last executing test programs: 1.892844383s ago: executing program 0 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) readv(r0, &(0x7f00000000c0), 0x9) 1.754750446s ago: executing program 0 (id=167): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000080)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) 1.598857749s ago: executing program 3 (id=168): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x28) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_on}]}) 1.489358281s ago: executing program 3 (id=170): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x27}, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000], [0xffffff00, 0x0, 0xffffffff], 'veth0_virt_wifi\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast2, @mcast1, [0xffffff00, 0x0, 0xffffffff, 0xff0000ff], [0xff, 0xff, 0xff], 'veth0_to_bridge\x00', 'ip6gre0\x00', {0xff}, {}, 0x84, 0x7, 0x4, 0x38}, 0x0, 0x258, 0x290, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x401, 0x0, 0x7, 0x3ff}, {0x100}}}, @common=@inet=@hashlimit3={{0x158}, {'pim6reg\x00', {0x9, 0x0, 0x47, 0x0, 0x0, 0x4698, 0x1, 0x3, 0x40}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x7}, {0x1, 0xfe, 0x3}, {0xffff, 0x1, 0x6}, 0xfff, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) 1.315194855s ago: executing program 2 (id=172): syz_mount_image$exfat(&(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="ebe050f9a6e26556b98b3a694ca1d9f8df1d1907a2607c94fad06b78ed9f520e602e86e81adc6386a9cd7f05df985b7d7649fbe21aac9ea3cd407d5b9c5b0b7ff5572dc06f5dc6fa7d1206852880bc490a27a1ec2e3d77acc8c7454c8cfc31b1cddd5727a3a7bb058f019d781f3174f03a4f699b28b8ee3491fe8da4a5d8b2431b5b560ae1638b532ebadbb95c3d0ecece79ca4492a146892118cd97d3a346c6e0eccede0661be772eb19221fdc8f58e6d741bd5212bb2a9b57a1666e4bb084eecf00117c99520a8", @ANYRESHEX=0x0, @ANYRESHEX], 0x1, 0x151f, &(0x7f0000000680)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.257585186s ago: executing program 3 (id=173): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, @empty, @loopback, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x1, 0x0, 0xd, @loopback, @empty, 0x700, 0x0, 0xfffffffc}}) 1.166675627s ago: executing program 3 (id=174): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="80fd02000040", 0x42}], 0x1, 0x800, 0x1000401) 1.146441008s ago: executing program 2 (id=175): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0xfbb0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x10, 0x6, 0x10001) 964.333671ms ago: executing program 3 (id=177): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ocfs2(&(0x7f0000000140), &(0x7f0000004780)='./file0\x00', 0x180080f, &(0x7f0000000000)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c6c6f63616c666c6f636b732c696e6f646536342c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c6e6f61636c2c6572726f72733d636f6e74696e75652c00edc97523793b5022d016bb24c65ba594abbd38fd9c301bfa101e61d574eb5cc84215aa20846b6f33df6281eaedb4b4afaaacd321e4df0d16b4f5a8a992efe2554b52ec9c980e5544cd4b8df3e1ba594d07e0bfe3471c164430a36b7ebddc35caf2959224d8330f1807117fc520d8ff5660c5691afd66a8e397bb802ed69df198008fb799cc37"], 0x1, 0x470e, &(0x7f0000008f40)="$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") mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000022, &(0x7f0000000340)='heartbeat=none') symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 886.124143ms ago: executing program 2 (id=179): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x204, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000100)="01", 0x1}], 0x1, 0x2) 837.238594ms ago: executing program 1 (id=180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x7fff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 720.689306ms ago: executing program 0 (id=181): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={[{}, {}, {}, {}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$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") r0 = socket$igmp(0x2, 0x3, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, &(0x7f0000000080)) 697.061006ms ago: executing program 1 (id=182): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1c8, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x19c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x919f}]}, @TCA_BPF_ACT={0x180, 0x1, [@m_mirred={0x17c, 0x11, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xf1, 0xffffffffffffffff, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x3, 0x8, 0xe, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5c, 0x7, 0xfff, 0x1}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0xff000000, 0x8, 0xffff0001, 0xff}, 0x2}}]}, {0xcd, 0x6, "319bb848351b002738b6c4c50b9141bebb58a1fd9f04e35af9c32268b29dfa1c25c9502b51b55eff39526a56fd0f6d8f94d05679ea0836ee4adecfe3236d2d9a2d17310974eb3856d00a1028999d09c1f69183f20defc6d04e2c20de3729c15f156d19b570d01b6142387bd42a81ccacf99246c39d5c0d6e393d44dab6dd2521c8f0dd94491c7577458990a9641f0c88b8c57718b8f2c791c8d35eeee9461545ee2dd6d5371b63e2755d125610f6fb5c23db3466b1c9e7b9a79e2f269e7e897258f891998532700754"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 649.259417ms ago: executing program 2 (id=183): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={r2, 0x0, r2, 0x5, 0x8, 0xb, 0xb, 0x5, 0x9, 0x3, 0x9, 0x23}) 540.497929ms ago: executing program 0 (id=184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) 457.718591ms ago: executing program 2 (id=185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) 439.940191ms ago: executing program 1 (id=186): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x6, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8001}]}}]}, 0xb0}}, 0x0) 309.647654ms ago: executing program 1 (id=187): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="100a06000908010014"], 0x34}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) 201.871666ms ago: executing program 0 (id=188): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {0x0, r2, 0x2}}, 0x18) 175.081117ms ago: executing program 1 (id=189): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r1}) 173.784147ms ago: executing program 2 (id=190): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000a80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6c733d63703835322c6e6f626172726965722c63726561746f723dbd3c66f52c626172726965722c706172743d3078303030303030303030303030303030322c756d61736b3d30303030303030303030303030303030303030363734352c00b08558549e3fb3af8feff2a5c10c825cef8ec0f1ddcd940f6058a48f0cc0887456a5b70061a195d3ed592d"], 0x3, 0x6a4, &(0x7f0000000100)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80) linkat(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f00000001c0)='./file3\x00', 0x0) 34.89556ms ago: executing program 0 (id=191): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000100)={0x400, 0x1, &(0x7f0000000480)=[r1], 0x0, 0x0, 0x0, 0x0, 0x300}) 32.319679ms ago: executing program 3 (id=192): unshare(0x20040600) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r1, 0x2000, 0x0}, 0x10) 0s ago: executing program 1 (id=193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0011022, 0x0, 0x6}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.240' (ED25519) to the list of known hosts. syzkaller login: [ 63.008073][ T5771] cgroup: Unknown subsys name 'net' [ 63.113777][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.439144][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.876051][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.885505][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.893458][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.901858][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.909786][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.917433][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.927447][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.927643][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.943636][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.944896][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.951596][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.959553][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.966547][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.972997][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.980383][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.987762][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.002952][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.003455][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.012757][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.026444][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.027838][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.049249][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.051999][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.063955][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.548737][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 66.580351][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 66.731108][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 66.756982][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.765005][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.773730][ T5783] bridge_slave_0: entered allmulticast mode [ 66.781366][ T5783] bridge_slave_0: entered promiscuous mode [ 66.806898][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.814280][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.821793][ T5781] bridge_slave_0: entered allmulticast mode [ 66.829578][ T5781] bridge_slave_0: entered promiscuous mode [ 66.836447][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 66.846580][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.853818][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.861302][ T5783] bridge_slave_1: entered allmulticast mode [ 66.869311][ T5783] bridge_slave_1: entered promiscuous mode [ 66.895059][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.902238][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.909533][ T5781] bridge_slave_1: entered allmulticast mode [ 66.916230][ T5781] bridge_slave_1: entered promiscuous mode [ 66.975009][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.990537][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.011236][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.046361][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.109979][ T5783] team0: Port device team_slave_0 added [ 67.118446][ T5781] team0: Port device team_slave_0 added [ 67.154178][ T5783] team0: Port device team_slave_1 added [ 67.161427][ T5781] team0: Port device team_slave_1 added [ 67.190453][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.197996][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.205143][ T5784] bridge_slave_0: entered allmulticast mode [ 67.212662][ T5784] bridge_slave_0: entered promiscuous mode [ 67.219861][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.227007][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.234507][ T5782] bridge_slave_0: entered allmulticast mode [ 67.241458][ T5782] bridge_slave_0: entered promiscuous mode [ 67.280829][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.288416][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.295548][ T5784] bridge_slave_1: entered allmulticast mode [ 67.303066][ T5784] bridge_slave_1: entered promiscuous mode [ 67.322189][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.330063][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.337183][ T5782] bridge_slave_1: entered allmulticast mode [ 67.343945][ T5782] bridge_slave_1: entered promiscuous mode [ 67.351138][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.358244][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.384252][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.396155][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.403397][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.429682][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.461803][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.468911][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.495225][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.511740][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.519607][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.545674][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.559069][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.572494][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.598254][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.616482][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.646224][ T5784] team0: Port device team_slave_0 added [ 67.654535][ T5784] team0: Port device team_slave_1 added [ 67.711073][ T5783] hsr_slave_0: entered promiscuous mode [ 67.717929][ T5783] hsr_slave_1: entered promiscuous mode [ 67.737170][ T5782] team0: Port device team_slave_0 added [ 67.776723][ T5782] team0: Port device team_slave_1 added [ 67.802161][ T5781] hsr_slave_0: entered promiscuous mode [ 67.808826][ T5781] hsr_slave_1: entered promiscuous mode [ 67.814814][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.822855][ T5781] Cannot create hsr debugfs directory [ 67.829240][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.836203][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.862387][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.915077][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.922176][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.949121][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.967040][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.974089][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.001489][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.053198][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.060482][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.069764][ T5786] Bluetooth: hci3: command tx timeout [ 68.087781][ T5795] Bluetooth: hci0: command tx timeout [ 68.089121][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.147898][ T5786] Bluetooth: hci2: command tx timeout [ 68.147917][ T5795] Bluetooth: hci1: command tx timeout [ 68.201760][ T5784] hsr_slave_0: entered promiscuous mode [ 68.208951][ T5784] hsr_slave_1: entered promiscuous mode [ 68.215115][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.222998][ T5784] Cannot create hsr debugfs directory [ 68.304974][ T5782] hsr_slave_0: entered promiscuous mode [ 68.311803][ T5782] hsr_slave_1: entered promiscuous mode [ 68.318135][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.325693][ T5782] Cannot create hsr debugfs directory [ 68.578657][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.590992][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.601670][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.618800][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.689099][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.704921][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.732329][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.753320][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.825161][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.844147][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.868883][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.881722][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.941213][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.959359][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.970041][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.982573][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.067186][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.116517][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.169710][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.176881][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.191929][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.199121][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.220153][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.286381][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.303827][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.321477][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.328608][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.363009][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.370155][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.410882][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.422743][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.482196][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.502614][ T2994] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.510038][ T2994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.534745][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.564226][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.571536][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.610885][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.618114][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.653146][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.660382][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.825244][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.872804][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.967046][ T5781] veth0_vlan: entered promiscuous mode [ 69.996437][ T5781] veth1_vlan: entered promiscuous mode [ 70.066563][ T5781] veth0_macvtap: entered promiscuous mode [ 70.108473][ T5781] veth1_macvtap: entered promiscuous mode [ 70.148172][ T5786] Bluetooth: hci3: command tx timeout [ 70.149015][ T5795] Bluetooth: hci0: command tx timeout [ 70.183430][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.229914][ T5795] Bluetooth: hci2: command tx timeout [ 70.231463][ T5786] Bluetooth: hci1: command tx timeout [ 70.255496][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.312705][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.336300][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.345464][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.354695][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.363458][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.415042][ T5783] veth0_vlan: entered promiscuous mode [ 70.443527][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.466086][ T5783] veth1_vlan: entered promiscuous mode [ 70.481379][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.562259][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.572810][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.638046][ T5782] veth0_vlan: entered promiscuous mode [ 70.657587][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.664694][ T5782] veth1_vlan: entered promiscuous mode [ 70.665442][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.701950][ T5784] veth0_vlan: entered promiscuous mode [ 70.743409][ T5783] veth0_macvtap: entered promiscuous mode [ 70.755686][ T5784] veth1_vlan: entered promiscuous mode [ 70.784454][ T5783] veth1_macvtap: entered promiscuous mode [ 70.800180][ T5782] veth0_macvtap: entered promiscuous mode [ 70.812048][ T5782] veth1_macvtap: entered promiscuous mode [ 70.845352][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.859510][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.873742][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.885172][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.898429][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.910113][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.924411][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.952367][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.985419][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.996602][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.015017][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.031770][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.043118][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.053839][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.064700][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.077086][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.094930][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.110020][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.122994][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.132244][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.160680][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.170331][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.184283][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.193464][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.231113][ T5784] veth0_macvtap: entered promiscuous mode [ 71.294146][ T5784] veth1_macvtap: entered promiscuous mode [ 71.336715][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.370043][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.376826][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.405287][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.421608][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.434110][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.447596][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.460715][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.505502][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.520931][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.531706][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.541919][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.552784][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.562901][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.573429][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.584673][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.621661][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.636044][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.646320][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.655280][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.733183][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.752761][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.798274][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.809841][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.826228][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.837897][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.939019][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.959848][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.030362][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.044588][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.096617][ T5879] syz.2.3[5879]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 72.210060][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.227755][ T5786] Bluetooth: hci0: command tx timeout [ 72.234624][ T5795] Bluetooth: hci3: command tx timeout [ 72.266557][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.308141][ T5795] Bluetooth: hci2: command tx timeout [ 72.316669][ T5795] Bluetooth: hci1: command tx timeout [ 73.077222][ C0] sched: RT throttling activated [ 73.091503][ T5889] loop3: detected capacity change from 0 to 1024 [ 74.308936][ T5879] loop2: detected capacity change from 0 to 262144 [ 74.317896][ T5795] Bluetooth: hci3: command tx timeout [ 74.323533][ T5786] Bluetooth: hci0: command tx timeout [ 74.344062][ T5879] F2FS-fs (loop2): invalid crc value [ 74.356724][ T5879] F2FS-fs (loop2): Found nat_bits in checkpoint [ 74.387710][ T5795] Bluetooth: hci1: command tx timeout [ 74.397274][ T5786] Bluetooth: hci2: command tx timeout [ 74.413583][ T5879] F2FS-fs (loop2): Start checkpoint disabled! [ 74.443885][ T5879] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 74.629102][ T5907] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.168702][ T5918] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 75.832753][ T5877] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.038007][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 76.080175][ T5877] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 76.094685][ T5877] usb 4-1: config 0 has no interface number 0 [ 76.106187][ T5877] usb 4-1: config 0 interface 12 has no altsetting 0 [ 76.122591][ T5877] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 76.134489][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.155571][ T5877] usb 4-1: Product: syz [ 76.159874][ T5877] usb 4-1: Manufacturer: syz [ 76.164641][ T5877] usb 4-1: SerialNumber: syz [ 76.201812][ T5877] usb 4-1: config 0 descriptor?? [ 76.714163][ T5940] loop0: detected capacity change from 0 to 1024 [ 76.772442][ T5940] ======================================================= [ 76.772442][ T5940] WARNING: The mand mount option has been deprecated and [ 76.772442][ T5940] and is ignored by this kernel. Remove the mand [ 76.772442][ T5940] option from the mount to silence this warning. [ 76.772442][ T5940] ======================================================= [ 76.857786][ T5940] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.886954][ T5940] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.939868][ T5940] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 77.011489][ T5940] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm syz.0.28: lblock 2 mapped to illegal pblock 2 (length 1) [ 77.111289][ T5940] EXT4-fs (loop0): Remounting filesystem read-only [ 77.123763][ T5940] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 77.147579][ T5877] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 77.156137][ T5877] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 77.171527][ T5940] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 77.201829][ T5877] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 77.209862][ T5940] EXT4-fs (loop0): 1 orphan inode deleted [ 77.223394][ T5877] f81534: probe of 4-1:0.12 failed with error -71 [ 77.229035][ T5940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.269932][ T5877] usb 4-1: USB disconnect, device number 2 [ 77.629640][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.637388][ T5785] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.731166][ T5998] option changes via remount are deprecated (pid=5997 comm=syz.0.52) [ 79.838055][ T5785] usb 4-1: Using ep0 maxpacket: 16 [ 79.849025][ T5785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.877841][ T5785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.904051][ T5785] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 79.927016][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.976799][ T5785] usb 4-1: config 0 descriptor?? [ 80.111917][ T787] kernel write not supported for file /uhid (pid: 787 comm: kworker/0:2) [ 80.228689][ T6012] Bluetooth: MGMT ver 1.22 [ 80.467113][ T5785] playstation 0003:054C:05C4.0001: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 80.511838][ T6022] loop2: detected capacity change from 0 to 256 [ 80.627659][ T5785] playstation 0003:054C:05C4.0001: Invalid byte count transferred, expected 16 got 0 [ 80.639536][ T5785] playstation 0003:054C:05C4.0001: Failed to retrieve DualShock4 pairing info: -22 [ 80.650719][ T6022] FAT-fs (loop2): Directory bread(block 1285) failed [ 80.669789][ T5785] playstation 0003:054C:05C4.0001: Failed to get MAC address from DualShock4 [ 80.699562][ T5785] playstation 0003:054C:05C4.0001: Failed to create dualshock4. [ 80.769581][ T5785] playstation: probe of 0003:054C:05C4.0001 failed with error -22 [ 80.794194][ T6022] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 80.944681][ T5785] usb 4-1: USB disconnect, device number 3 [ 81.605504][ T28] cfg80211: failed to load regulatory.db [ 82.377379][ T5785] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.597336][ T5785] usb 3-1: Using ep0 maxpacket: 16 [ 82.609606][ T5785] usb 3-1: config 1 has an invalid descriptor of length 206, skipping remainder of the config [ 82.634423][ T5785] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.660309][ T5785] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.687488][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.705802][ T5785] usb 3-1: Product: syz [ 82.715896][ T5785] usb 3-1: Manufacturer: syz [ 82.730134][ T5785] usb 3-1: SerialNumber: syz [ 82.804848][ T6085] loop1: detected capacity change from 0 to 512 [ 83.199478][ T5785] usb 3-1: 0:2 : does not exist [ 83.497352][ T28] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.528954][ T787] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 83.613728][ T5785] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 83.687296][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 83.694711][ T5785] usb 3-1: USB disconnect, device number 2 [ 83.723966][ T28] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 83.729096][ T787] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 83.742380][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.742414][ T28] usb 2-1: Product: syz [ 83.773619][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.782874][ T28] usb 2-1: Manufacturer: syz [ 83.789295][ T5775] udevd[5775]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.802483][ T28] usb 2-1: SerialNumber: syz [ 83.814304][ T787] usb 4-1: config 0 descriptor?? [ 83.833510][ T787] cp210x 4-1:0.0: cp210x converter detected [ 83.835074][ T28] r8152-cfgselector 2-1: config 0 descriptor?? [ 84.136074][ T6100] loop0: detected capacity change from 0 to 32768 [ 84.254314][ T787] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 84.272196][ T787] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 84.298049][ T28] r8152-cfgselector 2-1: Unknown version 0x0000 [ 84.302525][ T787] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 84.322989][ T28] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 84.364174][ T787] usb 4-1: cp210x converter now attached to ttyUSB0 [ 84.414736][ T787] usb 4-1: USB disconnect, device number 4 [ 84.448162][ T787] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 84.498085][ T787] cp210x 4-1:0.0: device disconnected [ 84.783269][ T6110] warning: `syz.0.105' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.987405][ T5785] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.143746][ T6122] netlink: 132 bytes leftover after parsing attributes in process `syz.0.111'. [ 85.197059][ T5785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.230502][ T5785] usb 3-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 85.265058][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.289812][ T5785] usb 3-1: config 0 descriptor?? [ 85.318940][ T5785] cdc_mbim 3-1:0.0: MBIM functional descriptor missing [ 85.325912][ T5785] cdc_mbim 3-1:0.0: bind() failure [ 85.493898][ T6134] pim6reg0: tun_chr_ioctl cmd 2147767506 [ 85.543462][ T5877] usb 3-1: USB disconnect, device number 3 [ 85.879339][ T6144] loop3: detected capacity change from 0 to 47 [ 85.920322][ T5785] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.107425][ T5785] usb 1-1: Using ep0 maxpacket: 8 [ 86.118053][ T5785] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.128735][ T5785] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 86.139883][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.153019][ T5785] usb 1-1: config 0 descriptor?? [ 86.166111][ T5785] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 86.206854][ T6155] loop3: detected capacity change from 0 to 128 [ 86.385849][ T6162] loop1: detected capacity change from 0 to 256 [ 86.415295][ T6162] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 86.428875][ T6162] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 86.997927][ T5785] gspca_vc032x: reg_w err -71 [ 87.003043][ T5785] vc032x: probe of 1-1:0.0 failed with error -71 [ 87.024313][ T5785] usb 1-1: USB disconnect, device number 2 [ 87.104019][ T6179] program syz.1.135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.156768][ T6172] loop2: detected capacity change from 0 to 32768 [ 87.195436][ T6172] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.291500][ T6172] XFS (loop2): Ending clean mount [ 87.310987][ T6172] XFS (loop2): Quotacheck needed: Please wait. [ 87.367403][ T6172] XFS (loop2): Quotacheck: Done. [ 87.393819][ T6195] syz_tun: entered allmulticast mode [ 87.403675][ T6194] syz_tun: left allmulticast mode [ 87.553737][ T5782] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.958720][ T6209] netlink: 'syz.0.146': attribute type 29 has an invalid length. [ 87.977330][ T6209] netlink: 44 bytes leftover after parsing attributes in process `syz.0.146'. [ 87.987397][ T6209] netlink: 'syz.0.146': attribute type 29 has an invalid length. [ 87.995535][ T6209] netlink: 44 bytes leftover after parsing attributes in process `syz.0.146'. [ 88.217791][ T6217] process 'syz.0.149' launched './file0' with NULL argv: empty string added [ 88.269039][ T6220] capability: warning: `syz.1.151' uses deprecated v2 capabilities in a way that may be insecure [ 88.397499][ T6222] loop2: detected capacity change from 0 to 128 [ 88.448285][ T27] audit: type=1800 audit(1757627939.789:2): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.152" name="file2" dev="loop2" ino=1048596 res=0 errno=0 [ 88.476676][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 88.479295][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.517358][ T6222] FAT-fs (loop2): Filesystem has been set read-only [ 88.524223][ T6222] syz.2.152: attempt to access beyond end of device [ 88.524223][ T6222] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 88.557615][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.565610][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.574273][ T6201] loop3: detected capacity change from 0 to 40427 [ 88.598026][ T6227] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.606676][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.616908][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.654957][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.685779][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.697371][ T5866] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.728523][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.736484][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.744807][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.752942][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.761428][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.769699][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.777816][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.786019][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.808866][ T6227] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.827372][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.847449][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.856324][ T6227] syz.2.152: attempt to access beyond end of device [ 88.856324][ T6227] loop2: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 88.887413][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.887445][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 88.897761][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.913685][ T5866] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.922115][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.926151][ T5866] usb 2-1: config 0 has no interface number 0 [ 88.937390][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.945340][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.955170][ T5866] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 88.963806][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.969848][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.981996][ T5866] usb 2-1: Product: syz [ 88.986210][ T5866] usb 2-1: Manufacturer: syz [ 88.994892][ T5866] usb 2-1: SerialNumber: syz [ 88.997863][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 89.008474][ T6233] can0: slcan on ttyS3. [ 89.014796][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 89.025187][ T5866] usb 2-1: config 0 descriptor?? [ 89.035263][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 89.044866][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 89.055649][ T5866] quatech2 2-1:0.1: Quatech 2nd gen USB to Serial Driver converter detected [ 89.074244][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 89.082552][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 89.090786][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 89.101637][ T6233] can0 (unregistered): slcan off ttyS3. [ 89.110205][ T6233] Falling back ldisc for ttyS3. [ 89.115267][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 89.123719][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 89.139247][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 89.153422][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 89.161913][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 89.170385][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 89.181586][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 89.190701][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 89.221889][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 89.246123][ T6235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.158'. [ 89.246929][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 89.287760][ T5866] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 89.300331][ T6222] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 89.304849][ T5866] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 89.421429][ T6239] loop2: detected capacity change from 0 to 256 [ 89.447300][ T6239] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.458774][ T6239] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 89.526748][ T6239] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 89.550122][ T6242] loop3: detected capacity change from 0 to 4096 [ 89.805710][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 89.806648][ T28] usb 2-1: USB disconnect, device number 3 [ 89.852701][ T28] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 89.885500][ T28] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 89.921353][ T28] quatech2 2-1:0.1: device disconnected [ 89.925052][ T6251] syz.2.166 (6251) used greatest stack depth: 20104 bytes left [ 90.154351][ T6263] Cannot find del_set index 1 as target [ 90.277072][ T6267] loop2: detected capacity change from 0 to 256 [ 90.293924][ T6267] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 90.477354][ T6274] loop2: detected capacity change from 0 to 1024 [ 90.486049][ T6274] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.504753][ T6274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.653805][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.889739][ T6289] loop0: detected capacity change from 0 to 8 [ 91.200072][ T6299] pimreg: tun_chr_ioctl cmd 1074025677 [ 91.216250][ T6299] pimreg: linktype set to 6 [ 91.224891][ T6281] loop3: detected capacity change from 0 to 32768 [ 91.263344][ T6281] (syz.3.177,6281,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.285503][ T6281] (syz.3.177,6281,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.333462][ T6281] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 91.395203][ T6281] ocfs2: Mounting device (7,3) on (node local, slot 65535) with ordered data mode. [ 91.403988][ T6306] loop2: detected capacity change from 0 to 1024 [ 91.504644][ T5781] INFO: trying to register non-static key. [ 91.510514][ T5781] The code is fine but needs lockdep annotation, or maybe [ 91.517645][ T5781] you didn't initialize this object before use? [ 91.523995][ T5781] turning off the locking correctness validator. [ 91.530344][ T5781] CPU: 0 PID: 5781 Comm: syz-executor Not tainted syzkaller #0 [ 91.538018][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.548205][ T5781] Call Trace: [ 91.551521][ T5781] [ 91.554496][ T5781] dump_stack_lvl+0x16c/0x230 [ 91.559226][ T5781] ? show_regs_print_info+0x20/0x20 [ 91.564475][ T5781] ? load_image+0x3b0/0x3b0 [ 91.569022][ T5781] ? __is_module_percpu_address+0x219/0x380 [ 91.574959][ T5781] ? __is_kernel_percpu_address+0x133/0x270 [ 91.580979][ T5781] assign_lock_key+0x1f9/0x230 [ 91.585789][ T5781] ? SOFTIRQ_verbose+0x10/0x10 [ 91.590639][ T5781] ? verify_lock_unused+0x140/0x140 [ 91.595875][ T5781] register_lock_class+0x212/0x890 [ 91.601005][ T5781] ? mark_lock+0x94/0x320 [ 91.605375][ T5781] ? is_dynamic_key+0x260/0x260 [ 91.610464][ T5781] ? __lock_acquire+0x1334/0x7c80 [ 91.615513][ T5781] __lock_acquire+0x17a/0x7c80 [ 91.620449][ T5781] ? verify_lock_unused+0x140/0x140 [ 91.625655][ T5781] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 91.631551][ T5781] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 91.637447][ T5781] ? verify_lock_unused+0x140/0x140 [ 91.642661][ T5781] ? stack_trace_save+0x9c/0xe0 [ 91.647518][ T5781] ? stack_trace_snprint+0xf0/0xf0 [ 91.652723][ T5781] lock_acquire+0x197/0x410 [ 91.657317][ T5781] ? ocfs2_mark_lockres_freeing+0x126/0x570 [ 91.663225][ T5781] ? __asan_memset+0x22/0x40 [ 91.667827][ T5781] ? read_lock_is_recursive+0x20/0x20 [ 91.673197][ T5781] ? seqcount_lockdep_reader_access+0x124/0x1c0 [ 91.679443][ T5781] ? lockdep_hardirqs_on+0x98/0x150 [ 91.684658][ T5781] _raw_spin_lock_irqsave+0xa8/0xf0 [ 91.689860][ T5781] ? ocfs2_mark_lockres_freeing+0x126/0x570 [ 91.695780][ T5781] ? _raw_spin_lock+0x40/0x40 [ 91.700463][ T5781] ? read_tsc+0x9/0x20 [ 91.704655][ T5781] ? ktime_get+0x24b/0x280 [ 91.709075][ T5781] ocfs2_mark_lockres_freeing+0x126/0x570 [ 91.714910][ T5781] ? ocfs2_dlm_shutdown+0x240/0x240 [ 91.720167][ T5781] ? ocfs2_journal_shutdown+0x62c/0xaa0 [ 91.725748][ T5781] ? ocfs2_journal_submit_inode_data_buffers+0x1b0/0x1b0 [ 91.732816][ T5781] ? __kmem_cache_free+0xba/0x1f0 [ 91.737855][ T5781] ocfs2_dlm_shutdown+0x3a/0x240 [ 91.742801][ T5781] ocfs2_dismount_volume+0x44b/0x890 [ 91.748270][ T5781] ? ocfs2_enable_quotas+0x440/0x440 [ 91.753559][ T5781] ? clear_inode+0x150/0x150 [ 91.758153][ T5781] ? ocfs2_free_inode+0x30/0x30 [ 91.763104][ T5781] generic_shutdown_super+0x134/0x2b0 [ 91.768701][ T5781] kill_block_super+0x44/0x90 [ 91.773428][ T5781] deactivate_locked_super+0x97/0x100 [ 91.778834][ T5781] cleanup_mnt+0x429/0x4c0 [ 91.783262][ T5781] task_work_run+0x1ce/0x250 [ 91.787859][ T5781] ? task_work_cancel+0x240/0x240 [ 91.792990][ T5781] ? exit_to_user_mode_loop+0x3b/0x110 [ 91.798466][ T5781] exit_to_user_mode_loop+0xe6/0x110 [ 91.803757][ T5781] exit_to_user_mode_prepare+0xf6/0x180 [ 91.809309][ T5781] syscall_exit_to_user_mode+0x1a/0x50 [ 91.814774][ T5781] do_syscall_64+0x61/0xb0 [ 91.819196][ T5781] ? clear_bhb_loop+0x40/0x90 [ 91.823875][ T5781] ? clear_bhb_loop+0x40/0x90 [ 91.828556][ T5781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.834460][ T5781] RIP: 0033:0x7f8ac7f8fed7 [ 91.838875][ T5781] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 91.858595][ T5781] RSP: 002b:00007fff387bc5d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 91.867028][ T5781] RAX: 0000000000000000 RBX: 00007f8ac8011c05 RCX: 00007f8ac7f8fed7 [ 91.875007][ T5781] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff387bc690 [ 91.882989][ T5781] RBP: 00007fff387bc690 R08: 0000000000000000 R09: 0000000000000000 [ 91.891052][ T5781] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff387bd720 [ 91.899030][ T5781] R13: 00007f8ac8011c05 R14: 0000000000016539 R15: 00007fff387bd760 [ 91.907018][ T5781] [ 91.910244][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.923944][ T12] hfsplus: b-tree write err: -5, ino 4 [ 91.930726][ T5781] ocfs2: Unmounting device (7,3) on (node local)