last executing test programs: 2m31.756237322s ago: executing program 2 (id=13): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 2m30.724200569s ago: executing program 2 (id=17): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m29.747042474s ago: executing program 2 (id=19): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="3fa3b4fde9827adb", 0x8}], 0x1, &(0x7f0000000840)=ANY=[], 0x308}, 0x4004081) 2m29.116038035s ago: executing program 2 (id=23): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m27.894683982s ago: executing program 2 (id=26): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) close(r1) 2m27.216141279s ago: executing program 2 (id=30): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x11103c, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x10008, &(0x7f0000000700), 0xff, 0x498, &(0x7f0000001040)="$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") 2m11.534025181s ago: executing program 32 (id=30): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x11103c, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x10008, &(0x7f0000000700), 0xff, 0x498, &(0x7f0000001040)="$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") 9.279309877s ago: executing program 4 (id=366): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$eJzs3U1rXNUbAPDn3EzSpun/n1QErV0YKNiCmjZpRVHBFuvOhS8FV4IxL6V02oYmgq0VW6jfQD+A4M6NuCwiRd24dSf4AaRYpGbjLnInd9JpOpOXdmZu7f394M7ct+E5d4Znzr1nzj0TQGWN5w9ZxN6IWEgRoy3balFsHF/d7+/bl2eWb1+eSbGy8u5fKVKxrrl/Kp5HihfvjIhff0zx2MC9cRcvXjozXa/PXSiWDy2dXTi0ePHS86fPTp+aOzV3bmryxckXjh6ZOnq4K8e5OyJ+njhRuzb/+r5vZ77e89n331xPcayxPtYdR7eMx/jae9Iqf19f6nawkgwUx9P6Eafaup1e6XOh2LLm5zcYEU/EaAzEnQ9vND5/u9TCAT21kiJWgIpK8h8qqnkekF//Nqdyz0iAfrl1fLUBoNm2t7yW/7XVtsHY2Wgb2LWcorVZJ0VEN1rm8hgLz6TRfIoetcMB7V25GhFPtqv/UyM3xxqt+Hn+Z3flfxYRbxXP+fp37jP++Lpl+Q/98yD5/0FL/n94n/HlPwAAAAAAAHTPjeMR8Vy73/+ytf4/0ab/z0hEHOtC/M1//8tudiEM0Mat4xGvRsTyPf3/suYuYwPF0v8a/QEG0/zpwbnDEfH/iDgYgzvmT9fnJjeIMb7vl8GO21r6/+VTHr/ZF7Aox83ajrtfMzu9NP0gxwysunU14qlanv8p7s7/tFb/pzb1f/59sLDFGCsnXvup07bN8x/olZWvIg60rf/vjFyRNh6f41Be/xePbWN88v717zrFl/9Qnrz+37Vx/o+lxighxXg9i9uP8emfvz9A/rc//x9KJxtDzgwV6z6eXlq6MBkxlN68d/3U9ssMj6JmPjTzJc//g/vbX/9vdP4/HBFXthjz5A9vXOu0Tf0P5cnzf3bT+r9lvL77mNn/3pf/dIq/tfr/aKNOP1is0f4HG9tqgpZdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4L8oiYnekbGJtPssmJiJGIuLx2JXVzy8uPTt//qNzs/m2xv//Z81/+h1dXU7N//8fa1meWrd8JCL2RMQXA8ON5YmZ8/XZsg8eAAAAAAAAAAAAAAAAAAAAHhIjHe7/z/0xUHbpgJ6rlV0AoDTyH6pL/kN1bTP/B3tVDqD/1P9QXfIfqkv+Q3XJf6iuPP93ll0IoBTqfwAAAAAAeKTsefrGbykirrw83JhyQ8U2/fzh0ZaVXQCgNIb4gerS9QeqawvX+Kkf5QDKs1mSd749wNcDAAAAAAAAAAAAAPTLgb3u/4eq2s79/8M9LAfQf+7/h+py/z9Ul2t8wP3/AAAAAAAAAAAAAPDwW7x46cx0vT53oYyZHUUhyoluxkxZM/FwFGOjmZK/mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDX/BgAA///VtfOK") ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000f40)) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 8.849828415s ago: executing program 5 (id=367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x980}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) 7.424939558s ago: executing program 0 (id=368): syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa070800461400280065467c0221907800000000e0000001940401004e244e"], 0x0) r0 = gettid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) preadv2(r1, &(0x7f0000000340)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.424486561s ago: executing program 1 (id=369): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0x1, 0x202}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x46, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.420080611s ago: executing program 5 (id=370): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10042, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'a', ' *:* ', 'wm\x00'}, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r3, &(0x7f0000000900)=[{{&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x1, {0xa, 0x4e20, 0xfffffff8, @empty}}}, 0x80, 0x0}}], 0x1, 0x20014004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 6.407355226s ago: executing program 4 (id=371): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x4, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 6.200192796s ago: executing program 3 (id=372): socket$unix(0x1, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000c247"]) 6.046489717s ago: executing program 5 (id=373): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001a00)={'veth0_to_batadv\x00', {0x2, 0x4e23, @loopback}}) 5.850328256s ago: executing program 1 (id=374): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r3, &(0x7f0000000000)={0x10}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB], 0x2c}}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r6, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc0c4) 5.645395565s ago: executing program 0 (id=375): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="3296c48a90b8bd5a"}, 0x21, 0x0, '\x00', @c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) 5.52355608s ago: executing program 3 (id=376): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f0000000800)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a37e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731200f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e548355376ec821c05008685c055a367ea51b653eff6581710e72f1e7e4d9d1607d004d9ed64f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6611628606afadb04e0158f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x1506, &(0x7f0000002ac0)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) write$P9_RMKDIR(r0, &(0x7f0000010000)={0x14, 0x49, 0x1, {0x1, 0x1, 0x8}}, 0x14) 5.299405175s ago: executing program 5 (id=377): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 5.138933582s ago: executing program 4 (id=378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) 4.871896636s ago: executing program 0 (id=379): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x4, 0x0, 'queue0\x00'}) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r1) eventfd2(0x4, 0x0) timerfd_create(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) read$msr(r1, 0x0, 0x0) write$sndseq(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) pselect6(0x40, &(0x7f0000000080)={0x9, 0x6, 0x8, 0x102, 0x4, 0x97d, 0x5, 0x7}, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x20, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$sndseq(r0, 0x0, 0x0) 4.8354162s ago: executing program 1 (id=380): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000340)=0x9, 0x4) 4.503070814s ago: executing program 3 (id=381): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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") ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000f40)) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 4.369854088s ago: executing program 5 (id=382): r0 = syz_open_dev$evdev(0x0, 0x1, 0x200) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000045c0)=0x21) open(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 4.147319959s ago: executing program 1 (id=383): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10042, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'a', ' *:* ', 'wm\x00'}, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r3, &(0x7f0000000900)=[{{&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x1, {0xa, 0x4e20, 0xfffffff8, @empty}}}, 0x80, 0x0}}], 0x1, 0x20014004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 3.918727414s ago: executing program 4 (id=384): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100040000000004, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x80000000023b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0xc, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x6c92, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0x7f, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0x1, 0x202}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x46, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) 2.879626082s ago: executing program 0 (id=385): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5) 2.779797288s ago: executing program 3 (id=386): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @none, 0x4, 0x2120dd802bbc8747}, 0xe) 2.44382932s ago: executing program 1 (id=387): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@mblk_io_submit}], [{@permit_directio}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.847595329s ago: executing program 4 (id=388): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) symlink(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010100, 0x4e24, 0x1, 'none\x00', 0x1, 0x32bd, 0x9}, {@loopback, 0x4e21, 0x2000, 0xfffffffe, 0x4, 0x12d5c}}, 0x44) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.715130664s ago: executing program 0 (id=389): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000001040)={r0, r0, 0xfff8, 0x0, 0x0, 0x9, 0x3, 0x5, 0xfff0, 0x7ff, 0x3, 0xffffffff, 'syz0\x00'}) 1.308508614s ago: executing program 3 (id=390): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r3, &(0x7f0000000000)={0x10}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500"], 0x2c}}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r6, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc0c4) 955.567275ms ago: executing program 5 (id=391): syz_mount_image$hfsplus(&(0x7f0000000840), &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000140)=ANY=[], 0xfb, 0x6a8, &(0x7f0000000180)="$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") syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000480)=ANY=[], 0x1, 0x9ea, &(0x7f0000004100)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4086, 0xff6) 900.342178ms ago: executing program 0 (id=392): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d00000905820200020000000905"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x25, 0x3, 0x40b, 0x100, 0x1, 0x4, 0x7, 0x40, 0x6, 0x7, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) 428.54611ms ago: executing program 4 (id=393): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, 0x0, 0x2, 0x96) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x4) 105.363644ms ago: executing program 3 (id=394): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) lseek(r0, 0x8, 0x2) 0s ago: executing program 1 (id=395): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x111, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r1, 0x1, 0x20, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x14) recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. [ 178.956269][ T5775] cgroup: Unknown subsys name 'net' [ 179.080821][ T5775] cgroup: Unknown subsys name 'cpuset' [ 179.095451][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 224.475833][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.482832][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 225.655964][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 230.929040][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.950302][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.985939][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 231.011778][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.021672][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.032542][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.040954][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 231.053233][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.087950][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.103572][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.157910][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.161981][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.175409][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.176180][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.192472][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.204476][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.207550][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.217466][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.224785][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.233073][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.306894][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.428055][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.442428][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.478906][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.500527][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.325563][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 233.099960][ T5804] Bluetooth: hci0: command tx timeout [ 233.138137][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 233.179949][ T5804] Bluetooth: hci1: command tx timeout [ 233.270835][ T5804] Bluetooth: hci2: command tx timeout [ 233.333986][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.345080][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.353656][ T5801] bridge_slave_0: entered allmulticast mode [ 233.363406][ T5801] bridge_slave_0: entered promiscuous mode [ 233.371588][ T5804] Bluetooth: hci3: command tx timeout [ 233.427807][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.435505][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.443765][ T5801] bridge_slave_1: entered allmulticast mode [ 233.453073][ T5801] bridge_slave_1: entered promiscuous mode [ 233.462523][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 233.564465][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 233.580303][ T5804] Bluetooth: hci4: command tx timeout [ 233.692319][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 233.819972][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.897780][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.079329][ T5801] team0: Port device team_slave_0 added [ 234.111224][ T5801] team0: Port device team_slave_1 added [ 234.393315][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.400638][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.427839][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.464515][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.474527][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.482455][ T5805] bridge_slave_0: entered allmulticast mode [ 234.492029][ T5805] bridge_slave_0: entered promiscuous mode [ 234.534367][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.542301][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.568672][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.581246][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.588913][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.599102][ T5805] bridge_slave_1: entered allmulticast mode [ 234.608492][ T5805] bridge_slave_1: entered promiscuous mode [ 234.919317][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.927093][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.934821][ T5806] bridge_slave_0: entered allmulticast mode [ 234.944212][ T5806] bridge_slave_0: entered promiscuous mode [ 234.956153][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.964096][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.971942][ T5811] bridge_slave_0: entered allmulticast mode [ 234.980580][ T5811] bridge_slave_0: entered promiscuous mode [ 235.002760][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.105998][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.113723][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.121462][ T5806] bridge_slave_1: entered allmulticast mode [ 235.130914][ T5806] bridge_slave_1: entered promiscuous mode [ 235.148852][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.157413][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.165237][ T5811] bridge_slave_1: entered allmulticast mode [ 235.174857][ T5811] bridge_slave_1: entered promiscuous mode [ 235.192891][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.194240][ T5804] Bluetooth: hci0: command tx timeout [ 235.223165][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.234756][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.242497][ T5797] bridge_slave_0: entered allmulticast mode [ 235.251943][ T5797] bridge_slave_0: entered promiscuous mode [ 235.261989][ T5804] Bluetooth: hci1: command tx timeout [ 235.350016][ T5804] Bluetooth: hci2: command tx timeout [ 235.421554][ T5804] Bluetooth: hci3: command tx timeout [ 235.447392][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.455183][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.462898][ T5797] bridge_slave_1: entered allmulticast mode [ 235.472243][ T5797] bridge_slave_1: entered promiscuous mode [ 235.533407][ T5801] hsr_slave_0: entered promiscuous mode [ 235.543067][ T5801] hsr_slave_1: entered promiscuous mode [ 235.566223][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.585486][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.661592][ T5804] Bluetooth: hci4: command tx timeout [ 235.670234][ T5805] team0: Port device team_slave_0 added [ 235.688701][ T5805] team0: Port device team_slave_1 added [ 235.771574][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.788285][ T5806] team0: Port device team_slave_0 added [ 235.804745][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.929142][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.936553][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.964278][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.016297][ T5806] team0: Port device team_slave_1 added [ 236.072105][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.114359][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.122193][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.148514][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.197841][ T5811] team0: Port device team_slave_0 added [ 236.252709][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.302612][ T5811] team0: Port device team_slave_1 added [ 236.313299][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.320654][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.347322][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.486706][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.494009][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.520354][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.706498][ T5797] team0: Port device team_slave_0 added [ 236.742314][ T5805] hsr_slave_0: entered promiscuous mode [ 236.751326][ T5805] hsr_slave_1: entered promiscuous mode [ 236.759189][ T5805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.766979][ T5805] Cannot create hsr debugfs directory [ 236.797525][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.804833][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.831334][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.854579][ T5797] team0: Port device team_slave_1 added [ 236.931155][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.938336][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.964868][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.185973][ T5806] hsr_slave_0: entered promiscuous mode [ 237.194589][ T5806] hsr_slave_1: entered promiscuous mode [ 237.203459][ T5806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.211429][ T5806] Cannot create hsr debugfs directory [ 237.260177][ T5804] Bluetooth: hci0: command tx timeout [ 237.306437][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.313739][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.340217][ T5804] Bluetooth: hci1: command tx timeout [ 237.340272][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.419909][ T5804] Bluetooth: hci2: command tx timeout [ 237.451927][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.459096][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.485535][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.525164][ T5804] Bluetooth: hci3: command tx timeout [ 237.746695][ T5804] Bluetooth: hci4: command tx timeout [ 237.844649][ T5811] hsr_slave_0: entered promiscuous mode [ 237.854547][ T5811] hsr_slave_1: entered promiscuous mode [ 237.862813][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.870702][ T5811] Cannot create hsr debugfs directory [ 238.037991][ T5797] hsr_slave_0: entered promiscuous mode [ 238.048085][ T5797] hsr_slave_1: entered promiscuous mode [ 238.056363][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.064260][ T5797] Cannot create hsr debugfs directory [ 238.598448][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.667519][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 238.687937][ T5805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.759615][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.779345][ T5805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.802839][ T5805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.857861][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 238.949386][ T5805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 239.174573][ T5806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 239.267907][ T5806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 239.299033][ T5806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 239.359476][ T5804] Bluetooth: hci0: command tx timeout [ 239.385651][ T5806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.431088][ T5804] Bluetooth: hci1: command tx timeout [ 239.502176][ T5804] Bluetooth: hci2: command tx timeout [ 239.580022][ T5804] Bluetooth: hci3: command tx timeout [ 239.629574][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 239.726193][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 239.753479][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 239.787774][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 239.820309][ T5804] Bluetooth: hci4: command tx timeout [ 239.853134][ T5811] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.965931][ T5811] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 240.068023][ T5811] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 240.150110][ T5811] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.614186][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.659210][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.713079][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.837990][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.913401][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.939852][ T4102] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.947420][ T4102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.015087][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.070120][ T4102] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.077691][ T4102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.093366][ T4102] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.100977][ T4102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.166108][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.173861][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.190547][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.198080][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.447429][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.455065][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.682953][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.931392][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.022030][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.105179][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.112840][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.191944][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.199524][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.329933][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.428317][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.435985][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.575891][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.583559][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.695632][ T5797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.911001][ T5811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.296360][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.845497][ T5801] veth0_vlan: entered promiscuous mode [ 243.999482][ T5801] veth1_vlan: entered promiscuous mode [ 244.096665][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.197519][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.394765][ T5801] veth0_macvtap: entered promiscuous mode [ 244.510275][ T5801] veth1_macvtap: entered promiscuous mode [ 244.660563][ T5806] veth0_vlan: entered promiscuous mode [ 244.794662][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.809593][ T5806] veth1_vlan: entered promiscuous mode [ 244.852604][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.930512][ T5805] veth0_vlan: entered promiscuous mode [ 244.967678][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.037937][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.125467][ T5805] veth1_vlan: entered promiscuous mode [ 245.164821][ T5801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.174061][ T5801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.183958][ T5801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.193090][ T5801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.293723][ T5797] veth0_vlan: entered promiscuous mode [ 245.400253][ T5806] veth0_macvtap: entered promiscuous mode [ 245.427064][ T5797] veth1_vlan: entered promiscuous mode [ 245.466384][ T5806] veth1_macvtap: entered promiscuous mode [ 245.558337][ T5805] veth0_macvtap: entered promiscuous mode [ 245.648737][ T5805] veth1_macvtap: entered promiscuous mode [ 245.674739][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.756319][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.835781][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.893794][ T5797] veth0_macvtap: entered promiscuous mode [ 245.912514][ T5806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.922742][ T5806] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.932377][ T5806] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.941460][ T5806] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.988806][ T5797] veth1_macvtap: entered promiscuous mode [ 246.023666][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.067875][ T5805] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.077088][ T5805] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.086241][ T5805] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.095357][ T5805] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.304742][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.402640][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.507827][ T5797] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.517178][ T5797] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.526510][ T5797] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.535678][ T5797] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.465139][ T5811] veth0_vlan: entered promiscuous mode [ 247.587925][ T5811] veth1_vlan: entered promiscuous mode [ 247.934887][ T5811] veth0_macvtap: entered promiscuous mode [ 248.027616][ T5811] veth1_macvtap: entered promiscuous mode [ 248.197954][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.287090][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.376960][ T5811] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.391644][ T5811] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.403930][ T5811] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.413445][ T5811] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.151653][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.160034][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.383876][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.392906][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.797540][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.805800][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.920998][ T5801] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 253.096076][ T4283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.105422][ T4283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.192047][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.201303][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.504994][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.513377][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.542532][ T5973] loop2: detected capacity change from 0 to 1024 [ 253.635561][ T5973] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 64 [ 253.912506][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.920741][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.141075][ T5977] loop0: detected capacity change from 0 to 764 [ 254.221147][ T4223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.229242][ T4223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.314386][ T5977] rock: directory entry would overflow storage [ 254.321065][ T5977] rock: sig=0x4654, size=5, remaining=4 [ 254.429081][ T5977] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 254.458778][ T5981] loop2: detected capacity change from 0 to 128 [ 254.695574][ T5982] loop3: detected capacity change from 0 to 1024 [ 254.757181][ T5982] ======================================================= [ 254.757181][ T5982] WARNING: The mand mount option has been deprecated and [ 254.757181][ T5982] and is ignored by this kernel. Remove the mand [ 254.757181][ T5982] option from the mount to silence this warning. [ 254.757181][ T5982] ======================================================= [ 254.794189][ T5982] EXT4-fs: inline encryption not supported [ 254.801419][ T5982] EXT4-fs: Ignoring removed i_version option [ 255.134610][ T5982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.548362][ T4009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.556623][ T4009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.662434][ T5982] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 255.860083][ T3570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.868190][ T3570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.380506][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.475892][ T6001] loop2: detected capacity change from 0 to 1024 [ 256.705521][ T6001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.730346][ T6004] loop1: detected capacity change from 0 to 2048 [ 256.901759][ T6004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.923005][ T6004] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.089141][ T6012] loop3: detected capacity change from 0 to 1024 [ 257.288400][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.447131][ T6003] loop0: detected capacity change from 0 to 8192 [ 258.027250][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.860953][ T6024] capability: warning: `syz.1.15' uses deprecated v2 capabilities in a way that may be insecure [ 259.673813][ T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 259.797151][ T6034] loop1: detected capacity change from 0 to 1024 [ 259.867170][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.882538][ T42] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 259.894014][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.041362][ T6034] hfsplus: invalid extent btree flag [ 260.083547][ T42] usb 5-1: config 0 descriptor?? [ 260.096157][ T6034] hfsplus: failed to load extents file [ 260.364958][ T6036] loop3: detected capacity change from 0 to 1024 [ 260.426770][ T6036] EXT4-fs (loop3): orphan cleanup on readonly fs [ 260.541378][ T6036] EXT4-fs (loop3): 1 truncate cleaned up [ 260.596685][ T6036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.619551][ T42] lg-g15 0003:046D:C222.0001: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 260.801763][ T5421] usb 5-1: USB disconnect, device number 2 [ 261.165425][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.036100][ T6041] fido_id[6041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 262.060682][ T6053] loop4: detected capacity change from 0 to 128 [ 262.248990][ T6056] loop1: detected capacity change from 0 to 1024 [ 262.255367][ T6053] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.255502][ T6053] FAT-fs (loop4): Filesystem has been set read-only [ 262.255658][ T6053] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.255886][ T6053] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.256053][ T6053] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.256198][ T6053] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.317154][ T6053] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.326330][ T6053] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.340067][ T6053] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.348897][ T6053] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.359175][ T6053] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.368180][ T6053] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.590896][ T6053] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 262.626425][ T6056] hfsplus: failed to load root directory [ 262.643184][ T30] audit: type=1800 audit(1750750190.344:2): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.28" name="file1" dev="loop4" ino=1048602 res=0 errno=0 [ 263.226611][ T6065] loop0: detected capacity change from 0 to 128 [ 263.323634][ T6066] loop2: detected capacity change from 0 to 512 [ 263.350121][ T6065] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 263.461717][ T6066] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.30: casefold flag without casefold feature [ 263.475797][ T6066] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.30: couldn't read orphan inode 15 (err -117) [ 263.510596][ T6066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.526359][ T6066] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.655152][ T6053] syz.4.28 (6053) used greatest stack depth: 4208 bytes left [ 264.021385][ T6071] warning: `syz.1.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 264.051399][ T3469] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 264.102315][ T6072] loop3: detected capacity change from 0 to 256 [ 264.167736][ T6072] exfat: Invalid uid '0x00000000ffffffff' [ 264.652330][ T6076] loop0: detected capacity change from 0 to 512 [ 264.752597][ T6076] journal_path: Lookup failure for './file0' [ 264.759314][ T6076] EXT4-fs: error: could not find journal device path [ 265.539423][ T6082] process 'syz.4.34' launched './file0' with NULL argv: empty string added [ 268.010354][ T6089] loop3: detected capacity change from 0 to 512 [ 268.385723][ T6089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.399100][ T6089] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.318573][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.875213][ T6106] loop4: detected capacity change from 0 to 256 [ 269.923620][ T6106] exfat: Invalid uid '0x00000000ffffffff' [ 269.947696][ T6096] loop0: detected capacity change from 0 to 164 [ 269.992567][ T6096] Unable to read rock-ridge attributes [ 271.293935][ T6114] loop3: detected capacity change from 0 to 128 [ 271.449610][ T6114] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 271.478697][ T6114] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.563737][ T6114] capability: warning: `syz.3.47' uses 32-bit capabilities (legacy support in use) [ 272.198230][ T5805] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 275.521401][ C1] hrtimer: interrupt took 247905 ns [ 278.062315][ T6163] loop0: detected capacity change from 0 to 8192 [ 278.393371][ T6170] loop4: detected capacity change from 0 to 2048 [ 278.545194][ T6170] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 279.298078][ T5803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.316287][ T5803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.342728][ T5803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.364367][ T5803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.377960][ T5803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.162004][ T6189] loop1: detected capacity change from 0 to 1024 [ 281.360332][ T42] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 281.511887][ T5803] Bluetooth: hci5: command tx timeout [ 282.658424][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 282.671691][ T42] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 282.691003][ T42] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.700537][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 282.713667][ T42] usb 1-1: SerialNumber: syz [ 283.201149][ T42] usb 1-1: USB disconnect, device number 2 [ 283.561441][ T6199] loop1: detected capacity change from 0 to 2048 [ 283.590237][ T5803] Bluetooth: hci5: command tx timeout [ 283.673875][ T6199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.945926][ T6199] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 284.026465][ T6179] chnl_net:caif_netlink_parms(): no params data found [ 284.088749][ T6199] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 284.101588][ T6199] EXT4-fs (loop1): This should not happen!! Data will be lost [ 284.101588][ T6199] [ 284.111645][ T6199] EXT4-fs (loop1): Total free blocks count 0 [ 284.117881][ T6199] EXT4-fs (loop1): Free/Dirty block details [ 284.124186][ T6199] EXT4-fs (loop1): free_blocks=2415919104 [ 284.130374][ T6199] EXT4-fs (loop1): dirty_blocks=32 [ 284.135710][ T6199] EXT4-fs (loop1): Block reservation details [ 284.147739][ T6199] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 284.193591][ T6209] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 31 with max blocks 1 with error 28 [ 284.672120][ T6215] loop0: detected capacity change from 0 to 1024 [ 285.013614][ T4370] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.300453][ T4370] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.527069][ T6221] loop4: detected capacity change from 0 to 1024 [ 285.540368][ T4370] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.660948][ T5803] Bluetooth: hci5: command tx timeout [ 285.738096][ T6221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.843874][ T4370] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.938747][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.946850][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.920358][ T5421] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 287.038310][ T4370] bridge_slave_1: left allmulticast mode [ 287.044466][ T4370] bridge_slave_1: left promiscuous mode [ 287.051283][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.099157][ T4370] bridge_slave_0: left allmulticast mode [ 287.105895][ T4370] bridge_slave_0: left promiscuous mode [ 287.119890][ T4370] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.120522][ T5421] usb 2-1: Using ep0 maxpacket: 32 [ 287.207713][ T5421] usb 2-1: config 0 interface 0 has no altsetting 0 [ 287.218754][ T5421] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 287.229410][ T5421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.290507][ T5421] usb 2-1: config 0 descriptor?? [ 287.815740][ T4370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.835065][ T5803] Bluetooth: hci5: command tx timeout [ 287.888798][ T4370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.913710][ T4370] bond0 (unregistering): Released all slaves [ 288.179414][ T6236] netlink: 36 bytes leftover after parsing attributes in process `syz.0.89'. [ 288.199605][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.207383][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.215339][ T6179] bridge_slave_0: entered allmulticast mode [ 288.225032][ T6179] bridge_slave_0: entered promiscuous mode [ 288.329110][ T5421] usb 2-1: USB disconnect, device number 2 [ 288.570904][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.578663][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.591173][ T6179] bridge_slave_1: entered allmulticast mode [ 288.614924][ T6179] bridge_slave_1: entered promiscuous mode [ 289.366950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 289.469068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 290.081848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 290.184554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 290.389304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 290.526815][ T6207] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 290.647984][ T4370] hsr_slave_0: left promiscuous mode [ 290.751786][ T4370] hsr_slave_1: left promiscuous mode [ 290.760674][ T4370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.768383][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.805476][ T5811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.938890][ T4370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.947288][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.050972][ T4370] veth1_macvtap: left promiscuous mode [ 291.056794][ T4370] veth0_macvtap: left promiscuous mode [ 291.064869][ T4370] veth1_vlan: left promiscuous mode [ 291.070726][ T4370] veth0_vlan: left promiscuous mode [ 291.429993][ T5876] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 291.720929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 291.999945][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 292.292624][ T5876] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 292.302358][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.351273][ T5876] usb 2-1: config 0 descriptor?? [ 293.502694][ T4370] team0 (unregistering): Port device team_slave_1 removed [ 293.633415][ T4370] team0 (unregistering): Port device team_slave_0 removed [ 294.306357][ T6179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.424141][ T6179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.466250][ T5876] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 294.480146][ T5876] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 294.497725][ T5876] asix 2-1:0.0: probe with driver asix failed with error -71 [ 294.595078][ T6273] loop4: detected capacity change from 0 to 256 [ 294.711617][ T5876] usb 2-1: USB disconnect, device number 3 [ 294.821877][ T6273] loop4: detected capacity change from 0 to 512 [ 294.859883][ T6273] ext2: Unknown parameter 'smackfsroot' [ 295.028108][ T6179] team0: Port device team_slave_0 added [ 295.215749][ T6179] team0: Port device team_slave_1 added [ 295.457476][ T6280] loop3: detected capacity change from 0 to 1024 [ 295.867536][ T6280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.926826][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.934293][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.960879][ T6179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.395488][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.402950][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.432589][ T6179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.705406][ T6290] loop1: detected capacity change from 0 to 512 [ 297.952697][ T6290] EXT4-fs: Ignoring removed i_version option [ 298.207199][ T6290] EXT4-fs (loop1): 1 orphan inode deleted [ 298.215705][ T6290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.354096][ T6284] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 300.354066][ T6179] hsr_slave_0: entered promiscuous mode [ 300.369496][ T6179] hsr_slave_1: entered promiscuous mode [ 300.738575][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.010162][ T30] audit: type=1326 audit(1750750228.744:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6298 comm="syz.0.105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc289b8e929 code=0x0 [ 301.607085][ T6305] loop0: detected capacity change from 0 to 256 [ 301.732236][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.746295][ T6305] vfat: Unknown parameter 'nnonumtail' [ 302.564792][ T6312] loop3: detected capacity change from 0 to 128 [ 302.999575][ T6179] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 303.091652][ T6179] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 303.225366][ T6179] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 303.331555][ T6179] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 303.891753][ T5876] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 304.144106][ T5876] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 304.154510][ T5876] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 304.308987][ T5876] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 304.323284][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.333225][ T5876] usb 1-1: Product: syz [ 304.337662][ T5876] usb 1-1: Manufacturer: syz [ 304.342634][ T5876] usb 1-1: SerialNumber: syz [ 304.390392][ T6339] loop3: detected capacity change from 0 to 256 [ 304.435517][ T5876] usb 1-1: config 0 descriptor?? [ 304.444246][ T6330] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 304.491077][ T6330] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 304.503838][ T6339] exfat: Deprecated parameter 'utf8' [ 304.510038][ T6339] exfat: Deprecated parameter 'namecase' [ 304.515996][ T6339] exfat: Deprecated parameter 'utf8' [ 304.804729][ T6179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.816411][ T6330] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 304.824230][ T6339] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 304.867056][ T6330] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 304.996336][ T6339] exFAT-fs (loop3): start_clu is invalid cluster(0x0) [ 305.131837][ T6179] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.264647][ T3930] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.272313][ T3930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.381474][ T3930] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.389048][ T3930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.792349][ T5876] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 305.818164][ T5876] dm9601 1-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 306.042577][ T5876] usb 1-1: USB disconnect, device number 3 [ 306.101403][ T5876] dm9601 1-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 306.617599][ T6359] loop1: detected capacity change from 0 to 128 [ 307.276967][ T6366] loop4: detected capacity change from 0 to 512 [ 307.553158][ T6367] loop0: detected capacity change from 0 to 2048 [ 307.747138][ T6366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.760560][ T6366] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.945129][ T6179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.981313][ T6375] loop3: detected capacity change from 0 to 256 [ 308.136890][ T6377] loop0: detected capacity change from 0 to 512 [ 308.232598][ T30] audit: type=1800 audit(1750750235.954:4): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.127" name="file1" dev="loop3" ino=1048607 res=0 errno=0 [ 308.359985][ T6377] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 308.427914][ T5811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.460483][ T6377] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 308.538216][ T6377] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 308.600357][ T6377] System zones: 0-2, 18-18, 34-34 [ 308.652888][ T6377] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.124: iget: bad i_size value: 360287970189639680 [ 308.771042][ T6377] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.124: couldn't read orphan inode 15 (err -117) [ 308.831859][ T6382] loop1: detected capacity change from 0 to 256 [ 308.907576][ T6382] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 308.919517][ T6382] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 308.961507][ T6377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.136906][ T6382] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 309.654579][ T5806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.491418][ T6404] loop1: detected capacity change from 0 to 16 [ 310.549056][ T6404] erofs (device loop1): mounted with root inode @ nid 36. [ 310.631154][ T6404] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 310.680401][ T6404] erofs (device loop1): read error -117 @ 43 of nid 36 [ 311.086516][ T6409] loop0: detected capacity change from 0 to 128 [ 311.322475][ T6179] veth0_vlan: entered promiscuous mode [ 311.469072][ T6179] veth1_vlan: entered promiscuous mode [ 311.516532][ T30] audit: type=1326 audit(1750750239.254:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.4.136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6f0d8e929 code=0x0 [ 311.935919][ T6179] veth0_macvtap: entered promiscuous mode [ 311.967761][ T6416] loop1: detected capacity change from 0 to 1024 [ 312.011033][ T6416] EXT4-fs: Ignoring removed mblk_io_submit option [ 312.017989][ T6416] EXT4-fs: Ignoring removed bh option [ 312.030165][ T6179] veth1_macvtap: entered promiscuous mode [ 312.138837][ T6416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.272522][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.343884][ T6416] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 312.372376][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.533602][ T6179] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.543854][ T6179] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.553091][ T6179] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.562341][ T6179] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.638421][ T6425] loop0: detected capacity change from 0 to 2048 [ 312.898046][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.973774][ T6425] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.160604][ T6425] EXT4-fs error (device loop0): ext4_lookup:1787: inode #16: comm syz.0.138: iget: bad i_size value: 8796093031208 [ 313.692603][ T5806] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 314.857949][ T6449] loop4: detected capacity change from 0 to 1024 [ 317.056195][ T6461] loop4: detected capacity change from 0 to 8192 [ 317.125068][ T6472] loop0: detected capacity change from 0 to 128 [ 317.567011][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.576181][ T6461] FAT-fs (loop4): Filesystem has been set read-only [ 317.583649][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.592741][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.601818][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.610903][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.619964][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.632483][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.642528][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.651888][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.661202][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.670297][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.679190][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.688341][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.697345][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.706363][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.715398][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.724394][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.736891][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.747021][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.756029][ T6461] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 317.783469][ T30] audit: type=1800 audit(1750750245.504:6): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.146" name="file2" dev="loop4" ino=1048608 res=0 errno=0 [ 319.159623][ T6490] loop4: detected capacity change from 0 to 512 [ 319.218001][ T6488] loop0: detected capacity change from 0 to 2048 [ 319.352100][ T6488] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.401868][ T6490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.415077][ T6490] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.538082][ T6496] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz.4.150: invalid size [ 320.024336][ T5811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.576176][ T6504] loop4: detected capacity change from 0 to 512 [ 320.660553][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.668625][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.696720][ T6504] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 320.945509][ T6504] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 321.099479][ T6504] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.153: corrupted in-inode xattr: e_value size too large [ 321.431651][ T6504] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.153: couldn't read orphan inode 15 (err -117) [ 321.720583][ T6511] loop1: detected capacity change from 0 to 512 [ 321.742329][ T6504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.913159][ T6511] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 321.921103][ T6511] UDF-fs: Scanning with blocksize 512 failed [ 321.944651][ T4009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.952940][ T4009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.193442][ T6511] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 322.201243][ T6511] UDF-fs: Scanning with blocksize 1024 failed [ 322.510628][ T6511] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 322.518479][ T6511] UDF-fs: Scanning with blocksize 2048 failed [ 322.740560][ T6511] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 322.967550][ T5811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.056914][ T6511] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.009396][ T6523] loop4: detected capacity change from 0 to 512 [ 326.319061][ T6523] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 327.084409][ T5421] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 327.186083][ T5421] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.274836][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 327.333897][ T6534] loop5: detected capacity change from 0 to 1024 [ 327.424774][ T6534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 327.433700][ T6534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 327.615638][ T6534] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 328.234676][ T6537] fido_id[6537]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 328.538297][ T6544] loop1: detected capacity change from 0 to 4096 [ 328.624280][ T6544] EXT4-fs: Ignoring removed nobh option [ 328.912219][ T6544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.707509][ T6544] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 329.829494][ T6565] loop3: detected capacity change from 0 to 128 [ 329.927524][ T6565] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 329.997994][ T6565] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 330.152419][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.634743][ T6574] loop5: detected capacity change from 0 to 512 [ 330.863279][ T6574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 331.644217][ T6179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.653296][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.176'. [ 333.970611][ T6601] loop4: detected capacity change from 0 to 2048 [ 334.283583][ T6601] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.354103][ T6600] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 334.362382][ T30] audit: type=1804 audit(1750750262.084:7): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.178" name="/newroot/43/file2/file1" dev="loop4" ino=15 res=1 errno=0 [ 334.369855][ T6600] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 334.405777][ T6600] EXT4-fs (loop4): This should not happen!! Data will be lost [ 334.405777][ T6600] [ 334.415838][ T6600] EXT4-fs (loop4): Total free blocks count 0 [ 334.426533][ T6600] EXT4-fs (loop4): Free/Dirty block details [ 334.433862][ T6600] EXT4-fs (loop4): free_blocks=2415919104 [ 334.439919][ T6600] EXT4-fs (loop4): dirty_blocks=16 [ 334.445263][ T6600] EXT4-fs (loop4): Block reservation details [ 334.451572][ T6600] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 335.441775][ T6611] loop3: detected capacity change from 0 to 256 [ 335.876308][ T5811] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 336.113489][ T6619] netlink: 32 bytes leftover after parsing attributes in process `syz.1.183'. [ 336.193762][ T6620] netlink: 32 bytes leftover after parsing attributes in process `syz.1.183'. [ 336.288309][ T6620] Zero length message leads to an empty skb [ 337.489544][ T6636] loop1: detected capacity change from 0 to 256 [ 337.867567][ T6643] loop0: detected capacity change from 0 to 512 [ 338.073512][ T6643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.236275][ T6651] loop5: detected capacity change from 0 to 256 [ 338.286321][ T6643] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.192: iget: bad i_size value: 15393162788874 [ 338.456433][ T6654] binder: 6652:6654 ioctl c00c620f 200000000100 returned -22 [ 338.736011][ T5806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.581384][ T5854] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 341.595555][ T5421] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 342.068270][ T3353] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 342.094659][ T5421] usb 6-1: Using ep0 maxpacket: 8 [ 342.111316][ T5854] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.122119][ T5854] usb 2-1: config 0 has no interfaces? [ 342.162032][ T5421] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 342.173732][ T5421] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 342.183856][ T5421] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 342.200031][ T5421] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 342.214074][ T5421] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 342.227259][ T5421] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.356368][ T3353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 342.368067][ T3353] usb 1-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 342.377854][ T3353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.598915][ T3353] usb 1-1: config 0 descriptor?? [ 342.709199][ T5421] usb 6-1: config 0 descriptor?? [ 342.963474][ T5854] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.973452][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.039899][ T3353] usb 1-1: can't set config #0, error -71 [ 343.119313][ T5421] usb 6-1: can't set config #0, error -71 [ 343.155106][ T5854] usb 2-1: config 0 descriptor?? [ 343.175200][ T3353] usb 1-1: USB disconnect, device number 4 [ 343.207225][ T5421] usb 6-1: USB disconnect, device number 2 [ 343.244203][ T5854] usb 2-1: can't set config #0, error -71 [ 343.325659][ T5854] usb 2-1: USB disconnect, device number 4 [ 347.298558][ T6721] loop4: detected capacity change from 0 to 128 [ 347.383163][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.389973][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.572139][ T6721] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 347.633277][ T6721] System zones: 1-3, 19-19, 35-36 [ 347.695074][ T6720] loop1: detected capacity change from 0 to 2048 [ 347.709449][ T6721] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 347.757074][ T6728] tracefs: Bad value for 'uid' [ 347.763105][ T6728] tracefs: Bad value for 'uid' [ 347.797802][ T6721] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 347.981119][ T6720] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.116613][ T6721] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 348.548345][ T5797] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 348.734632][ T5811] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 348.800001][ T5876] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 349.017212][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 349.087004][ T5876] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 349.141590][ T5876] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 349.152334][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.164861][ T5876] usb 1-1: Product: syz [ 349.169275][ T5876] usb 1-1: Manufacturer: syz [ 349.177444][ T5876] usb 1-1: SerialNumber: syz [ 349.348355][ T5876] usb 1-1: config 0 descriptor?? [ 349.358580][ T6739] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 349.425748][ T5876] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 349.593980][ T6750] loop4: detected capacity change from 0 to 512 [ 349.655098][ T5876] usb 1-1: USB disconnect, device number 5 [ 350.080170][ T6750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 350.097458][ T6750] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 350.596653][ T6762] loop1: detected capacity change from 0 to 128 [ 351.588881][ T5811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 351.868070][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.668397][ T6762] EXT4-fs (loop1): Test dummy encryption mode enabled [ 352.716557][ T6773] loop4: detected capacity change from 0 to 8 [ 352.765452][ T6762] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 352.770184][ T6773] SQUASHFS error: zlib decompression failed, data probably corrupt [ 352.786266][ T6773] SQUASHFS error: Failed to read block 0x4e8: -5 [ 352.795137][ T30] audit: type=1800 audit(1750750280.534:8): pid=6773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.225" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 352.832196][ T6762] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.857257][ T6773] SQUASHFS error: Failed to read block 0x6e6: -5 [ 352.865206][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 352.872906][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 352.880258][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 352.886923][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 352.895099][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 352.902528][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 352.909170][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 352.916914][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 352.924305][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 352.931065][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 352.938578][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 352.945997][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 352.952819][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 352.965172][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 352.973820][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 352.980593][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 352.988106][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 352.995518][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.002275][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.010019][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.017239][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.024078][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.032177][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.039394][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.046185][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.053814][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.065774][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.073751][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.081398][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.088605][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.095349][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.102999][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.110331][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.116978][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.125068][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.132457][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.139114][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.146751][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.154218][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.165722][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.174499][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.181852][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.188483][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.196120][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.203442][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.210699][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.218206][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.225514][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.232300][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.240016][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.247236][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.253997][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.266370][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.274859][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.281633][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.289143][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.296498][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.303682][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.311337][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.318545][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.325285][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.333023][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.340461][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.347091][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.354698][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.362032][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.373241][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.382071][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.389297][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.396191][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.403796][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.411156][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.417786][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.425429][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.432752][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.439390][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.446999][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.455112][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.461852][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.474185][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.482950][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.489595][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.497325][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.504774][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.511596][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.519099][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.526405][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.533134][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.540807][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.548032][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.554774][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.562435][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.574486][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.583658][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.591289][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.598487][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.605261][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.612952][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.620261][ T6773] SQUASHFS error: Failed to read block 0x0: -5 [ 353.626970][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.634611][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.641952][ T6773] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 353.649465][ T6773] SQUASHFS error: read_indexes: reading block [6e4:0] [ 353.867431][ T6762] fscrypt (loop1): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 353.940409][ T5854] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 354.150062][ T5854] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 354.161464][ T5854] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 354.172736][ T5854] usb 4-1: config 0 interface 0 has no altsetting 0 [ 354.179901][ T5854] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 354.193028][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.379569][ T5854] usb 4-1: config 0 descriptor?? [ 354.382706][ T6783] loop5: detected capacity change from 0 to 512 [ 354.401034][ T6778] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 354.517163][ T6783] EXT4-fs: Ignoring removed oldalloc option [ 354.523150][ T5797] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 354.548192][ T5803] Bluetooth: hci0: command 0x0406 tx timeout [ 354.553063][ T5089] Bluetooth: hci2: command 0x0406 tx timeout [ 354.554907][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 354.562105][ T5089] Bluetooth: hci4: command 0x0406 tx timeout [ 354.716540][ T6783] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 354.730813][ T6783] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 354.911436][ T6790] loop4: detected capacity change from 0 to 1024 [ 354.956371][ T6783] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 355.015873][ T5854] holtek_mouse 0003:04D9:A067.0004: bogus close delimiter [ 355.015949][ T6795] loop0: detected capacity change from 0 to 512 [ 355.020691][ T6795] EXT4-fs: Ignoring removed mblk_io_submit option [ 355.023349][ T5854] holtek_mouse 0003:04D9:A067.0004: item 0 2 2 10 parsing failed [ 355.055993][ T6783] EXT4-fs (loop5): 1 truncate cleaned up [ 355.064275][ T6783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.078234][ T6795] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 355.159088][ T30] audit: type=1800 audit(1750750282.894:9): pid=6790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.229" name="file2" dev="loop4" ino=21 res=0 errno=0 [ 355.181319][ T5854] holtek_mouse 0003:04D9:A067.0004: hid parse failed: -22 [ 355.189170][ T5854] holtek_mouse 0003:04D9:A067.0004: probe with driver holtek_mouse failed with error -22 [ 355.225388][ T6795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 355.242119][ T6795] System zones: 1-12 [ 355.292949][ T5876] usb 4-1: USB disconnect, device number 2 [ 355.312763][ T6795] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.231: corrupted in-inode xattr: e_value size too large [ 355.364954][ T6795] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.231: couldn't read orphan inode 15 (err -117) [ 355.382786][ T6800] loop1: detected capacity change from 0 to 128 [ 355.477745][ T6800] EXT4-fs: Ignoring removed nobh option [ 355.485648][ T6795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.580842][ T6800] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 355.638044][ T6800] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 355.774836][ T6800] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.230: checksumming directory block 0 [ 355.903870][ T5806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.255219][ T6179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.354009][ T5797] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 356.655215][ T5876] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 356.882354][ T6811] loop3: detected capacity change from 0 to 1024 [ 356.957390][ T6811] EXT4-fs: Ignoring removed nobh option [ 356.963381][ T6811] EXT4-fs: Ignoring removed bh option [ 357.087023][ T6811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.302124][ T6811] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.235: Allocating blocks 385-513 which overlap fs metadata [ 357.537615][ T5876] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.548403][ T5876] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 357.557759][ T5876] usb 1-1: config 1 has no interface number 0 [ 357.567329][ T5876] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.668920][ T5876] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.678456][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.686926][ T5876] usb 1-1: Product: syz [ 358.695040][ T5876] usb 1-1: Manufacturer: syz [ 358.701164][ T5876] usb 1-1: SerialNumber: syz [ 359.067687][ T6822] EXT4-fs (loop3): pa ffff8881269c6540: logic 16, phys. 129, len 24 [ 359.076177][ T6822] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 359.115148][ T5851] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 359.154145][ T5876] usb 1-1: selecting invalid altsetting 1 [ 359.434010][ T6830] loop4: detected capacity change from 0 to 512 [ 359.561045][ T5851] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.571892][ T5851] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 359.581567][ T5851] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.711848][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.144398][ T6830] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.238: casefold flag without casefold feature [ 360.163748][ T5851] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.173860][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.182543][ T5851] usb 2-1: Product: syz [ 360.187149][ T5851] usb 2-1: Manufacturer: syz [ 360.192465][ T5851] usb 2-1: SerialNumber: syz [ 360.249144][ T5851] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 360.257163][ T5851] cdc_ncm 2-1:1.0: bind() failure [ 360.308089][ T6830] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.238: couldn't read orphan inode 15 (err -117) [ 360.312774][ T5876] cdc_ncm 1-1:1.1: bind() failure [ 360.436853][ T6830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.477842][ T5876] usb 1-1: USB disconnect, device number 6 [ 360.554363][ T5851] usb 2-1: USB disconnect, device number 5 [ 360.788615][ T6837] loop3: detected capacity change from 0 to 1024 [ 360.881375][ T6837] EXT4-fs (loop3): Test dummy encryption mode enabled [ 360.920361][ T6837] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 361.001731][ T5811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.163504][ T6837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.301094][ T5851] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 361.342547][ T6837] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.239: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 361.531451][ T5851] usb 1-1: Using ep0 maxpacket: 32 [ 361.539609][ T6844] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.239: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 361.607691][ T5851] usb 1-1: config index 0 descriptor too short (expected 50356, got 796) [ 361.616717][ T5851] usb 1-1: config 41 has too many interfaces: 195, using maximum allowed: 32 [ 361.626098][ T5851] usb 1-1: config 41 has an invalid descriptor of length 0, skipping remainder of the config [ 361.636809][ T5851] usb 1-1: config 41 has 0 interfaces, different from the descriptor's value: 195 [ 362.051669][ T5851] usb 1-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 362.065402][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.077224][ T5851] usb 1-1: Product: syz [ 362.082824][ T5851] usb 1-1: Manufacturer: syz [ 362.087663][ T5851] usb 1-1: SerialNumber: syz [ 362.232482][ T6848] loop1: detected capacity change from 0 to 512 [ 362.471812][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.622671][ T6853] loop4: detected capacity change from 0 to 1024 [ 362.755853][ T6848] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 362.764225][ T6848] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 363.218926][ T6848] System zones: 0-1, 15-15, 18-18, 34-34 [ 363.287428][ T6848] EXT4-fs (loop1): orphan cleanup on readonly fs [ 363.294515][ T6848] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 363.308833][ T6848] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 363.324975][ T6848] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 363.504965][ T6848] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.243: bad orphan inode 16 [ 363.838515][ T6848] ext4_test_bit(bit=15, block=18) = 1 [ 363.844427][ T6848] is_bad_inode(inode)=0 [ 363.848958][ T6848] NEXT_ORPHAN(inode)=0 [ 363.853456][ T6848] max_ino=32 [ 363.856848][ T6848] i_nlink=2 [ 363.862475][ T6848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 364.442499][ T5851] usb 1-1: USB disconnect, device number 7 [ 364.551174][ T6848] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 365.332277][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.487556][ T6862] loop3: detected capacity change from 0 to 128 [ 365.582161][ T6862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 365.589096][ T6862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 365.690189][ T6862] EXT4-fs (loop3): Test dummy encryption mode enabled [ 365.876862][ T6862] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.965082][ T6862] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 368.586341][ T6886] loop1: detected capacity change from 0 to 2048 [ 369.043331][ T6886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.308130][ T6886] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 369.378441][ T5805] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.414582][ T6886] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 0 with max blocks 1 with error 28 [ 369.428116][ T6886] EXT4-fs (loop1): This should not happen!! Data will be lost [ 369.428116][ T6886] [ 369.438180][ T6886] EXT4-fs (loop1): Total free blocks count 0 [ 369.448841][ T6886] EXT4-fs (loop1): Free/Dirty block details [ 369.451511][ T6898] loop4: detected capacity change from 0 to 256 [ 369.456522][ T6886] EXT4-fs (loop1): free_blocks=66060304 [ 369.467222][ T6886] EXT4-fs (loop1): dirty_blocks=16 [ 369.472876][ T6886] EXT4-fs (loop1): Block reservation details [ 369.479082][ T6886] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 369.997462][ T6892] loop5: detected capacity change from 0 to 8192 [ 370.049524][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.122287][ T6902] loop3: detected capacity change from 0 to 512 [ 370.186547][ T6902] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 370.325318][ T6902] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 370.420098][ T6902] EXT4-fs (loop3): 1 truncate cleaned up [ 370.428192][ T6902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.715493][ T6908] loop4: detected capacity change from 0 to 512 [ 371.027589][ T6908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.040786][ T6908] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.070769][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.506978][ T5811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.650273][ T5851] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 371.877282][ T6924] loop1: detected capacity change from 0 to 512 [ 371.921407][ T5851] usb 6-1: unable to get BOS descriptor or descriptor too short [ 371.970440][ T5851] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 371.976895][ T6923] loop3: detected capacity change from 0 to 1024 [ 371.978367][ T5851] usb 6-1: can't read configurations, error -71 [ 372.068721][ T6924] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.263: casefold flag without casefold feature [ 372.134596][ T6924] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.263: couldn't read orphan inode 15 (err -117) [ 372.174212][ T6924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.232688][ T6923] EXT4-fs (loop3): orphan cleanup on readonly fs [ 372.383027][ T6923] EXT4-fs (loop3): 1 truncate cleaned up [ 372.443735][ T6923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 373.134815][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.440703][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.107034][ T6944] loop4: detected capacity change from 0 to 1764 [ 376.101075][ T6965] loop1: detected capacity change from 0 to 256 [ 376.524579][ T6965] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 376.567767][ T6970] loop0: detected capacity change from 0 to 512 [ 376.639348][ T6970] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 376.739371][ T6970] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.276: iget: bad i_size value: 360287970189639680 [ 376.802146][ T6965] exFAT-fs (loop1): error, data size is invalid(10) [ 376.809168][ T6965] exFAT-fs (loop1): Filesystem has been set read-only [ 376.848548][ T6970] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.276: couldn't read orphan inode 15 (err -117) [ 376.926246][ T6970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.133407][ T6970] EXT4-fs (loop0): shut down requested (2) [ 378.859560][ T5806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.885224][ T6996] loop5: detected capacity change from 0 to 8 [ 379.331300][ T6997] loop3: detected capacity change from 0 to 512 [ 379.401082][ T7005] loop0: detected capacity change from 0 to 128 [ 379.422772][ T6997] EXT4-fs: Ignoring removed orlov option [ 379.598942][ T7005] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 379.609067][ T7005] FAT-fs (loop0): Filesystem has been set read-only [ 379.616107][ T7005] syz.0.286: attempt to access beyond end of device [ 379.616107][ T7005] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 379.631029][ T7005] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 379.639127][ T7005] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 379.694390][ T7005] syz.0.286: attempt to access beyond end of device [ 379.694390][ T7005] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 379.721591][ T30] audit: type=1800 audit(1750750307.454:10): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.286" name="file2" dev="loop0" ino=1048615 res=0 errno=0 [ 379.745722][ T6997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.758936][ T6997] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.172190][ T7005] syz.0.286 (7005) used greatest stack depth: 3584 bytes left [ 380.227342][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.827825][ T7029] loop3: detected capacity change from 0 to 1024 [ 380.967052][ T7029] EXT4-fs: inline encryption not supported [ 380.974627][ T7029] EXT4-fs: Ignoring removed i_version option [ 381.080412][ T7029] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 381.414039][ T7029] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.292: lblock 2 mapped to illegal pblock 2 (length 1) [ 381.530409][ T7029] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 381.538875][ T7029] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.292: lblock 0 mapped to illegal pblock 48 (length 1) [ 381.661031][ T7029] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 381.671487][ T7029] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.292: Failed to acquire dquot type 0 [ 381.781852][ T7029] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 381.890260][ T7029] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.292: mark_inode_dirty error [ 382.020687][ T7029] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 382.031505][ T7029] EXT4-fs (loop3): 1 orphan inode deleted [ 382.042661][ T7029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.062248][ T3930] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 382.177805][ T3930] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 382.186886][ T3930] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:15: Failed to release dquot type 0 [ 382.215962][ T7042] Invalid logical block size (3) [ 382.725269][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.886754][ T5805] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 382.994504][ T5805] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 383.028200][ T5805] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 383.590656][ T5854] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 383.826974][ T5854] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.837403][ T5854] usb 2-1: config 0 interface 0 has no altsetting 0 [ 383.844991][ T5854] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 383.854407][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.073682][ T5854] usb 2-1: config 0 descriptor?? [ 384.337775][ T7074] netlink: 16 bytes leftover after parsing attributes in process `syz.5.307'. [ 384.651018][ T5854] wacom 0003:056A:00BA.0005: item fetching failed at offset 5/7 [ 384.694482][ T5854] wacom 0003:056A:00BA.0005: parse failed [ 384.705023][ T5854] wacom 0003:056A:00BA.0005: probe with driver wacom failed with error -22 [ 384.837452][ T5876] usb 2-1: USB disconnect, device number 6 [ 385.311065][ T7086] overlayfs: missing 'lowerdir' [ 386.062457][ T7095] loop1: detected capacity change from 0 to 1024 [ 386.180645][ T7095] EXT4-fs (loop1): orphan cleanup on readonly fs [ 386.358263][ T7095] EXT4-fs (loop1): 1 truncate cleaned up [ 386.407900][ T7095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 386.424598][ T7101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.320'. [ 386.526326][ T7103] loop5: detected capacity change from 0 to 512 [ 386.592048][ T7103] EXT4-fs: Ignoring removed nobh option [ 386.760052][ T7103] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.319: iget: bad i_size value: 38620345925642 [ 386.785880][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.864503][ T7103] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.319: couldn't read orphan inode 15 (err -117) [ 386.973411][ T7103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.200311][ T7103] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.319: iget: bad i_size value: 38620345925642 [ 387.225732][ T7103] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.319: iget: bad i_size value: 38620345925642 [ 387.243831][ T7103] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.319: iget: bad i_size value: 38620345925642 [ 387.392507][ T6179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.663651][ T7118] loop1: detected capacity change from 0 to 256 [ 387.786398][ T7118] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 387.845072][ T7119] loop3: detected capacity change from 0 to 512 [ 387.942547][ T7119] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 388.048026][ T7119] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 388.124626][ T7119] System zones: 1-12 [ 388.220870][ T7119] EXT4-fs (loop3): 1 truncate cleaned up [ 388.228871][ T7119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.912115][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.688801][ T7147] netlink: 16 bytes leftover after parsing attributes in process `syz.5.334'. [ 390.780731][ T7146] loop0: detected capacity change from 0 to 1024 [ 391.056892][ T7146] EXT4-fs (loop0): orphan cleanup on readonly fs [ 391.391263][ T7146] EXT4-fs (loop0): 1 truncate cleaned up [ 391.543820][ T7146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 392.292295][ T5806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.363874][ T7171] loop1: detected capacity change from 0 to 256 [ 392.551802][ T7171] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 392.562977][ T7171] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 392.643054][ T7171] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 393.736445][ T7188] loop3: detected capacity change from 0 to 128 [ 393.968403][ T7191] loop1: detected capacity change from 0 to 512 [ 394.191981][ T7191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.205511][ T7191] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.504030][ T7191] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.345: corrupted inode contents [ 394.610272][ T7200] netlink: 16 bytes leftover after parsing attributes in process `syz.5.348'. [ 394.736647][ T7191] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.345: mark_inode_dirty error [ 394.915666][ T7191] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.345: corrupted inode contents [ 395.116166][ T7191] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.345: mark_inode_dirty error [ 396.332845][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.514475][ T7210] loop5: detected capacity change from 0 to 1024 [ 396.773185][ T7210] EXT4-fs (loop5): orphan cleanup on readonly fs [ 397.077328][ T7210] EXT4-fs (loop5): 1 truncate cleaned up [ 397.196583][ T7210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 397.739627][ T6179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.869245][ T7228] netlink: 'syz.1.353': attribute type 4 has an invalid length. [ 398.365672][ T7235] loop5: detected capacity change from 0 to 128 [ 398.531779][ T7235] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 398.622199][ T7235] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 398.721046][ T7235] EXT4-fs warning (device loop5): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled. [ 398.954572][ T7244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.360'. [ 398.980474][ T5876] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 399.077831][ T6179] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 399.237491][ T7250] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 399.251907][ T5876] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.252037][ T5876] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.317538][ T5876] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 399.327166][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 399.335647][ T5876] usb 1-1: SerialNumber: syz [ 399.734897][ T5876] usb 1-1: 0:2 : does not exist [ 399.925062][ T5876] usb 1-1: USB disconnect, device number 8 [ 401.231267][ T6688] udevd[6688]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.279975][ T7274] netlink: 'syz.5.370': attribute type 4 has an invalid length. [ 402.432656][ T7277] netlink: 'syz.5.370': attribute type 4 has an invalid length. [ 403.581025][ T7292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.374'. [ 403.714628][ T7295] loop0: detected capacity change from 0 to 128 [ 403.837746][ T7298] loop3: detected capacity change from 0 to 256 [ 403.863963][ T7295] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 403.877575][ T7295] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 403.932775][ T7295] syz.0.375 (pid 7295) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 404.073352][ T7298] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 404.201146][ T7298] exFAT-fs (loop3): error, data size is invalid(10) [ 404.235485][ T5806] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.988414][ T7313] loop3: detected capacity change from 0 to 1024 [ 405.231603][ T7313] EXT4-fs (loop3): orphan cleanup on readonly fs [ 405.342941][ T7313] EXT4-fs (loop3): 1 truncate cleaned up [ 405.418328][ T7313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 405.563159][ T7320] netlink: 'syz.1.383': attribute type 4 has an invalid length. [ 405.742526][ T7321] netlink: 'syz.1.383': attribute type 4 has an invalid length. [ 406.382244][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.625087][ T7331] input: syz1 as /devices/virtual/input/input7 [ 407.873308][ T7334] loop1: detected capacity change from 0 to 4096 [ 407.946802][ T7334] EXT4-fs: Ignoring removed mblk_io_submit option [ 407.954805][ T7334] ext4: Unknown parameter 'permit_directio' [ 408.273249][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 408.547088][ T7347] loop5: detected capacity change from 0 to 1024 [ 408.770514][ T5876] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 408.811218][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.818080][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.053469][ T5876] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 409.063545][ T5876] usb 1-1: config 1 has no interface number 0 [ 409.071154][ T5876] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.082537][ T5876] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 409.092156][ T5876] usb 1-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 409.306127][ T7347] ===================================================== [ 409.313649][ T7347] BUG: KMSAN: uninit-value in hfsplus_uni2asc+0x99f/0x25e0 [ 409.321414][ T7347] hfsplus_uni2asc+0x99f/0x25e0 [ 409.326460][ T7347] hfsplus_readdir+0xd60/0x1a70 [ 409.331901][ T7347] iterate_dir+0x719/0x920 [ 409.336547][ T7347] __se_sys_getdents64+0x17e/0x550 [ 409.342269][ T7347] __x64_sys_getdents64+0x97/0xe0 [ 409.347531][ T7347] x64_sys_call+0x16c4/0x3db0 [ 409.352621][ T7347] do_syscall_64+0xd9/0x210 [ 409.357425][ T7347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.363752][ T7347] [ 409.366183][ T7347] Uninit was created at: [ 409.370867][ T7347] __kmalloc_noprof+0x95f/0x1310 [ 409.377021][ T7347] hfsplus_find_init+0x90/0x1d0 [ 409.382301][ T7347] hfsplus_readdir+0x1dc/0x1a70 [ 409.387383][ T7347] iterate_dir+0x719/0x920 [ 409.392399][ T7347] __se_sys_getdents64+0x17e/0x550 [ 409.397748][ T7347] __x64_sys_getdents64+0x97/0xe0 [ 409.403412][ T7347] x64_sys_call+0x16c4/0x3db0 [ 409.408320][ T7347] do_syscall_64+0xd9/0x210 [ 409.413237][ T7347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.419342][ T7347] [ 409.422019][ T7347] CPU: 1 UID: 0 PID: 7347 Comm: syz.5.391 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(undef) [ 409.434384][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 409.444828][ T7347] ===================================================== [ 409.452511][ T7347] Disabling lock debugging due to kernel taint [ 409.458807][ T7347] Kernel panic - not syncing: kmsan.panic set ... [ 409.465406][ T7347] CPU: 1 UID: 0 PID: 7347 Comm: syz.5.391 Tainted: G B 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(undef) [ 409.479207][ T7347] Tainted: [B]=BAD_PAGE [ 409.483490][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 409.493720][ T7347] Call Trace: [ 409.497128][ T7347] [ 409.500188][ T7347] __dump_stack+0x26/0x30 [ 409.504748][ T7347] dump_stack_lvl+0x53/0x270 [ 409.509589][ T7347] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 409.515673][ T7347] dump_stack+0x1e/0x25 [ 409.520047][ T7347] panic+0x4bd/0xd50 [ 409.524222][ T7347] kmsan_report+0x31c/0x320 [ 409.528982][ T7347] ? __msan_warning+0x1b/0x30 [ 409.533891][ T7347] ? hfsplus_uni2asc+0x99f/0x25e0 [ 409.539123][ T7347] ? hfsplus_readdir+0xd60/0x1a70 [ 409.544383][ T7347] ? iterate_dir+0x719/0x920 [ 409.549198][ T7347] ? __se_sys_getdents64+0x17e/0x550 [ 409.554718][ T7347] ? __x64_sys_getdents64+0x97/0xe0 [ 409.560170][ T7347] ? x64_sys_call+0x16c4/0x3db0 [ 409.565258][ T7347] ? do_syscall_64+0xd9/0x210 [ 409.570138][ T7347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.576422][ T7347] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 409.583006][ T7347] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 409.589330][ T7347] ? kmsan_get_metadata+0xfb/0x160 [ 409.594708][ T7347] ? hfsplus_brec_keylen+0x2f7/0x5a0 [ 409.600255][ T7347] ? kmsan_get_metadata+0xfb/0x160 [ 409.605622][ T7347] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 409.612113][ T7347] ? kmsan_get_metadata+0xfb/0x160 [ 409.617472][ T7347] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 409.623575][ T7347] ? utf32_to_utf8+0x3e4/0x410 [ 409.628588][ T7347] ? kmsan_get_metadata+0xfb/0x160 [ 409.633962][ T7347] __msan_warning+0x1b/0x30 [ 409.638699][ T7347] hfsplus_uni2asc+0x99f/0x25e0 [ 409.643822][ T7347] hfsplus_readdir+0xd60/0x1a70 [ 409.648974][ T7347] ? aa_file_perm+0x378/0x18d0 [ 409.653974][ T7347] ? __futex_wait+0x3f6/0x450 [ 409.658866][ T7347] ? kmsan_get_metadata+0xfb/0x160 [ 409.664246][ T7347] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 409.670375][ T7347] ? __pfx_hfsplus_readdir+0x10/0x10 [ 409.675904][ T7347] iterate_dir+0x719/0x920 [ 409.680569][ T7347] __se_sys_getdents64+0x17e/0x550 [ 409.686001][ T7347] ? __pfx_filldir64+0x10/0x10 [ 409.691016][ T7347] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 409.697104][ T7347] __x64_sys_getdents64+0x97/0xe0 [ 409.702399][ T7347] x64_sys_call+0x16c4/0x3db0 [ 409.707331][ T7347] do_syscall_64+0xd9/0x210 [ 409.712036][ T7347] ? irqentry_exit+0x16/0x60 [ 409.716816][ T7347] ? clear_bhb_loop+0x40/0x90 [ 409.721713][ T7347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.727829][ T7347] RIP: 0033:0x7f29d838e929 [ 409.732411][ T7347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.752246][ T7347] RSP: 002b:00007f29d9164038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 409.760874][ T7347] RAX: ffffffffffffffda RBX: 00007f29d85b5fa0 RCX: 00007f29d838e929 [ 409.769027][ T7347] RDX: 0000000000000ff6 RSI: 0000200000000f80 RDI: 0000000000000004 [ 409.777164][ T7347] RBP: 00007f29d8410b39 R08: 0000000000000000 R09: 0000000000000000 [ 409.785297][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.793431][ T7347] R13: 0000000000000000 R14: 00007f29d85b5fa0 R15: 00007fff08671098 [ 409.801635][ T7347] [ 409.805056][ T7347] Kernel Offset: disabled [ 409.809469][ T7347] Rebooting in 86400 seconds..