last executing test programs: 11.487441909s ago: executing program 2 (id=227): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000885) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 9.227938186s ago: executing program 0 (id=238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)=@newtfilter={0xd4, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x8, 0xffe0}}, @TCA_U32_LINK={0x8, 0x3, 0x400}, @TCA_U32_SEL={0x94, 0x5, {0x8, 0x40, 0x8, 0x166, 0xe401, 0x0, 0x4, 0x4, [{0x0, 0x7, 0x9, 0xfffffff8}, {0x5, 0xbbe0, 0x24, 0x3e2}, {0x3, 0x7fff, 0x9, 0x7}, {0x7, 0xffffffff, 0x0, 0x8}, {0x8, 0x1ff, 0x5}, {0x5, 0x2, 0x0, 0x6}, {0xb, 0xfffffc3f, 0xda1, 0x10001}, {0x1000, 0xec1c, 0x8001, 0x401}]}}]}}]}, 0xd4}}, 0x0) 8.886457483s ago: executing program 2 (id=240): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cdg', 0x3) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) 8.882223211s ago: executing program 0 (id=248): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb}, {@bh}, {@nolazytime}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 7.311715968s ago: executing program 0 (id=241): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000300)=0x2) 6.649169254s ago: executing program 0 (id=244): r0 = eventfd2(0x49d, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0xfb7a, 0xc000, 0x8, r0, 0x2}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x69b, 0x6000, 0x1, r0, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x800000000004, 0x6000, 0x1, r0, 0x1}) 6.540448694s ago: executing program 2 (id=245): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2c, 0xfffffffd, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1e}}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b328335133}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) 6.404204218s ago: executing program 2 (id=246): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, 0x0) ioctl$HIDIOCGFLAG(r1, 0x8004480e, 0x0) 6.323363783s ago: executing program 0 (id=247): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000000180)="008000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x12}, 0x50) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0xff, 0x7fffffff}]}) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.767566508s ago: executing program 2 (id=252): bpf$ENABLE_STATS(0x20, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000100)={{}, {}, [], {0x4, 0x1}, [], {0x20, 0x4}, {0x20, 0x2}}, 0x24, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000100000027bf"], 0x50) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 2.593558185s ago: executing program 0 (id=253): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000000180)="008000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x12}, 0x50) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0xff, 0x7fffffff}]}) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.946692134s ago: executing program 1 (id=254): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000140)=r0) umount2(&(0x7f0000000180)='./file0\x00', 0xb) 1.844381185s ago: executing program 3 (id=255): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1, 0x101) 1.426060607s ago: executing program 3 (id=256): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad1", 0xab}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.306890664s ago: executing program 3 (id=257): syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = syz_io_uring_setup(0x916, &(0x7f0000000340)={0x0, 0xea3f, 0x800, 0x0, 0x1d2}, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.28030518s ago: executing program 1 (id=258): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x6400000c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 1.091437824s ago: executing program 1 (id=259): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x7ff}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000200)={0x4, 0x0, 0x9b, 0x0, 0x0, 0x5}) 1.030346523s ago: executing program 1 (id=260): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) rseq(&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bb0b1250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[], 0x20) 1.011347609s ago: executing program 3 (id=261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20001090}, 0x0) 888.261346ms ago: executing program 1 (id=262): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x5, r1, 0x0, &(0x7f00000003c0)='a', 0x1, 0x100000001}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0x8, 0x80000000}) 867.599482ms ago: executing program 2 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180), 0x1, 0x97a4, &(0x7f0000012f40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000000)='2', 0x1, 0x4fed0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp6(0xa, 0x2, 0x73) r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000340)="01000722625a900ede290f00015b", 0xe, r6) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r7, 0xa2, 0x2e}, &(0x7f00000004c0)=ANY=[@ANYBLOB="656e633d706b5f733120686173683d67686173682d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000001f2ce3f6f84889ccd61e33d97c000008000000000000000000e6dc0f1044e3c94b1dea5fc68c23981ce502ee4aee5cb00b18e039072a405a2bd5cf0abbfdbbef8816f0f85b5230c43edc425737b5e9c20a8c89f4e0e521abb82932c7f56bf8e050787fafd98096914c5deb402af7"], &(0x7f0000000400)="362609570feb315dfc5354d36bbafd50df0c0ac5f01c883bbcb48d8facfb5aa4cf0eeeaad709f50eef9ece915695147292adb3303db62083f621933cd0fdbcd8722f55e64737a7ca56e478ecb5a914990e9fb9a6e2edb3e753c785030821ca85f7508b202ee5a5b09f5b001f8a5a0cf05fe2b005fc9ed2d9eda379a6028ad344960322fff11d97b78754ae030b2f46ce28baf1a08a8b859655bd95389379cd251791", &(0x7f0000000180)=""/46) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101341) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x4, 0x8, {}, {0x1, 0x8, 0x6, 0x6, 0x7f, 0x9, 'eyZw'}, 0x3, 0x1, {0x0}, 0x8b}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) syz_usbip_server_init(0x3) statx(r1, &(0x7f0000000380)='./file2/file0\x00', 0x0, 0x200, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file2\x00', 0x100001, &(0x7f0000000680)={[{@logbsize}, {@logbsize={'logbsize', 0x3d, [0x37, 0x4f, 0x2d]}}, {@filestreams}, {@inode32}, {@uquota}], [{@uid_gt={'uid>', r10}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, 'ceph\x00'}}, {@fowner_lt={'fowner<', r10}}, {@subj_user}]}, 0x4, 0x96da, &(0x7f000001c340)="$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") 640.18153ms ago: executing program 1 (id=264): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x25e40000) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$FIBMAP(r0, 0x2283, &(0x7f0000000040)=0x85) 607.959144ms ago: executing program 3 (id=265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000005c0)={@val={0x0, 0x1a}, @void, @eth={@multicast, @empty, @void, {@generic={0x4305}}}}, 0x12) 0s ago: executing program 3 (id=266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000010bbbbbbbbbbbbcf3f53f449aa86dd69ee0520001f2bfffc020000000000000000000000000001ff0200000000000000000000000000012f0601"], 0x72) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 78.295056][ T5758] cgroup: Unknown subsys name 'net' [ 78.434905][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.123251][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.134855][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.142276][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.154246][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.161898][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.172804][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.176365][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.181052][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.189189][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.200319][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.203898][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.211263][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.217578][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.225050][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.232110][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.239739][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.248110][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.255314][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.263166][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.270011][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.282355][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.292008][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.296389][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.299614][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.307067][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.015295][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 83.080065][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 83.091687][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 83.233092][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.241195][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.248877][ T5771] bridge_slave_0: entered allmulticast mode [ 83.255938][ T5771] bridge_slave_0: entered promiscuous mode [ 83.280358][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.289765][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.297014][ T5771] bridge_slave_1: entered allmulticast mode [ 83.303975][ T5771] bridge_slave_1: entered promiscuous mode [ 83.321850][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 83.383233][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.406333][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.459845][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.467228][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.474633][ T5770] bridge_slave_0: entered allmulticast mode [ 83.482361][ T5770] bridge_slave_0: entered promiscuous mode [ 83.490305][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.497765][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.505590][ T5770] bridge_slave_1: entered allmulticast mode [ 83.513414][ T5770] bridge_slave_1: entered promiscuous mode [ 83.520330][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.531074][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.538578][ T5776] bridge_slave_0: entered allmulticast mode [ 83.545730][ T5776] bridge_slave_0: entered promiscuous mode [ 83.576090][ T5771] team0: Port device team_slave_0 added [ 83.593683][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.601061][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.609043][ T5776] bridge_slave_1: entered allmulticast mode [ 83.616108][ T5776] bridge_slave_1: entered promiscuous mode [ 83.632290][ T5771] team0: Port device team_slave_1 added [ 83.688811][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.701984][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.753862][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.764912][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.792908][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.813657][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.828260][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.845281][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.852816][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.860461][ T5775] bridge_slave_0: entered allmulticast mode [ 83.867990][ T5775] bridge_slave_0: entered promiscuous mode [ 83.877250][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.884476][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.891936][ T5775] bridge_slave_1: entered allmulticast mode [ 83.904421][ T5775] bridge_slave_1: entered promiscuous mode [ 83.912505][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.920073][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.949332][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.975178][ T5770] team0: Port device team_slave_0 added [ 84.031229][ T5770] team0: Port device team_slave_1 added [ 84.051311][ T5776] team0: Port device team_slave_0 added [ 84.061021][ T5776] team0: Port device team_slave_1 added [ 84.086254][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.100646][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.138904][ T5771] hsr_slave_0: entered promiscuous mode [ 84.145697][ T5771] hsr_slave_1: entered promiscuous mode [ 84.192492][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.199840][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.226431][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.241117][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.248509][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.275700][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.287990][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.294982][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.321336][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.355107][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.364914][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.392087][ T5779] Bluetooth: hci2: command tx timeout [ 84.392296][ T5779] Bluetooth: hci1: command tx timeout [ 84.402084][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.403790][ T5777] Bluetooth: hci0: command tx timeout [ 84.420746][ T5785] Bluetooth: hci3: command tx timeout [ 84.440989][ T5775] team0: Port device team_slave_0 added [ 84.450760][ T5775] team0: Port device team_slave_1 added [ 84.497959][ T5770] hsr_slave_0: entered promiscuous mode [ 84.504319][ T5770] hsr_slave_1: entered promiscuous mode [ 84.511825][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.519824][ T5770] Cannot create hsr debugfs directory [ 84.572023][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.579327][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.606322][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.635772][ T5776] hsr_slave_0: entered promiscuous mode [ 84.642151][ T5776] hsr_slave_1: entered promiscuous mode [ 84.648621][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.656203][ T5776] Cannot create hsr debugfs directory [ 84.662751][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.670245][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.697772][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.842244][ T5775] hsr_slave_0: entered promiscuous mode [ 84.848720][ T5775] hsr_slave_1: entered promiscuous mode [ 84.854826][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.863955][ T5775] Cannot create hsr debugfs directory [ 85.022797][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.066421][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.076692][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.140162][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.262058][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.276536][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.286824][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.302301][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.385857][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.402740][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.423575][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.433710][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.529768][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.546167][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.558913][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.569947][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.581568][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.632276][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.674644][ T2884] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.682163][ T2884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.722732][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.734018][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.741259][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.839759][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.861397][ T2884] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.868802][ T2884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.882073][ T2884] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.889300][ T2884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.946363][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.029575][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.045725][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.081447][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.088623][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.100279][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.107502][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.199655][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.262201][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.295657][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.303099][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.348815][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.356266][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.401835][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.459719][ T5777] Bluetooth: hci0: command tx timeout [ 86.465218][ T5777] Bluetooth: hci2: command tx timeout [ 86.471982][ T5779] Bluetooth: hci1: command tx timeout [ 86.479022][ T5785] Bluetooth: hci3: command tx timeout [ 86.604239][ T5771] veth0_vlan: entered promiscuous mode [ 86.681483][ T5771] veth1_vlan: entered promiscuous mode [ 86.699032][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.793543][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.808296][ T5771] veth0_macvtap: entered promiscuous mode [ 86.834293][ T5771] veth1_macvtap: entered promiscuous mode [ 86.917017][ T5770] veth0_vlan: entered promiscuous mode [ 86.926270][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.951361][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.980174][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.990680][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.001437][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.010726][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.044956][ T5770] veth1_vlan: entered promiscuous mode [ 87.085512][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.096392][ T5775] veth0_vlan: entered promiscuous mode [ 87.148913][ T5775] veth1_vlan: entered promiscuous mode [ 87.183091][ T23] cfg80211: failed to load regulatory.db [ 87.233514][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.244717][ T5770] veth0_macvtap: entered promiscuous mode [ 87.268719][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.294368][ T5770] veth1_macvtap: entered promiscuous mode [ 87.302549][ T5776] veth0_vlan: entered promiscuous mode [ 87.333567][ T5776] veth1_vlan: entered promiscuous mode [ 87.364300][ T5775] veth0_macvtap: entered promiscuous mode [ 87.367066][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.392060][ T5775] veth1_macvtap: entered promiscuous mode [ 87.398520][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.442468][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.457309][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.472720][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.511803][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.523740][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.541337][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.552287][ T5776] veth0_macvtap: entered promiscuous mode [ 87.569909][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.589093][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.617261][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.634627][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.638949][ T5838] syz.2.3[5838]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.653777][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.669665][ T5776] veth1_macvtap: entered promiscuous mode [ 87.684154][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.689377][ T5838] loop2: detected capacity change from 0 to 512 [ 87.695750][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.714443][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.723523][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.744211][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.761258][ T5838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.789000][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.831224][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.842348][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.855797][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.869411][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.878619][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.887721][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.896578][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.962842][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.975505][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.991922][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.006079][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.023297][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.033730][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.050903][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.076540][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.102349][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.117758][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.128521][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.153955][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.164683][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.175445][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.188835][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.202599][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.211674][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.221618][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.232677][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.319220][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.350546][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.437884][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.446179][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.458180][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.471394][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.495269][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.514687][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.537159][ T5777] Bluetooth: hci0: command tx timeout [ 88.542733][ T5777] Bluetooth: hci2: command tx timeout [ 88.548474][ T5777] Bluetooth: hci3: command tx timeout [ 88.554022][ T5777] Bluetooth: hci1: command tx timeout [ 88.604044][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.624620][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.678067][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.686170][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.905216][ T5848] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.163055][ T5853] loop3: detected capacity change from 0 to 2048 [ 89.207952][ T5854] loop1: detected capacity change from 0 to 4096 [ 89.228145][ T5853] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 89.292311][ T5858] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.307645][ T5857] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.494741][ T28] audit: type=1800 audit(1772685997.404:2): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 89.604776][ T5863] loop2: detected capacity change from 0 to 512 [ 89.615903][ T5863] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 89.711092][ T5863] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 89.739263][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.982019][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.016051][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.048742][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.086995][ T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.096150][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.178860][ T23] usb 1-1: config 0 descriptor?? [ 90.357762][ T5872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 90.374267][ T5872] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 90.563962][ T5876] loop3: detected capacity change from 0 to 4096 [ 90.601947][ T5876] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 90.619187][ T5779] Bluetooth: hci2: command tx timeout [ 90.624677][ T5779] Bluetooth: hci0: command tx timeout [ 90.626482][ T5785] Bluetooth: hci1: command tx timeout [ 90.630598][ T5777] Bluetooth: hci3: command tx timeout [ 90.667181][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 90.675971][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 90.676529][ T5876] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 90.683758][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 90.704658][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 90.714077][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 90.722774][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 90.734763][ T23] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 90.760205][ T5876] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 90.780769][ T5876] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 90.782544][ T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 90.809009][ T5876] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 90.837726][ T5876] ntfs: volume version 3.1. [ 90.843406][ T5876] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 90.882171][ T5876] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 90.949384][ T5876] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 90.981650][ T5876] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 91.008887][ T23] usb 1-1: USB disconnect, device number 2 [ 91.119116][ T5881] fido_id[5881]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 91.475508][ T5884] loop1: detected capacity change from 0 to 4096 [ 91.487757][ T5884] ======================================================= [ 91.487757][ T5884] WARNING: The mand mount option has been deprecated and [ 91.487757][ T5884] and is ignored by this kernel. Remove the mand [ 91.487757][ T5884] option from the mount to silence this warning. [ 91.487757][ T5884] ======================================================= [ 91.604262][ T5878] loop2: detected capacity change from 0 to 32768 [ 91.768011][ T5878] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 91.962904][ T5878] JBD2: Ignoring recovery information on journal [ 92.198969][ T2174] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.627452][ T5878] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 92.683020][ T2174] usb 4-1: Using ep0 maxpacket: 8 [ 92.708072][ T2174] usb 4-1: config 0 has no interfaces? [ 92.727592][ T2174] usb 4-1: config 0 has no interfaces? [ 92.739956][ T2174] usb 4-1: config 0 has no interfaces? [ 92.758020][ T2174] usb 4-1: string descriptor 0 read error: -22 [ 92.767176][ T2174] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 92.794327][ T2174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.823215][ T2174] usb 4-1: config 0 descriptor?? [ 92.845261][ T5884] ntfs3: loop1: ino=21, "file1" attr_insert_range [ 93.053354][ T5878] syz.2.13 (5878) used greatest stack depth: 19280 bytes left [ 93.084138][ T786] usb 4-1: USB disconnect, device number 2 [ 93.220727][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 93.235985][ T5907] loop0: detected capacity change from 0 to 512 [ 93.304114][ T5907] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 93.723130][ T5907] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 93.751961][ T5789] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.097470][ T5789] usb 2-1: Using ep0 maxpacket: 8 [ 94.154379][ T5789] usb 2-1: config 0 has no interfaces? [ 94.175701][ T5789] usb 2-1: config 0 has no interfaces? [ 94.185965][ T5789] usb 2-1: config 0 has no interfaces? [ 94.202179][ T5789] usb 2-1: string descriptor 0 read error: -22 [ 94.218303][ T5789] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 94.241508][ T5789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.322683][ T5789] usb 2-1: config 0 descriptor?? [ 94.428313][ T5913] loop2: detected capacity change from 0 to 2048 [ 94.464784][ T5913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.581198][ T27] usb 2-1: USB disconnect, device number 2 [ 94.931819][ T5917] loop3: detected capacity change from 0 to 512 [ 95.019365][ T5917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.042363][ T5914] loop0: detected capacity change from 0 to 32768 [ 95.067116][ T5914] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.23 (5914) [ 95.084085][ T5917] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.122760][ T5914] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.148112][ T5914] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 95.187974][ T5914] BTRFS info (device loop0): using free space tree [ 95.354235][ T5914] BTRFS info (device loop0): enabling ssd optimizations [ 95.399747][ T5914] BTRFS info (device loop0): auto enabling async discard [ 95.568159][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.641819][ T5914] BTRFS error (device loop0): balance: mixed groups data and metadata options must be the same [ 96.137211][ T5770] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.366951][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.741026][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 96.753978][ T27] usb 3-1: config 0 has no interfaces? [ 96.780698][ T27] usb 3-1: config 0 has no interfaces? [ 96.823278][ T27] usb 3-1: config 0 has no interfaces? [ 96.848370][ T27] usb 3-1: string descriptor 0 read error: -22 [ 96.854934][ T27] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 96.894457][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.921530][ T5952] loop3: detected capacity change from 0 to 2048 [ 96.922982][ T27] usb 3-1: config 0 descriptor?? [ 97.044119][ T5952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.183365][ T5817] usb 3-1: USB disconnect, device number 2 [ 97.276826][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.295288][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.307502][ T5959] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 97.405513][ T5961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.32'. [ 97.467910][ T27] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 97.492976][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.517131][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.533299][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.549340][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.561033][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.573042][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.582292][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.591709][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.603663][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.612459][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.623819][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.641413][ T5964] netlink: 176 bytes leftover after parsing attributes in process `syz.1.33'. [ 97.663570][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.687604][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.712574][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.753588][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.775294][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.800906][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.840616][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.868887][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.898069][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.938811][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.963856][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.978483][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.990030][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.993290][ T5895] udevd[5895]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 98.000257][ T27] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 98.050598][ T27] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 98.065322][ T5970] syz.3.35 uses obsolete (PF_INET,SOCK_PACKET) [ 98.072754][ T27] usb 1-1: Product: syz [ 98.078185][ T27] usb 1-1: Manufacturer: syz [ 98.085214][ T27] usb 1-1: SerialNumber: syz [ 98.102568][ T27] usb 1-1: config 0 descriptor?? [ 98.122186][ T27] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 98.534290][ T5817] usb 1-1: USB disconnect, device number 3 [ 98.554275][ T5817] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 98.649189][ T5974] loop1: detected capacity change from 0 to 32768 [ 98.739603][ T5974] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 98.807335][ T5974] XFS (loop1): Ending clean mount [ 99.387908][ T5988] 9pnet_fd: Insufficient options for proto=fd [ 99.426711][ T5988] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 99.433927][ T5988] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.443108][ T5988] vhci_hcd vhci_hcd.0: Device attached [ 100.037338][ T5990] vhci_hcd: connection closed [ 100.087164][ T11] vhci_hcd: stop threads [ 100.098302][ T11] vhci_hcd: release socket [ 100.103883][ T11] vhci_hcd: disconnect device [ 100.370321][ T5999] loop3: detected capacity change from 0 to 512 [ 100.402467][ T5999] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 100.411903][ T6002] process 'syz.2.43' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 100.465942][ T5999] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 100.552423][ T6006] netlink: 36 bytes leftover after parsing attributes in process `syz.2.44'. [ 100.795766][ T5776] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 100.798664][ T6011] netlink: 'syz.2.45': attribute type 1 has an invalid length. [ 100.808835][ T6010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.46'. [ 100.812071][ T6011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.45'. [ 100.834960][ T6011] netlink: 'syz.2.45': attribute type 1 has an invalid length. [ 100.846807][ T6011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.45'. [ 100.857022][ T786] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.056703][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 101.072436][ T786] usb 1-1: config 0 has no interfaces? [ 101.086448][ T6013] loop8: detected capacity change from 0 to 7 [ 101.101329][ T6013] Dev loop8: unable to read RDB block 7 [ 101.107488][ T786] usb 1-1: config 0 has no interfaces? [ 101.116900][ T6013] loop8: unable to read partition table [ 101.123274][ T6013] loop8: partition table beyond EOD, truncated [ 101.123915][ T786] usb 1-1: config 0 has no interfaces? [ 101.135826][ T6013] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 101.137536][ T6015] loop5: detected capacity change from 0 to 4096 [ 101.179635][ T786] usb 1-1: string descriptor 0 read error: -22 [ 101.186359][ T786] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 101.200551][ C0] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.219534][ C0] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.229286][ C0] Buffer I/O error on dev loop5, logical block 496, async page read [ 101.246920][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.287945][ T786] usb 1-1: config 0 descriptor?? [ 101.314551][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.513733][ T27] usb 1-1: USB disconnect, device number 4 [ 102.276792][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.606800][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 102.622271][ T27] usb 2-1: config 0 has no interfaces? [ 102.640459][ T27] usb 2-1: config 0 has no interfaces? [ 102.659681][ T27] usb 2-1: config 0 has no interfaces? [ 102.696077][ T27] usb 2-1: string descriptor 0 read error: -22 [ 102.714347][ T27] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 102.725962][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.747358][ T27] usb 2-1: config 0 descriptor?? [ 102.874882][ T6034] GUP no longer grows the stack in syz.2.57 (6034): 200000002000-200000005000 (200000001000) [ 102.887553][ T6034] CPU: 0 PID: 6034 Comm: syz.2.57 Not tainted syzkaller #0 [ 102.895443][ T6034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.905809][ T6034] Call Trace: [ 102.909107][ T6034] [ 102.912053][ T6034] dump_stack_lvl+0x18c/0x250 [ 102.916931][ T6034] ? show_regs_print_info+0x20/0x20 [ 102.922235][ T6034] ? load_image+0x400/0x400 [ 102.926761][ T6034] ? find_vma+0x134/0x1b0 [ 102.931215][ T6034] __get_user_pages+0xf0e/0x1380 [ 102.936450][ T6034] ? mark_lock+0x94/0x320 [ 102.940803][ T6034] ? populate_vma_page_range+0x380/0x380 [ 102.946643][ T6034] ? __gup_longterm_locked+0x38c/0x2b80 [ 102.952311][ T6034] ? down_read_killable+0x1d0/0x340 [ 102.957528][ T6034] __gup_longterm_locked+0x4de/0x2b80 [ 102.962941][ T6034] ? pin_user_pages_remote+0x220/0x220 [ 102.968416][ T6034] ? mark_lock+0x94/0x320 [ 102.972762][ T6034] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 102.978939][ T6034] ? sanity_check_pinned_pages+0x1341/0x14d0 [ 102.985031][ T6034] internal_get_user_pages_fast+0x21bf/0x2760 [ 102.991146][ T6034] ? get_user_pages_fast_only+0xa0/0xa0 [ 102.996799][ T6034] ? kvmalloc_node+0x70/0x180 [ 103.001497][ T6034] ? rcu_is_watching+0x15/0xb0 [ 103.006455][ T6034] ? kvmalloc_node+0x70/0x180 [ 103.011232][ T6034] ? __kmalloc_node+0xe2/0x230 [ 103.016213][ T6034] ? pin_user_pages_fast+0x89/0xe0 [ 103.021813][ T6034] get_vaddr_frames+0x86/0x210 [ 103.026601][ T6034] vb2_create_framevec+0x56/0xc0 [ 103.031568][ T6034] vb2_vmalloc_get_userptr+0x108/0x440 [ 103.037056][ T6034] ? vb2_vmalloc_get_dmabuf+0x200/0x200 [ 103.042665][ T6034] __buf_prepare+0xf9f/0x4400 [ 103.047492][ T6034] ? vb2_core_prepare_buf+0x320/0x320 [ 103.053246][ T6034] ? arch_stack_walk+0x160/0x190 [ 103.058428][ T6034] ? verify_lock_unused+0x140/0x140 [ 103.063906][ T6034] ? stack_trace_save+0xaa/0x100 [ 103.069279][ T6034] ? stack_trace_snprint+0xf0/0xf0 [ 103.074406][ T6034] ? mark_lock+0x94/0x320 [ 103.078880][ T6034] ? vb2_queue_or_prepare_buf+0x5c3/0xe80 [ 103.084639][ T6034] vb2_core_prepare_buf+0xed/0x320 [ 103.090300][ T6034] v4l2_m2m_ioctl_prepare_buf+0x1a4/0x4b0 [ 103.096255][ T6034] ? v4l_prepare_buf+0x75/0xd0 [ 103.101041][ T6034] __video_do_ioctl+0xc30/0xd50 [ 103.106307][ T6034] ? video_ioctl2+0x30/0x30 [ 103.110838][ T6034] ? __might_fault+0xc6/0x120 [ 103.115707][ T6034] ? __might_fault+0xaa/0x120 [ 103.120418][ T6034] video_usercopy+0x89f/0x1380 [ 103.125480][ T6034] ? video_ioctl2+0x30/0x30 [ 103.130087][ T6034] ? v4l_printk_ioctl+0x160/0x160 [ 103.135363][ T6034] v4l2_ioctl+0x18a/0x1e0 [ 103.140016][ T6034] ? v4l2_poll+0x2b0/0x2b0 [ 103.144550][ T6034] __se_sys_ioctl+0xfd/0x170 [ 103.149429][ T6034] do_syscall_64+0x55/0xa0 [ 103.154064][ T6034] ? clear_bhb_loop+0x40/0x90 [ 103.158847][ T6034] ? clear_bhb_loop+0x40/0x90 [ 103.163635][ T6034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.169634][ T6034] RIP: 0033:0x7f450fd9c799 [ 103.174359][ T6034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.194091][ T6034] RSP: 002b:00007f4510c53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.202613][ T6034] RAX: ffffffffffffffda RBX: 00007f4510015fa0 RCX: 00007f450fd9c799 [ 103.210614][ T6034] RDX: 0000200000002dc0 RSI: 00000000c058565d RDI: 0000000000000003 [ 103.218603][ T6034] RBP: 00007f450fe32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 103.226783][ T6034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.235112][ T6034] R13: 00007f4510016038 R14: 00007f4510015fa0 R15: 00007fffb00a8028 [ 103.243301][ T6034] [ 103.276707][ T5818] usb 2-1: USB disconnect, device number 3 [ 103.758820][ T6024] loop3: detected capacity change from 0 to 40427 [ 103.823955][ T6036] loop0: detected capacity change from 0 to 32768 [ 103.833085][ T6024] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x7ffff [ 103.872744][ T6036] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 103.936546][ T6024] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 103.945114][ T6024] F2FS-fs (loop3): Image doesn't support compression [ 103.980488][ T6024] F2FS-fs (loop3): invalid crc value [ 103.983966][ T6036] XFS (loop0): Ending clean mount [ 104.012908][ T6024] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.284209][ T6024] F2FS-fs (loop3): Start checkpoint disabled! [ 104.424561][ T6054] 9pnet_fd: Insufficient options for proto=fd [ 104.981005][ T6056] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 104.988041][ T6056] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 104.997329][ T6056] vhci_hcd vhci_hcd.0: Device attached [ 105.189255][ T6058] vhci_hcd: connection closed [ 105.247902][ T3470] vhci_hcd: stop threads [ 105.299488][ T3470] vhci_hcd: release socket [ 105.304080][ T3470] vhci_hcd: disconnect device [ 105.658888][ T6067] loop1: detected capacity change from 0 to 512 [ 105.725917][ T6065] loop2: detected capacity change from 0 to 4096 [ 105.754090][ T6072] netlink: 'syz.3.63': attribute type 7 has an invalid length. [ 105.755851][ T6067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.762108][ T6072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.63'. [ 105.927169][ T6067] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.962704][ T5770] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 106.002935][ T6065] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 106.058057][ T6065] ntfs3: loop2: Failed to load $Extend (-22). [ 106.098536][ T6065] ntfs3: loop2: Failed to initialize $Extend. [ 106.187568][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.222779][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.424643][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 106.449324][ T8] usb 4-1: config 0 has no interfaces? [ 106.467798][ T8] usb 4-1: config 0 has no interfaces? [ 106.497835][ T8] usb 4-1: config 0 has no interfaces? [ 106.536802][ T8] usb 4-1: string descriptor 0 read error: -22 [ 106.543788][ T8] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 106.583506][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.846790][ T6085] loop2: detected capacity change from 0 to 256 [ 106.846833][ T6083] loop1: detected capacity change from 0 to 32768 [ 106.868815][ T8] usb 4-1: config 0 descriptor?? [ 106.904917][ T6083] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 106.968265][ T6083] XFS (loop1): Ending clean mount [ 106.986886][ T5817] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.105127][ T27] usb 4-1: USB disconnect, device number 3 [ 107.407157][ T6097] 9pnet_fd: Insufficient options for proto=fd [ 107.968133][ T6099] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 107.975206][ T6099] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 107.983137][ T6099] vhci_hcd vhci_hcd.0: Device attached [ 107.989123][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 108.013533][ T5817] usb 1-1: config 0 has no interfaces? [ 108.084047][ T5817] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.128979][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.153356][ T5817] usb 1-1: Product: syz [ 108.167901][ T5817] usb 1-1: Manufacturer: syz [ 108.185939][ T6101] vhci_hcd: connection closed [ 108.286926][ T1134] vhci_hcd: stop threads [ 108.312299][ T5817] usb 1-1: SerialNumber: syz [ 108.321610][ T5817] usb 1-1: config 0 descriptor?? [ 108.322416][ T1134] vhci_hcd: release socket [ 108.344342][ T1134] vhci_hcd: disconnect device [ 108.377824][ T8] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 108.395930][ T8] usb 35-1: enqueue for inactive port 0 [ 108.466358][ T6104] loop2: detected capacity change from 0 to 32768 [ 108.480587][ T8] vhci_hcd: vhci_device speed not set [ 108.487581][ T6104] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.71 (6104) [ 108.522659][ T6104] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 108.534253][ T6104] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 108.545035][ T6104] BTRFS info (device loop2): enabling auto defrag [ 108.552952][ T6104] BTRFS info (device loop2): use no compression [ 108.560080][ T6104] BTRFS info (device loop2): force clearing of disk cache [ 108.567984][ T6104] BTRFS info (device loop2): max_inline at 4096 [ 108.574540][ T6104] BTRFS info (device loop2): disabling free space tree [ 108.619920][ T6104] BTRFS info (device loop2): enabling ssd optimizations [ 108.631155][ T6104] BTRFS info (device loop2): auto enabling async discard [ 108.643303][ T6104] BTRFS info (device loop2): rebuilding free space tree [ 108.685326][ T6104] BTRFS info (device loop2): disabling free space tree [ 108.692853][ T6104] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.704837][ T6104] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.762841][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 108.762856][ T28] audit: type=1800 audit(1772686016.684:3): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.71" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 108.966911][ T5776] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 108.969039][ T5771] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 109.197039][ T5861] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop2 scanned by udevd (5861) [ 109.452402][ T6126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.581481][ T6131] netlink: 96 bytes leftover after parsing attributes in process `syz.1.74'. [ 109.674528][ T5818] usb 1-1: USB disconnect, device number 5 [ 109.957766][ T5817] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.160367][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.184996][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.197524][ T5817] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.218205][ T5817] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.233868][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.253833][ T5817] usb 3-1: config 0 descriptor?? [ 110.324309][ T6147] warning: `syz.3.83' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.700360][ T5817] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 110.758919][ T5817] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 111.097334][ T6157] loop3: detected capacity change from 0 to 1024 [ 111.114918][ T6157] EXT4-fs: Ignoring removed orlov option [ 111.278954][ T6157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.446482][ T6159] loop0: detected capacity change from 0 to 32768 [ 111.528131][ T6159] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 111.629894][ T6159] XFS (loop0): Ending clean mount [ 111.648052][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.935986][ C0] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 111.961148][ T5818] usb 3-1: USB disconnect, device number 3 [ 112.118593][ T6180] 9pnet_fd: Insufficient options for proto=fd [ 112.689165][ T6182] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 112.695849][ T6182] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 112.703737][ T6182] vhci_hcd vhci_hcd.0: Device attached [ 112.894397][ T6184] vhci_hcd: connection closed [ 112.927050][ T1040] vhci_hcd: stop threads [ 112.947385][ T1040] vhci_hcd: release socket [ 112.954047][ T1040] vhci_hcd: disconnect device [ 113.021453][ T27] vhci_hcd: vhci_device speed not set [ 113.261153][ T6193] pimreg: entered allmulticast mode [ 113.497682][ T6178] loop3: detected capacity change from 0 to 32768 [ 113.655269][ T5770] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 113.665076][ T6178] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 113.778133][ T23] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 113.991697][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.027217][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 114.041555][ T23] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 114.053177][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 114.082532][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.095705][ T23] usb 3-1: config 0 descriptor?? [ 114.113391][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 114.139419][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 114.190684][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 114.254221][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 114.291576][ T23] usb 3-1: media controller created [ 114.324582][ T6200] dibusb: i2c wr: len=90 is too big! [ 114.324582][ T6200] [ 114.336312][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.405446][ T6208] loop0: detected capacity change from 0 to 32768 [ 114.405508][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 114.414709][ T786] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.485367][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 114.503266][ T6208] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 114.511149][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 114.588486][ T6208] XFS (loop0): Ending clean mount [ 114.598581][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 114.612310][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 114.624902][ T786] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 114.639699][ T23] usb 3-1: USB disconnect, device number 4 [ 114.895503][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.905300][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 114.907014][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.926434][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.935715][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.949786][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.088672][ T6226] 9pnet_fd: Insufficient options for proto=fd [ 115.640980][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.650385][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.661159][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.674353][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.682793][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.706859][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.768960][ T6228] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 115.774167][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.776402][ T6228] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 115.776524][ T6228] vhci_hcd vhci_hcd.0: Device attached [ 115.795494][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.985648][ T6230] vhci_hcd: connection closed [ 115.996769][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.005925][ T3531] vhci_hcd: stop threads [ 116.031819][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.068442][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.076990][ T3531] vhci_hcd: release socket [ 116.078587][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.081928][ T3531] vhci_hcd: disconnect device [ 116.092973][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.094226][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.098287][ T27] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 116.104794][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.172395][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.181046][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.195027][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.216683][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.239221][ T786] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 116.256688][ T786] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 116.265205][ T786] usb 2-1: Product: syz [ 116.293239][ T786] usb 2-1: Manufacturer: syz [ 116.304008][ T786] usb 2-1: SerialNumber: syz [ 116.317931][ T786] usb 2-1: config 0 descriptor?? [ 116.334960][ T786] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 116.680100][ T5770] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 116.709416][ T6236] loop3: detected capacity change from 0 to 32768 [ 116.774720][ T6236] JBD2: Ignoring recovery information on journal [ 116.941709][ T5818] usb 2-1: USB disconnect, device number 4 [ 116.955999][ T5818] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 116.988182][ T6236] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 117.284051][ T5818] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.345276][ T5818] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 117.388031][ T6246] loop2: detected capacity change from 0 to 2048 [ 117.489682][ T6246] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.574801][ T6250] fido_id[6250]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.603403][ T6252] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 117.679929][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 118.080967][ T6254] loop2: detected capacity change from 0 to 32768 [ 118.114374][ T6254] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 118.177280][ T6254] XFS (loop2): Ending clean mount [ 118.447973][ T6270] input: syz0 as /devices/virtual/input/input7 [ 118.933285][ T6271] 9pnet_fd: Insufficient options for proto=fd [ 119.389569][ T6270] input: failed to attach handler leds to device input7, error: -6 [ 119.430777][ T6271] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 119.437462][ T6271] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 119.445296][ T6271] vhci_hcd vhci_hcd.0: Device attached [ 119.574040][ T6278] vhci_hcd: connection closed [ 119.657057][ T3470] vhci_hcd: stop threads [ 119.696705][ T3470] vhci_hcd: release socket [ 119.718396][ T3470] vhci_hcd: disconnect device [ 119.776815][ T5875] vhci_hcd: vhci_device speed not set [ 119.847778][ T5818] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.245403][ T6286] loop1: detected capacity change from 0 to 32768 [ 120.360748][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 120.367703][ T5771] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 120.385710][ T6286] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 120.420004][ T5818] usb 4-1: config 0 has no interfaces? [ 120.434314][ T5818] usb 4-1: config 0 has no interfaces? [ 120.442157][ T6286] XFS (loop1): Ending clean mount [ 120.455394][ T5818] usb 4-1: config 0 has no interfaces? [ 120.473676][ T5818] usb 4-1: string descriptor 0 read error: -22 [ 120.487295][ T5818] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 120.503612][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.742675][ T5818] usb 4-1: config 0 descriptor?? [ 120.908640][ T6297] 9pnet_fd: Insufficient options for proto=fd [ 121.474132][ T6299] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 121.480915][ T6299] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.490266][ T6299] vhci_hcd vhci_hcd.0: Device attached [ 121.536946][ T27] vhci_hcd: vhci_device speed not set [ 121.551748][ T5817] usb 4-1: USB disconnect, device number 4 [ 121.683815][ T6301] vhci_hcd: connection closed [ 121.687159][ T3470] vhci_hcd: stop threads [ 121.706138][ T3470] vhci_hcd: release socket [ 121.722890][ T3470] vhci_hcd: disconnect device [ 121.811742][ T5818] vhci_hcd: vhci_device speed not set [ 121.983979][ T786] IPVS: starting estimator thread 0... [ 121.991676][ T6304] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 122.097780][ T6308] IPVS: using max 16 ests per chain, 38400 per kthread [ 122.459389][ T5776] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.245903][ T6321] loop3: detected capacity change from 0 to 32768 [ 123.296893][ T6321] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.336929][ T6321] XFS (loop3): Ending clean mount [ 123.768605][ T6345] 9pnet_fd: Insufficient options for proto=fd [ 124.397735][ T6347] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 124.404849][ T6347] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.412753][ T6347] vhci_hcd vhci_hcd.0: Device attached [ 124.558127][ T6349] vhci_hcd: connection closed [ 124.561255][ T3519] vhci_hcd: stop threads [ 124.590138][ T3519] vhci_hcd: release socket [ 124.603498][ T3519] vhci_hcd: disconnect device [ 124.622518][ T5818] vhci_hcd: vhci_device speed not set [ 125.274008][ T6340] mmap: syz.2.125 (6340) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.829768][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.936894][ T5836] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 126.226671][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 126.243957][ T5836] usb 1-1: config 0 has no interfaces? [ 126.258183][ T5836] usb 1-1: config 0 has no interfaces? [ 126.295620][ T5836] usb 1-1: config 0 has no interfaces? [ 126.311085][ T5836] usb 1-1: string descriptor 0 read error: -22 [ 126.336840][ T5836] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 126.356335][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.376834][ T5836] usb 1-1: config 0 descriptor?? [ 126.610387][ T5836] usb 1-1: USB disconnect, device number 6 [ 126.849085][ T6374] loop1: detected capacity change from 0 to 32768 [ 126.904437][ T6374] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.973002][ T6374] XFS (loop1): Ending clean mount [ 127.392985][ T6393] 9pnet_fd: Insufficient options for proto=fd [ 127.995787][ T6395] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 128.002474][ T6395] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 128.010489][ T6395] vhci_hcd vhci_hcd.0: Device attached [ 128.112375][ T6400] loop3: detected capacity change from 0 to 512 [ 128.134695][ T6400] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 128.156562][ T6397] vhci_hcd: connection closed [ 128.311276][ T1134] vhci_hcd: stop threads [ 128.349855][ T6400] EXT4-fs (loop3): 1 truncate cleaned up [ 128.356838][ T1134] vhci_hcd: release socket [ 128.361532][ T1134] vhci_hcd: disconnect device [ 128.362390][ T23] usb 35-1: new high-speed USB device number 5 using vhci_hcd [ 128.380076][ T6400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.418527][ T23] usb 35-1: enqueue for inactive port 0 [ 128.462421][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.526939][ T23] vhci_hcd: vhci_device speed not set [ 128.547148][ T6408] loop0: detected capacity change from 0 to 512 [ 128.585573][ T6408] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.141: inode has both inline data and extents flags [ 128.611342][ T6408] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.141: couldn't read orphan inode 15 (err -117) [ 128.634274][ T6408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.849810][ T6415] netlink: 44 bytes leftover after parsing attributes in process `syz.2.143'. [ 128.873238][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.916216][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.942359][ T5776] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.137203][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 129.153505][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 129.183041][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 129.214185][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.235203][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.269389][ T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.281322][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.309273][ T786] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 129.531444][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.537733][ T27] usb 4-1: usb_control_msg returned -32 [ 129.551738][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.561919][ T786] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 129.576031][ T27] usbtmc 4-1:16.0: can't read capabilities [ 129.587696][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.610477][ T786] usb 1-1: config 0 descriptor?? [ 129.946131][ T6428] loop1: detected capacity change from 0 to 32768 [ 130.077640][ T6428] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 130.150848][ T6428] XFS (loop1): Ending clean mount [ 130.642684][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 130.788572][ T6446] 9pnet_fd: Insufficient options for proto=fd [ 131.460292][ T6448] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 131.464999][ T786] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 131.466988][ T6448] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.467164][ T6448] vhci_hcd vhci_hcd.0: Device attached [ 131.498775][ T786] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 131.519410][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.530573][ T786] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0004/input/input8 [ 131.564344][ T6450] vhci_hcd: connection closed [ 131.680942][ T3492] vhci_hcd: stop threads [ 131.715578][ T3492] vhci_hcd: release socket [ 131.720999][ T786] cm6533_jd 0003:0D8C:0022.0004: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 131.735404][ T3492] vhci_hcd: disconnect device [ 131.748115][ T23] usb 4-1: USB disconnect, device number 5 [ 131.776781][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 131.784004][ T8] usb 3-1: config 0 has no interfaces? [ 131.797241][ T27] usb 35-1: new high-speed USB device number 6 using vhci_hcd [ 131.805864][ T8] usb 3-1: config 0 has no interfaces? [ 131.814272][ T27] usb 35-1: enqueue for inactive port 0 [ 131.822880][ T8] usb 3-1: config 0 has no interfaces? [ 131.832472][ T5818] usb 1-1: USB disconnect, device number 7 [ 131.867707][ T8] usb 3-1: string descriptor 0 read error: -22 [ 131.881126][ T8] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 131.918653][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.933938][ T6453] fido_id[6453]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 131.939326][ T27] vhci_hcd: vhci_device speed not set [ 131.962328][ T8] usb 3-1: config 0 descriptor?? [ 132.180281][ T23] usb 3-1: USB disconnect, device number 5 [ 132.286796][ T5776] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 132.426863][ T8] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 132.970733][ T6465] loop0: detected capacity change from 0 to 32768 [ 132.982355][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 132.992404][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.000663][ T8] usb 4-1: Product: syz [ 133.005584][ T8] usb 4-1: Manufacturer: syz [ 133.010411][ T8] usb 4-1: SerialNumber: syz [ 133.024031][ T6465] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 133.034697][ T8] usb 4-1: config 0 descriptor?? [ 133.070159][ T6465] XFS (loop0): Ending clean mount [ 133.141447][ T6463] loop1: detected capacity change from 0 to 32768 [ 133.170688][ T6463] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.152 (6463) [ 133.275885][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.284485][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.371695][ T8] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 133.401810][ T6463] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.459394][ T6463] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 133.558707][ T6476] 9pnet_fd: Insufficient options for proto=fd [ 134.236176][ T6478] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 134.238096][ T6463] BTRFS info (device loop1): using free space tree [ 134.242839][ T6478] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 134.245270][ T6478] vhci_hcd vhci_hcd.0: Device attached [ 134.348268][ T6480] vhci_hcd: connection closed [ 134.368628][ T3492] vhci_hcd: stop threads [ 134.436505][ T3492] vhci_hcd: release socket [ 134.462608][ T3492] vhci_hcd: disconnect device [ 134.472470][ T6463] BTRFS info (device loop1): enabling ssd optimizations [ 134.492952][ T6463] BTRFS info (device loop1): auto enabling async discard [ 134.799801][ T5776] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 134.917277][ T8] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 134.965064][ T8] usb 4-1: USB disconnect, device number 6 [ 135.029425][ T5861] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5861) [ 135.157049][ T5770] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 135.786406][ T6499] loop2: detected capacity change from 0 to 32768 [ 135.817508][ T6499] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 135.820940][ T5817] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.079324][ T5817] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 136.134605][ T5817] usb 1-1: config 1 has no interface number 0 [ 136.167648][ T5817] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.184283][ T5895] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 136.208358][ T6514] loop3: detected capacity change from 0 to 32768 [ 136.227103][ T5817] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 136.236290][ T5817] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 136.262959][ T6514] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 136.303150][ T5817] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.330103][ T6514] XFS (loop3): Ending clean mount [ 136.333868][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.376766][ T5817] usb 1-1: Product: syz [ 136.381012][ T5817] usb 1-1: Manufacturer: syz [ 136.385862][ T5817] usb 1-1: SerialNumber: syz [ 136.804837][ T6532] 9pnet_fd: Insufficient options for proto=fd [ 137.328905][ T5836] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 137.337109][ T6534] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 137.343842][ T6534] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 137.352673][ T6534] vhci_hcd vhci_hcd.0: Device attached [ 137.573393][ T5836] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.596384][ T5836] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 137.616257][ T5836] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.649853][ T5836] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.668746][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.676282][ T6537] vhci_hcd: connection closed [ 137.767270][ T1040] vhci_hcd: stop threads [ 137.784533][ T6542] loop1: detected capacity change from 0 to 512 [ 137.802312][ T1040] vhci_hcd: release socket [ 137.809877][ T5818] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 137.809913][ T1040] vhci_hcd: disconnect device [ 137.822498][ T5836] usb 3-1: Product: syz [ 137.827094][ T5836] usb 3-1: Manufacturer: syz [ 137.831254][ T5817] cdc_ncm 1-1:1.1: bind() failure [ 137.832488][ T5836] usb 3-1: SerialNumber: syz [ 137.865063][ T6542] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.163: inode has both inline data and extents flags [ 137.885830][ T6542] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.163: couldn't read orphan inode 15 (err -117) [ 137.928828][ T6542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.044566][ T5817] usb 1-1: USB disconnect, device number 8 [ 138.110854][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.288510][ T5836] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 138.295727][ T5836] cdc_ncm 3-1:1.0: bind() failure [ 138.308472][ T5836] usb 3-1: USB disconnect, device number 6 [ 138.472994][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 138.764443][ T6554] loop0: detected capacity change from 0 to 512 [ 138.855954][ T6554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.912708][ T6554] ext4 filesystem being mounted at /31/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.122613][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.886806][ T5836] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 140.021814][ T6575] loop3: detected capacity change from 0 to 32768 [ 140.080283][ T6575] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 140.106134][ T5836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.140702][ T6575] XFS (loop3): Ending clean mount [ 140.146503][ T5836] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 140.182884][ T5836] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 140.221735][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.291783][ T5836] usb 1-1: config 0 descriptor?? [ 140.353802][ T5836] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 140.416182][ T5836] dvb-usb: bulk message failed: -22 (3/0) [ 140.588619][ T6586] 9pnet_fd: Insufficient options for proto=fd [ 141.139421][ T6588] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 141.146191][ T6588] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 141.155285][ T6588] vhci_hcd vhci_hcd.0: Device attached [ 141.242841][ T5836] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 141.252523][ T5836] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 141.259953][ T5836] usb 1-1: media controller created [ 141.267931][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.272129][ T6572] dibusb: i2c wr: len=90 is too big! [ 141.272129][ T6572] [ 141.337338][ T5836] dvb-usb: bulk message failed: -22 (6/0) [ 141.345064][ T5836] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 141.394388][ T5836] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 141.433323][ T6590] vhci_hcd: connection reset by peer [ 141.454698][ T5836] dvb-usb: schedule remote query interval to 150 msecs. [ 141.489848][ T1040] vhci_hcd: stop threads [ 141.506960][ T5836] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 141.515454][ T1040] vhci_hcd: release socket [ 141.528291][ T1040] vhci_hcd: disconnect device [ 141.557103][ T5836] usb 1-1: USB disconnect, device number 9 [ 141.610056][ T5836] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 141.658257][ T6560] syz.1.169: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 141.678072][ T6560] CPU: 0 PID: 6560 Comm: syz.1.169 Not tainted syzkaller #0 [ 141.685394][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.695563][ T6560] Call Trace: [ 141.698862][ T6560] [ 141.701812][ T6560] dump_stack_lvl+0x18c/0x250 [ 141.706519][ T6560] ? show_regs_print_info+0x20/0x20 [ 141.711740][ T6560] ? load_image+0x400/0x400 [ 141.716438][ T6560] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 141.722971][ T6560] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 141.729579][ T6560] warn_alloc+0x246/0x340 [ 141.733953][ T6560] ? zone_watermark_ok_safe+0x230/0x230 [ 141.739530][ T6560] ? _raw_spin_unlock+0x28/0x40 [ 141.744533][ T6560] ? netlink_rcv_skb+0x241/0x4d0 [ 141.749514][ T6560] __vmalloc_node_range+0x662/0x1330 [ 141.754836][ T6560] ? __asan_memset+0x22/0x40 [ 141.759569][ T6560] ? free_vm_area+0x50/0x50 [ 141.764272][ T6560] ? kvmalloc_node+0x70/0x180 [ 141.768965][ T6560] ? rcu_is_watching+0x15/0xb0 [ 141.773835][ T6560] ? kvmalloc_node+0x70/0x180 [ 141.778611][ T6560] ? trace_kmalloc+0x1f/0x90 [ 141.783310][ T6560] kvmalloc_node+0x13f/0x180 [ 141.787920][ T6560] ? hash_netport4_resize+0x232/0x1b40 [ 141.793490][ T6560] hash_netport4_resize+0x232/0x1b40 [ 141.798899][ T6560] ? hash_netport4_uadt+0xc99/0xf30 [ 141.804299][ T6560] ? hash_netport4_uadt+0xf30/0xf30 [ 141.809608][ T6560] ? hash_netport4_kadt+0x590/0x590 [ 141.814827][ T6560] ? _local_bh_enable+0xa0/0xa0 [ 141.819698][ T6560] call_ad+0x454/0xb40 [ 141.823789][ T6560] ? ip_set_ad+0x9c0/0x9c0 [ 141.828318][ T6560] ? __nla_parse+0x40/0x50 [ 141.832773][ T6560] ip_set_ad+0x81a/0x9c0 [ 141.837073][ T6560] ? ip_set_dump_done+0x1e0/0x1e0 [ 141.842198][ T6560] ? rcu_is_watching+0x15/0xb0 [ 141.847008][ T6560] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 141.852059][ T6560] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.858151][ T6560] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 141.863381][ T6560] ? nfnetlink_unbind+0x160/0x160 [ 141.868451][ T6560] ? __dev_queue_xmit+0x19a3/0x3660 [ 141.873879][ T6560] ? __netlink_deliver_tap+0x5ab/0x830 [ 141.879371][ T6560] ? netlink_deliver_tap+0x19c/0x1b0 [ 141.885048][ T6560] ? netlink_unicast+0x72c/0x8d0 [ 141.890000][ T6560] ? netlink_sendmsg+0x8d0/0xbf0 [ 141.894987][ T6560] ? ____sys_sendmsg+0x5ba/0x960 [ 141.899940][ T6560] ? ___sys_sendmsg+0x2a6/0x360 [ 141.904800][ T6560] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 141.909838][ T6560] ? do_syscall_64+0x55/0xa0 [ 141.914461][ T6560] netlink_rcv_skb+0x241/0x4d0 [ 141.919246][ T6560] ? nfnetlink_unbind+0x160/0x160 [ 141.924288][ T6560] ? netlink_ack+0x1180/0x1180 [ 141.929078][ T6560] ? apparmor_capable+0x137/0x1a0 [ 141.934119][ T6560] ? bpf_lsm_capable+0x9/0x10 [ 141.938879][ T6560] ? security_capable+0x89/0xb0 [ 141.944025][ T6560] nfnetlink_rcv+0x2c9/0x24a0 [ 141.948731][ T6560] ? __local_bh_enable_ip+0x13a/0x1c0 [ 141.954203][ T6560] ? lockdep_hardirqs_on+0x98/0x150 [ 141.959510][ T6560] ? __local_bh_enable_ip+0x13a/0x1c0 [ 141.965087][ T6560] ? _local_bh_enable+0xa0/0xa0 [ 141.969959][ T6560] ? __dev_queue_xmit+0x265/0x3660 [ 141.975096][ T6560] ? __dev_queue_xmit+0x265/0x3660 [ 141.980226][ T6560] ? __dev_queue_xmit+0x1b2c/0x3660 [ 141.985440][ T6560] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 141.991099][ T6560] ? __dev_queue_xmit+0x265/0x3660 [ 141.996235][ T6560] ? ref_tracker_free+0x690/0x840 [ 142.001284][ T6560] ? refcount_inc+0x70/0x70 [ 142.005795][ T6560] ? __asan_memcpy+0x40/0x70 [ 142.010398][ T6560] ? __skb_clone+0x63/0x790 [ 142.014926][ T6560] ? __skb_clone+0x480/0x790 [ 142.019722][ T6560] ? __netlink_deliver_tap+0x7e8/0x830 [ 142.025197][ T6560] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.030846][ T6560] ? __lock_acquire+0x7d40/0x7d40 [ 142.035899][ T6560] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.041126][ T6560] netlink_unicast+0x751/0x8d0 [ 142.046220][ T6560] netlink_sendmsg+0x8d0/0xbf0 [ 142.051106][ T6560] ? netlink_getsockopt+0x590/0x590 [ 142.056763][ T6560] ? aa_sock_msg_perm+0x94/0x150 [ 142.061894][ T6560] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 142.067198][ T6560] ? security_socket_sendmsg+0x80/0xa0 [ 142.072670][ T6560] ? netlink_getsockopt+0x590/0x590 [ 142.077977][ T6560] ____sys_sendmsg+0x5ba/0x960 [ 142.083024][ T6560] ? __asan_memset+0x22/0x40 [ 142.087643][ T6560] ? __sys_sendmsg_sock+0x30/0x30 [ 142.092686][ T6560] ? __import_iovec+0x5f2/0x850 [ 142.097561][ T6560] ? import_iovec+0x73/0xa0 [ 142.102204][ T6560] ___sys_sendmsg+0x2a6/0x360 [ 142.106902][ T6560] ? __sys_sendmsg+0x2a0/0x2a0 [ 142.111727][ T6560] __se_sys_sendmsg+0x1c2/0x2b0 [ 142.116689][ T6560] ? __x64_sys_sendmsg+0x80/0x80 [ 142.121677][ T6560] ? lockdep_hardirqs_on+0x98/0x150 [ 142.126893][ T6560] do_syscall_64+0x55/0xa0 [ 142.131347][ T6560] ? clear_bhb_loop+0x40/0x90 [ 142.136053][ T6560] ? clear_bhb_loop+0x40/0x90 [ 142.140746][ T6560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.146687][ T6560] RIP: 0033:0x7f529599c799 [ 142.151213][ T6560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.171187][ T6560] RSP: 002b:00007f5293bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.179815][ T6560] RAX: ffffffffffffffda RBX: 00007f5295c15fa0 RCX: 00007f529599c799 [ 142.187837][ T6560] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000004 [ 142.195951][ T6560] RBP: 00007f5295a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 142.204302][ T6560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.212376][ T6560] R13: 00007f5295c16038 R14: 00007f5295c15fa0 R15: 00007ffee62b2348 [ 142.220386][ T6560] [ 142.317158][ T6560] Mem-Info: [ 142.323407][ T6560] active_anon:19987 inactive_anon:0 isolated_anon:0 [ 142.323407][ T6560] active_file:3855 inactive_file:40083 isolated_file:0 [ 142.323407][ T6560] unevictable:768 dirty:277 writeback:0 [ 142.323407][ T6560] slab_reclaimable:10366 slab_unreclaimable:92997 [ 142.323407][ T6560] mapped:34404 shmem:15545 pagetables:705 [ 142.323407][ T6560] sec_pagetables:0 bounce:0 [ 142.323407][ T6560] kernel_misc_reclaimable:0 [ 142.323407][ T6560] free:1339781 free_pcp:13171 free_cma:0 [ 142.331535][ T6573] loop2: detected capacity change from 0 to 32768 [ 142.371113][ T6560] Node 0 active_anon:79848kB inactive_anon:0kB active_file:15420kB inactive_file:160128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137616kB dirty:1108kB writeback:0kB shmem:60644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11120kB pagetables:2820kB sec_pagetables:0kB all_unreclaimable? no [ 142.415072][ T6560] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 142.456289][ T6573] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 142.463405][ T6560] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.646849][ T6560] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 142.652770][ T6560] Node 0 DMA32 free:1455072kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:72108kB inactive_anon:0kB active_file:18020kB inactive_file:159496kB unevictable:1536kB writepending:1108kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:28880kB local_pcp:14704kB free_cma:0kB [ 142.727249][ T5861] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 142.778270][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 142.818162][ T6560] lowmem_reserve[]: 0 0 0 0 0 [ 142.826806][ T6560] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.896658][ T6560] lowmem_reserve[]: 0 0 0 0 0 [ 142.902079][ T6560] Node 1 Normal free:3899200kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18124kB local_pcp:9672kB free_cma:0kB [ 142.932299][ T6560] lowmem_reserve[]: 0 0 0 0 0 [ 142.937524][ T6560] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 142.941330][ T5818] vhci_hcd: vhci_device speed not set [ 142.951051][ T6560] Node 0 DMA32: 1001*4kB (UME) 986*8kB (UME) 518*16kB (UME) 116*32kB (UME) 65*64kB (UME) 24*128kB (UME) 10*256kB (M) 14*512kB (UME) 11*1024kB (UME) 6*2048kB (UM) 345*4096kB (M) = 1477524kB [ 142.974535][ T6560] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 142.986633][ T6560] Node 1 Normal: 260*4kB (UME) 58*8kB (UME) 44*16kB (UME) 41*32kB (UME) 20*64kB (UME) 9*128kB (UE) 0*256kB 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3899200kB [ 143.004343][ T6560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 143.037416][ T6560] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 143.078875][ T6560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 143.114250][ T6560] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 143.147650][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 143.150497][ T6560] 53596 total pagecache pages [ 143.200380][ T6560] 0 pages in swap cache [ 143.204855][ T6560] Free swap = 124692kB [ 143.228869][ T6560] Total swap = 124996kB [ 143.241253][ T6560] 2097051 pages RAM [ 143.253431][ T6560] 0 pages HighMem/MovableOnly [ 143.264776][ T6560] 416924 pages reserved [ 143.272034][ T6560] 0 pages cma reserved [ 143.376753][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 143.384358][ T23] usb 1-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 143.410593][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.430147][ T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.443256][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.454016][ T23] usb 1-1: Product: syz [ 143.468156][ T23] usb 1-1: Manufacturer: syz [ 143.472853][ T23] usb 1-1: SerialNumber: syz [ 143.516853][ T5836] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 143.687105][ T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 143.719825][ T5836] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 143.749317][ T23] usb 1-1: 0:2 : does not exist [ 143.755079][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.798067][ T23] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 143.807797][ T5836] usb 3-1: config 0 descriptor?? [ 143.860345][ T5836] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 143.896159][ T23] usb 1-1: USB disconnect, device number 10 [ 143.907547][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 143.918897][ T27] usb 4-1: config 2 has an invalid interface number: 139 but max is 0 [ 143.936115][ T27] usb 4-1: config 2 has no interface number 0 [ 143.952034][ T27] usb 4-1: config 2 interface 139 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 143.970200][ T27] usb 4-1: config 2 interface 139 has no altsetting 0 [ 144.001782][ T27] usb 4-1: New USB device found, idVendor=1234, idProduct=0002, bcdDevice=39.4a [ 144.027504][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.056143][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.073310][ T27] usb 4-1: Product: syz [ 144.084383][ T27] usb 4-1: Manufacturer: syz [ 144.093558][ T27] usb 4-1: SerialNumber: syz [ 144.129222][ T5836] gp8psk: usb in 128 operation failed. [ 144.372616][ T5836] gp8psk: usb in 146 operation failed. [ 144.401534][ T27] usb 4-1: USB disconnect, device number 7 [ 144.411361][ T5836] gp8psk: failed to get FW version [ 144.438283][ T5836] gp8psk: usb in 149 operation failed. [ 144.456991][ T5836] gp8psk: failed to get FPGA version [ 144.668986][ T5836] gp8psk: usb out operation failed. [ 144.674409][ T5836] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 144.706737][ T5836] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 144.739113][ T5836] usb 3-1: USB disconnect, device number 7 [ 145.346929][ T5836] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 145.668884][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 145.812485][ T5836] usb 2-1: config 0 has no interfaces? [ 145.834743][ T5836] usb 2-1: config 0 has no interfaces? [ 145.844800][ T5836] usb 2-1: config 0 has no interfaces? [ 145.867679][ T5836] usb 2-1: string descriptor 0 read error: -22 [ 145.896675][ T5836] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 145.905879][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.961464][ T5836] usb 2-1: config 0 descriptor?? [ 146.202613][ T8] usb 2-1: USB disconnect, device number 5 [ 146.795824][ T6633] loop3: detected capacity change from 0 to 32768 [ 146.829493][ T6633] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 146.889593][ T6633] XFS (loop3): Ending clean mount [ 146.891276][ T6645] loop0: detected capacity change from 0 to 512 [ 146.954548][ T6645] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 147.034963][ T6645] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 147.156465][ T6645] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 147.196970][ T6645] EXT4-fs (loop0): 1 truncate cleaned up [ 147.204131][ T6645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.327194][ T6650] 9pnet_fd: Insufficient options for proto=fd [ 147.883492][ T6652] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 147.890569][ T6652] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 147.899067][ T6652] vhci_hcd vhci_hcd.0: Device attached [ 148.138927][ T6654] vhci_hcd: connection closed [ 148.236937][ T1040] vhci_hcd: stop threads [ 148.238856][ T8] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 148.273675][ T1040] vhci_hcd: release socket [ 148.289501][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.309058][ T1040] vhci_hcd: disconnect device [ 148.882258][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 149.635364][ T6677] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.977239][ T5817] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 150.206765][ T5817] usb 4-1: Using ep0 maxpacket: 8 [ 150.221211][ T5817] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 150.234571][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.243334][ T5817] usb 4-1: Product: syz [ 150.252606][ T5817] usb 4-1: Manufacturer: syz [ 150.259937][ T5817] usb 4-1: SerialNumber: syz [ 150.269302][ T5817] usb 4-1: config 0 descriptor?? [ 150.293958][ C0] Unknown status report in ack skb [ 150.366738][ T5789] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 150.488044][ T5817] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 150.512260][ T6689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.206'. [ 150.559497][ T5789] usb 2-1: Using ep0 maxpacket: 8 [ 150.585556][ T5789] usb 2-1: config 0 has no interfaces? [ 150.598829][ T5789] usb 2-1: config 0 has no interfaces? [ 150.606144][ T5789] usb 2-1: config 0 has no interfaces? [ 150.630873][ T5789] usb 2-1: string descriptor 0 read error: -22 [ 150.646907][ T5789] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 150.664777][ T5789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.687836][ T5789] usb 2-1: config 0 descriptor?? [ 150.703319][ T5817] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 150.717796][ T5817] usb 4-1: USB disconnect, device number 8 [ 150.903992][ T5789] usb 2-1: USB disconnect, device number 6 [ 151.530371][ T6706] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 152.455039][ T6729] loop0: detected capacity change from 0 to 32768 [ 152.481757][ T6729] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 152.533055][ T6729] XFS (loop0): Ending clean mount [ 152.552306][ T6739] "syz.2.220" (6739) uses obsolete ecb(arc4) skcipher [ 152.567436][ T6739] trusted_key: syz.2.220 sent an empty control message without MSG_MORE. [ 152.990309][ T6742] 9pnet_fd: Insufficient options for proto=fd [ 153.573842][ T6744] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 153.580703][ T6744] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 153.588743][ T6744] vhci_hcd vhci_hcd.0: Device attached [ 153.619959][ T8] vhci_hcd: vhci_device speed not set [ 153.743568][ T6722] loop3: detected capacity change from 0 to 32768 [ 153.781709][ T6722] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 153.851397][ T6746] vhci_hcd: connection closed [ 153.873553][ T1040] vhci_hcd: stop threads [ 153.917968][ T6754] loop1: detected capacity change from 0 to 1024 [ 153.938041][ T6754] EXT4-fs: Ignoring removed orlov option [ 153.957710][ T5789] usb 33-1: new high-speed USB device number 5 using vhci_hcd [ 153.978420][ T1040] vhci_hcd: release socket [ 153.987997][ T1040] vhci_hcd: disconnect device [ 154.036377][ T6754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.149180][ T5861] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 154.367988][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.551139][ T5770] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 154.661555][ T6768] loop1: detected capacity change from 0 to 64 [ 155.185582][ T6772] loop0: detected capacity change from 0 to 1024 [ 155.213529][ T6772] EXT4-fs: Ignoring removed orlov option [ 155.282456][ T6772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.422750][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.572992][ T6779] loop3: detected capacity change from 0 to 1024 [ 155.832760][ T6770] loop1: detected capacity change from 0 to 32768 [ 155.879242][ T6770] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.904565][ T6770] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 155.947980][ T6770] BTRFS info (device loop1): using free space tree [ 156.024076][ T6770] BTRFS info (device loop1): enabling ssd optimizations [ 156.093401][ T6770] BTRFS info (device loop1): auto enabling async discard [ 156.573060][ T6806] loop3: detected capacity change from 0 to 32768 [ 156.619018][ T6806] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 156.646703][ T5776] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.692102][ T6806] XFS (loop3): Ending clean mount [ 157.128570][ T6820] 9pnet_fd: Insufficient options for proto=fd [ 157.658799][ T6822] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 157.665465][ T6822] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 157.673225][ T6822] vhci_hcd vhci_hcd.0: Device attached [ 157.732304][ T6826] loop0: detected capacity change from 0 to 512 [ 157.790738][ T6826] EXT4-fs: Ignoring removed bh option [ 157.868983][ T6826] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 157.994390][ T6824] vhci_hcd: connection closed [ 158.031213][ T3531] vhci_hcd: stop threads [ 158.049565][ T6826] EXT4-fs (loop0): 1 truncate cleaned up [ 158.076213][ T3531] vhci_hcd: release socket [ 158.081019][ T3531] vhci_hcd: disconnect device [ 158.081943][ T6826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.116691][ T8] usb 39-1: new high-speed USB device number 5 using vhci_hcd [ 158.136997][ T8] usb 39-1: enqueue for inactive port 0 [ 158.217989][ T8] vhci_hcd: vhci_device speed not set [ 158.515105][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.641922][ T6834] loop1: detected capacity change from 0 to 32768 [ 158.704261][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 158.728523][ T6834] JBD2: Ignoring recovery information on journal [ 158.816194][ T6834] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 158.854873][ T6834] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 158.873354][ T6834] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 158.883574][ T6834] OCFS2: File system is now read-only. [ 158.889251][ T6834] (syz.1.239,6834,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 158.897487][ T6834] (syz.1.239,6834,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 158.905535][ T6834] (syz.1.239,6834,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 158.914002][ T6834] (syz.1.239,6834,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 158.922579][ T6834] (syz.1.239,6834,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 158.930801][ T6834] (syz.1.239,6834,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 158.939065][ T6834] (syz.1.239,6834,1):ocfs2_block_group_alloc_contig:433 ERROR: status = -30 [ 158.947991][ T6834] (syz.1.239,6834,1):ocfs2_block_group_alloc:705 ERROR: status = -30 [ 158.957526][ T6834] (syz.1.239,6834,1):ocfs2_block_group_alloc:758 ERROR: status = -30 [ 158.966200][ T6834] (syz.1.239,6834,1):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30 [ 158.975179][ T6834] (syz.1.239,6834,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 158.984082][ T6834] (syz.1.239,6834,1):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30 [ 158.993281][ T6834] (syz.1.239,6834,1):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30 [ 159.003114][ T6834] (syz.1.239,6834,1):ocfs2_expand_inline_dir:2841 ERROR: status = -30 [ 159.011568][ T6834] (syz.1.239,6834,1):ocfs2_extend_dir:3205 ERROR: status = -30 [ 159.020013][ T6834] (syz.1.239,6834,1):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 159.029039][ T6834] (syz.1.239,6834,1):ocfs2_mknod:298 ERROR: status = -30 [ 159.036219][ T6834] (syz.1.239,6834,1):ocfs2_mknod:502 ERROR: status = -30 [ 159.043446][ T6834] (syz.1.239,6834,1):ocfs2_create:676 ERROR: status = -30 [ 159.068048][ T6834] syz.1.239 (6834) used greatest stack depth: 17712 bytes left [ 159.099609][ T5789] vhci_hcd: vhci_device speed not set [ 159.164390][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 159.364076][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 160.216845][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 160.527011][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 160.563634][ T8] usb 1-1: config 0 has no interfaces? [ 160.599244][ T8] usb 1-1: config 0 has no interfaces? [ 160.616698][ T5818] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 160.635872][ T8] usb 1-1: config 0 has no interfaces? [ 160.672761][ T8] usb 1-1: string descriptor 0 read error: -22 [ 160.693745][ T6855] loop1: detected capacity change from 0 to 1024 [ 160.703562][ T8] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 160.726758][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.752376][ T6855] EXT4-fs: Ignoring removed orlov option [ 160.760116][ T8] usb 1-1: config 0 descriptor?? [ 160.765405][ T6855] EXT4-fs (loop1): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 160.824468][ T5818] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 160.843170][ T6855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.861914][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.883561][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.894107][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 160.923207][ T5818] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 160.932972][ T5818] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 160.936082][ T6855] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 160.950331][ T5818] usb 3-1: Manufacturer: syz [ 160.962467][ T6860] loop3: detected capacity change from 0 to 512 [ 160.970217][ T5818] usb 3-1: config 0 descriptor?? [ 160.986030][ T23] usb 1-1: USB disconnect, device number 11 [ 161.041517][ T6860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.065774][ T6860] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.147673][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.391744][ T5836] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 161.415878][ T5818] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 161.433570][ T5818] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 161.448882][ T5818] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 161.630873][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.669121][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.714514][ T5836] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.729722][ T6867] loop1: detected capacity change from 0 to 32768 [ 161.775499][ T6867] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 161.780870][ T5836] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.798635][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.822745][ T6867] XFS (loop1): Ending clean mount [ 161.840691][ T5836] usb 4-1: config 0 descriptor?? [ 161.846374][ T8] usb 3-1: USB disconnect, device number 8 [ 162.265461][ T6879] 9pnet_fd: Insufficient options for proto=fd [ 162.784828][ T6881] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 162.791520][ T6881] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 162.799502][ T6881] vhci_hcd vhci_hcd.0: Device attached [ 163.042079][ T5836] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 163.079199][ T5836] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 163.094234][ T5836] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 163.096858][ T786] usb 35-1: new high-speed USB device number 7 using vhci_hcd [ 163.226196][ T6883] vhci_hcd: connection closed [ 163.267026][ T3470] vhci_hcd: stop threads [ 163.303628][ T3470] vhci_hcd: release socket [ 163.332786][ T3470] vhci_hcd: disconnect device [ 163.370837][ T8] usb 4-1: USB disconnect, device number 9 [ 163.626926][ T5819] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 163.666730][ T5789] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 163.819045][ T5819] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.834290][ T5819] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.849367][ T5819] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 163.862391][ T5789] usb 1-1: Using ep0 maxpacket: 8 [ 163.864734][ T5776] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 163.871754][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 163.889114][ T5789] usb 1-1: config 0 has no interfaces? [ 163.900702][ T5789] usb 1-1: config 0 has no interfaces? [ 163.918324][ T5789] usb 1-1: config 0 has no interfaces? [ 163.924936][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.935516][ T5819] usb 3-1: SerialNumber: syz [ 163.946087][ T5789] usb 1-1: string descriptor 0 read error: -22 [ 163.963966][ T5789] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 163.997939][ T5789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.018207][ T5789] usb 1-1: config 0 descriptor?? [ 164.195337][ T5819] usb 3-1: 0:2 : does not exist [ 164.232928][ T8] usb 1-1: USB disconnect, device number 12 [ 164.253407][ T5819] usb 3-1: USB disconnect, device number 9 [ 164.361559][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.325760][ T6908] loop2: detected capacity change from 0 to 32768 [ 165.375864][ T6908] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 165.450429][ T6908] XFS (loop2): Ending clean mount [ 165.887410][ T6926] 9pnet_fd: Insufficient options for proto=fd [ 165.919552][ C1] ------------[ cut here ]------------ [ 165.925259][ C1] WARNING: CPU: 1 PID: 6925 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 165.935588][ C1] Modules linked in: [ 165.939666][ C1] CPU: 1 PID: 6925 Comm: syz.2.263 Not tainted syzkaller #0 [ 165.947245][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.957456][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 165.963825][ C1] Code: 24 4c 89 e7 e8 2e a7 c1 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 09 ee 83 f7 0f 0b e9 f6 f7 ff ff e8 fd ed 83 f7 <0f> 0b e9 48 fb ff ff e8 f1 ed 83 f7 48 c7 c7 00 61 64 8e 4c 89 e6 [ 165.983630][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 165.989796][ C1] RAX: ffffffff8a032e63 RBX: ffffffff8a031c66 RCX: ffff88802e911e00 [ 165.997851][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.005954][ C1] RBP: 0000000000000000 R08: ffff88802e911e00 R09: 0000000000000003 [ 166.014260][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805e7423c0 [ 166.022518][ C1] R13: dffffc0000000000 R14: ffff88805e7428b0 R15: ffff88805e997c24 [ 166.030647][ C1] FS: 00007f4510c116c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 166.039749][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.046792][ C1] CR2: 000000110c45e9f0 CR3: 0000000020e27000 CR4: 00000000003506e0 [ 166.054976][ C1] Call Trace: [ 166.058403][ C1] [ 166.061305][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 166.067653][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 166.073159][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 166.080005][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 166.085603][ C1] __iterate_interfaces+0x243/0x500 [ 166.090889][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 166.097206][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 166.104461][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 166.110957][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 166.118156][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 166.123404][ C1] __hrtimer_run_queues+0x520/0xc40 [ 166.128785][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 166.135245][ C1] ? hw_scan_work+0xf60/0xf60 [ 166.140002][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 166.145266][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 166.151416][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 166.156921][ C1] handle_softirqs+0x280/0x820 [ 166.161728][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 166.166533][ C1] ? do_softirq+0x1a0/0x1a0 [ 166.171204][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 166.176458][ C1] __irq_exit_rcu+0xd3/0x190 [ 166.181119][ C1] ? irq_exit_rcu+0x20/0x20 [ 166.185673][ C1] irq_exit_rcu+0x9/0x20 [ 166.189987][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 166.195662][ C1] [ 166.198651][ C1] [ 166.201627][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 166.207780][ C1] RIP: 0010:__sanitizer_cov_trace_cmp4+0x82/0x90 [ 166.214160][ C1] Code: 8d 52 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 04 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 [ 166.234012][ C1] RSP: 0018:ffffc900035170b0 EFLAGS: 00000297 [ 166.240194][ C1] RAX: ffffffff813b3837 RBX: ffffffff81000000 RCX: 0000000000000002 [ 166.248262][ C1] RDX: ffff88802e911e00 RSI: 000000000005fc28 RDI: 000000000009c000 [ 166.256280][ C1] RBP: 000000000009c000 R08: ffffc90003517250 R09: 0000000000000009 [ 166.257803][ T42] ------------[ cut here ]------------ [ 166.264471][ C1] R10: 0000000000000004 R11: 0000000000000002 R12: ffffc90003517188 [ 166.270708][ T42] WARNING: CPU: 0 PID: 42 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 166.278783][ C1] R13: dffffc0000000000 R14: ffffc900035171bd R15: 000000000005fc28 [ 166.289907][ T42] Modules linked in: [ 166.298090][ C1] ? 0xffffffff81000000 [ 166.298114][ C1] ? unwind_next_frame+0x217/0x2970 [ 166.298144][ C1] unwind_next_frame+0x217/0x2970 [ 166.298169][ C1] ? __video_do_ioctl+0xc2f/0xd50 [ 166.298192][ C1] ? __video_do_ioctl+0xc30/0xd50 [ 166.298211][ C1] ? __video_do_ioctl+0xc30/0xd50 [ 166.302375][ T42] CPU: 0 PID: 42 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 166.306819][ C1] ? stack_trace_save+0x100/0x100 [ 166.306844][ C1] arch_stack_walk+0x144/0x190 [ 166.306872][ C1] ? __video_do_ioctl+0xc30/0xd50 [ 166.306898][ C1] stack_trace_save+0xaa/0x100 [ 166.306922][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 166.312368][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.317424][ C1] ? mark_lock+0x94/0x320 [ 166.322644][ T42] Workqueue: phy6 ieee80211_csa_finalize_work [ 166.327947][ C1] save_stack+0x125/0x230 [ 166.333289][ T42] [ 166.340747][ C1] ? __reset_page_owner+0x190/0x190 [ 166.340779][ C1] ? seqcount_lockdep_reader_access+0x10a/0x190 [ 166.340799][ C1] ? post_alloc_hook+0x1c1/0x200 [ 166.340823][ C1] ? get_page_from_freelist+0x1951/0x19e0 [ 166.340843][ C1] ? __alloc_pages+0x1f0/0x460 [ 166.340861][ C1] ? __vmalloc_node_range+0x956/0x1330 [ 166.345891][ T42] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 166.350690][ C1] ? vmalloc_user+0x74/0x80 [ 166.355903][ T42] Code: 48 89 df e8 fa 70 d7 f7 e9 dc fc ff ff e8 20 42 7f f7 eb 24 e8 19 42 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 08 42 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 fa 41 7f f7 48 8b 7c 24 08 4c 8b 7c [ 166.360697][ C1] ? vb2_vmalloc_alloc+0xef/0x330 [ 166.360727][ C1] ? __vb2_queue_alloc+0x794/0x1410 [ 166.365832][ T42] RSP: 0018:ffffc90000b2f9c0 EFLAGS: 00010293 [ 166.375931][ C1] ? vb2_core_reqbufs+0xa74/0x1180 [ 166.375955][ C1] ? v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 166.380306][ T42] [ 166.380316][ T42] RAX: ffffffff8a07d65e RBX: 0000000000000001 RCX: ffff888018e99e00 [ 166.386462][ C1] ? __video_do_ioctl+0xc30/0xd50 [ 166.390822][ T42] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 166.393245][ C1] ? get_page_from_freelist+0x6a8/0x19e0 [ 166.398517][ T42] RBP: dffffc0000000000 R08: ffff88805e7415af R09: 1ffff1100bce82b5 [ 166.404713][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 166.409673][ T42] R10: dffffc0000000000 R11: ffffed100bce82b6 R12: 0000000000000001 [ 166.415397][ C1] __set_page_owner+0x1d/0x60 [ 166.420289][ T42] R13: ffff88805e7425d9 R14: ffff88801f742c70 R15: ffff88801f742ce8 [ 166.425833][ C1] post_alloc_hook+0x1c1/0x200 [ 166.433343][ T42] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 166.437762][ C1] get_page_from_freelist+0x1951/0x19e0 [ 166.437809][ C1] ? __next_zones_zonelist+0x9d/0x130 [ 166.437842][ C1] ? prepare_alloc_pages+0x366/0x5f0 [ 166.457591][ T42] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.462563][ C1] __alloc_pages+0x1f0/0x460 [ 166.467785][ T42] CR2: 00007f491dd456b8 CR3: 000000002ee01000 CR4: 00000000003506f0 [ 166.473871][ C1] ? zone_statistics+0x170/0x170 [ 166.479013][ T42] Call Trace: [ 166.484561][ C1] ? alloc_pages+0x38c/0x740 [ 166.486946][ T42] [ 166.495000][ C1] __vmalloc_node_range+0x956/0x1330 [ 166.500078][ T42] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 166.508086][ C1] ? free_vm_area+0x50/0x50 [ 166.513801][ T42] ieee80211_csa_finalize+0x5a6/0xf20 [ 166.522068][ C1] vmalloc_user+0x74/0x80 [ 166.527199][ T42] ? mutex_lock_nested+0x20/0x20 [ 166.535173][ C1] ? vb2_vmalloc_alloc+0xef/0x330 [ 166.535201][ C1] vb2_vmalloc_alloc+0xef/0x330 [ 166.535227][ C1] ? __copy_timestamp+0x1f0/0x1f0 [ 166.535253][ C1] __vb2_queue_alloc+0x794/0x1410 [ 166.535303][ C1] vb2_core_reqbufs+0xa74/0x1180 [ 166.535322][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 166.535359][ C1] ? vb2_verify_memory_type+0x570/0x570 [ 166.540228][ T42] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 166.548162][ C1] ? vb2_reqbufs+0x15c/0x5a0 [ 166.548193][ C1] ? vb2_reqbufs+0x360/0x5a0 [ 166.548225][ C1] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 166.552988][ T42] ? ieee80211_csa_finalize_work+0x140/0x140 [ 166.562219][ C1] __video_do_ioctl+0xc30/0xd50 [ 166.562249][ C1] ? video_ioctl2+0x30/0x30 [ 166.567833][ T42] ? read_lock_is_recursive+0x20/0x20 [ 166.573219][ C1] ? video_usercopy+0x4fe/0x1380 [ 166.578654][ T42] ieee80211_csa_finalize_work+0xf6/0x140 [ 166.585195][ C1] video_usercopy+0x89f/0x1380 [ 166.589920][ T42] ? process_scheduled_works+0x96f/0x15d0 [ 166.597898][ C1] ? video_ioctl2+0x30/0x30 [ 166.602817][ T42] process_scheduled_works+0xa5d/0x15d0 [ 166.606096][ C1] ? v4l_printk_ioctl+0x160/0x160 [ 166.610750][ T42] ? worker_attach_to_pool+0x380/0x380 [ 166.613667][ C1] v4l2_ioctl+0x18a/0x1e0 [ 166.618959][ T42] ? assign_work+0x3d2/0x5d0 [ 166.625452][ C1] ? v4l2_poll+0x2b0/0x2b0 [ 166.630103][ T42] worker_thread+0xa55/0xfc0 [ 166.635436][ C1] __se_sys_ioctl+0xfd/0x170 [ 166.640030][ T42] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 166.644817][ C1] do_syscall_64+0x55/0xa0 [ 166.650018][ T42] ? _raw_spin_unlock+0x40/0x40 [ 166.654965][ C1] ? clear_bhb_loop+0x40/0x90 [ 166.660049][ T42] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 166.665028][ C1] ? clear_bhb_loop+0x40/0x90 [ 166.670015][ T42] kthread+0x2fa/0x390 [ 166.675698][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.681277][ T42] ? pr_cont_work+0x560/0x560 [ 166.687268][ C1] RIP: 0033:0x7f450fd9c799 [ 166.691848][ T42] ? kthread_blkcg+0xd0/0xd0 [ 166.696426][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.701935][ T42] ret_from_fork+0x48/0x80 [ 166.708218][ C1] RSP: 002b:00007f4510c11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.708252][ C1] RAX: ffffffffffffffda RBX: 00007f4510016180 RCX: 00007f450fd9c799 [ 166.708269][ C1] RDX: 00002000000001c0 RSI: 00000000c0145608 RDI: 0000000000000009 [ 166.713127][ T42] ? kthread_blkcg+0xd0/0xd0 [ 166.717932][ C1] RBP: 00007f450fe32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 166.717951][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.717964][ C1] R13: 00007f4510016218 R14: 00007f4510016180 R15: 00007fffb00a8028 [ 166.723506][ T42] ret_from_fork_asm+0x11/0x20 [ 166.728572][ C1] [ 166.728586][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 166.728595][ C1] CPU: 1 PID: 6925 Comm: syz.2.263 Not tainted syzkaller #0 [ 166.728613][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.728622][ C1] Call Trace: [ 166.728631][ C1] [ 166.728638][ C1] dump_stack_lvl+0x18c/0x250 [ 166.728668][ C1] ? show_regs_print_info+0x20/0x20 [ 166.728691][ C1] ? load_image+0x400/0x400 [ 166.728731][ C1] panic+0x2dc/0x730 [ 166.728756][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 166.728791][ C1] __warn+0x2e0/0x470 [ 166.728808][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 166.728832][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 166.728851][ C1] report_bug+0x2be/0x4f0 [ 166.728867][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 166.728887][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 166.728906][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 166.728925][ C1] handle_bug+0xcf/0x120 [ 166.728948][ C1] exc_invalid_op+0x1a/0x50 [ 166.728971][ C1] asm_exc_invalid_op+0x1a/0x20 [ 166.728990][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 166.729011][ C1] Code: 24 4c 89 e7 e8 2e a7 c1 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 09 ee 83 f7 0f 0b e9 f6 f7 ff ff e8 fd ed 83 f7 <0f> 0b e9 48 fb ff ff e8 f1 ed 83 f7 48 c7 c7 00 61 64 8e 4c 89 e6 [ 166.729024][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 166.729041][ C1] RAX: ffffffff8a032e63 RBX: ffffffff8a031c66 RCX: ffff88802e911e00 [ 166.729053][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.729064][ C1] RBP: 0000000000000000 R08: ffff88802e911e00 R09: 0000000000000003 [ 166.729075][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805e7423c0 [ 166.729086][ C1] R13: dffffc0000000000 R14: ffff88805e7428b0 R15: ffff88805e997c24 [ 166.729101][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 166.729122][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 166.729148][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 166.729168][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 166.729196][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 166.729220][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 166.729251][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 166.729278][ C1] __iterate_interfaces+0x243/0x500 [ 166.729300][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 166.729320][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 166.729344][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 166.729362][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 166.729389][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 166.729411][ C1] __hrtimer_run_queues+0x520/0xc40 [ 166.729429][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 166.729455][ C1] ? hw_scan_work+0xf60/0xf60 [ 166.729480][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 166.729497][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 166.729526][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 166.729548][ C1] handle_softirqs+0x280/0x820 [ 166.729571][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 166.729592][ C1] ? do_softirq+0x1a0/0x1a0 [ 166.729613][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 166.729637][ C1] __irq_exit_rcu+0xd3/0x190 [ 166.729653][ C1] ? irq_exit_rcu+0x20/0x20 [ 166.729679][ C1] irq_exit_rcu+0x9/0x20 [ 166.729693][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 166.729719][ C1] [ 166.729725][ C1] [ 166.729732][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 166.729750][ C1] RIP: 0010:__sanitizer_cov_trace_cmp4+0x82/0x90 [ 166.729771][ C1] Code: 8d 52 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 04 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 [ 166.729783][ C1] RSP: 0018:ffffc900035170b0 EFLAGS: 00000297 [ 166.729798][ C1] RAX: ffffffff813b3837 RBX: ffffffff81000000 RCX: 0000000000000002 [ 166.729809][ C1] RDX: ffff88802e911e00 RSI: 000000000005fc28 RDI: 000000000009c000 [ 166.729820][ C1] RBP: 000000000009c000 R08: ffffc90003517250 R09: 0000000000000009 [ 166.729831][ C1] R10: 0000000000000004 R11: 0000000000000002 R12: ffffc90003517188 [ 166.729841][ C1] R13: dffffc0000000000 R14: ffffc900035171bd R15: 000000000005fc28 [ 166.729857][ C1] ? 0xffffffff81000000 [ 166.729873][ C1] ? unwind_next_frame+0x217/0x2970 [ 166.729896][ C1] unwind_next_frame+0x217/0x2970 [ 166.729917][ C1] ? __video_do_ioctl+0xc2f/0xd50 [ 166.729937][ C1] ? __video_do_ioctl+0xc30/0xd50 [ 166.729954][ C1] ? __video_do_ioctl+0xc30/0xd50 [ 166.729970][ C1] ? stack_trace_save+0x100/0x100 [ 166.729989][ C1] arch_stack_walk+0x144/0x190 [ 166.730012][ C1] ? __video_do_ioctl+0xc30/0xd50 [ 166.730032][ C1] stack_trace_save+0xaa/0x100 [ 166.730052][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 166.730071][ C1] ? mark_lock+0x94/0x320 [ 166.730099][ C1] save_stack+0x125/0x230 [ 166.730125][ C1] ? __reset_page_owner+0x190/0x190 [ 166.730147][ C1] ? seqcount_lockdep_reader_access+0x10a/0x190 [ 166.730164][ C1] ? post_alloc_hook+0x1c1/0x200 [ 166.730185][ C1] ? get_page_from_freelist+0x1951/0x19e0 [ 166.730200][ C1] ? __alloc_pages+0x1f0/0x460 [ 166.730214][ C1] ? __vmalloc_node_range+0x956/0x1330 [ 166.730233][ C1] ? vmalloc_user+0x74/0x80 [ 166.730251][ C1] ? vb2_vmalloc_alloc+0xef/0x330 [ 166.730273][ C1] ? __vb2_queue_alloc+0x794/0x1410 [ 166.730290][ C1] ? vb2_core_reqbufs+0xa74/0x1180 [ 166.730307][ C1] ? v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 166.730327][ C1] ? __video_do_ioctl+0xc30/0xd50 [ 166.730346][ C1] ? get_page_from_freelist+0x6a8/0x19e0 [ 166.730364][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 166.730388][ C1] __set_page_owner+0x1d/0x60 [ 166.730413][ C1] post_alloc_hook+0x1c1/0x200 [ 166.730439][ C1] get_page_from_freelist+0x1951/0x19e0 [ 166.730475][ C1] ? __next_zones_zonelist+0x9d/0x130 [ 166.730500][ C1] ? prepare_alloc_pages+0x366/0x5f0 [ 166.730531][ C1] __alloc_pages+0x1f0/0x460 [ 166.730549][ C1] ? zone_statistics+0x170/0x170 [ 166.730570][ C1] ? alloc_pages+0x38c/0x740 [ 166.730595][ C1] __vmalloc_node_range+0x956/0x1330 [ 166.730643][ C1] ? free_vm_area+0x50/0x50 [ 166.730675][ C1] vmalloc_user+0x74/0x80 [ 166.730696][ C1] ? vb2_vmalloc_alloc+0xef/0x330 [ 166.730725][ C1] vb2_vmalloc_alloc+0xef/0x330 [ 166.730748][ C1] ? __copy_timestamp+0x1f0/0x1f0 [ 166.730772][ C1] __vb2_queue_alloc+0x794/0x1410 [ 166.730814][ C1] vb2_core_reqbufs+0xa74/0x1180 [ 166.730831][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 166.730862][ C1] ? vb2_verify_memory_type+0x570/0x570 [ 166.730879][ C1] ? vb2_reqbufs+0x15c/0x5a0 [ 166.730905][ C1] ? vb2_reqbufs+0x360/0x5a0 [ 166.730934][ C1] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 166.730959][ C1] __video_do_ioctl+0xc30/0xd50 [ 166.730985][ C1] ? video_ioctl2+0x30/0x30 [ 166.731007][ C1] ? video_usercopy+0x4fe/0x1380 [ 166.731027][ C1] video_usercopy+0x89f/0x1380 [ 166.731049][ C1] ? video_ioctl2+0x30/0x30 [ 166.731068][ C1] ? v4l_printk_ioctl+0x160/0x160 [ 166.731106][ C1] v4l2_ioctl+0x18a/0x1e0 [ 166.731130][ C1] ? v4l2_poll+0x2b0/0x2b0 [ 166.731153][ C1] __se_sys_ioctl+0xfd/0x170 [ 166.731176][ C1] do_syscall_64+0x55/0xa0 [ 166.731197][ C1] ? clear_bhb_loop+0x40/0x90 [ 166.731215][ C1] ? clear_bhb_loop+0x40/0x90 [ 166.731235][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.731253][ C1] RIP: 0033:0x7f450fd9c799 [ 166.731267][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.731279][ C1] RSP: 002b:00007f4510c11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.731296][ C1] RAX: ffffffffffffffda RBX: 00007f4510016180 RCX: 00007f450fd9c799 [ 166.731308][ C1] RDX: 00002000000001c0 RSI: 00000000c0145608 RDI: 0000000000000009 [ 166.731319][ C1] RBP: 00007f450fe32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 166.731329][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.731340][ C1] R13: 00007f4510016218 R14: 00007f4510016180 R15: 00007fffb00a8028 [ 166.731367][ C1] [ 166.734423][ C1] Kernel Offset: disabled