.493541][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.500990][ T5773] bridge_slave_0: entered allmulticast mode [ 82.508664][ T5773] bridge_slave_0: entered promiscuous mode [ 82.518665][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.533320][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.569173][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.576401][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.583585][ T5773] bridge_slave_1: entered allmulticast mode [ 82.592124][ T5773] bridge_slave_1: entered promiscuous mode [ 82.601279][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.632803][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.641902][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.650167][ T5772] bridge_slave_0: entered allmulticast mode [ 82.657865][ T5772] bridge_slave_0: entered promiscuous mode [ 82.694627][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.703423][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.712630][ T5772] bridge_slave_1: entered allmulticast mode [ 82.721391][ T5772] bridge_slave_1: entered promiscuous mode [ 82.743354][ T5775] team0: Port device team_slave_0 added [ 82.753133][ T5775] team0: Port device team_slave_1 added [ 82.763260][ T5774] team0: Port device team_slave_0 added [ 82.783164][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.795973][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.816403][ T5774] team0: Port device team_slave_1 added [ 82.858448][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.882000][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.889110][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.915495][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.950663][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.979271][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.986773][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.013269][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.027815][ T5773] team0: Port device team_slave_0 added [ 83.052749][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.061637][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.087884][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.101305][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.115636][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.141718][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.156860][ T5773] team0: Port device team_slave_1 added [ 83.166062][ T5772] team0: Port device team_slave_0 added [ 83.212502][ T5772] team0: Port device team_slave_1 added [ 83.249133][ T5775] hsr_slave_0: entered promiscuous mode [ 83.256658][ T5775] hsr_slave_1: entered promiscuous mode [ 83.281072][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.288158][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.314797][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.328240][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.335220][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.361629][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.407621][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.414756][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.441167][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.453303][ T5085] Bluetooth: hci2: command tx timeout [ 83.467250][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.474248][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.500730][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.512150][ T5085] Bluetooth: hci1: command tx timeout [ 83.512198][ T5777] Bluetooth: hci3: command tx timeout [ 83.524635][ T5779] Bluetooth: hci0: command tx timeout [ 83.557382][ T5774] hsr_slave_0: entered promiscuous mode [ 83.563856][ T5774] hsr_slave_1: entered promiscuous mode [ 83.571664][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.580149][ T5774] Cannot create hsr debugfs directory [ 83.651374][ T5773] hsr_slave_0: entered promiscuous mode [ 83.658115][ T5773] hsr_slave_1: entered promiscuous mode [ 83.664386][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.672287][ T5773] Cannot create hsr debugfs directory [ 83.718800][ T5772] hsr_slave_0: entered promiscuous mode [ 83.725823][ T5772] hsr_slave_1: entered promiscuous mode [ 83.732526][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.740718][ T5772] Cannot create hsr debugfs directory [ 84.135976][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.154560][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.174339][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.184961][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.261890][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.273711][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.288660][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.308545][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.381116][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.423762][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.447391][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.464964][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.508674][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.520861][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.532709][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.553681][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.607081][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.653429][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.684110][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.691553][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.732387][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.741124][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.748351][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.827870][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.864037][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.871210][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.904408][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.911615][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.963559][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.005105][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.088088][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.120197][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.157159][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.164398][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.211587][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.218943][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.251290][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.286773][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.293990][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.348091][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.355288][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.507156][ T5779] Bluetooth: hci2: command tx timeout [ 85.583533][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.590498][ T5779] Bluetooth: hci1: command tx timeout [ 85.597909][ T5779] Bluetooth: hci0: command tx timeout [ 85.603374][ T5779] Bluetooth: hci3: command tx timeout [ 85.647518][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.817586][ T5774] veth0_vlan: entered promiscuous mode [ 85.841562][ T5775] veth0_vlan: entered promiscuous mode [ 85.864016][ T5774] veth1_vlan: entered promiscuous mode [ 85.902369][ T5775] veth1_vlan: entered promiscuous mode [ 85.974246][ T5774] veth0_macvtap: entered promiscuous mode [ 85.992041][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.004984][ T5774] veth1_macvtap: entered promiscuous mode [ 86.030056][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.070506][ T5775] veth0_macvtap: entered promiscuous mode [ 86.082552][ T5775] veth1_macvtap: entered promiscuous mode [ 86.105206][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.122308][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.158824][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.169548][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.178847][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.188413][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.207762][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.219083][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.234091][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.274819][ T5772] veth0_vlan: entered promiscuous mode [ 86.281481][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.296539][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.310809][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.338261][ T5773] veth0_vlan: entered promiscuous mode [ 86.354197][ T5773] veth1_vlan: entered promiscuous mode [ 86.362354][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.372019][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.383839][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.393797][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.409633][ T5772] veth1_vlan: entered promiscuous mode [ 86.524347][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.533374][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.631830][ T5773] veth0_macvtap: entered promiscuous mode [ 86.675377][ T5773] veth1_macvtap: entered promiscuous mode [ 86.681694][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.698665][ T5772] veth0_macvtap: entered promiscuous mode [ 86.711530][ T5772] veth1_macvtap: entered promiscuous mode [ 86.718311][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.728168][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.739859][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.832730][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.851192][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.864702][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.866743][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.884278][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.895263][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.907962][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.976499][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.006873][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.029511][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.053490][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.064002][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.074826][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.088516][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.096959][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.109660][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.119923][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.131012][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.143009][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.170503][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.212606][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.223457][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.234387][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.244767][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.257736][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.297818][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.308218][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.329561][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.354150][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.375301][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.404864][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.433090][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.459288][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.485481][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.586624][ T5779] Bluetooth: hci2: command tx timeout [ 87.667188][ T5777] Bluetooth: hci0: command tx timeout [ 87.667199][ T5085] Bluetooth: hci1: command tx timeout [ 87.678380][ T5779] Bluetooth: hci3: command tx timeout [ 87.833582][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.875500][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.951932][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.976910][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.052658][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.065974][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.237397][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.272958][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.541687][ T5865] ======================================================= [ 88.541687][ T5865] WARNING: The mand mount option has been deprecated and [ 88.541687][ T5865] and is ignored by this kernel. Remove the mand [ 88.541687][ T5865] option from the mount to silence this warning. [ 88.541687][ T5865] ======================================================= [ 88.899099][ T5874] syz.2.13[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.055220][ T5876] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 89.376121][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.455479][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.543072][ T5874] loop2: detected capacity change from 0 to 32768 [ 89.608977][ T27] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.620089][ T27] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 89.646631][ T5874] JBD2: Ignoring recovery information on journal [ 89.655703][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.662023][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 89.678115][ T5777] Bluetooth: hci2: command tx timeout [ 89.682567][ T8] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 89.696208][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.706641][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 89.720570][ T8] usb 4-1: config 0 descriptor?? [ 89.732570][ T8] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 89.755426][ T5777] Bluetooth: hci1: command tx timeout [ 89.760911][ T5777] Bluetooth: hci0: command tx timeout [ 89.766696][ T5777] Bluetooth: hci3: command tx timeout [ 89.796277][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 89.828647][ T27] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 89.839327][ T27] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 89.849155][ T27] usb 1-1: Product: syz [ 89.853383][ T27] usb 1-1: Manufacturer: syz [ 89.869936][ T27] cdc_wdm 1-1:1.0: skipping garbage [ 89.877076][ T27] cdc_wdm 1-1:1.0: skipping garbage [ 89.891782][ T27] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 89.897984][ T5874] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 89.899023][ T27] cdc_wdm 1-1:1.0: Unknown control protocol [ 90.056607][ T28] audit: type=1800 audit(1788984295.181:2): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 90.313775][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 90.765005][ T8] gspca_vc032x: reg_w err -71 [ 90.771268][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 90.795122][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 90.818725][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 90.834661][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 90.845506][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 90.855774][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 90.872742][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 90.888347][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 90.916056][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 90.935548][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 90.940955][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 90.975541][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 90.987442][ T5818] usb 1-1: USB disconnect, device number 2 [ 90.993939][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 91.011564][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 91.022786][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 91.035457][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 91.040816][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 91.047437][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 91.053036][ T8] gspca_vc032x: Unknown sensor... [ 91.058560][ T8] vc032x: probe of 4-1:0.0 failed with error -22 [ 91.079026][ T8] usb 4-1: USB disconnect, device number 2 [ 91.101743][ T5903] input: syz1 as /devices/virtual/input/input5 [ 91.130597][ T5903] input: failed to attach handler leds to device input5, error: -6 [ 91.353234][ T5908] Illegal XDP return value 3457 on prog (id 5) dev syz_tun, expect packet loss! [ 91.371865][ T5906] netdevsim netdevsim2: Direct firmware load for .® failed with error -2 [ 91.395584][ T5906] netdevsim netdevsim2: Falling back to sysfs fallback for: .® [ 92.010876][ T5818] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.206304][ T5818] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 92.245508][ T5818] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.255013][ T5818] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.325436][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 92.374998][ T5818] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.404997][ T5818] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.461407][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 92.517401][ T5818] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.555472][ T5818] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.597342][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 92.632673][ T5818] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.660812][ T5818] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.705255][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 92.757580][ T5818] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.770364][ T5911] loop3: detected capacity change from 0 to 131072 [ 92.788868][ T789] cfg80211: failed to load regulatory.db [ 92.794609][ T5911] F2FS-fs (loop3): invalid crc value [ 92.812491][ T5818] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.872512][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 92.874174][ T5911] F2FS-fs (loop3): Found nat_bits in checkpoint [ 92.908202][ T5818] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.929276][ T5818] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.952780][ T5911] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 92.990117][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 93.018386][ T5818] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.042947][ T5818] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.063241][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 93.077658][ T5818] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.097170][ T5818] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.126611][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 93.128802][ T5938] loop2: detected capacity change from 0 to 2048 [ 93.143526][ T5818] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 93.184307][ T5818] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 93.211242][ T5938] loop2: p1 < > [ 93.228372][ T5818] usb 2-1: Product: syz [ 93.232603][ T5818] usb 2-1: Manufacturer: syz [ 93.265890][ T5818] usb 2-1: SerialNumber: syz [ 93.286576][ T5818] usb 2-1: config 0 descriptor?? [ 93.321493][ T5818] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 93.642474][ T8] usb 2-1: USB disconnect, device number 2 [ 93.701188][ T8] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 94.103503][ T5940] loop0: detected capacity change from 0 to 32768 [ 94.188376][ T5940] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 94.381364][ T5955] netlink: 'syz.1.42': attribute type 11 has an invalid length. [ 94.403420][ T5940] XFS (loop0): Ending clean mount [ 94.592840][ T5957] loop1: detected capacity change from 0 to 64 [ 94.756927][ T5957] hfs: walked past end of dir [ 94.797453][ T5957] hfs: walked past end of dir [ 94.886278][ T5775] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 95.034224][ T5965] FAULT_INJECTION: forcing a failure. [ 95.034224][ T5965] name failslab, interval 1, probability 0, space 0, times 1 [ 95.051141][ T5965] CPU: 0 PID: 5965 Comm: syz.1.47 Not tainted syzkaller #0 [ 95.058417][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.068534][ T5965] Call Trace: [ 95.071856][ T5965] [ 95.074821][ T5965] dump_stack_lvl+0x18c/0x250 [ 95.079564][ T5965] ? show_regs_print_info+0x20/0x20 [ 95.084824][ T5965] ? load_image+0x420/0x420 [ 95.089380][ T5965] ? __might_sleep+0xe0/0xe0 [ 95.094023][ T5965] ? __lock_acquire+0x7d80/0x7d80 [ 95.099229][ T5965] should_fail_ex+0x394/0x4c0 [ 95.103976][ T5965] should_failslab+0x9/0x20 [ 95.108541][ T5965] slab_pre_alloc_hook+0x59/0x300 [ 95.113635][ T5965] ? __lock_acquire+0x7d80/0x7d80 [ 95.118714][ T5965] kmem_cache_alloc+0x5a/0x2c0 [ 95.123531][ T5965] ? mpol_new+0x165/0x300 [ 95.127917][ T5965] mpol_new+0x165/0x300 [ 95.132129][ T5965] do_set_mempolicy+0x88/0x2f0 [ 95.136945][ T5965] ? sp_delete+0x120/0x120 [ 95.141428][ T5965] __x64_sys_set_mempolicy+0x1b1/0x200 [ 95.146969][ T5965] ? __ia32_sys_mbind+0xf0/0xf0 [ 95.151886][ T5965] ? lockdep_hardirqs_on+0x98/0x150 [ 95.157153][ T5965] do_syscall_64+0x55/0xb0 [ 95.161622][ T5965] ? clear_bhb_loop+0x40/0x90 [ 95.166389][ T5965] ? clear_bhb_loop+0x40/0x90 [ 95.171123][ T5965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.177061][ T5965] RIP: 0033:0x7f766ff9e159 [ 95.181539][ T5965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.201194][ T5965] RSP: 002b:00007f7670e5b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 95.209668][ T5965] RAX: ffffffffffffffda RBX: 00007f7670225fa0 RCX: 00007f766ff9e159 [ 95.217696][ T5965] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000004005 [ 95.225721][ T5965] RBP: 00007f767003503b R08: 0000000000000000 R09: 0000000000000000 [ 95.233798][ T5965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.241817][ T5965] R13: 00007f7670226038 R14: 00007f7670225fa0 R15: 00007ffef27703f8 [ 95.249849][ T5965] [ 95.616106][ T5850] Process accounting resumed [ 95.762130][ T5977] loop0: detected capacity change from 0 to 1024 [ 95.779694][ T5977] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.861177][ T5977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.133341][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.281249][ T5988] loop0: detected capacity change from 0 to 1024 [ 96.291627][ T5990] loop3: detected capacity change from 0 to 512 [ 96.303841][ T5990] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.347518][ T5850] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.360514][ T5990] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.410309][ T5990] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.55: invalid indirect mapped block 9 (level 0) [ 96.436554][ T5990] EXT4-fs (loop3): 1 truncate cleaned up [ 96.443772][ T5990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.567269][ T5850] usb 3-1: Using ep0 maxpacket: 8 [ 96.575676][ T5850] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.597687][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.601394][ T5850] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 96.622749][ T5850] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 96.695838][ T5850] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 96.725580][ T5850] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 96.734700][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.805160][ T5997] loop3: detected capacity change from 0 to 4 [ 96.845997][ T5850] hub 3-1:1.0: bad descriptor, ignoring hub [ 96.851998][ T5850] hub: probe of 3-1:1.0 failed with error -5 [ 96.879427][ T5850] cdc_wdm 3-1:1.0: skipping garbage [ 96.892399][ T5850] cdc_wdm 3-1:1.0: skipping garbage [ 96.916490][ T5850] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 96.922479][ T5850] cdc_wdm 3-1:1.0: Unknown control protocol [ 97.685788][ T5986] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 98.246642][ T6018] syz.0.68 uses obsolete (PF_INET,SOCK_PACKET) [ 98.305354][ C1] sched: RT throttling activated [ 98.398548][ T5820] usb 3-1: USB disconnect, device number 2 [ 98.544650][ T6010] loop1: detected capacity change from 0 to 131072 [ 98.557831][ T6010] F2FS-fs (loop1): invalid crc value [ 98.603607][ T6010] F2FS-fs (loop1): Found nat_bits in checkpoint [ 98.652987][ T6010] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 98.964383][ T6030] loop0: detected capacity change from 0 to 512 [ 99.053498][ T6030] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.73: bg 0: block 5: invalid block bitmap [ 99.088610][ T6030] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 99.140776][ T6030] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.73: invalid indirect mapped block 3 (level 2) [ 99.191434][ T6030] EXT4-fs (loop0): 1 orphan inode deleted [ 99.209922][ T6030] EXT4-fs (loop0): 1 truncate cleaned up [ 99.247688][ T6030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.502623][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.426279][ T5818] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.503791][ T6036] loop3: detected capacity change from 0 to 131072 [ 100.512148][ T6036] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 100.520391][ T6036] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 100.542609][ T6036] F2FS-fs (loop3): invalid crc value [ 100.557690][ T6036] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.631841][ T6036] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 100.639112][ T6036] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 100.656364][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 100.706360][ T5818] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 100.736199][ T5818] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.776769][ T5818] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.810515][ T5818] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 100.845243][ T5818] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 100.868796][ T5818] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.909926][ T5818] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.930308][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.024900][ T5850] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.197703][ T5818] usb 3-1: GET_CAPABILITIES returned 0 [ 101.203276][ T5818] usbtmc 3-1:16.0: can't read capabilities [ 101.253615][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.282122][ T5850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 101.292679][ T5850] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.308831][ T5850] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 101.325752][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 101.344038][ T5850] usb 2-1: Product: syz [ 101.348761][ T5850] usb 2-1: Manufacturer: syz [ 101.368114][ T6048] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 101.387590][ T5850] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 101.445692][ T5820] usb 3-1: USB disconnect, device number 3 [ 101.449695][ T5850] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 101.525052][ T6042] loop0: detected capacity change from 0 to 40427 [ 101.543528][ T6042] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 101.565674][ T6042] F2FS-fs (loop0): Image doesn't support compression [ 101.601487][ T6042] F2FS-fs (loop0): invalid crc value [ 101.614602][ T6042] F2FS-fs (loop0): Found nat_bits in checkpoint [ 101.745156][ T6042] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.763293][ T5850] usb 2-1: USB disconnect, device number 3 [ 101.791669][ T5850] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 101.801886][ T5850] garmin_gps 2-1:1.0: device disconnected [ 101.862212][ T6042] syz.0.76: attempt to access beyond end of device [ 101.862212][ T6042] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.884206][ T6042] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 102.131212][ T6053] loop2: detected capacity change from 0 to 1024 [ 102.191882][ T6053] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 102.481698][ T6055] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.428588][ T6080] loop1: detected capacity change from 0 to 128 [ 103.558754][ T6080] syz.1.89: attempt to access beyond end of device [ 103.558754][ T6080] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 103.625687][ T6080] syz.1.89: attempt to access beyond end of device [ 103.625687][ T6080] loop1: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 103.680776][ T6080] Buffer I/O error on dev loop1, logical block 70, lost async page write [ 103.715516][ T6080] syz.1.89: attempt to access beyond end of device [ 103.715516][ T6080] loop1: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 103.785708][ T6080] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 103.834032][ T6080] syz.1.89: attempt to access beyond end of device [ 103.834032][ T6080] loop1: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 103.858272][ T6080] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 103.895735][ T6080] syz.1.89: attempt to access beyond end of device [ 103.895735][ T6080] loop1: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 103.930110][ T6088] veth0: entered promiscuous mode [ 103.947659][ T6087] veth0: left promiscuous mode [ 103.969148][ T6084] syz.1.89: attempt to access beyond end of device [ 103.969148][ T6084] loop1: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 104.085399][ T6084] Buffer I/O error on dev loop1, logical block 70, lost async page write [ 104.146240][ T6092] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.541203][ T6103] loop1: detected capacity change from 0 to 164 [ 104.664664][ T6103] rock: directory entry would overflow storage [ 104.676170][ T6109] netlink: 'syz.2.100': attribute type 1 has an invalid length. [ 104.706692][ T6109] netlink: 'syz.2.100': attribute type 2 has an invalid length. [ 104.709463][ T6103] rock: sig=0x4f50, size=4, remaining=3 [ 104.735192][ T6109] Zero length message leads to an empty skb [ 104.768146][ T6103] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 105.058180][ T6116] capability: warning: `syz.1.103' uses deprecated v2 capabilities in a way that may be insecure [ 105.272413][ T6101] loop0: detected capacity change from 0 to 32768 [ 105.847507][ T6119] loop1: detected capacity change from 0 to 32768 [ 105.902167][ T6119] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 106.008554][ T6119] XFS (loop1): Ending clean mount [ 106.135805][ T6119] XFS (loop1): User initiated shutdown received. [ 106.160319][ T6119] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 106.256020][ T6119] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 106.475813][ T5774] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 106.811211][ T28] audit: type=1800 audit(1788984311.941:3): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.105" name="direction" dev="configfs" ino=7097 res=0 errno=0 [ 106.999541][ T6142] ip_tables: iptables: counters copy to user failed while replacing table [ 107.086699][ T5820] IPVS: starting estimator thread 0... [ 107.196094][ T6147] IPVS: using max 18 ests per chain, 43200 per kthread [ 107.258239][ T6152] loop1: detected capacity change from 0 to 1024 [ 107.928997][ T6163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.936778][ T6163] IPv6: NLM_F_CREATE should be set when creating new route [ 107.944065][ T6163] IPv6: NLM_F_CREATE should be set when creating new route [ 107.951367][ T6163] IPv6: NLM_F_CREATE should be set when creating new route [ 108.340748][ T6170] loop2: detected capacity change from 0 to 128 [ 108.396709][ T6170] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 108.464979][ T6170] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.585101][ T6156] loop0: detected capacity change from 0 to 131072 [ 108.595111][ T6156] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 108.601950][ T6156] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 108.613506][ T6156] F2FS-fs (loop0): invalid crc value [ 108.644148][ T6156] F2FS-fs (loop0): Found nat_bits in checkpoint [ 108.719974][ T6156] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 108.727730][ T6156] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 108.927227][ T5773] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.185547][ T5820] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.386199][ T5820] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 109.404140][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.423802][ T5820] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.458455][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 109.478231][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.509984][ T5820] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.558469][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 109.571845][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.597129][ T5820] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.638813][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 109.664732][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.687045][ T5820] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.710097][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 109.749299][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.785484][ T5820] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.835605][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 109.864297][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.886148][ T5820] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.008925][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.074367][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.099352][ T5820] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.113558][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.128126][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.148194][ T5820] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.181298][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.202057][ T5820] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 110.229521][ T5820] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 110.239298][ T5820] usb 4-1: Product: syz [ 110.245463][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.253218][ T5820] usb 4-1: Manufacturer: syz [ 110.259209][ T5820] usb 4-1: SerialNumber: syz [ 110.292277][ T5820] usb 4-1: config 0 descriptor?? [ 110.323953][ T5820] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 110.453252][ T27] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 110.484067][ T27] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 110.501344][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 180, changing to 11 [ 110.515178][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41877, setting to 1024 [ 110.571971][ T27] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 110.612522][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.639227][ T6205] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 110.650865][ T6205] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 110.661554][ T56] usb 4-1: USB disconnect, device number 3 [ 110.673201][ T56] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 110.704068][ T27] pl2303 1-1:1.0: pl2303 converter detected [ 110.728151][ T27] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 110.783411][ T6215] mmap: syz.1.137 (6215) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.135816][ T6205] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110 [ 111.152107][ T6205] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 111.164688][ T6205] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 111.186796][ T6205] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 111.607607][ T6203] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 111.632265][ T6203] pl2303 ttyUSB0: error sending break = -32 [ 111.659976][ T789] usb 1-1: USB disconnect, device number 3 [ 111.691676][ T789] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 111.731065][ T789] pl2303 1-1:1.0: device disconnected [ 112.177386][ T6237] loop3: detected capacity change from 0 to 32768 [ 112.233902][ T6237] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 112.261080][ T6247] loop2: detected capacity change from 0 to 2048 [ 112.342055][ T6237] XFS (loop3): Ending clean mount [ 112.351035][ T6247] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 112.636795][ T5772] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 112.959881][ T5786] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.167595][ T5786] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.194122][ T5786] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.212492][ T5786] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 113.226176][ T5786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.234283][ T5786] usb 3-1: SerialNumber: syz [ 113.517632][ T5786] usb 3-1: 0:2 : does not exist [ 113.592685][ T5786] usb 3-1: USB disconnect, device number 4 [ 113.653903][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.792414][ T6284] loop1: detected capacity change from 0 to 128 [ 113.851171][ T6284] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.911009][ T6284] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.075591][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.204724][ T28] audit: type=1326 audit(1788984319.331:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766ff9e159 code=0x7ffc0000 [ 114.306676][ T28] audit: type=1326 audit(1788984319.361:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766ff9e159 code=0x7ffc0000 [ 114.330451][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.372254][ T28] audit: type=1326 audit(1788984319.361:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766ff9e159 code=0x7ffc0000 [ 114.402056][ T28] audit: type=1326 audit(1788984319.361:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766ff9e159 code=0x7ffc0000 [ 114.457628][ T28] audit: type=1326 audit(1788984319.371:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f766ff9e159 code=0x7ffc0000 [ 114.481445][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.538184][ T6300] loop1: detected capacity change from 0 to 1024 [ 114.542611][ T28] audit: type=1326 audit(1788984319.371:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766ff9e159 code=0x7ffc0000 [ 114.568336][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.601381][ T28] audit: type=1326 audit(1788984319.371:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766ff9e159 code=0x7ffc0000 [ 114.665429][ T56] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 114.674850][ T28] audit: type=1326 audit(1788984319.391:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766ff9e159 code=0x7ffc0000 [ 114.679042][ T6300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.698754][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.700235][ T28] audit: type=1326 audit(1788984319.391:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766ff9e159 code=0x7ffc0000 [ 114.741109][ T28] audit: type=1326 audit(1788984319.391:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f766ff9e159 code=0x7ffc0000 [ 114.764978][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.823589][ T6308] process 'syz.0.174' launched './file0' with NULL argv: empty string added [ 114.841754][ T6304] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 114.882951][ T6304] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 114.923059][ T56] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.932955][ T56] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 114.949778][ T56] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 114.959308][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.997816][ T56] usb 3-1: Product: syz [ 115.004800][ T56] usb 3-1: Manufacturer: syz [ 115.010623][ T56] usb 3-1: SerialNumber: syz [ 115.089059][ T6311] loop0: detected capacity change from 0 to 1024 [ 115.099930][ T6311] EXT4-fs: Ignoring removed bh option [ 115.180813][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.227148][ T6311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.307187][ T56] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 115.502737][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.506733][ T56] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 115.544790][ T56] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 115.910400][ T56] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 115.940406][ T56] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 116.110706][ T56] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 116.178943][ T56] usb 3-1: USB disconnect, device number 5 [ 116.313832][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.737361][ T6353] vxcan1: tx drop: invalid da for name 0xfffffffffffffffd [ 116.825532][ T5820] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.027776][ T5820] usb 1-1: Using ep0 maxpacket: 8 [ 117.040521][ T5820] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 117.061045][ T5820] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.078646][ T5820] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.093090][ T5820] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.126722][ T5820] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.162576][ T5820] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.180965][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.436512][ T5820] usb 1-1: usb_control_msg returned -32 [ 117.442183][ T5820] usbtmc 1-1:16.0: can't read capabilities [ 117.884782][ T6384] usbtmc 1-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 117.912244][ T6388] loop2: detected capacity change from 0 to 512 [ 117.914278][ T6373] loop3: detected capacity change from 0 to 32768 [ 117.954151][ T6373] (syz.3.196,6373,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.989048][ T6373] (syz.3.196,6373,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 118.009285][ T6388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.050052][ T6373] (syz.3.196,6373,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 118.067021][ T6373] JBD2: Ignoring recovery information on journal [ 118.078126][ T5820] usb 1-1: USB disconnect, device number 4 [ 118.189472][ T6373] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 118.212708][ T6388] EXT4-fs error (device loop2): ext4_validate_block_bitmap:421: comm syz.2.201: bg 0: bad block bitmap checksum [ 118.363055][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.396216][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.486399][ T5772] ocfs2: Unmounting device (7,3) on (node local) [ 118.619624][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.659936][ T27] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 118.697837][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.712492][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 118.736126][ T27] usb 2-1: SerialNumber: syz [ 118.761036][ T27] usb 2-1: bad CDC descriptors [ 118.922703][ T6408] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 119.060970][ T6411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.102528][ T6411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.136073][ T6411] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 119.153439][ T6411] bond0 (unregistering): Released all slaves [ 119.187407][ T5820] usb 2-1: USB disconnect, device number 4 [ 119.704661][ T6427] loop0: detected capacity change from 0 to 16 [ 119.748885][ T6427] erofs: (device loop0): mounted with root inode @ nid 36. [ 119.986385][ T6419] loop2: detected capacity change from 0 to 32768 [ 120.076255][ T6419] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 120.170020][ T6441] FAULT_INJECTION: forcing a failure. [ 120.170020][ T6441] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 120.226736][ T6441] CPU: 1 PID: 6441 Comm: syz.1.221 Not tainted syzkaller #0 [ 120.234116][ T6441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.244235][ T6441] Call Trace: [ 120.247554][ T6441] [ 120.250532][ T6441] dump_stack_lvl+0x18c/0x250 [ 120.255279][ T6441] ? show_regs_print_info+0x20/0x20 [ 120.260535][ T6441] ? load_image+0x420/0x420 [ 120.262553][ T6419] XFS (loop2): Ending clean mount [ 120.265080][ T6441] ? __lock_acquire+0x7d80/0x7d80 [ 120.275211][ T6441] should_fail_ex+0x394/0x4c0 [ 120.279963][ T6441] prepare_alloc_pages+0x1e1/0x5b0 [ 120.285140][ T6441] __alloc_pages+0x134/0x460 [ 120.289797][ T6441] ? zone_statistics+0x170/0x170 [ 120.294780][ T6441] ? __lock_acquire+0x7d80/0x7d80 [ 120.299845][ T6441] ? alloc_pages+0x4e1/0x740 [ 120.304466][ T6441] ? xas_load+0x12b/0x140 [ 120.308830][ T6441] folio_alloc+0x1e/0x30 [ 120.313107][ T6441] filemap_alloc_folio+0xdf/0x490 [ 120.318168][ T6441] ? filemap_add_folio+0x3d0/0x3d0 [ 120.323316][ T6441] __filemap_get_folio+0x3fb/0xbe0 [ 120.328460][ T6441] pagecache_get_page+0x2a/0x250 [ 120.333431][ T6441] aio_setup_ring+0x3b7/0xf30 [ 120.338145][ T6441] ? free_ioctx_reqs+0x190/0x190 [ 120.343114][ T6441] ioctx_alloc+0x316/0x770 [ 120.347560][ T6441] __se_sys_io_setup+0x7b/0x190 [ 120.352462][ T6441] do_syscall_64+0x55/0xb0 [ 120.356905][ T6441] ? clear_bhb_loop+0x40/0x90 [ 120.361636][ T6441] ? clear_bhb_loop+0x40/0x90 [ 120.366340][ T6441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.372308][ T6441] RIP: 0033:0x7f766ff9e159 [ 120.376751][ T6441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.396401][ T6441] RSP: 002b:00007f7670e5b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 120.404845][ T6441] RAX: ffffffffffffffda RBX: 00007f7670225fa0 RCX: 00007f766ff9e159 [ 120.412856][ T6441] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000007fff [ 120.420856][ T6441] RBP: 00007f767003503b R08: 0000000000000000 R09: 0000000000000000 [ 120.428850][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.436841][ T6441] R13: 00007f7670226038 R14: 00007f7670225fa0 R15: 00007ffef27703f8 [ 120.444847][ T6441] [ 120.527369][ T6419] XFS (loop2): Quotacheck needed: Please wait. [ 120.620096][ T6419] XFS (loop2): Quotacheck: Done. [ 120.964680][ T5773] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 121.548127][ T6481] netlink: 67 bytes leftover after parsing attributes in process `syz.3.235'. [ 121.759794][ T6489] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.769100][ T6489] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.777899][ T6489] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.786685][ T6489] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.931265][ T6493] loop1: detected capacity change from 0 to 256 [ 122.234984][ T6497] loop0: detected capacity change from 0 to 16 [ 122.261228][ T6497] erofs: (device loop0): mounted with root inode @ nid 36. [ 122.840825][ T6508] loop2: detected capacity change from 0 to 512 [ 122.910007][ T6508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.990715][ T6508] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.167668][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.007752][ T6541] Bluetooth: MGMT ver 1.22 [ 125.043473][ T6576] netlink: 'syz.3.275': attribute type 15 has an invalid length. [ 125.051996][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 125.061208][ T6576] netlink: 'syz.3.275': attribute type 15 has an invalid length. [ 125.069058][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 125.176626][ T6580] loop3: detected capacity change from 0 to 256 [ 125.226277][ T6580] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb2f9d067, utbl_chksum : 0xe619d30d) [ 125.275463][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.430669][ T6584] loop3: detected capacity change from 0 to 16 [ 125.451541][ T6584] erofs: (device loop3): mounted with root inode @ nid 36. [ 125.460884][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 125.478022][ T27] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 125.510871][ T27] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.535399][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.566144][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.595427][ T27] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.620473][ T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.636440][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.760749][ T6590] loop3: detected capacity change from 0 to 512 [ 125.770294][ T6590] EXT4-fs: inline encryption not supported [ 125.799530][ T6590] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.836562][ T56] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.846980][ T6590] EXT4-fs (loop3): 1 truncate cleaned up [ 125.854227][ T6590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.918695][ T27] usb 3-1: GET_CAPABILITIES returned 0 [ 125.924800][ T27] usbtmc 3-1:16.0: can't read capabilities [ 126.038235][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.045983][ T6594] ip_tables: iptables: counters copy to user failed while replacing table [ 126.057983][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.069273][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.086093][ T56] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.099356][ T56] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.108498][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.136635][ T56] usb 1-1: config 0 descriptor?? [ 126.215413][ T789] usb 3-1: USB disconnect, device number 6 [ 126.568180][ T56] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 126.580561][ T56] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 126.605010][ T56] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 126.913270][ T5820] usb 1-1: USB disconnect, device number 5 [ 127.565451][ T56] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.615690][ T6613] loop3: detected capacity change from 0 to 32768 [ 127.677570][ T6613] JBD2: Ignoring recovery information on journal [ 127.757299][ T56] usb 2-1: config index 0 descriptor too short (expected 71, got 53) [ 127.766254][ T56] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 127.776622][ T56] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 127.791761][ T56] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 127.798123][ T6613] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 127.808191][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.819398][ T56] usb 2-1: Product: syz [ 127.823766][ T56] usb 2-1: Manufacturer: syz [ 127.830417][ T56] usb 2-1: SerialNumber: syz [ 127.869827][ T6621] loop2: detected capacity change from 0 to 512 [ 127.953230][ T6613] [ 127.955653][ T6613] ====================================================== [ 127.962709][ T6613] WARNING: possible circular locking dependency detected [ 127.969784][ T6613] syzkaller #0 Not tainted [ 127.974249][ T6613] ------------------------------------------------------ [ 127.981294][ T6613] syz.3.290/6613 is trying to acquire lock: [ 127.987230][ T6613] ffff88805fa1dbe0 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 127.997923][ T6613] [ 127.997923][ T6613] but task is already holding lock: [ 128.005334][ T6613] ffff88805fa1dc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x360 [ 128.016059][ T6613] [ 128.016059][ T6613] which lock already depends on the new lock. [ 128.016059][ T6613] [ 128.026513][ T6613] [ 128.026513][ T6613] the existing dependency chain (in reverse order) is: [ 128.035580][ T6613] [ 128.035580][ T6613] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 128.043462][ T6613] down_read+0x46/0x2e0 [ 128.048286][ T6613] ocfs2_init_acl+0x30a/0x770 [ 128.053639][ T6613] ocfs2_mknod+0x1427/0x2310 [ 128.058798][ T6613] ocfs2_create+0x196/0x430 [ 128.063918][ T6613] path_openat+0x1705/0x3270 [ 128.069078][ T6613] do_filp_open+0x1f2/0x430 [ 128.074159][ T6613] do_sys_openat2+0x134/0x1d0 [ 128.079499][ T6613] __x64_sys_openat+0x139/0x160 [ 128.084929][ T6613] do_syscall_64+0x55/0xb0 [ 128.089916][ T6613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.096408][ T6613] [ 128.096408][ T6613] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 128.104978][ T6613] down_read+0x46/0x2e0 [ 128.109719][ T6613] ocfs2_start_trans+0x3a8/0x6f0 [ 128.115236][ T6613] ocfs2_mknod+0xf33/0x2310 [ 128.120309][ T6613] ocfs2_create+0x196/0x430 [ 128.125398][ T6613] path_openat+0x1705/0x3270 [ 128.130561][ T6613] do_filp_open+0x1f2/0x430 [ 128.135652][ T6613] do_sys_openat2+0x134/0x1d0 [ 128.140903][ T6613] __x64_sys_openat+0x139/0x160 [ 128.146323][ T6613] do_syscall_64+0x55/0xb0 [ 128.151322][ T6613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.158320][ T6613] [ 128.158320][ T6613] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 128.165877][ T6613] ocfs2_start_trans+0x2a9/0x6f0 [ 128.171406][ T6613] ocfs2_truncate_file+0x645/0x1530 [ 128.177182][ T6613] ocfs2_setattr+0x15b8/0x1bf0 [ 128.182518][ T6613] notify_change+0xb05/0xde0 [ 128.187684][ T6613] do_truncate+0x1b0/0x240 [ 128.192671][ T6613] path_openat+0x2a7e/0x3270 [ 128.197827][ T6613] do_filp_open+0x1f2/0x430 [ 128.202888][ T6613] do_sys_openat2+0x134/0x1d0 [ 128.208141][ T6613] __x64_sys_creat+0x90/0xb0 [ 128.213311][ T6613] do_syscall_64+0x55/0xb0 [ 128.218314][ T6613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.224778][ T6613] [ 128.224778][ T6613] -> #0 (&oi->ip_alloc_sem){++++}-{3:3}: [ 128.232655][ T6613] __lock_acquire+0x37ef/0x7d80 [ 128.238089][ T6613] lock_acquire+0x19e/0x420 [ 128.243168][ T6613] down_write+0x97/0x200 [ 128.247988][ T6613] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 128.254548][ T6613] ocfs2_truncate_file+0xe87/0x1530 [ 128.260342][ T6613] ocfs2_setattr+0x15b8/0x1bf0 [ 128.265679][ T6613] notify_change+0xb05/0xde0 [ 128.270862][ T6613] do_truncate+0x1b0/0x240 [ 128.274236][ T6611] mos7720 2-1:1.0: Moschip 2 port adapter converter detected [ 128.275827][ T6613] path_openat+0x2a7e/0x3270 [ 128.275852][ T6613] do_filp_open+0x1f2/0x430 [ 128.275870][ T6613] do_sys_openat2+0x134/0x1d0 [ 128.275895][ T6613] __x64_sys_creat+0x90/0xb0 [ 128.275919][ T6613] do_syscall_64+0x55/0xb0 [ 128.275941][ T6613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.275965][ T6613] [ 128.275965][ T6613] other info that might help us debug this: [ 128.275965][ T6613] [ 128.275972][ T6613] Chain exists of: [ 128.275972][ T6613] &oi->ip_alloc_sem --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 128.275972][ T6613] [ 128.276011][ T6613] Possible unsafe locking scenario: [ 128.276011][ T6613] [ 128.276017][ T6613] CPU0 CPU1 [ 128.276022][ T6613] ---- ---- [ 128.276028][ T6613] lock(&oi->ip_xattr_sem); [ 128.276041][ T6613] lock(&journal->j_trans_barrier); [ 128.276057][ T6613] lock(&oi->ip_xattr_sem [ 128.291191][ T6625] ip_tables: iptables: counters copy to user failed while replacing table [ 128.293588][ T6613] ); [ 128.293595][ T6613] lock(&oi->ip_alloc_sem); [ 128.393493][ T6613] [ 128.393493][ T6613] *** DEADLOCK *** [ 128.393493][ T6613] [ 128.401740][ T6613] 3 locks held by syz.3.290/6613: [ 128.406779][ T6613] #0: ffff888025fa8418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 128.416054][ T6613] #1: ffff88805fa1df58 (&sb->s_type->i_mutex_key#20){+.+.}-{3:3}, at: do_truncate+0x19c/0x240 [ 128.426450][ T6613] #2: ffff88805fa1dc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x360 [ 128.437555][ T6613] [ 128.437555][ T6613] stack backtrace: [ 128.443456][ T6613] CPU: 0 PID: 6613 Comm: syz.3.290 Not tainted syzkaller #0 [ 128.450757][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.460831][ T6613] Call Trace: [ 128.464134][ T6613] [ 128.467085][ T6613] dump_stack_lvl+0x18c/0x250 [ 128.471799][ T6613] ? load_image+0x420/0x420 [ 128.476326][ T6613] ? show_regs_print_info+0x20/0x20 [ 128.481547][ T6613] ? print_circular_bug+0x12b/0x1a0 [ 128.486773][ T6613] check_noncircular+0x2fc/0x400 [ 128.491751][ T6613] ? print_deadlock_bug+0x5d0/0x5d0 [ 128.496997][ T6613] ? lockdep_lock+0xf5/0x230 [ 128.501608][ T6613] ? lockdep_unlock+0x146/0x2e0 [ 128.506490][ T6613] ? _find_first_zero_bit+0xd6/0x100 [ 128.511911][ T6613] __lock_acquire+0x37ef/0x7d80 [ 128.516802][ T6613] ? verify_lock_unused+0x140/0x140 [ 128.522057][ T6613] lock_acquire+0x19e/0x420 [ 128.526701][ T6613] ? ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 128.532890][ T6613] ? __might_sleep+0xe0/0xe0 [ 128.537525][ T6613] ? read_lock_is_recursive+0x20/0x20 [ 128.542950][ T6613] ? mapping_evict_folio+0x530/0x530 [ 128.548265][ T6613] down_write+0x97/0x200 [ 128.552544][ T6613] ? ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 128.558725][ T6613] ? down_read_killable+0x340/0x340 [ 128.563963][ T6613] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 128.569981][ T6613] ? ocfs2_remove_refcount_tree+0xe50/0xe50 [ 128.575902][ T6613] ? up_write+0x1be/0x410 [ 128.580254][ T6613] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 128.586024][ T6613] ocfs2_truncate_file+0xe87/0x1530 [ 128.591264][ T6613] ? ocfs2_simple_size_update+0x4a0/0x4a0 [ 128.597016][ T6613] ? do_raw_spin_unlock+0x121/0x230 [ 128.602245][ T6613] ? _raw_spin_unlock+0x28/0x40 [ 128.607117][ T6613] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 128.612864][ T6613] ? ocfs2_inode_lock_atime+0x530/0x530 [ 128.618516][ T6613] ? ocfs2_rw_lock+0x138/0x250 [ 128.623309][ T6613] ? dquot_initialize+0x20/0x20 [ 128.628205][ T6613] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 128.634318][ T6613] ? setattr_prepare+0x1e5/0xac0 [ 128.639287][ T6613] ? jbd2_journal_begin_ordered_truncate+0xbb/0x150 [ 128.645902][ T6613] ocfs2_setattr+0x15b8/0x1bf0 [ 128.650697][ T6613] ? ocfs2_extend_allocation+0x1830/0x1830 [ 128.656530][ T6613] ? ktime_get_coarse_real_ts64+0x2f/0x120 [ 128.662374][ T6613] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 128.668661][ T6613] ? ktime_get_coarse_real_ts64+0x10a/0x120 [ 128.674584][ T6613] ? current_time+0x196/0x290 [ 128.679286][ T6613] ? inode_set_ctime_current+0x2e0/0x2e0 [ 128.684939][ T6613] ? evm_inode_setattr+0x10a/0x6c0 [ 128.690079][ T6613] ? security_inode_setattr+0xdc/0x140 [ 128.695565][ T6613] ? try_break_deleg+0x79/0x120 [ 128.700450][ T6613] ? ocfs2_extend_allocation+0x1830/0x1830 [ 128.706285][ T6613] notify_change+0xb05/0xde0 [ 128.710911][ T6613] do_truncate+0x1b0/0x240 [ 128.715382][ T6613] ? put_page_bootmem+0x2b0/0x2b0 [ 128.720433][ T6613] ? apparmor_file_truncate+0x24a/0x2e0 [ 128.726000][ T6613] ? ima_bprm_check+0x200/0x200 [ 128.730880][ T6613] path_openat+0x2a7e/0x3270 [ 128.735517][ T6613] ? do_sys_openat2+0xda/0x1d0 [ 128.740314][ T6613] ? do_filp_open+0x430/0x430 [ 128.745015][ T6613] do_filp_open+0x1f2/0x430 [ 128.749544][ T6613] ? vfs_tmpfile+0x620/0x620 [ 128.754188][ T6613] ? _raw_spin_unlock+0x28/0x40 [ 128.759088][ T6613] ? alloc_fd+0x590/0x640 [ 128.763449][ T6613] do_sys_openat2+0x134/0x1d0 [ 128.768155][ T6613] ? do_sys_open+0xe0/0xe0 [ 128.772610][ T6613] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 128.778615][ T6613] ? lock_chain_count+0x20/0x20 [ 128.783491][ T6613] __x64_sys_creat+0x90/0xb0 [ 128.788112][ T6613] do_syscall_64+0x55/0xb0 [ 128.792555][ T6613] ? clear_bhb_loop+0x40/0x90 [ 128.797262][ T6613] ? clear_bhb_loop+0x40/0x90 [ 128.801960][ T6613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.807930][ T6613] RIP: 0033:0x7fb18fb9e159 [ 128.812368][ T6613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.831993][ T6613] RSP: 002b:00007fb190a4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 128.840452][ T6613] RAX: ffffffffffffffda RBX: 00007fb18fe25fa0 RCX: 00007fb18fb9e159 [ 128.848444][ T6613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 128.856780][ T6613] RBP: 00007fb18fc3503b R08: 0000000000000000 R09: 0000000000000000 [ 128.864775][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.872769][ T6613] R13: 00007fb18fe26038 R14: 00007fb18fe25fa0 R15: 00007ffe19b00318 [ 128.880775][ T6613] [ 128.909383][ T6621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.930636][ T6611] usb 2-1: mos7720: usb_control_msg() failed: -71 [ 128.943812][ T27] usb 2-1: USB disconnect, device number 5 [ 128.949769][ C1] usb 2-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 128.971422][ T6611] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 128.988294][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 128.988310][ T28] audit: type=1804 audit(1788984334.091:23): pid=6629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.290" name="/newroot/67/file1/bus" dev="loop3" ino=17058 res=1 errno=0 [ 129.056835][ T6611] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 129.066103][ T6621] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.087398][ T28] audit: type=1804 audit(1788984334.161:24): pid=6613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.290" name="/newroot/67/file1/bus" dev="loop3" ino=17058 res=1 errno=0 [ 129.122685][ T27] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 129.162784][ T27] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 129.182230][ T27] mos7720 2-1:1.0: device disconnected [ 129.220747][ T5772] ocfs2: Unmounting device (7,3) on (node local) [ 129.244435][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.030850][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.037513][ T1293] ieee802154 phy1 wpan1: encryption failed: -22