last executing test programs: 6m17.443317076s ago: executing program 3 (id=766): bind$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x20003) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) 6m14.030144929s ago: executing program 3 (id=772): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(r0, 0x4068aea3, &(0x7f0000002a80)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) 6m13.57289621s ago: executing program 3 (id=774): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x4e26, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000000}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0xfffffffe, @private2, 0x557}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/250, 0xfa}], 0x1}, 0x10009}], 0x1, 0x10000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, 0x0) r7 = syz_ublk_add_dev(r4, r5, r6, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 6m10.630192962s ago: executing program 3 (id=779): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118720000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x1, 0x0, "dd370e4d804da29f"}}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') 6m8.472785975s ago: executing program 3 (id=781): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000002000000732a80ff00000000632ac8ff00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0xe, 0x0, &(0x7f00000005c0)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) 6m5.595527396s ago: executing program 3 (id=783): syz_io_uring_setup(0x141c, &(0x7f0000000140)={0x0, 0x2af2, 0x80, 0x3, 0x139}, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_io_uring_modify_offsets$generic(0x0, r0, 0x2c, 0x10000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {0x6}, @addr={0x7, 0x3}}, {0xd, 0x8, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x100, 0x2}, {0x0, 0xc}, {}, @control}, {0x0, 0xfb, 0x0, 0x0, @time, {0x3, 0x1}, {0x4}, @raw32={[0x7ff, 0x6, 0x3]}}], 0x70) 5m49.124741979s ago: executing program 32 (id=783): syz_io_uring_setup(0x141c, &(0x7f0000000140)={0x0, 0x2af2, 0x80, 0x3, 0x139}, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_io_uring_modify_offsets$generic(0x0, r0, 0x2c, 0x10000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {0x6}, @addr={0x7, 0x3}}, {0xd, 0x8, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x100, 0x2}, {0x0, 0xc}, {}, @control}, {0x0, 0xfb, 0x0, 0x0, @time, {0x3, 0x1}, {0x4}, @raw32={[0x7ff, 0x6, 0x3]}}], 0x70) 1m49.593051406s ago: executing program 2 (id=1332): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='4\n', 0x2) 1m49.340983232s ago: executing program 2 (id=1334): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) write$input_event(0xffffffffffffffff, &(0x7f0000000040)={{}, 0x5, 0xcc66, 0x2}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x14c) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='tcpci 0x22', 0xa) 1m48.310025527s ago: executing program 2 (id=1336): socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) sigaltstack(&(0x7f0000000180)={&(0x7f0000002880)=""/4118, 0x3, 0x1016}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 1m48.162591921s ago: executing program 2 (id=1337): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_io_uring_setup(0x3187, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0), &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) capset(0x0, &(0x7f0000000680)={0xffff0162, 0x8, 0x27, 0x693d, 0x6, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) alarm(0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000000600)="$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") 1m45.211136584s ago: executing program 2 (id=1345): r0 = userfaultfd(0x801) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000857000/0x4000)=nil, 0x400000, 0x3, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 1m42.632985896s ago: executing program 2 (id=1358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) fdatasync(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000001c00), 0x12) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rfcomm\x00') pread64(r4, &(0x7f0000000080)=""/39, 0x27, 0x8) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x400}) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000000)={0x6, 0x7}) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1fd) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/isp1760/new_id\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1af4 1000 ffff', 0xe) 1m42.218600497s ago: executing program 33 (id=1358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) fdatasync(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000001c00), 0x12) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rfcomm\x00') pread64(r4, &(0x7f0000000080)=""/39, 0x27, 0x8) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x400}) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000000)={0x6, 0x7}) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1fd) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/isp1760/new_id\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1af4 1000 ffff', 0xe) 1m14.419054088s ago: executing program 5 (id=1361): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='4\n', 0x2) 1m13.994619418s ago: executing program 5 (id=1428): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113200000000008510400002"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) write$input_event(0xffffffffffffffff, &(0x7f0000000040)={{}, 0x5, 0xcc66, 0x2}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x14c) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='tcpci 0x22', 0xa) 1m13.025041542s ago: executing program 5 (id=1429): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@test_dummy_encryption_v1}, {@errors_remount}, {@nogrpid}]}, 0x1, 0x43f, &(0x7f0000001d80)="$eJzs281vG0UbAPBn7aR50483oSofTQsECiLiI2nSUnrgAgKJA0hIcCjHkKRVqNugJki0iiAgVI6oEnfEEYm/gBNcEHBC4gp3VKlCubRwMlp7N7Fd2zipExf8+0nbzuyOPfN4d+yZnWwAfWs8/SeJ2B8Rv0bESDVbX2C8+t+t9dW5P9dX55Iol9/4I6mUu7m+OpcXzV+3L88MRBQ+SeJIk3qXL185P1sqLVzK8lMrF96dWr585ZnFC7PnFs4tXJw5ffrkiennTs0825U407hujn2wdPTwK29de23uzLW3f/w6yeNviKNLxtsdfLxc7nJ1vXWgJp0M9LAhbEmx2k1jsNL/R6IYmydvJF7+uKeNA3ZUuVwu39f68FoZ+A9LotctAHoj/6FP57/5tktDj7vCjReqE6A07lvpNpQfGYhClhpsmN9203hEnFn764t0i525DwEAUOfbdPzzdLPxXyFq7wv9P1tDGY2IeyLiYESciohDEXFvRKXs/RHxQLNKktb1Ny6S3D7+KVzfdnAdSMd/z2drW/mW1ZsXGS1muQOV+AeTs4ulhePZZzIRg0NpfrpNHd+99MtnrY7Vjv/SLa0/Hwtm7bg+MFT/mvnZldk7ibnWjY8ixgaaxZ9srASkp+9wRIx1+qbF+uzik18dbVX0n+NvowvrTOUvI56onv+1aIg/l7Rfn5z6X5QWjk/lV8Xtfvr56uut6r+j+LsgPf97m17/G/GPJrXrtctbr+Pqb5+2nNNs9/rfk7xZt+/92ZWVS9MRe5JXq42u3T/TUG5ms3wa/8Sx5v3/YGx+EkciIr2IH4yIhyLi4aztj0TEoxFxrE38P7z42Dvbi3+ozbt2Rxr//JbO/2ZiTzTuaZ4onv/+m7pKRzuNP7Lzf7KSmsj2dPL910m7tnc1AwAAwL9PISL2R1KY3EgXCpOT1b/hPxR7C6Wl5ZWnzi69d3G++ozAaAwW8jtdIzX3Q6ezaX2en2nIn8juG39eHK7kJ+eWSvO9Dh763L4W/T/1e7HXrQN2nOe1oH/p/9C/9H/oX/o/9K8m/X+4F+0Adl+z3/8Pe9AOYPc19H/LftBHzP+hf+n/0L/0f+hLy8PR7Nn44ejw+XmJfk1E4a5ohsQOJXr9zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAdfwcAAP//0OLkSA==") fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) creat(&(0x7f0000000580)='./bus\x00', 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000040)={0x1, 0x6}) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x4, 0x7, 0x0, 0x40}, 0xc) 1m11.797386402s ago: executing program 5 (id=1431): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_io_uring_setup(0x3187, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0), &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) capset(0x0, &(0x7f0000000680)={0xffff0162, 0x8, 0x27, 0x693d, 0x6, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) alarm(0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000000600)="$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") 1m9.404055s ago: executing program 5 (id=1433): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_io_uring_setup(0x3187, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0), &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) capset(0x0, &(0x7f0000000680)={0xffff0162, 0x8, 0x27, 0x693d, 0x6, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) alarm(0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 1m9.02192153s ago: executing program 5 (id=1436): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='4\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n', 0x2) close(r2) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) mount(0x0, 0x0, &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/nullb1\x00', 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) 1m8.352866436s ago: executing program 34 (id=1436): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='4\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n', 0x2) close(r2) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) mount(0x0, 0x0, &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/nullb1\x00', 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) 18.094132967s ago: executing program 4 (id=1544): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='4\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n', 0x2) close(r2) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) mount(0x0, 0x0, &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/nullb1\x00', 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000009c0), 0x5b0, r3}, 0x38) 15.734511545s ago: executing program 4 (id=1548): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x4042) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 14.455037836s ago: executing program 4 (id=1549): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113200000000008510400002000000b7000000000000009500c20000"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) write$input_event(0xffffffffffffffff, &(0x7f0000000040)={{}, 0x5, 0xcc66, 0x2}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x14c) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='tcpci 0x22', 0xa) 14.3169972s ago: executing program 6 (id=1550): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@test_dummy_encryption_v1}, {@errors_remount}, {@nogrpid}]}, 0x1, 0x43f, &(0x7f0000001d80)="$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") fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) creat(&(0x7f0000000580)='./bus\x00', 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000040)={0x1, 0x6}) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x4, 0x7, 0x0, 0x40}, 0xc) 13.669138196s ago: executing program 6 (id=1552): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 13.668244286s ago: executing program 4 (id=1553): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 12.196181642s ago: executing program 6 (id=1556): socket$nl_route(0x10, 0x3, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={[&(0x7f0000000040)='&@!\x00', &(0x7f0000000080)='\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000100)='\x00', &(0x7f0000000200)='\x00']}, &(0x7f0000000340)={[0x0, &(0x7f00000002c0)='\x00', &(0x7f0000000300)='*.#\x00']}, 0x800) r0 = socket$inet6(0xa, 0x1, 0x7db6) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, &(0x7f00000000c0), 0xffffffffffffffff, 0xfe, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000300)={'\x00', 0x401, 0x7, 0x1, 0x6, 0x800100000000}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) madvise(&(0x7f00004b8000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 10.108226763s ago: executing program 4 (id=1559): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 7.952889935s ago: executing program 0 (id=1562): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113200000000008510400002000000b7000000000000009500c20000000000"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) write$input_event(0xffffffffffffffff, &(0x7f0000000040)={{}, 0x5, 0xcc66, 0x2}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x14c) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='tcpci 0x22', 0xa) 7.824088909s ago: executing program 4 (id=1563): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4048012) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x42}, 0x28) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x76, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x40, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0xf51, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [@fragment={0x3a, 0x0, 0x81, 0x0, 0x0, 0x1, 0x65}], "d2588e45cd1357bc"}}}}}}}, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) 7.587493934s ago: executing program 1 (id=1564): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 7.487004767s ago: executing program 0 (id=1565): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000200"}) 5.818097308s ago: executing program 1 (id=1566): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_io_uring_setup(0x3187, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0), &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) capset(0x0, &(0x7f0000000680)={0xffff0162, 0x8, 0x27, 0x693d, 0x6, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) alarm(0x38) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 4.724447095s ago: executing program 0 (id=1567): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 4.073405361s ago: executing program 1 (id=1568): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x4042) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 3.667221021s ago: executing program 1 (id=1569): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@nombcache}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpquota}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() tkill(r4, 0xb) epoll_create(0x2) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7) 3.438255576s ago: executing program 0 (id=1570): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_io_uring_setup(0x3187, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0), &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) capset(0x0, &(0x7f0000000680)={0xffff0162, 0x8, 0x27, 0x693d, 0x6, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) alarm(0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000000600)="$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") 3.325482909s ago: executing program 6 (id=1571): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.67023104s ago: executing program 1 (id=1572): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@test_dummy_encryption_v1}, {@errors_remount}, {@nogrpid}]}, 0x1, 0x43f, &(0x7f0000001d80)="$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") fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) creat(&(0x7f0000000580)='./bus\x00', 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000040)={0x1, 0x6}) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x4, 0x7, 0x0, 0x40}, 0xc) 1.068932434s ago: executing program 0 (id=1573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x42}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 939.084417ms ago: executing program 6 (id=1574): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 937.613617ms ago: executing program 1 (id=1575): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000200"}) 172.980136ms ago: executing program 6 (id=1576): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8080, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1\x00', 0x200) 0s ago: executing program 0 (id=1577): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000100)={[{@mblk_io_submit}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) kernel console output (not intermixed with test programs): loop3: detected capacity change from 0 to 512 [ 188.677189][ T5759] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.258975][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 192.266175][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 192.272581][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 192.332212][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 193.151975][ T6590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.178'. [ 194.298366][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.304820][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.005087][ T6607] loop2: detected capacity change from 0 to 256 [ 195.097383][ T6607] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 195.402291][ T6607] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 195.540049][ T6607] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 195.615772][ T6607] exFAT-fs (loop2): failed to load alloc-bitmap [ 195.632818][ T6607] exFAT-fs (loop2): failed to recognize exfat type [ 203.673669][ T6645] netlink: 44 bytes leftover after parsing attributes in process `syz.2.192'. [ 204.234142][ T6653] Illegal XDP return value 4294967199 on prog (id 13) dev N/A, expect packet loss! [ 208.970380][ T6676] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 212.266854][ T6694] loop0: detected capacity change from 0 to 256 [ 212.299272][ T6694] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.323060][ T6694] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 212.401215][ T6694] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 213.059369][ T6694] exFAT-fs (loop0): failed to load alloc-bitmap [ 213.094880][ T6694] exFAT-fs (loop0): failed to recognize exfat type [ 214.617608][ T6701] loop3: detected capacity change from 0 to 512 [ 214.674517][ T5759] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 217.655311][ T6721] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 217.704979][ T6720] netlink: 44 bytes leftover after parsing attributes in process `syz.2.214'. [ 226.760518][ T5085] Bluetooth: hci0: unexpected event for opcode 0x000e [ 229.224059][ T6770] loop2: detected capacity change from 0 to 512 [ 231.479240][ T6780] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 231.550880][ T6782] loop0: detected capacity change from 0 to 1024 [ 231.730765][ T6782] EXT4-fs: Ignoring removed bh option [ 232.039705][ T6782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.154929][ T6782] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 235.519781][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.550554][ T6812] loop3: detected capacity change from 0 to 512 [ 235.600972][ T5759] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.283017][ T8] IPVS: starting estimator thread 0... [ 242.343958][ T6847] loop3: detected capacity change from 0 to 512 [ 242.382686][ T6845] IPVS: using max 21 ests per chain, 50400 per kthread [ 242.388369][ T5759] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 248.631347][ T6882] syz.0.256 uses obsolete (PF_INET,SOCK_PACKET) [ 248.657768][ T6881] loop3: detected capacity change from 0 to 512 [ 249.886353][ T5759] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.309506][ T6917] trusted_key: encrypted_key: insufficient parameters specified [ 254.329462][ T6917] process 'syz.0.265' launched './file0' with NULL argv: empty string added [ 256.622629][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.628962][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.899820][ T6933] loop0: detected capacity change from 0 to 512 [ 257.955541][ T5085] Bluetooth: hci0: unexpected event for opcode 0x000e [ 258.013827][ T5759] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.819824][ T7014] loop2: detected capacity change from 0 to 512 [ 274.075560][ T5759] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 290.238744][ T7113] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 296.130780][ T7141] loop2: detected capacity change from 0 to 512 [ 296.154590][ T7141] EXT4-fs: Ignoring removed mblk_io_submit option [ 296.274058][ T7141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.334494][ T7141] ext4 filesystem being mounted at /80/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.290381][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.549797][ T7157] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 315.340969][ T7254] loop2: detected capacity change from 0 to 512 [ 315.380659][ T7254] EXT4-fs (loop2): Test dummy encryption mode enabled [ 315.423643][ T7254] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 316.028165][ T7254] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 316.122344][ T7254] EXT4-fs (loop2): 1 truncate cleaned up [ 316.129308][ T7254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.396243][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.402642][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.444481][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.003441][ T7295] loop3: detected capacity change from 0 to 2048 [ 321.185894][ T7295] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.615942][ T7297] loop1: detected capacity change from 0 to 2048 [ 321.720192][ T7297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.733227][ T7297] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.784767][ T7297] fs-verity: sha512 using implementation "sha512-avx2" [ 322.020822][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.352024][ T7334] dlm: no local IP address has been set [ 327.357976][ T7334] dlm: cannot start dlm midcomms -107 [ 335.222581][ T6646] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 335.402269][ T6646] usb 4-1: Using ep0 maxpacket: 16 [ 335.410091][ T6646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.702148][ T6646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.711932][ T6646] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 336.733453][ T6646] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 336.752300][ T6646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.763957][ T6646] usb 4-1: config 0 descriptor?? [ 337.205412][ T6646] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 337.222202][ T6646] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 337.238510][ T6646] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 337.258717][ T6646] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 337.276551][ T6646] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 337.292156][ T6646] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 337.301674][ T6646] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 337.314733][ T6646] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 337.335556][ T6646] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 337.348793][ T6646] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 337.362379][ T6646] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 337.378289][ T6646] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 337.392568][ T6646] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 337.416572][ T6646] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 337.438740][ T6646] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 337.493745][ T6646] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input5 [ 337.537671][ T6646] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 337.590122][ T6646] usb 4-1: USB disconnect, device number 3 [ 337.676607][ T7387] fido_id[7387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 337.685612][ T7378] loop2: detected capacity change from 0 to 32768 [ 337.748545][ T7378] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.392 (7378) [ 337.907646][ T7378] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 338.001883][ T7378] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 338.057246][ T7378] BTRFS warning (device loop2): excessive commit interval 3581 [ 338.122200][ T7378] BTRFS info (device loop2): force zlib compression, level 3 [ 338.160853][ T7378] BTRFS info (device loop2): metadata ratio 107050 [ 338.211976][ T7378] BTRFS info (device loop2): turning on flush-on-commit [ 338.248690][ T7378] BTRFS info (device loop2): max_inline at 4096 [ 338.259320][ T7378] BTRFS info (device loop2): using free space tree [ 338.306998][ T7378] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 338.322266][ T7378] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 338.383035][ T7378] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 338.406571][ T7378] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 338.428024][ T7378] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 338.447110][ T7378] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 338.483565][ T7378] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 338.537382][ T7378] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 339.477844][ T7378] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 340.298727][ T7378] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 341.012570][ T7378] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 341.060823][ T7378] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 341.124845][ T7378] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 341.236481][ T7378] BTRFS error (device loop2): open_ctree failed: -12 [ 341.304612][ T5759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (5759) [ 341.666585][ T7434] loop0: detected capacity change from 0 to 2048 [ 341.807426][ T7434] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.864137][ T7441] kvm: kvm [7440]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc1) = 0x60000000800 [ 342.883369][ T7441] kvm: kvm [7440]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc2) = 0x60000000800 [ 342.911387][ T7441] kvm: kvm [7440]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x11e) = 0x60000001800 [ 342.937946][ T7441] kvm: kvm [7440]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x186) = 0x60000002000 [ 342.957737][ T7441] kvm: kvm [7440]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x187) = 0x60000004800 [ 343.368924][ T7439] loop3: detected capacity change from 0 to 32768 [ 343.483689][ T7439] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 344.112231][ T7439] XFS (loop3): Ending clean mount [ 344.296311][ T5774] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 346.512469][ T5807] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 346.803214][ T5807] usb 1-1: config 9 has an invalid interface number: 245 but max is 0 [ 346.852244][ T5807] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 347.119679][ T5807] usb 1-1: config 9 has no interface number 0 [ 347.134239][ T5807] usb 1-1: New USB device found, idVendor=8086, idProduct=1155, bcdDevice=a0.72 [ 347.190068][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.219278][ T5807] usb 1-1: Product: syz [ 347.232145][ T5807] usb 1-1: Manufacturer: syz [ 347.244767][ T5807] usb 1-1: SerialNumber: syz [ 347.516989][ T5807] usb 1-1: USB disconnect, device number 2 [ 351.416494][ T7526] loop1: detected capacity change from 0 to 4096 [ 351.468788][ T7526] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 351.584233][ T7526] ntfs3: loop1: Failed to load $Extend (-22). [ 351.604677][ T7526] ntfs3: loop1: Failed to initialize $Extend. [ 353.651662][ T7547] kvm: kvm [7546]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc1) = 0x60000000800 [ 353.663276][ T7547] kvm: kvm [7546]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc2) = 0x60000000800 [ 353.675494][ T7547] kvm: kvm [7546]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x11e) = 0x60000001800 [ 353.702684][ T7547] kvm: kvm [7546]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x186) = 0x60000002000 [ 353.711916][ T7547] kvm: kvm [7546]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x187) = 0x60000004800 [ 354.104364][ T7558] dlm: no local IP address has been set [ 354.109927][ T7558] dlm: cannot start dlm midcomms -107 [ 358.783296][ T7599] kvm: kvm [7598]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc1) = 0x60000000800 [ 358.821105][ T7599] kvm: kvm [7598]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc2) = 0x60000000800 [ 358.844778][ T7599] kvm: kvm [7598]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x11e) = 0x60000001800 [ 358.875709][ T7599] kvm: kvm [7598]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x186) = 0x60000002000 [ 358.902260][ T7599] kvm: kvm [7598]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x187) = 0x60000004800 [ 360.289611][ T7621] loop0: detected capacity change from 0 to 1024 [ 361.252205][ T5770] Bluetooth: hci3: command 0x0406 tx timeout [ 361.747452][ T7621] kAFS: No cell specified [ 363.652635][ T7647] loop1: detected capacity change from 0 to 256 [ 363.917305][ T7647] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 363.943633][ T7647] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 364.085439][ T7647] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 364.347829][ T7647] exFAT-fs (loop1): failed to load alloc-bitmap [ 364.445453][ T7647] exFAT-fs (loop1): failed to recognize exfat type [ 368.136628][ T7687] netlink: 'syz.1.469': attribute type 1 has an invalid length. [ 368.306158][ T7695] loop2: detected capacity change from 0 to 256 [ 368.336148][ T7695] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 368.382138][ T7695] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 368.416763][ T7695] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 368.454157][ T7695] exFAT-fs (loop2): failed to load alloc-bitmap [ 368.460499][ T7695] exFAT-fs (loop2): failed to recognize exfat type [ 373.256071][ T7732] loop2: detected capacity change from 0 to 256 [ 373.282412][ T7732] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 373.305710][ T7732] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 373.384447][ T7732] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 373.439675][ T7732] exFAT-fs (loop2): failed to load alloc-bitmap [ 373.480408][ T7732] exFAT-fs (loop2): failed to recognize exfat type [ 378.742993][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.749438][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.946586][ T7785] loop1: detected capacity change from 0 to 256 [ 381.029641][ T7785] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 381.117624][ T7785] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 381.619233][ T7785] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 381.988571][ T7785] exFAT-fs (loop1): failed to load alloc-bitmap [ 382.009737][ T7785] exFAT-fs (loop1): failed to recognize exfat type [ 386.233693][ T5952] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 386.428890][ T5952] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.472209][ T5952] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 386.499270][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.201862][ T5952] wacom 0003:056A:033B.0003: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 388.215037][ T5952] wacom 0003:056A:033B.0003: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 388.227301][ T5952] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0003/input/input6 [ 388.608909][ T5952] usb 1-1: USB disconnect, device number 3 [ 388.649654][ T7827] fido_id[7827]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 392.289792][ T7866] netlink: 44 bytes leftover after parsing attributes in process `syz.0.519'. [ 394.962660][ T7868] loop0: detected capacity change from 0 to 4096 [ 394.991672][ T7868] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 395.051724][ T7868] ntfs3: loop0: Failed to load $Extend (-22). [ 395.072158][ T7868] ntfs3: loop0: Failed to initialize $Extend. [ 398.027518][ T7901] netlink: 44 bytes leftover after parsing attributes in process `syz.1.528'. [ 402.896283][ T7925] loop0: detected capacity change from 0 to 4096 [ 402.917687][ T7925] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 403.053251][ T7925] ntfs3: loop0: Failed to load $Extend (-22). [ 403.059384][ T7925] ntfs3: loop0: Failed to initialize $Extend. [ 404.822234][ T7950] netlink: 44 bytes leftover after parsing attributes in process `syz.3.539'. [ 410.266817][ T7982] netlink: 44 bytes leftover after parsing attributes in process `syz.0.550'. [ 414.301348][ T7977] loop2: detected capacity change from 0 to 4096 [ 414.347834][ T7977] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 414.448578][ T7977] ntfs3: loop2: Failed to load $Extend (-22). [ 414.502350][ T7977] ntfs3: loop2: Failed to initialize $Extend. [ 414.762234][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 415.522766][ T8016] Zero length message leads to an empty skb [ 415.861676][ T8020] tipc: Started in network mode [ 415.867087][ T8020] tipc: Node identity 7f000001, cluster identity 4711 [ 415.874592][ T8020] tipc: New replicast peer: 127.0.0.2 [ 415.881502][ T8020] tipc: Enabled bearer , priority 10 [ 417.015034][ T23] tipc: Node number set to 2130706433 [ 417.476033][ T8028] loop0: detected capacity change from 0 to 1024 [ 417.673759][ T8028] kAFS: No cell specified [ 421.626256][ T8048] loop1: detected capacity change from 0 to 1024 [ 423.291680][ T8064] loop3: detected capacity change from 0 to 1024 [ 423.320016][ T8064] EXT4-fs: Ignoring removed bh option [ 423.388824][ T8064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.956871][ T8081] netlink: 44 bytes leftover after parsing attributes in process `syz.2.575'. [ 426.260177][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.556568][ T8098] warning: `syz.0.580' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 427.654784][ T8099] loop1: detected capacity change from 0 to 1024 [ 429.697424][ T8123] netlink: 44 bytes leftover after parsing attributes in process `syz.1.584'. [ 434.526573][ T8157] netlink: 44 bytes leftover after parsing attributes in process `syz.2.597'. [ 439.831861][ T8194] netlink: 44 bytes leftover after parsing attributes in process `syz.0.606'. [ 440.512730][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.519076][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.693675][ T8219] loop0: detected capacity change from 0 to 1024 [ 446.035819][ T8219] kAFS: No cell specified [ 446.946084][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'. [ 447.071509][ T8230] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 449.106618][ T8234] dlm: no local IP address has been set [ 449.112303][ T8234] dlm: cannot start dlm midcomms -107 [ 455.286536][ T8250] loop2: detected capacity change from 0 to 4096 [ 455.382536][ T8250] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 455.562212][ T8250] ntfs3: loop2: Failed to load $Extend (-22). [ 455.568344][ T8250] ntfs3: loop2: Failed to initialize $Extend. [ 458.656179][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 458.744422][ T8284] dlm: no local IP address has been set [ 458.750017][ T8284] dlm: cannot start dlm midcomms -107 [ 459.787830][ T8295] netlink: 'syz.3.636': attribute type 12 has an invalid length. [ 461.155321][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 461.289319][ T8305] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 461.960879][ T8310] loop0: detected capacity change from 0 to 512 [ 462.023502][ T8310] EXT4-fs (loop0): Test dummy encryption mode enabled [ 462.068812][ T8310] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 462.151973][ T8310] EXT4-fs (loop0): 1 truncate cleaned up [ 462.169888][ T8310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.804944][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.066948][ T8337] ntfs3: nullb0: Primary boot signature is not NTFS. [ 464.075809][ T8337] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 466.092425][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.648'. [ 466.209198][ T8349] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 467.777604][ T8359] loop1: detected capacity change from 0 to 512 [ 467.816781][ T8359] EXT4-fs (loop1): Test dummy encryption mode enabled [ 467.832899][ T8359] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 467.889467][ T8362] loop2: detected capacity change from 0 to 1024 [ 467.902205][ T8359] EXT4-fs (loop1): 1 truncate cleaned up [ 467.932930][ T8359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.981343][ T8362] kAFS: No cell specified [ 469.230625][ T8376] dlm: no local IP address has been set [ 469.236488][ T8376] dlm: cannot start dlm midcomms -107 [ 469.502966][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.843804][ T8381] loop1: detected capacity change from 0 to 4096 [ 469.882982][ T8381] NILFS (loop1): unrecognized mount option "orecovery" [ 472.366737][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 472.510954][ T8398] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 478.752902][ T8438] dlm: no local IP address has been set [ 478.758534][ T8438] dlm: cannot start dlm midcomms -107 [ 489.636106][ T8499] dlm: no local IP address has been set [ 489.641703][ T8499] dlm: cannot start dlm midcomms -107 [ 492.534645][ T8515] loop3: detected capacity change from 0 to 1024 [ 492.614196][ T8515] kAFS: No cell specified [ 494.327189][ T8524] loop2: detected capacity change from 0 to 512 [ 494.362464][ T8524] EXT4-fs (loop2): Test dummy encryption mode enabled [ 494.369315][ T8524] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 495.712452][ T8524] EXT4-fs (loop2): 1 truncate cleaned up [ 495.719406][ T8524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.940204][ T8532] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 496.354245][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.415499][ T8535] loop3: detected capacity change from 0 to 512 [ 496.423811][ T8535] EXT4-fs (loop3): Test dummy encryption mode enabled [ 496.430661][ T8535] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 496.481383][ T8535] EXT4-fs (loop3): 1 truncate cleaned up [ 496.490066][ T8535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.500547][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.497590][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.505818][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.741313][ T8570] dlm: no local IP address has been set [ 501.788286][ T8570] dlm: cannot start dlm midcomms -107 [ 503.945877][ T8544] Bluetooth: hci3: command 0x0406 tx timeout [ 509.700288][ T8624] loop0: detected capacity change from 0 to 512 [ 509.757211][ T8624] EXT4-fs (loop0): Test dummy encryption mode enabled [ 509.787625][ T8624] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 509.848340][ T8624] EXT4-fs (loop0): 1 truncate cleaned up [ 509.883731][ T8624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.789561][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.988229][ T8644] loop3: detected capacity change from 0 to 1024 [ 513.118752][ T8644] kAFS: No cell specified [ 513.357241][ T8646] dlm: no local IP address has been set [ 513.363037][ T8646] dlm: cannot start dlm midcomms -107 [ 513.499698][ T8648] loop3: detected capacity change from 0 to 512 [ 513.562309][ T8648] EXT4-fs (loop3): Test dummy encryption mode enabled [ 513.569134][ T8648] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 513.644889][ T8648] EXT4-fs (loop3): 1 truncate cleaned up [ 513.651855][ T8648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.431103][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.334219][ T8669] loop3: detected capacity change from 0 to 1024 [ 516.407000][ T8669] kAFS: No cell specified [ 521.140350][ T8712] dlm: no local IP address has been set [ 521.146243][ T8712] dlm: cannot start dlm midcomms -107 [ 525.791064][ T8753] loop1: detected capacity change from 0 to 1024 [ 526.995464][ T8763] loop2: detected capacity change from 0 to 512 [ 527.115834][ T8763] EXT4-fs (loop2): Test dummy encryption mode enabled [ 527.155041][ T8763] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 527.419052][ T8763] EXT4-fs (loop2): 1 truncate cleaned up [ 527.440524][ T8763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.334407][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.828603][ T8781] dlm: no local IP address has been set [ 528.834334][ T8781] dlm: cannot start dlm midcomms -107 [ 528.908036][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.764'. [ 529.427580][ T8784] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 535.256335][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.774'. [ 535.395900][ T8824] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 549.304686][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 549.427784][ T8879] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 551.660748][ T8888] dlm: no local IP address has been set [ 551.666608][ T8888] dlm: cannot start dlm midcomms -107 [ 560.401605][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 560.455544][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 560.469058][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 560.498439][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 560.506895][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 560.514609][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 561.395987][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.378348][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.783104][ T5085] Bluetooth: hci4: command tx timeout [ 562.934096][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.940503][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.970415][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.079120][ T8946] loop0: detected capacity change from 0 to 1024 [ 563.399251][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.891548][ T5085] Bluetooth: hci4: command tx timeout [ 564.971905][ T8922] chnl_net:caif_netlink_parms(): no params data found [ 564.978539][ T8955] kAFS: No cell specified [ 565.504764][ T8922] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.373716][ T8922] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.381035][ T8922] bridge_slave_0: entered allmulticast mode [ 566.389901][ T8922] bridge_slave_0: entered promiscuous mode [ 566.659313][ T8922] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.685929][ T8922] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.699003][ T8922] bridge_slave_1: entered allmulticast mode [ 566.708931][ T8922] bridge_slave_1: entered promiscuous mode [ 566.923238][ T5085] Bluetooth: hci4: command tx timeout [ 566.925023][ T8922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.995167][ T8922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.150646][ T8979] loop2: detected capacity change from 0 to 512 [ 567.194204][ T8979] EXT4-fs (loop2): Test dummy encryption mode enabled [ 567.217652][ T8979] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 567.297512][ T8979] EXT4-fs (loop2): 1 truncate cleaned up [ 567.323538][ T8979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.393299][ T8922] team0: Port device team_slave_0 added [ 567.400866][ T8922] team0: Port device team_slave_1 added [ 568.133703][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.420498][ T8922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.427796][ T8922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.002718][ T5085] Bluetooth: hci4: command tx timeout [ 569.086779][ T8922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.400174][ T8922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.442276][ T8922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.541043][ T8922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.033607][ T8922] hsr_slave_0: entered promiscuous mode [ 571.072449][ T8922] hsr_slave_1: entered promiscuous mode [ 571.119826][ T8922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 571.172127][ T8922] Cannot create hsr debugfs directory [ 574.184672][ T49] hsr_slave_0: left promiscuous mode [ 574.227519][ T49] hsr_slave_1: left promiscuous mode [ 574.267872][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.295257][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.336587][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.346374][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.383026][ T49] bridge_slave_1: left allmulticast mode [ 574.408715][ T49] bridge_slave_1: left promiscuous mode [ 574.426300][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.471026][ T49] bridge_slave_0: left allmulticast mode [ 574.490223][ T49] bridge_slave_0: left promiscuous mode [ 574.507707][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.834123][ T49] veth1_macvtap: left promiscuous mode [ 576.840035][ T49] veth0_macvtap: left promiscuous mode [ 576.872277][ T49] veth1_vlan: left promiscuous mode [ 576.878774][ T49] veth0_vlan: left promiscuous mode [ 577.978499][ T9042] loop2: detected capacity change from 0 to 1024 [ 578.134378][ T9042] kAFS: No cell specified [ 585.474012][ T49] team0 (unregistering): Port device team_slave_1 removed [ 585.632790][ T49] team0 (unregistering): Port device team_slave_0 removed [ 585.798368][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.988289][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.563388][ T9091] loop0: detected capacity change from 0 to 512 [ 586.588215][ T9091] EXT4-fs (loop0): Test dummy encryption mode enabled [ 586.607377][ T9091] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 586.661963][ T9091] EXT4-fs (loop0): 1 truncate cleaned up [ 587.927969][ T9091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.343145][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.595597][ T49] bond0 (unregistering): Released all slaves [ 589.225228][ T8922] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 589.246131][ T8922] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 589.387098][ T8922] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 589.418506][ T8922] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 591.107934][ T8922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.254583][ T8922] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.359242][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.366435][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.448374][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.455562][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.451568][ T8922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.169529][ T8922] veth0_vlan: entered promiscuous mode [ 594.256951][ T8922] veth1_vlan: entered promiscuous mode [ 594.267592][ T9167] loop2: detected capacity change from 0 to 512 [ 594.298812][ T9167] EXT4-fs (loop2): Test dummy encryption mode enabled [ 594.345850][ T9167] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 594.375371][ T8922] veth0_macvtap: entered promiscuous mode [ 594.403516][ T8922] veth1_macvtap: entered promiscuous mode [ 594.457811][ T9167] EXT4-fs (loop2): 1 truncate cleaned up [ 594.464753][ T9167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.473101][ T8922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.540908][ T8922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.573175][ T8922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.596553][ T8922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.610805][ T8922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.636257][ T8922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.673603][ T8922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.084607][ T8922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.115462][ T8922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.125562][ T8922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.136079][ T8922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.146516][ T8922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.157029][ T8922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.184442][ T8922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.219563][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.233873][ T8922] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.247631][ T8922] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.260364][ T8922] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.299232][ T8922] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.481198][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.503265][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.883443][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.905109][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.281072][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 597.383170][ T9198] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 600.212007][ T9216] loop0: detected capacity change from 0 to 512 [ 600.272242][ T9216] EXT4-fs (loop0): Test dummy encryption mode enabled [ 600.279067][ T9216] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 600.478485][ T9216] EXT4-fs (loop0): 1 truncate cleaned up [ 600.533080][ T9216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.451920][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.414497][ T9246] loop4: detected capacity change from 0 to 512 [ 603.450162][ T9246] EXT4-fs (loop4): Test dummy encryption mode enabled [ 603.502245][ T9246] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 603.513786][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 603.630717][ T9256] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 603.690815][ T9246] EXT4-fs (loop4): 1 truncate cleaned up [ 603.820699][ T9246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.720180][ T8544] Bluetooth: hci4: command tx timeout [ 605.880939][ T8922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.081746][ T9271] loop4: detected capacity change from 0 to 512 [ 606.144221][ T9271] EXT4-fs (loop4): Test dummy encryption mode enabled [ 606.151068][ T9271] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 606.299600][ T9271] EXT4-fs (loop4): 1 truncate cleaned up [ 606.336805][ T9271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.205368][ T8922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.040451][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 612.155885][ T9345] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 613.034662][ T9349] loop4: detected capacity change from 0 to 512 [ 613.057196][ T9349] EXT4-fs (loop4): Test dummy encryption mode enabled [ 613.076670][ T9349] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 613.123045][ T9349] EXT4-fs (loop4): 1 truncate cleaned up [ 613.131015][ T9349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 613.996965][ T8922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.846373][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.879'. [ 617.048636][ T9397] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 622.312666][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.888'. [ 622.522556][ T9455] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 624.372805][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.379145][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.876587][ T9531] loop0: detected capacity change from 0 to 1024 [ 629.996721][ T9531] kAFS: bad VL server IP address [ 630.018950][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 630.111580][ T9531] kAFS: No cell specified [ 630.254457][ T9538] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 631.691676][ T9558] loop2: detected capacity change from 0 to 512 [ 631.769920][ T9558] EXT4-fs: Ignoring removed mblk_io_submit option [ 631.842596][ T9558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.323004][ T9558] ext4 filesystem being mounted at /223/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.184992][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.420344][ T9582] loop2: detected capacity change from 0 to 1024 [ 634.521527][ T9582] kAFS: bad VL server IP address [ 634.560875][ T9582] kAFS: No cell specified [ 635.088401][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'. [ 635.264220][ T9599] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 637.909200][ T9623] loop2: detected capacity change from 0 to 512 [ 637.937887][ T9623] EXT4-fs: Ignoring removed mblk_io_submit option [ 638.039049][ T9625] loop1: detected capacity change from 0 to 512 [ 638.053754][ T9623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.072256][ T9623] ext4 filesystem being mounted at /227/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.222421][ T9625] EXT4-fs (loop1): Test dummy encryption mode enabled [ 638.229237][ T9625] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 638.437185][ T9625] EXT4-fs (loop1): 1 truncate cleaned up [ 638.493284][ T9625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.677362][ T9638] loop0: detected capacity change from 0 to 1024 [ 638.824454][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.022351][ T9638] kAFS: bad VL server IP address [ 639.070012][ T9641] loop2: detected capacity change from 0 to 512 [ 639.070085][ T9638] kAFS: No cell specified [ 639.134465][ T9641] EXT4-fs (loop2): Test dummy encryption mode enabled [ 639.141889][ T9641] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 639.166017][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.279523][ T9641] EXT4-fs (loop2): 1 truncate cleaned up [ 639.314581][ T9641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.565647][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.730692][ T9650] loop1: detected capacity change from 0 to 512 [ 639.780571][ T9650] EXT4-fs (loop1): Test dummy encryption mode enabled [ 639.832597][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'. [ 639.882108][ T9650] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 640.079394][ T9658] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 640.132127][ T9650] EXT4-fs (loop1): 1 truncate cleaned up [ 640.604513][ T9650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.548653][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.182722][ T9689] loop1: detected capacity change from 0 to 1024 [ 644.640771][ T9702] loop4: detected capacity change from 0 to 512 [ 644.669592][ T9701] loop2: detected capacity change from 0 to 512 [ 644.677061][ T9702] EXT4-fs: Ignoring removed mblk_io_submit option [ 644.726251][ T9701] EXT4-fs (loop2): Test dummy encryption mode enabled [ 644.762330][ T9701] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 644.805281][ T9702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.847467][ T9702] ext4 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.871507][ T9701] EXT4-fs (loop2): 1 truncate cleaned up [ 644.927863][ T9701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.719939][ T8922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.155453][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.873529][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'. [ 648.228279][ T9747] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 648.820423][ T9750] loop2: detected capacity change from 0 to 512 [ 648.852767][ T9750] EXT4-fs (loop2): Test dummy encryption mode enabled [ 648.859991][ T9750] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 648.930871][ T9750] EXT4-fs (loop2): 1 truncate cleaned up [ 648.952776][ T9750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.006275][ T9721] null_blk: disk nullb1 created [ 649.147861][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.202249][ T9759] loop4: detected capacity change from 0 to 512 [ 649.209490][ T9759] EXT4-fs: Ignoring removed mblk_io_submit option [ 649.324645][ T9759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.334488][ T9763] loop2: detected capacity change from 0 to 1024 [ 649.380145][ T9759] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 649.443594][ T9763] kAFS: bad VL server IP address [ 649.609869][ T9763] kAFS: No cell specified [ 650.208522][ T8922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.844984][ T9775] loop1: detected capacity change from 0 to 512 [ 650.892235][ T9775] EXT4-fs (loop1): Test dummy encryption mode enabled [ 650.929513][ T9775] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 651.052337][ T9775] EXT4-fs (loop1): 1 truncate cleaned up [ 651.069089][ T9775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.024104][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'. [ 652.415382][ T9790] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 652.585479][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.147151][ T9787] loop0: detected capacity change from 0 to 4096 [ 653.255285][ T9787] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 654.274871][ T9787] ntfs3: loop0: Failed to load $Extend (-22). [ 654.299839][ T9805] loop2: detected capacity change from 0 to 512 [ 654.306802][ T9787] ntfs3: loop0: Failed to initialize $Extend. [ 654.333437][ T9805] EXT4-fs (loop2): Test dummy encryption mode enabled [ 654.382390][ T9805] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 654.525448][ T9805] EXT4-fs (loop2): 1 truncate cleaned up [ 654.539752][ T9809] loop1: detected capacity change from 0 to 1024 [ 654.588254][ T9805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.021290][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.164715][ T9820] loop2: detected capacity change from 0 to 512 [ 655.182634][ T9820] EXT4-fs: Ignoring removed mblk_io_submit option [ 655.321337][ T9820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.807677][ T9831] loop4: detected capacity change from 0 to 512 [ 656.816896][ T9831] EXT4-fs (loop4): Test dummy encryption mode enabled [ 656.820228][ T9820] ext4 filesystem being mounted at /240/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.823749][ T9831] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 656.867792][ T9831] EXT4-fs (loop4): 1 truncate cleaned up [ 656.877650][ T9831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.367469][ T9835] loop1: detected capacity change from 0 to 4096 [ 657.403264][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.648843][ T9835] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 657.676868][ T9835] ntfs3: loop1: Failed to load $Extend (-22). [ 657.707394][ T9835] ntfs3: loop1: Failed to initialize $Extend. [ 657.887858][ T8922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.371118][ T9845] loop4: detected capacity change from 0 to 1024 [ 658.423159][ T9846] loop1: detected capacity change from 0 to 512 [ 658.443754][ T9845] kAFS: bad VL server IP address [ 658.480018][ T9845] kAFS: No cell specified [ 658.484689][ T9846] EXT4-fs (loop1): Test dummy encryption mode enabled [ 658.554505][ T9846] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 658.585149][ T9846] EXT4-fs (loop1): 1 truncate cleaned up [ 658.599406][ T9846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 658.809446][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.960'. [ 658.981741][ T9855] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 659.494086][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.082689][ T9874] loop2: detected capacity change from 0 to 512 [ 661.129389][ T9874] EXT4-fs: Ignoring removed mblk_io_submit option [ 661.149963][ T9877] loop0: detected capacity change from 0 to 512 [ 661.196433][ T9877] EXT4-fs (loop0): Test dummy encryption mode enabled [ 661.239268][ T9877] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 661.345014][ T9874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.347065][ T9866] loop4: detected capacity change from 0 to 4096 [ 661.392941][ T9866] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 661.411240][ T9877] EXT4-fs (loop0): 1 truncate cleaned up [ 661.434580][ T9877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.508854][ T9866] ntfs3: loop4: Failed to load $Extend (-22). [ 661.527117][ T9874] ext4 filesystem being mounted at /244/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.561646][ T9866] ntfs3: loop4: Failed to initialize $Extend. [ 662.042029][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.531206][ T9894] loop2: detected capacity change from 0 to 1024 [ 662.590160][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.650354][ T9894] kAFS: bad VL server IP address [ 662.714958][ T9894] kAFS: No cell specified [ 662.717930][ T9896] loop1: detected capacity change from 0 to 4096 [ 662.807062][ T9896] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 662.839235][ T9896] ntfs3: loop1: Failed to load $Extend (-22). [ 662.873808][ T9896] ntfs3: loop1: Failed to initialize $Extend. [ 663.091184][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 663.857374][ T9907] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 664.197495][ T9915] loop1: detected capacity change from 0 to 512 [ 664.252480][ T9915] EXT4-fs (loop1): Test dummy encryption mode enabled [ 664.259292][ T9915] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 664.310349][ T9915] EXT4-fs (loop1): 1 truncate cleaned up [ 664.365881][ T9915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.380855][ T9925] loop2: detected capacity change from 0 to 1024 [ 664.403242][ T9928] loop4: detected capacity change from 0 to 512 [ 664.411075][ T9928] EXT4-fs (loop4): Test dummy encryption mode enabled [ 664.453210][ T9928] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 664.518995][ T9928] EXT4-fs (loop4): 1 truncate cleaned up [ 664.526328][ T9928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.125089][ T8922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.138203][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.275405][ T9936] loop4: detected capacity change from 0 to 1024 [ 665.687409][ T9936] kAFS: bad VL server IP address [ 666.524511][ T9936] kAFS: No cell specified [ 666.918462][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 666.921947][ T9940] loop1: detected capacity change from 0 to 4096 [ 666.943382][ T9940] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 667.105693][ T9940] ntfs3: loop1: Failed to load $Extend (-22). [ 667.187205][ T9940] ntfs3: loop1: Failed to initialize $Extend. [ 667.867314][ T9968] loop2: detected capacity change from 0 to 512 [ 667.952288][ T9968] EXT4-fs (loop2): Test dummy encryption mode enabled [ 667.959117][ T9968] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 668.038001][ T9975] loop4: detected capacity change from 0 to 512 [ 668.087444][ T9975] EXT4-fs (loop4): Test dummy encryption mode enabled [ 668.132338][ T9968] EXT4-fs (loop2): 1 truncate cleaned up [ 668.140836][ T9968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.148029][ T9975] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 668.179369][ T9975] EXT4-fs (loop4): 1 truncate cleaned up [ 668.219604][ T9975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.924796][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.971719][ T8922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.986103][ T9992] loop0: detected capacity change from 0 to 1024 [ 670.132999][T10001] loop1: detected capacity change from 0 to 1024 [ 670.140903][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 671.960303][T10026] loop2: detected capacity change from 0 to 512 [ 671.999113][T10026] EXT4-fs (loop2): Test dummy encryption mode enabled [ 672.052152][T10026] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 672.110213][T10029] loop1: detected capacity change from 0 to 4096 [ 672.141179][T10026] EXT4-fs (loop2): 1 truncate cleaned up [ 672.154260][T10026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.188561][T10014] loop4: detected capacity change from 0 to 4096 [ 672.249437][T10029] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 672.287419][T10014] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 672.342023][T10029] ntfs3: loop1: Failed to load $Extend (-22). [ 672.349700][T10029] ntfs3: loop1: Failed to initialize $Extend. [ 672.449798][T10014] ntfs3: loop4: Failed to load $Extend (-22). [ 672.494076][T10014] ntfs3: loop4: Failed to initialize $Extend. [ 672.592327][ T6646] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 672.844096][ T6646] usb 1-1: Using ep0 maxpacket: 16 [ 672.869206][ T6646] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 672.900878][T10037] loop1: detected capacity change from 0 to 1024 [ 672.940811][ T6646] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 672.984693][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.999406][ T6646] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.046153][ T6646] usb 1-1: Product: syz [ 673.050365][ T6646] usb 1-1: Manufacturer: syz [ 673.074316][ T6646] usb 1-1: SerialNumber: syz [ 673.091669][ T6646] usb 1-1: config 0 descriptor?? [ 673.126923][ T6646] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 673.182266][ T6646] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 673.454650][ T6646] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 673.549567][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'. [ 673.555679][ T6646] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 673.571207][ T6646] em28xx 1-1:0.0: board has no eeprom [ 673.723278][ T6646] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 673.789576][ T6646] em28xx 1-1:0.0: dvb set to bulk mode. [ 673.850475][ T8] em28xx 1-1:0.0: Binding DVB extension [ 674.032221][ T6646] usb 1-1: USB disconnect, device number 4 [ 674.200103][ T6646] em28xx 1-1:0.0: Disconnecting em28xx [ 674.470298][ T8] em28xx 1-1:0.0: Registering input extension [ 674.527408][ T6646] em28xx 1-1:0.0: Closing input extension [ 674.648770][T10068] loop2: detected capacity change from 0 to 512 [ 674.941728][T10068] EXT4-fs (loop2): Test dummy encryption mode enabled [ 675.053718][ T6646] em28xx 1-1:0.0: Freeing device [ 675.102871][T10068] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 675.191597][T10074] loop0: detected capacity change from 0 to 1024 [ 675.216086][T10068] EXT4-fs (loop2): 1 truncate cleaned up [ 675.226132][T10068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.869181][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.936291][T10082] loop4: detected capacity change from 0 to 4096 [ 675.962673][T10082] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 675.994313][T10086] loop0: detected capacity change from 0 to 512 [ 676.010854][T10082] ntfs3: loop4: Failed to load $Extend (-22). [ 676.017312][T10082] ntfs3: loop4: Failed to initialize $Extend. [ 676.051745][T10086] EXT4-fs (loop0): Test dummy encryption mode enabled [ 676.093224][T10086] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 676.137500][T10086] EXT4-fs (loop0): 1 truncate cleaned up [ 676.213435][T10086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.790142][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.995268][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 677.910584][T10110] tcpci: probe of 0-0022 failed with error -5 [ 678.077823][T10110] i2c i2c-0: new_device: Instantiated device tcpci at 0x22 [ 679.349119][T10120] loop0: detected capacity change from 0 to 1024 [ 679.508888][T10123] loop4: detected capacity change from 0 to 512 [ 679.546229][T10123] EXT4-fs (loop4): Test dummy encryption mode enabled [ 679.576307][T10123] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 679.682117][T10123] EXT4-fs (loop4): 1 truncate cleaned up [ 679.689964][T10123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.718567][T10131] loop0: detected capacity change from 0 to 4096 [ 679.810312][T10131] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 679.868347][T10131] ntfs3: loop0: Failed to load $Extend (-22). [ 679.912696][T10131] ntfs3: loop0: Failed to initialize $Extend. [ 680.326364][T10134] loop2: detected capacity change from 0 to 4096 [ 680.336392][T10134] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 680.369474][T10134] ntfs3: loop2: Failed to load $Extend (-22). [ 680.401198][T10134] ntfs3: loop2: Failed to initialize $Extend. [ 680.434113][ T8922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.625724][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1040'. [ 682.560225][T10170] loop2: detected capacity change from 0 to 1024 [ 682.762176][ T5085] Bluetooth: hci4: command 0x0406 tx timeout [ 682.897899][T10173] loop4: detected capacity change from 0 to 4096 [ 682.976852][T10173] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 683.005470][T10173] ntfs3: loop4: Failed to load $Extend (-22). [ 683.015887][T10180] loop0: detected capacity change from 0 to 512 [ 683.033007][T10173] ntfs3: loop4: Failed to initialize $Extend. [ 683.070151][T10180] EXT4-fs (loop0): Test dummy encryption mode enabled [ 683.102524][T10180] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 683.222010][T10180] EXT4-fs (loop0): 1 truncate cleaned up [ 683.253529][T10180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.472344][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.516351][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1053'. [ 685.729658][T10213] loop0: detected capacity change from 0 to 1024 [ 685.805420][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.812035][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.906610][T10221] loop2: detected capacity change from 0 to 512 [ 685.957486][T10221] EXT4-fs (loop2): Test dummy encryption mode enabled [ 685.970094][T10221] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 686.020544][T10221] EXT4-fs (loop2): 1 truncate cleaned up [ 686.061702][T10221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 686.192793][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.292458][T10227] loop4: detected capacity change from 0 to 4096 [ 686.734701][T10227] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 686.921434][T10227] ntfs3: loop4: Failed to load $Extend (-22). [ 687.096183][T10227] ntfs3: loop4: Failed to initialize $Extend. [ 687.579323][T10227] syz.4.1062 (10227) used greatest stack depth: 20952 bytes left [ 687.912512][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'. [ 688.067351][T10264] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 688.606463][T10267] loop0: detected capacity change from 0 to 512 [ 688.665024][T10267] EXT4-fs (loop0): Test dummy encryption mode enabled [ 688.671831][T10267] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 688.699401][T10267] EXT4-fs (loop0): 1 truncate cleaned up [ 688.715097][T10267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.922511][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.682341][ T5085] Bluetooth: hci4: command 0x0406 tx timeout [ 690.987883][T10289] loop2: detected capacity change from 0 to 512 [ 691.012438][T10289] EXT4-fs (loop2): Test dummy encryption mode enabled [ 691.032284][T10289] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 691.074820][T10289] EXT4-fs (loop2): 1 truncate cleaned up [ 691.081722][T10289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.109680][T10290] loop0: detected capacity change from 0 to 4096 [ 691.131130][T10290] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 691.138513][T10290] ntfs3: loop0: Failed to load $Extend (-22). [ 691.145033][T10290] ntfs3: loop0: Failed to initialize $Extend. [ 691.977906][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.106225][T10309] loop2: detected capacity change from 0 to 512 [ 692.114411][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 692.259769][T10309] EXT4-fs (loop2): Test dummy encryption mode enabled [ 692.266704][T10309] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 692.581889][T10316] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 692.597078][T10309] EXT4-fs (loop2): 1 truncate cleaned up [ 692.717567][T10309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.350555][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.589636][T10330] loop4: detected capacity change from 0 to 4096 [ 693.673553][T10330] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 693.689961][T10330] ntfs3: loop4: Failed to load $Extend (-22). [ 693.696489][T10330] ntfs3: loop4: Failed to initialize $Extend. [ 693.759493][T10330] syz.4.1089 (10330) used greatest stack depth: 20432 bytes left [ 693.920179][T10341] loop2: detected capacity change from 0 to 512 [ 694.002653][T10341] EXT4-fs (loop2): Test dummy encryption mode enabled [ 694.009830][T10341] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 694.246957][T10341] EXT4-fs (loop2): 1 truncate cleaned up [ 694.263837][T10341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 694.492459][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1094'. [ 694.643764][T10354] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 695.669409][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.658948][T10365] loop1: detected capacity change from 0 to 512 [ 696.692892][T10365] EXT4-fs (loop1): Test dummy encryption mode enabled [ 696.709916][T10365] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 696.929154][T10365] EXT4-fs (loop1): 1 truncate cleaned up [ 696.953571][T10365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.671376][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.155307][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1103'. [ 698.312041][T10389] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 700.161973][T10403] loop2: detected capacity change from 0 to 512 [ 700.192258][T10403] EXT4-fs (loop2): Test dummy encryption mode enabled [ 700.472155][T10403] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 700.518421][T10403] EXT4-fs (loop2): 1 truncate cleaned up [ 700.531387][T10403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.777549][T10413] loop0: detected capacity change from 0 to 512 [ 700.930782][T10413] EXT4-fs (loop0): Test dummy encryption mode enabled [ 701.014517][T10413] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 701.087152][T10413] EXT4-fs (loop0): 1 truncate cleaned up [ 701.138941][T10413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.145475][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.578528][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.854532][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 701.958536][T10433] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 705.166439][T10455] loop4: detected capacity change from 0 to 512 [ 705.832257][T10455] EXT4-fs (loop4): Test dummy encryption mode enabled [ 705.839083][T10455] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 705.942251][T10455] EXT4-fs (loop4): 1 truncate cleaned up [ 705.966568][T10455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.306131][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 706.411838][ T8922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.549332][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 706.558991][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.569658][ T8] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 706.771865][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 39, changing to 7 [ 706.847281][ T8] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 706.854555][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1126'. [ 706.890248][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.905295][ T8] usb 3-1: Product: syz [ 707.016669][ T8] usb 3-1: Manufacturer: syz [ 707.021295][ T8] usb 3-1: SerialNumber: syz [ 707.710783][T10483] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 707.974021][ T8] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 708.029150][ T8] usb 3-1: 1:1 : sample bitwidth 62 in over sample bytes 1 [ 708.167482][ T8] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 708.188961][ T8] usb 3-1: unit 2 not found! [ 708.194275][ T8] usb 3-1: unit 0 not found! [ 709.765044][ T8] usb 3-1: USB disconnect, device number 2 [ 709.938533][T10035] udevd[10035]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 711.258937][T10502] loop4: detected capacity change from 0 to 512 [ 711.324681][T10502] EXT4-fs (loop4): Test dummy encryption mode enabled [ 711.353279][T10502] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 711.404516][T10502] EXT4-fs (loop4): 1 truncate cleaned up [ 711.414947][T10502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.189922][ T8922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.255328][T10507] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1135'. [ 712.409749][T10500] loop2: detected capacity change from 0 to 32768 [ 713.529011][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'. [ 714.349568][T10523] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 715.938380][T10547] loop2: detected capacity change from 0 to 512 [ 715.962629][T10547] EXT4-fs (loop2): Test dummy encryption mode enabled [ 715.992459][T10547] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 716.081073][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1144'. [ 716.854093][T10547] EXT4-fs (loop2): 1 truncate cleaned up [ 716.993478][T10547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.143554][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.402624][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 718.817047][T10578] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 719.219333][ T5922] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 719.424241][ T5922] usb 5-1: device descriptor read/all, error -61 [ 720.382164][ T5922] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 722.086084][ T5922] usb 5-1: device descriptor read/64, error -71 [ 722.238894][ T5922] usb usb5-port1: attempt power cycle [ 724.295391][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'. [ 725.374483][T10616] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 727.164488][ T5922] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 727.331676][T10635] loop0: detected capacity change from 0 to 512 [ 727.386754][T10635] EXT4-fs (loop0): Test dummy encryption mode enabled [ 727.403547][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.434698][T10635] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 727.457718][ T5922] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 727.505556][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.547798][ T5922] usb 5-1: config 0 descriptor?? [ 727.601897][T10635] EXT4-fs (loop0): 1 truncate cleaned up [ 727.628951][ T5922] pwc: Askey VC010 type 2 USB webcam detected. [ 727.638413][T10635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.676337][T10639] loop2: detected capacity change from 0 to 512 [ 727.692254][T10639] EXT4-fs (loop2): Test dummy encryption mode enabled [ 727.699159][T10639] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 727.731774][T10639] EXT4-fs (loop2): 1 truncate cleaned up [ 727.757863][T10639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.870410][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.039374][ T5922] pwc: recv_control_msg error -32 req 02 val 2b00 [ 728.167061][ T5922] pwc: recv_control_msg error -32 req 02 val 2700 [ 728.245836][ T5922] pwc: recv_control_msg error -32 req 02 val 2c00 [ 728.339687][ T5922] pwc: recv_control_msg error -32 req 04 val 1000 [ 728.440037][ T5922] pwc: recv_control_msg error -32 req 04 val 1300 [ 728.526070][ T5922] pwc: recv_control_msg error -32 req 04 val 1400 [ 728.550631][ T5922] pwc: recv_control_msg error -32 req 02 val 2000 [ 728.577263][ T5922] pwc: recv_control_msg error -32 req 02 val 2100 [ 729.557280][ T5922] pwc: recv_control_msg error -71 req 02 val 2500 [ 729.564635][ T5922] pwc: recv_control_msg error -71 req 02 val 2400 [ 729.573061][ T5922] pwc: recv_control_msg error -71 req 02 val 2600 [ 729.580554][ T5922] pwc: recv_control_msg error -71 req 02 val 2900 [ 729.606349][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.702261][ T5922] pwc: recv_control_msg error -71 req 02 val 2800 [ 729.712231][ T5922] pwc: recv_control_msg error -71 req 04 val 1100 [ 729.719117][ T5922] pwc: recv_control_msg error -71 req 04 val 1200 [ 729.730528][ T5922] pwc: Registered as video103. [ 729.741426][ T5922] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 729.757610][ T5922] usb 5-1: USB disconnect, device number 5 [ 730.172765][ T5758] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 730.382362][ T5758] usb 2-1: Using ep0 maxpacket: 32 [ 730.497188][ T5758] usb 2-1: unable to get BOS descriptor or descriptor too short [ 730.561624][ T5758] usb 2-1: config 1 has an invalid interface number: 242 but max is 2 [ 730.610865][ T5758] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.789129][ T5758] usb 2-1: config 1 has no interface number 2 [ 730.830462][ T5758] usb 2-1: config 1 interface 1 has no altsetting 0 [ 730.864477][ T5758] usb 2-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 730.882126][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.891446][ T5758] usb 2-1: Product: syz [ 730.897727][ T5758] usb 2-1: Manufacturer: syz [ 730.966892][ T5758] usb 2-1: SerialNumber: syz [ 732.782248][ T5085] Bluetooth: hci4: command 0x0406 tx timeout [ 732.792957][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'. [ 732.986347][T10674] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 733.172668][ T5758] usb 2-1: selecting invalid altsetting 0 [ 733.207786][ T5758] usb 2-1: USB disconnect, device number 2 [ 733.305770][T10076] udevd[10076]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 733.508510][T10684] loop2: detected capacity change from 0 to 512 [ 733.544327][T10684] EXT4-fs (loop2): Test dummy encryption mode enabled [ 733.569784][T10684] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 733.659855][T10684] EXT4-fs (loop2): 1 truncate cleaned up [ 733.677471][T10684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.697755][T10693] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1183'. [ 734.780939][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.063858][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1188'. [ 736.224942][T10715] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 736.957037][T10720] loop2: detected capacity change from 0 to 512 [ 737.002588][T10720] EXT4-fs (loop2): Test dummy encryption mode enabled [ 737.030562][T10720] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 737.117348][T10720] EXT4-fs (loop2): 1 truncate cleaned up [ 737.125247][T10720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.040415][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.242036][T10739] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1197'. [ 738.978877][T10751] loop4: detected capacity change from 0 to 32768 [ 740.136593][T10751] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 740.180664][T10751] XFS (loop4): Ending clean mount [ 740.374466][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'. [ 740.588362][T10770] autofs4:pid:10770:autofs_fill_super: called with bogus options [ 741.099203][T10772] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 741.247821][ T8922] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 741.560976][ T28] wiimote 0005:057E:0306.0004: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 741.583868][ T28] wiimote 0005:057E:0306.0004: New device registered [ 741.846047][T10781] loop4: detected capacity change from 0 to 512 [ 741.862555][ T5758] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 741.877707][T10781] EXT4-fs (loop4): Test dummy encryption mode enabled [ 741.886059][T10781] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 741.920001][T10781] EXT4-fs (loop4): 1 truncate cleaned up [ 741.927191][T10781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.042609][ T5758] usb 2-1: Using ep0 maxpacket: 8 [ 742.715118][ T2135] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 742.728985][ T5758] usb 2-1: config 0 has no interfaces? [ 742.770014][ T5758] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 742.784350][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.786090][ T8922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.835052][ T5758] usb 2-1: Product: syz [ 742.839260][ T5758] usb 2-1: Manufacturer: syz [ 742.854821][ T2135] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input19 [ 742.890180][ T5758] usb 2-1: SerialNumber: syz [ 742.953328][ T5758] usb 2-1: config 0 descriptor?? [ 742.965708][ T2135] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input20 [ 743.013726][T10793] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 743.063731][ T2135] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input18 [ 743.216774][ T5758] usb 2-1: USB disconnect, device number 3 [ 743.693974][T10774] wiimote 0005:057E:0306.0004: Device removed [ 746.585421][T10819] loop0: detected capacity change from 0 to 512 [ 746.602307][T10819] EXT4-fs (loop0): Test dummy encryption mode enabled [ 746.642343][T10819] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 746.774524][T10819] EXT4-fs (loop0): 1 truncate cleaned up [ 746.782796][T10819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.312936][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.520891][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.834144][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.857614][T10832] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 748.631540][T10840] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1214'. [ 750.303144][T10856] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1224'. [ 751.501428][T10866] loop2: detected capacity change from 0 to 512 [ 751.544132][T10866] EXT4-fs (loop2): Test dummy encryption mode enabled [ 751.550944][T10866] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 751.646095][T10866] EXT4-fs (loop2): 1 truncate cleaned up [ 751.666650][T10866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 753.387969][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.895421][T10893] loop0: detected capacity change from 0 to 4096 [ 755.219017][T10893] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 755.226481][T10893] ntfs3: loop0: Failed to load $Extend (-22). [ 755.237753][T10893] ntfs3: loop0: Failed to initialize $Extend. [ 758.887064][T10924] loop0: detected capacity change from 0 to 8192 [ 758.974855][T10924] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 761.899868][T10934] loop1: detected capacity change from 0 to 4096 [ 761.980148][T10934] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 762.025492][T10934] ntfs3: loop1: Failed to load $Extend (-22). [ 762.056319][T10934] ntfs3: loop1: Failed to initialize $Extend. [ 764.335649][T10959] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 765.387154][ T27] audit: type=1800 audit(1787726118.360:2): pid=10966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1256" name="idProduct" dev="configfs" ino=38354 res=0 errno=0 [ 773.149319][T11023] loop4: detected capacity change from 0 to 4096 [ 773.388939][T11023] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 773.435748][T11023] ntfs3: loop4: Failed to load $Extend (-22). [ 773.454821][T11023] ntfs3: loop4: Failed to initialize $Extend. [ 773.807020][ T28] wiimote 0005:057E:0306.0005: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 773.825153][ T28] wiimote 0005:057E:0306.0005: New device registered [ 774.222409][ T5807] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 774.774673][ T5807] usb 5-1: Using ep0 maxpacket: 8 [ 774.784429][ T5807] usb 5-1: config 0 has no interfaces? [ 774.803032][ T5807] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 774.829747][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.855862][ T2135] wiimote 0005:057E:0306.0005: detected device: Nintendo Wii Remote (Gen 1) [ 774.878697][ T5807] usb 5-1: Product: syz [ 774.888631][ T5807] usb 5-1: Manufacturer: syz [ 774.899644][ T2135] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input22 [ 774.911817][ T5807] usb 5-1: SerialNumber: syz [ 774.931790][ T5807] usb 5-1: config 0 descriptor?? [ 774.939943][ T2135] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input23 [ 774.962533][ T2135] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input21 [ 775.181387][ T5758] usb 5-1: USB disconnect, device number 6 [ 775.188311][T11030] wiimote 0005:057E:0306.0005: Device removed [ 778.176231][T11069] loop1: detected capacity change from 0 to 8192 [ 779.680112][T11069] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 781.614871][T11080] binder_alloc: 11078: binder_alloc_buf, no vma [ 783.099495][T11097] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1296'. [ 787.977631][T11130] loop4: detected capacity change from 0 to 1024 [ 788.043802][T11130] EXT4-fs: Ignoring removed orlov option [ 788.151713][T11130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.188033][T11148] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1310'. [ 790.224662][ T8922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.951398][T11158] loop4: detected capacity change from 0 to 8192 [ 792.022462][T11158] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 792.372542][ T5922] wiimote 0005:057E:0306.0006: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 792.443496][ T5922] wiimote 0005:057E:0306.0006: New device registered [ 792.544842][ T6646] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 792.813040][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 794.092163][ T5922] wiimote 0005:057E:0306.0006: detected device: Nintendo Wii Remote (Gen 1) [ 794.116382][ T5922] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0006/input/input25 [ 795.095067][ T6646] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.108917][ T5922] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0006/input/input26 [ 795.119555][ T6646] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 795.678194][T11160] wiimote 0005:057E:0306.0006: Device removed [ 795.735230][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 795.743555][ T6646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.753334][ T8] usb 1-1: device descriptor read/all, error -71 [ 795.761196][ T5922] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0006/input/input24 [ 795.774429][ T6646] usb 2-1: config 0 descriptor?? [ 795.779896][ T6646] usb 2-1: can't set config #0, error -71 [ 795.779989][T11187] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 795.788925][ T6646] usb 2-1: USB disconnect, device number 4 [ 795.832993][T11191] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1325'. [ 799.123584][T11221] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 800.969209][T11235] loop2: detected capacity change from 0 to 8192 [ 801.144783][T11235] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 802.120543][T11247] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 803.448551][ T77] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.549576][ T77] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.639007][ T77] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.657487][T11269] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1353'. [ 803.727961][ T77] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.064437][T11275] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 805.685867][T11296] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1366'. [ 805.804038][T11298] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 806.379207][ T6646] wiimote 0005:057E:0306.0007: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 806.508706][ T6646] wiimote 0005:057E:0306.0007: New device registered [ 806.802641][T11299] wiimote 0005:057E:0306.0007: Device removed [ 807.181517][ T27] audit: type=1800 audit(1787726160.170:3): pid=11308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1369" name="idProduct" dev="configfs" ino=40236 res=0 errno=0 [ 807.655773][T11306] fido_id[11306]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 807.892486][ T6646] wiimote 0005:057E:0306.0007: detected device: Nintendo Wii Remote (Gen 1) [ 808.003554][ T6646] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input28 [ 808.080153][ T8544] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 808.086825][ T6646] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input29 [ 808.111660][ T8544] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 808.119775][ T8544] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 808.142191][ T8544] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 808.151390][ T8544] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 808.158963][ T8544] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 808.193646][ T6646] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input27 [ 808.698862][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.712472][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.789871][T11338] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1374'. [ 808.800316][T11336] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 809.090584][ T77] hsr_slave_0: left promiscuous mode [ 809.117315][ T77] hsr_slave_1: left promiscuous mode [ 809.273745][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.323601][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.374325][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.381776][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.647596][ T77] bridge_slave_1: left allmulticast mode [ 809.814246][ T77] bridge_slave_1: left promiscuous mode [ 810.145365][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.206636][ T5085] Bluetooth: hci2: command tx timeout [ 810.238881][ T77] bridge_slave_0: left allmulticast mode [ 810.250983][ T77] bridge_slave_0: left promiscuous mode [ 810.269070][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.346330][ T27] audit: type=1800 audit(1787726163.340:4): pid=11353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1378" name="idProduct" dev="configfs" ino=39386 res=0 errno=0 [ 810.694358][ T77] veth1_macvtap: left promiscuous mode [ 810.763093][ T77] veth0_macvtap: left promiscuous mode [ 810.838391][ T77] veth1_vlan: left promiscuous mode [ 810.913278][ T77] veth0_vlan: left promiscuous mode [ 811.366026][T11355] binder_alloc: 11354: binder_alloc_buf, no vma [ 811.794862][T11364] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 812.282518][ T5085] Bluetooth: hci2: command tx timeout [ 813.388473][ T77] team0 (unregistering): Port device team_slave_1 removed [ 813.877923][ T77] team0 (unregistering): Port device team_slave_0 removed [ 814.153729][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.302792][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.375414][ T5085] Bluetooth: hci2: command tx timeout [ 816.627192][ T5085] Bluetooth: hci2: command tx timeout [ 816.650174][ T27] audit: type=1800 audit(1787726169.640:5): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1392" name="idProduct" dev="configfs" ino=39426 res=0 errno=0 [ 817.076454][T11395] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 818.435087][ T77] bond0 (unregistering): Released all slaves [ 819.632541][T11417] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 823.410863][T11320] chnl_net:caif_netlink_parms(): no params data found [ 823.654952][T11320] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.675716][T11320] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.695826][T11320] bridge_slave_0: entered allmulticast mode [ 823.716907][T11320] bridge_slave_0: entered promiscuous mode [ 823.892334][T11320] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.932649][T11320] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.972332][T11320] bridge_slave_1: entered allmulticast mode [ 824.016449][T11320] bridge_slave_1: entered promiscuous mode [ 824.227661][T11320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.334915][T11320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.418132][T11320] team0: Port device team_slave_0 added [ 825.457401][T11320] team0: Port device team_slave_1 added [ 825.688939][T11320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.696109][T11320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.847943][T11320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.970690][T11320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.013540][T11320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.113145][T11320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.285887][T11320] hsr_slave_0: entered promiscuous mode [ 826.295194][ T77] IPVS: stop unused estimator thread 0... [ 826.321350][T11320] hsr_slave_1: entered promiscuous mode [ 826.379406][T11320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 826.395393][T11320] Cannot create hsr debugfs directory [ 826.432403][T11484] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 828.499819][T11320] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 828.531600][T11320] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 828.554994][T11320] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 828.589345][T11320] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 828.643025][ T5827] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 828.786012][T11320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.849011][T11320] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.864866][ T5827] usb 5-1: Using ep0 maxpacket: 16 [ 828.876498][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 828.887721][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.894899][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.914595][ T5827] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 828.924312][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.931447][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.934928][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.985982][ T5827] usb 5-1: Product: syz [ 828.990191][ T5827] usb 5-1: Manufacturer: syz [ 829.002394][ T5827] usb 5-1: SerialNumber: syz [ 829.024994][ T5827] usb 5-1: config 0 descriptor?? [ 829.069160][ T5827] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 829.112896][ T5827] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 829.365568][ T5827] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 829.451799][ T5827] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 829.479938][ T5827] em28xx 5-1:0.0: board has no eeprom [ 829.572414][ T5827] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 829.601517][ T5827] em28xx 5-1:0.0: dvb set to bulk mode. [ 829.607638][ T5758] em28xx 5-1:0.0: Binding DVB extension [ 829.617754][T11320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.627105][ T5827] usb 5-1: USB disconnect, device number 7 [ 829.649576][ T5827] em28xx 5-1:0.0: Disconnecting em28xx [ 829.774710][ T5758] em28xx 5-1:0.0: Registering input extension [ 829.802393][ T5827] em28xx 5-1:0.0: Closing input extension [ 829.893563][ T5827] em28xx 5-1:0.0: Freeing device [ 830.519920][T11320] veth0_vlan: entered promiscuous mode [ 830.586339][T11320] veth1_vlan: entered promiscuous mode [ 830.666612][T11320] veth0_macvtap: entered promiscuous mode [ 830.679122][T11551] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 830.709278][T11320] veth1_macvtap: entered promiscuous mode [ 830.819233][T11320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.859913][T11320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.891367][T11320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.911777][T11320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.948130][T11320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.972225][T11320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.005872][T11320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.053159][T11320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.083937][T11320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.124356][T11320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.162115][T11320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.171978][T11320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.183127][T11320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.194395][T11320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.485327][T11320] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.639080][T11320] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.864711][T11320] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.891126][T11320] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.250586][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.331574][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.816262][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.902166][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.346876][T11586] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 834.671772][T11590] loop5: detected capacity change from 0 to 512 [ 834.722440][T11590] EXT4-fs (loop5): Test dummy encryption mode enabled [ 834.761296][T11590] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 834.853337][T11590] EXT4-fs (loop5): 1 truncate cleaned up [ 834.860297][T11590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 835.737308][T11320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.802149][T11607] loop5: detected capacity change from 0 to 8192 [ 836.964440][T11607] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 838.205013][ T27] audit: type=1326 audit(1787726191.200:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.0.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd2b9e0d9 code=0x7ffc0000 [ 838.305903][ T27] audit: type=1326 audit(1787726191.230:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.0.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd2b9e0d9 code=0x7ffc0000 [ 838.407555][ T27] audit: type=1326 audit(1787726191.230:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.0.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd2b9e0d9 code=0x7ffc0000 [ 838.501454][ T27] audit: type=1326 audit(1787726191.230:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.0.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd2b9e0d9 code=0x7ffc0000 [ 838.583429][ T27] audit: type=1326 audit(1787726191.230:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.0.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd2b9e0d9 code=0x7ffc0000 [ 838.656497][ T27] audit: type=1326 audit(1787726191.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.0.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3dd2b9e0d9 code=0x7ffc0000 [ 838.750892][ T27] audit: type=1326 audit(1787726191.340:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.0.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3dd2b5e90e code=0x7ffc0000 [ 838.824246][ T1082] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.853541][ T27] audit: type=1326 audit(1787726191.340:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.0.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3dd2b5e90e code=0x7ffc0000 [ 838.976347][ T27] audit: type=1326 audit(1787726191.340:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.0.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3dd2b5e90e code=0x7ffc0000 [ 839.062181][ T27] audit: type=1326 audit(1787726191.350:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.0.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3dd2b5e90e code=0x7ffc0000 [ 839.108513][ T1082] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.278161][ T1082] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.434634][ T1082] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.542556][ T789] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 839.742513][ T789] usb 1-1: Using ep0 maxpacket: 8 [ 839.768558][ T789] usb 1-1: config 0 has no interfaces? [ 839.797030][ T789] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 839.812286][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.824615][ T789] usb 1-1: Product: syz [ 839.828879][ T789] usb 1-1: Manufacturer: syz [ 839.857234][ T789] usb 1-1: SerialNumber: syz [ 839.891926][ T789] usb 1-1: config 0 descriptor?? [ 840.018738][ T8544] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 840.028608][ T8544] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 840.037151][ T8544] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 840.067635][ T8544] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 840.090141][ T8544] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 840.099701][ T8544] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 840.125443][ T5922] usb 1-1: USB disconnect, device number 7 [ 840.216152][T11649] binder: BINDER_SET_CONTEXT_MGR already set [ 840.232559][T11649] binder: 11648:11649 ioctl 4018620d 200000004a80 returned -16 [ 840.888575][T11645] chnl_net:caif_netlink_parms(): no params data found [ 842.123496][ T8544] Bluetooth: hci2: command tx timeout [ 842.812745][T11645] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.819913][T11645] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.918301][T11645] bridge_slave_0: entered allmulticast mode [ 842.958103][T11645] bridge_slave_0: entered promiscuous mode [ 843.077955][ T1082] hsr_slave_0: left promiscuous mode [ 843.091314][ T1082] hsr_slave_1: left promiscuous mode [ 843.099231][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.112381][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.127699][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.136796][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.149342][ T1082] bridge_slave_1: left allmulticast mode [ 843.156496][ T1082] bridge_slave_1: left promiscuous mode [ 843.166965][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.180134][ T1082] bridge_slave_0: left allmulticast mode [ 843.197045][ T1082] bridge_slave_0: left promiscuous mode [ 843.205878][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.254392][ T1082] veth1_macvtap: left promiscuous mode [ 843.263501][ T1082] veth0_macvtap: left promiscuous mode [ 843.269155][ T1082] veth1_vlan: left promiscuous mode [ 843.278847][ T1082] veth0_vlan: left promiscuous mode [ 843.550108][ T789] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 843.783981][ T789] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.812436][ T789] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 843.849022][ T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.877299][ T789] usb 5-1: config 0 descriptor?? [ 843.895571][ T789] pwc: Askey VC010 type 2 USB webcam detected. [ 844.204299][ T8544] Bluetooth: hci2: command tx timeout [ 844.312996][ T789] pwc: recv_control_msg error -32 req 02 val 2b00 [ 844.335493][ T789] pwc: recv_control_msg error -32 req 02 val 2700 [ 844.363210][ T789] pwc: recv_control_msg error -32 req 02 val 2c00 [ 844.390743][ T789] pwc: recv_control_msg error -32 req 04 val 1000 [ 844.408418][ T789] pwc: recv_control_msg error -32 req 04 val 1300 [ 844.419504][ T789] pwc: recv_control_msg error -32 req 04 val 1400 [ 844.427372][ T789] pwc: recv_control_msg error -32 req 02 val 2000 [ 844.649249][ T789] pwc: recv_control_msg error -71 req 04 val 1500 [ 844.665538][ T789] pwc: recv_control_msg error -71 req 02 val 2500 [ 844.682582][ T789] pwc: recv_control_msg error -71 req 02 val 2400 [ 845.920725][ T789] pwc: recv_control_msg error -71 req 02 val 2600 [ 845.937073][ T789] pwc: recv_control_msg error -71 req 02 val 2900 [ 845.943995][ T789] pwc: recv_control_msg error -71 req 02 val 2800 [ 846.087073][ T1082] team0 (unregistering): Port device team_slave_1 removed [ 846.287229][ T8544] Bluetooth: hci2: command tx timeout [ 846.355744][ T1082] team0 (unregistering): Port device team_slave_0 removed [ 846.563549][ T1082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 846.709184][ T789] pwc: recv_control_msg error -71 req 04 val 1100 [ 846.722522][ T789] pwc: recv_control_msg error -71 req 04 val 1200 [ 846.764001][ T789] pwc: Registered as video103. [ 846.770469][ T789] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 846.820998][ T789] usb 5-1: USB disconnect, device number 8 [ 846.892693][ T1082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.542002][ T8544] Bluetooth: hci2: command tx timeout [ 848.901203][ T1082] bond0 (unregistering): Released all slaves [ 849.403545][T11645] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.410720][T11645] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.504789][T11645] bridge_slave_1: entered allmulticast mode [ 849.543105][T11645] bridge_slave_1: entered promiscuous mode [ 849.926776][T11645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.000885][T11645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.103357][T11645] team0: Port device team_slave_0 added [ 850.121588][T11645] team0: Port device team_slave_1 added [ 850.217196][T11645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.256581][T11645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.334897][T11645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.348212][T11645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.355296][T11645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.381812][T11645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.932380][ T2135] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 851.418794][ T2135] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.664075][ T2135] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 852.591764][ T2135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.683046][ T2135] usb 1-1: config 0 descriptor?? [ 852.730204][ T2135] pwc: Askey VC010 type 2 USB webcam detected. [ 852.787658][T11645] hsr_slave_0: entered promiscuous mode [ 852.865096][T11645] hsr_slave_1: entered promiscuous mode [ 852.892276][T11645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 852.899869][T11645] Cannot create hsr debugfs directory [ 853.096809][ T2135] pwc: recv_control_msg error -32 req 02 val 2b00 [ 853.115119][ T2135] pwc: recv_control_msg error -32 req 02 val 2700 [ 853.129223][ T2135] pwc: recv_control_msg error -32 req 02 val 2c00 [ 853.156855][ T2135] pwc: recv_control_msg error -32 req 04 val 1000 [ 853.181376][ T2135] pwc: recv_control_msg error -32 req 04 val 1300 [ 853.201145][ T2135] pwc: recv_control_msg error -32 req 04 val 1400 [ 853.226414][ T2135] pwc: recv_control_msg error -32 req 02 val 2000 [ 853.436950][ T2135] pwc: recv_control_msg error -71 req 04 val 1500 [ 853.458333][ T2135] pwc: recv_control_msg error -71 req 02 val 2500 [ 853.498228][ T2135] pwc: recv_control_msg error -71 req 02 val 2400 [ 853.523009][T11645] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 853.529880][ T2135] pwc: recv_control_msg error -71 req 02 val 2600 [ 853.551133][ T2135] pwc: recv_control_msg error -71 req 02 val 2900 [ 853.561997][T11645] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 853.592181][ T2135] pwc: recv_control_msg error -71 req 02 val 2800 [ 853.600316][ T2135] pwc: recv_control_msg error -71 req 04 val 1100 [ 853.619415][ T2135] pwc: recv_control_msg error -71 req 04 val 1200 [ 853.630103][T11762] syzkaller0: entered promiscuous mode [ 853.639387][ T2135] pwc: Registered as video103. [ 853.644427][T11762] syzkaller0: entered allmulticast mode [ 853.667331][T11645] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 853.681724][ T2135] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input32 [ 853.755574][ T2135] usb 1-1: USB disconnect, device number 8 [ 853.918722][T11645] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 857.089333][T11645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.178498][T11645] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.208696][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.215908][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.295755][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.302941][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.419914][T11645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 858.859949][T11645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.952362][ T2135] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 859.147028][ T2135] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 859.178075][ T2135] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 859.211006][ T2135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.247929][ T2135] usb 5-1: config 0 descriptor?? [ 859.275634][ T2135] pwc: Askey VC010 type 2 USB webcam detected. [ 859.494277][T11645] veth0_vlan: entered promiscuous mode [ 859.530284][T11645] veth1_vlan: entered promiscuous mode [ 859.644751][T11645] veth0_macvtap: entered promiscuous mode [ 859.680979][ T2135] pwc: recv_control_msg error -32 req 02 val 2b00 [ 859.694509][T11645] veth1_macvtap: entered promiscuous mode [ 859.704874][ T2135] pwc: recv_control_msg error -32 req 02 val 2700 [ 859.757398][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.762229][ T2135] pwc: recv_control_msg error -32 req 02 val 2c00 [ 859.804350][ T2135] pwc: recv_control_msg error -32 req 04 val 1000 [ 859.812121][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.821950][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.827301][ T2135] pwc: recv_control_msg error -32 req 04 val 1300 [ 859.865898][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.906510][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.940007][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.969809][T11645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.033847][ T2135] pwc: recv_control_msg error -32 req 04 val 1400 [ 860.043286][ T2135] pwc: recv_control_msg error -32 req 02 val 2000 [ 860.058839][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.079837][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.090235][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.259102][ T2135] pwc: recv_control_msg error -71 req 04 val 1500 [ 860.274657][ T2135] pwc: recv_control_msg error -71 req 02 val 2500 [ 860.310207][ T2135] pwc: recv_control_msg error -71 req 02 val 2400 [ 860.350528][ T2135] pwc: recv_control_msg error -71 req 02 val 2600 [ 860.386854][ T2135] pwc: recv_control_msg error -71 req 02 val 2900 [ 860.568738][ T2135] pwc: recv_control_msg error -71 req 02 val 2800 [ 860.745078][ T2135] pwc: recv_control_msg error -71 req 04 val 1100 [ 861.453026][ T2135] pwc: recv_control_msg error -71 req 04 val 1200 [ 861.482748][ T2135] pwc: Registered as video103. [ 861.489279][ T2135] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input33 [ 861.492133][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.547920][ T5758] IPVS: starting estimator thread 0... [ 861.561432][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 861.612141][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.649886][T11645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.707750][T11645] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.716620][T11843] IPVS: using max 34 ests per chain, 81600 per kthread [ 861.764568][ T2135] usb 5-1: USB disconnect, device number 9 [ 861.782592][T11645] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.960842][T11645] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.231099][T11645] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.163606][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.231057][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.252550][ T28] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 863.343583][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.351430][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.475002][ T28] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 863.525718][ T28] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 863.549744][ T28] usb 2-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 863.583807][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.761045][T11868] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 863.792411][ T28] rc_core: IR keymap rc-rc6-mce not found [ 863.798188][ T28] Registered IR keymap rc-empty [ 863.858072][ T28] mceusb 2-1:1.0: Error: mce write submit urb error = -90 [ 863.902977][ T28] mceusb 2-1:1.0: Error: mce write submit urb error = -90 [ 864.165182][ T28] rc rc0: Media Center Ed. eHome Infrared Remote Transceiver (0471:0608) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/rc/rc0 [ 864.192608][ T28] input: Media Center Ed. eHome Infrared Remote Transceiver (0471:0608) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/rc/rc0/input34 [ 864.236113][ T28] mceusb 2-1:1.0: Error: mce write submit urb error = -90 [ 864.750457][T11881] loop6: detected capacity change from 0 to 8192 [ 864.773662][ T28] mceusb 2-1:1.0: Error: mce write submit urb error = -90 [ 864.818268][ T28] mceusb 2-1:1.0: Error: mce write submit urb error = -90 [ 864.877707][T11881] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 865.182934][ T28] mceusb 2-1:1.0: Error: mce write submit urb error = -90 [ 865.272180][ T28] mceusb 2-1:1.0: Error: mce write submit urb error = -90 [ 865.384510][ T28] mceusb 2-1:1.0: Error: mce write submit urb error = -90 [ 865.502302][ T28] mceusb 2-1:1.0: Error: mce write submit urb error = -90 [ 865.589016][ T28] mceusb 2-1:1.0: Error: mce write submit urb error = -90 [ 865.685837][ T28] mceusb 2-1:1.0: Error: mce write submit urb error = -90 [ 865.772736][ T28] mceusb 2-1:1.0: Error: mce write submit urb error = -90 [ 865.860936][ T28] mceusb 2-1:1.0: Error: mce write submit urb error = -90 [ 865.948189][ T28] mceusb 2-1:1.0: Registered with mce emulator interface version 1 [ 865.990572][ T28] mceusb 2-1:1.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 866.074476][ T28] usb 2-1: USB disconnect, device number 5 [ 866.612936][ T8] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 867.039255][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.193982][ T8] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 867.410193][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.515960][ T8] usb 7-1: config 0 descriptor?? [ 867.672326][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 867.982670][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 867.997080][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 868.020446][T11911] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 868.027307][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 868.046461][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 868.054838][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 868.074597][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 868.091895][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 868.330729][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 868.347227][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 868.355580][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 868.364444][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 868.610045][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 869.949196][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 870.934345][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 870.938132][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.941189][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 870.947933][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.946486][ T8] pwc: Registered as video103. [ 872.710573][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input35 [ 872.725172][ T8] usb 7-1: USB disconnect, device number 2 [ 876.451950][T11964] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 877.822545][ T5807] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 877.950496][T11990] dlm: closing connection to node -1 [ 877.968306][T11990] dlm: io handling for node: -1 stopped [ 877.997316][T11990] dlm: closing connection to node -1 done [ 878.039079][ T5807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.075108][ T5807] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 878.104897][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.138850][ T5807] usb 5-1: config 0 descriptor?? [ 878.165719][ T5807] pwc: Askey VC010 type 2 USB webcam detected. [ 878.559491][ T5807] pwc: recv_control_msg error -32 req 02 val 2b00 [ 878.577189][ T5807] pwc: recv_control_msg error -32 req 02 val 2700 [ 878.607185][ T5807] pwc: recv_control_msg error -32 req 02 val 2c00 [ 878.621290][ T5807] pwc: recv_control_msg error -32 req 04 val 1000 [ 878.656543][ T5807] pwc: recv_control_msg error -32 req 04 val 1300 [ 878.669646][ T5807] pwc: recv_control_msg error -32 req 04 val 1400 [ 878.694402][ T5807] pwc: recv_control_msg error -32 req 02 val 2000 [ 878.753367][T12006] syzkaller0: entered promiscuous mode [ 878.773681][T12006] syzkaller0: entered allmulticast mode [ 878.925869][ T5807] pwc: recv_control_msg error -71 req 04 val 1500 [ 878.947592][ T5807] pwc: recv_control_msg error -71 req 02 val 2500 [ 878.976591][ T5807] pwc: recv_control_msg error -71 req 02 val 2400 [ 878.999717][ T5807] pwc: recv_control_msg error -71 req 02 val 2600 [ 879.016772][ T5807] pwc: recv_control_msg error -71 req 02 val 2900 [ 879.033745][ T5807] pwc: recv_control_msg error -71 req 02 val 2800 [ 879.049558][ T5807] pwc: recv_control_msg error -71 req 04 val 1100 [ 879.093221][ T5807] pwc: recv_control_msg error -71 req 04 val 1200 [ 879.114995][ T5807] pwc: Registered as video103. [ 879.141637][ T5807] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input36 [ 879.213748][ T5807] usb 5-1: USB disconnect, device number 10 [ 879.719297][T12022] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 882.760530][T12063] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1526'. [ 883.124975][T12074] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 888.646999][T12126] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1536'. [ 888.774353][T12134] dlm: closing connection to node -1 [ 888.833712][T12134] dlm: io handling for node: -1 stopped [ 888.844263][T12130] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 888.966229][T12134] dlm: closing connection to node -1 done [ 889.350295][T12152] binder_alloc: 12151: binder_alloc_buf, no vma [ 893.379333][T12197] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 894.019753][T12207] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1551'. [ 897.312660][T12229] blktrace: Concurrent blktraces are not allowed on loop4 [ 899.926970][T12255] i2c i2c-0: Failed to register i2c client tcpci at 0x22 (-16) [ 901.295417][T12258] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 907.542300][T12319] dlm: closing connection to node -1 [ 907.614599][T12319] ------------[ cut here ]------------ [ 907.620468][T12319] WARNING: CPU: 0 PID: 12319 at fs/dlm/lowcomms.c:1450 dlm_lowcomms_close+0x129/0x430 [ 907.630394][T12319] Modules linked in: [ 907.634422][T12319] CPU: 0 PID: 12319 Comm: syz.6.1576 Not tainted syzkaller #0 [ 907.641900][T12319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 907.652132][T12319] RIP: 0010:dlm_lowcomms_close+0x129/0x430 [ 907.657973][T12319] Code: e8 cc e2 02 f7 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 15 60 5b f7 eb a2 e8 ae e2 02 f7 eb 05 e8 a7 e2 02 f7 <0f> 0b 44 89 f7 e8 0d 51 98 f7 b8 fe ff ff ff 48 83 c4 20 5b 41 5c [ 907.678239][T12319] RSP: 0018:ffffc9000b8afc88 EFLAGS: 00010287 [ 907.684427][T12319] RAX: ffffffff8a848fc2 RBX: 00000000ffffffff RCX: 0000000000080000 [ 907.692464][T12319] RDX: ffffc9000d89c000 RSI: 000000000000a0b1 RDI: 000000000000a0b2 [ 907.700457][T12319] RBP: dffffc0000000000 R08: dffffc0000000000 R09: 1ffffffff2751d89 [ 907.708599][T12319] R10: dffffc0000000000 R11: fffffbfff2751d8a R12: dffffc0000000000 [ 907.716710][T12319] R13: ffffffff8a848ef5 R14: 0000000000000000 R15: 0000000000000000 [ 907.725051][T12319] FS: 00007f57960356c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 907.734283][T12319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 907.740955][T12319] CR2: 0000555cf54acca8 CR3: 000000007d689000 CR4: 00000000003506f0 [ 907.749100][T12319] Call Trace: [ 907.752543][T12319] [ 907.755500][T12319] ? dlm_midcomms_close+0x39d/0x4a0 [ 907.760732][T12319] ? dlm_midcomms_close+0x48/0x4a0 [ 907.765945][T12319] drop_comm+0x61/0x190 [ 907.770131][T12319] ? configfs_rmdir+0x88a/0x980 [ 907.775093][T12319] ? make_comm+0x230/0x230 [ 907.779548][T12319] configfs_rmdir+0x892/0x980 [ 907.784305][T12319] vfs_rmdir+0x352/0x4b0 [ 907.788589][T12319] do_rmdir+0x29f/0x590 [ 907.792857][T12319] ? __check_object_size+0x4fc/0xa40 [ 907.798175][T12319] ? d_delete_notify+0x150/0x150 [ 907.803351][T12319] ? getname_flags+0x20a/0x500 [ 907.808604][T12319] __x64_sys_unlinkat+0xc4/0xe0 [ 907.813549][T12319] do_syscall_64+0x55/0xb0 [ 907.817993][T12319] ? clear_bhb_loop+0x40/0x90 [ 907.822771][T12319] ? clear_bhb_loop+0x40/0x90 [ 907.827483][T12319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 907.833646][T12319] RIP: 0033:0x7f579519e0d9 [ 907.838104][T12319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.857870][T12319] RSP: 002b:00007f5796035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 907.866365][T12319] RAX: ffffffffffffffda RBX: 00007f5795425fa0 RCX: 00007f579519e0d9 [ 907.874411][T12319] RDX: 0000000000000200 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 907.882886][T12319] RBP: 00007f5795235024 R08: 0000000000000000 R09: 0000000000000000 [ 907.890887][T12319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.899057][T12319] R13: 00007f5795426038 R14: 00007f5795425fa0 R15: 00007ffd893f3b28 [ 907.907119][T12319] [ 907.910164][T12319] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 907.917470][T12319] CPU: 0 PID: 12319 Comm: syz.6.1576 Not tainted syzkaller #0 [ 907.924940][T12319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 907.935010][T12319] Call Trace: [ 907.938311][T12319] [ 907.941260][T12319] dump_stack_lvl+0x18c/0x250 [ 907.945975][T12319] ? show_regs_print_info+0x20/0x20 [ 907.951197][T12319] ? load_image+0x420/0x420 [ 907.955736][T12319] panic+0x2ca/0x720 [ 907.959667][T12319] ? bpf_jit_dump+0xd0/0xd0 [ 907.964213][T12319] __warn+0x2e0/0x470 [ 907.968221][T12319] ? dlm_lowcomms_close+0x129/0x430 [ 907.973447][T12319] ? dlm_lowcomms_close+0x129/0x430 [ 907.978671][T12319] report_bug+0x2be/0x4f0 [ 907.983030][T12319] ? dlm_lowcomms_close+0x129/0x430 [ 907.988249][T12319] ? dlm_lowcomms_close+0x129/0x430 [ 907.993478][T12319] ? dlm_lowcomms_close+0x12b/0x430 [ 907.998699][T12319] handle_bug+0xcf/0x120 [ 908.002967][T12319] exc_invalid_op+0x1a/0x50 [ 908.007497][T12319] asm_exc_invalid_op+0x1a/0x20 [ 908.012374][T12319] RIP: 0010:dlm_lowcomms_close+0x129/0x430 [ 908.018203][T12319] Code: e8 cc e2 02 f7 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 15 60 5b f7 eb a2 e8 ae e2 02 f7 eb 05 e8 a7 e2 02 f7 <0f> 0b 44 89 f7 e8 0d 51 98 f7 b8 fe ff ff ff 48 83 c4 20 5b 41 5c [ 908.037821][T12319] RSP: 0018:ffffc9000b8afc88 EFLAGS: 00010287 [ 908.043904][T12319] RAX: ffffffff8a848fc2 RBX: 00000000ffffffff RCX: 0000000000080000 [ 908.051893][T12319] RDX: ffffc9000d89c000 RSI: 000000000000a0b1 RDI: 000000000000a0b2 [ 908.059884][T12319] RBP: dffffc0000000000 R08: dffffc0000000000 R09: 1ffffffff2751d89 [ 908.067898][T12319] R10: dffffc0000000000 R11: fffffbfff2751d8a R12: dffffc0000000000 [ 908.075894][T12319] R13: ffffffff8a848ef5 R14: 0000000000000000 R15: 0000000000000000 [ 908.083892][T12319] ? dlm_lowcomms_close+0x55/0x430 [ 908.089036][T12319] ? dlm_lowcomms_close+0x122/0x430 [ 908.094267][T12319] ? dlm_lowcomms_close+0x122/0x430 [ 908.099491][T12319] ? dlm_midcomms_close+0x39d/0x4a0 [ 908.104721][T12319] ? dlm_midcomms_close+0x48/0x4a0 [ 908.109878][T12319] drop_comm+0x61/0x190 [ 908.114063][T12319] ? configfs_rmdir+0x88a/0x980 [ 908.118936][T12319] ? make_comm+0x230/0x230 [ 908.123384][T12319] configfs_rmdir+0x892/0x980 [ 908.128098][T12319] vfs_rmdir+0x352/0x4b0 [ 908.132373][T12319] do_rmdir+0x29f/0x590 [ 908.136556][T12319] ? __check_object_size+0x4fc/0xa40 [ 908.141873][T12319] ? d_delete_notify+0x150/0x150 [ 908.146846][T12319] ? getname_flags+0x20a/0x500 [ 908.151649][T12319] __x64_sys_unlinkat+0xc4/0xe0 [ 908.156525][T12319] do_syscall_64+0x55/0xb0 [ 908.160971][T12319] ? clear_bhb_loop+0x40/0x90 [ 908.165679][T12319] ? clear_bhb_loop+0x40/0x90 [ 908.170384][T12319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 908.176303][T12319] RIP: 0033:0x7f579519e0d9 [ 908.180738][T12319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.200366][T12319] RSP: 002b:00007f5796035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 908.208807][T12319] RAX: ffffffffffffffda RBX: 00007f5795425fa0 RCX: 00007f579519e0d9 [ 908.216807][T12319] RDX: 0000000000000200 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 908.224806][T12319] RBP: 00007f5795235024 R08: 0000000000000000 R09: 0000000000000000 [ 908.232800][T12319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 908.240794][T12319] R13: 00007f5795426038 R14: 00007f5795425fa0 R15: 00007ffd893f3b28 [ 908.248803][T12319] [ 908.252103][T12319] Kernel Offset: disabled [ 908.256484][T12319] Rebooting in 86400 seconds..