last executing test programs: 5.905124888s ago: executing program 2 (id=469): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x44, r2, 0x5, 0x0, 0x0, {0x4, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x44}, 0x1, 0xffffffff00000003}, 0x0) 5.895635855s ago: executing program 4 (id=470): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x4c) 4.563348383s ago: executing program 4 (id=475): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000b10b5103a09222689b5010203010902240001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.354538837s ago: executing program 2 (id=478): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000029000000360000000000000000000000180000000000000029"], 0x30}, 0x0) 3.985301849s ago: executing program 0 (id=481): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xb) 3.880230609s ago: executing program 2 (id=482): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xad7, &(0x7f0000002340)="$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") r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r0, 0x7, 0x0) getdents(r0, 0x0, 0x22) 3.310413458s ago: executing program 0 (id=484): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xbc}}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r0) 2.604871229s ago: executing program 2 (id=488): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) open(&(0x7f0000000040)='./file0\x00', 0x147042, 0x0) 2.583988219s ago: executing program 0 (id=489): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x64, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x53}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}]}]}}]}, 0xb0}}, 0x0) 2.393529042s ago: executing program 3 (id=490): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10, 0x84, 0x2}}], 0x10}, 0x0) 2.224495983s ago: executing program 1 (id=491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)={0x2c, r1, 0x5, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004815}, 0x0) 2.224234609s ago: executing program 3 (id=492): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/softnet_stat\x00') read$FUSE(r0, &(0x7f0000000f40)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/95, 0x5f}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002f80)={0x2020}, 0x2020) 1.909854262s ago: executing program 1 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000095fc000008000300", @ANYRES32=r2, @ANYBLOB='}\x003'], 0x9c}}, 0x0) 1.863617031s ago: executing program 0 (id=494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0xc00}) 1.807994734s ago: executing program 4 (id=495): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe99) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) chown(&(0x7f0000000140)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) 1.540991188s ago: executing program 4 (id=496): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000040)="6fd45a0655b855284834d77166a7bcdee98bbba4b336ebbbf894dcd0e04d3bbfc534062842cddb69fa90d1fe780643fa4e228a698d858ebc84eee2d914c60183db93f43ff24511abd6306656fb9e5007869d03691e337cd0e87357c43840a41252601fc07c34bd69d763830c3b80514e762f5e282410bd0345ee62bb26fa9e14af13634524d61bd05d41518053bafca9eb1bda80084571bf6c42a60d765309fd4da20148baad5e8050b640260ae0301989baa98ea68eb1c8de92120fee5596c82b025a185971f3aca1a56a15a227110e4a18b8ef2295ea4a6080c666067eab12ab5d78a26c9817a64d8d1556df2c", 0xee, 0x801, 0x0, 0x0) 1.509308382s ago: executing program 3 (id=497): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) 1.365055226s ago: executing program 1 (id=498): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)=ANY=[@ANYBLOB="29000000030000000000000000000000010000000000000008000006"], 0x29) 1.360108524s ago: executing program 3 (id=499): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_flags_required], 0x6) 1.199032425s ago: executing program 1 (id=500): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f00000003c0)=0x8000000000000001, 0xe0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) get_mempolicy(&(0x7f0000000140), 0x0, 0x0, &(0x7f000068b000/0x2000)=nil, 0x4) 965.014235ms ago: executing program 2 (id=501): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000040)=""/78, 0x4e}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}}], 0x1, 0x0, 0x0) 864.282398ms ago: executing program 4 (id=502): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file1\x00', 0x1600008, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x3, 0x632, &(0x7f0000001840)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) 813.993332ms ago: executing program 1 (id=503): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=r2, @ANYBLOB="000000c500000000240012800c0001006d6163766c616e00140002800600020000000000080007"], 0x44}}, 0x0) 792.070942ms ago: executing program 3 (id=504): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x100000000) 601.194492ms ago: executing program 0 (id=505): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x1f6) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000700)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x3, 0x0, {"0e000000000000000000000004000001"}}}}, 0x118) 324.417604ms ago: executing program 2 (id=506): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_STAB={0x4}]}, 0x3c}}, 0x0) 285.092533ms ago: executing program 3 (id=507): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 163.568116ms ago: executing program 1 (id=508): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) 68.324771ms ago: executing program 0 (id=509): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic='f']}]}, 0x2c}], 0x1}, 0x0) 0s ago: executing program 4 (id=510): creat(&(0x7f00000000c0)='./file0\x00', 0x4) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r1, r1}, &(0x7f0000000040)=""/79, 0x4f, &(0x7f0000000140)={&(0x7f0000000180)={'streebog256-generic\x00'}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.203' (ED25519) to the list of known hosts. [ 158.443435][ T5164] cgroup: Unknown subsys name 'net' [ 158.693194][ T5164] cgroup: Unknown subsys name 'cpuset' [ 158.706853][ T5164] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 204.056817][ T5164] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 207.792945][ T4556] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.821725][ T4556] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.842744][ T5183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.865808][ T5183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.874298][ T5183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.887444][ T5183] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.896074][ T5183] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.923374][ T5185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.931884][ T5183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.949620][ T5185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.973855][ T5190] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.983346][ T5190] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.005309][ T4556] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.014520][ T4556] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.021484][ T5185] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.026088][ T4556] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.041146][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.042647][ T4556] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.057957][ T4556] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.062678][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.085285][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.097482][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.106832][ T4556] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.107257][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.182089][ T5183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.206386][ T5183] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.218998][ T5183] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.253362][ T5183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.282744][ T5183] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.301598][ T5183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.254841][ T5184] chnl_net:caif_netlink_parms(): no params data found [ 209.475017][ T5181] chnl_net:caif_netlink_parms(): no params data found [ 209.953178][ T5192] chnl_net:caif_netlink_parms(): no params data found [ 210.000950][ T5183] Bluetooth: hci0: command tx timeout [ 210.080118][ T5183] Bluetooth: hci1: command tx timeout [ 210.151843][ T5189] chnl_net:caif_netlink_parms(): no params data found [ 210.173684][ T5184] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.181750][ T5184] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.189466][ T5184] bridge_slave_0: entered allmulticast mode [ 210.201203][ T5184] bridge_slave_0: entered promiscuous mode [ 210.232968][ T5184] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.240747][ T5184] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.248364][ T5184] bridge_slave_1: entered allmulticast mode [ 210.257533][ T5184] bridge_slave_1: entered promiscuous mode [ 210.268385][ T5183] Bluetooth: hci3: command tx timeout [ 210.274195][ T5183] Bluetooth: hci2: command tx timeout [ 210.429760][ T5191] chnl_net:caif_netlink_parms(): no params data found [ 210.480423][ T5190] Bluetooth: hci4: command tx timeout [ 210.502988][ T5184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.525544][ T5184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.676553][ T5184] team0: Port device team_slave_0 added [ 210.779151][ T5184] team0: Port device team_slave_1 added [ 210.912885][ T5181] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.924683][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.934727][ T5181] bridge_slave_0: entered allmulticast mode [ 210.944431][ T5181] bridge_slave_0: entered promiscuous mode [ 210.998943][ T5184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.006281][ T5184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.032770][ T5184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.051593][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.059258][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.067679][ T5181] bridge_slave_1: entered allmulticast mode [ 211.076827][ T5181] bridge_slave_1: entered promiscuous mode [ 211.142590][ T5184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.149777][ T5184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.176526][ T5184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.314647][ T5181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.389273][ T5181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.596954][ T5192] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.606604][ T5192] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.614751][ T5192] bridge_slave_0: entered allmulticast mode [ 211.627633][ T5192] bridge_slave_0: entered promiscuous mode [ 211.774545][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.782547][ T5189] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.790422][ T5189] bridge_slave_0: entered allmulticast mode [ 211.800393][ T5189] bridge_slave_0: entered promiscuous mode [ 211.836121][ T5181] team0: Port device team_slave_0 added [ 211.886450][ T5192] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.902056][ T5192] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.909729][ T5192] bridge_slave_1: entered allmulticast mode [ 211.918857][ T5192] bridge_slave_1: entered promiscuous mode [ 211.942251][ T5184] hsr_slave_0: entered promiscuous mode [ 211.952768][ T5184] hsr_slave_1: entered promiscuous mode [ 211.966497][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.974317][ T5189] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.982122][ T5189] bridge_slave_1: entered allmulticast mode [ 211.991103][ T5189] bridge_slave_1: entered promiscuous mode [ 212.005129][ T5181] team0: Port device team_slave_1 added [ 212.042480][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.050424][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.057904][ T5191] bridge_slave_0: entered allmulticast mode [ 212.066676][ T5191] bridge_slave_0: entered promiscuous mode [ 212.080209][ T5190] Bluetooth: hci0: command tx timeout [ 212.178363][ T5190] Bluetooth: hci1: command tx timeout [ 212.226981][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.234981][ T5191] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.243037][ T5191] bridge_slave_1: entered allmulticast mode [ 212.251992][ T5191] bridge_slave_1: entered promiscuous mode [ 212.269459][ T5192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.320317][ T5190] Bluetooth: hci2: command tx timeout [ 212.326013][ T5183] Bluetooth: hci3: command tx timeout [ 212.368210][ T5181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.376420][ T5181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.408096][ T5181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.429328][ T5189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.441153][ T5181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.448306][ T5181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.475068][ T5181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.495305][ T5192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.512853][ T5189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.560778][ T5190] Bluetooth: hci4: command tx timeout [ 212.687350][ T5191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.759320][ T5189] team0: Port device team_slave_0 added [ 212.775237][ T5191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.791103][ T5192] team0: Port device team_slave_0 added [ 212.817691][ T5192] team0: Port device team_slave_1 added [ 212.876862][ T5189] team0: Port device team_slave_1 added [ 212.961384][ T5191] team0: Port device team_slave_0 added [ 213.124146][ T5191] team0: Port device team_slave_1 added [ 213.161140][ T5192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.168313][ T5192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.194734][ T5192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.238624][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.247033][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.273577][ T5189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.327888][ T5192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.335216][ T5192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.361528][ T5192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.416211][ T5181] hsr_slave_0: entered promiscuous mode [ 213.426800][ T5181] hsr_slave_1: entered promiscuous mode [ 213.435435][ T5181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.443306][ T5181] Cannot create hsr debugfs directory [ 213.451662][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.458843][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.486557][ T5189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.541855][ T5191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.549152][ T5191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.575649][ T5191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.633589][ T5191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.641522][ T5191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.667883][ T5191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.907820][ T5189] hsr_slave_0: entered promiscuous mode [ 213.917646][ T5189] hsr_slave_1: entered promiscuous mode [ 213.926531][ T5189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.935802][ T5189] Cannot create hsr debugfs directory [ 213.963899][ T5192] hsr_slave_0: entered promiscuous mode [ 213.974656][ T5192] hsr_slave_1: entered promiscuous mode [ 213.983557][ T5192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.991442][ T5192] Cannot create hsr debugfs directory [ 214.156033][ T5191] hsr_slave_0: entered promiscuous mode [ 214.160507][ T5190] Bluetooth: hci0: command tx timeout [ 214.170425][ T5191] hsr_slave_1: entered promiscuous mode [ 214.179000][ T5191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.188496][ T5191] Cannot create hsr debugfs directory [ 214.240157][ T5190] Bluetooth: hci1: command tx timeout [ 214.336108][ T5184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.367891][ T5184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.400205][ T5190] Bluetooth: hci2: command tx timeout [ 214.407699][ T5190] Bluetooth: hci3: command tx timeout [ 214.479477][ T5184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.592341][ T5184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.640620][ T5190] Bluetooth: hci4: command tx timeout [ 215.289268][ T5181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 215.407813][ T5181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 215.425618][ T5181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 215.461663][ T5181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.581802][ T5189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 215.618858][ T5189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 215.658247][ T5189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 215.679846][ T5189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 215.846486][ T5192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 215.895000][ T5191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.918272][ T5191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.965959][ T5192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 215.991044][ T5192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 216.014524][ T5191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 216.033916][ T5191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 216.075879][ T5192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 216.252770][ T5190] Bluetooth: hci0: command tx timeout [ 216.320229][ T5190] Bluetooth: hci1: command tx timeout [ 216.355589][ T5184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.467417][ T5184] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.484448][ T5190] Bluetooth: hci3: command tx timeout [ 216.485688][ T5183] Bluetooth: hci2: command tx timeout [ 216.637000][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.644750][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.705593][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.713321][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.725311][ T5190] Bluetooth: hci4: command tx timeout [ 216.960673][ T5181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.212182][ T5181] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.270986][ T5189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.352161][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.359815][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.493029][ T5189] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.516248][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.524062][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.676512][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.684791][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.707128][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.714936][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.775263][ T5191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.814428][ T5192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.070404][ T5192] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.199098][ T5191] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.306175][ T5189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.337437][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.345180][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.360854][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.368517][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.392549][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.400474][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.586756][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.594503][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.860207][ T5192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.975479][ T5191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.989568][ T5191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.085735][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.095506][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.384623][ T5184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.912194][ T5184] veth0_vlan: entered promiscuous mode [ 220.052157][ T5184] veth1_vlan: entered promiscuous mode [ 220.193410][ T5181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.265457][ T5189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.454435][ T5184] veth0_macvtap: entered promiscuous mode [ 220.532890][ T5184] veth1_macvtap: entered promiscuous mode [ 220.752173][ T5184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.873320][ T5184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.915657][ T5181] veth0_vlan: entered promiscuous mode [ 220.940730][ T5189] veth0_vlan: entered promiscuous mode [ 220.962708][ T5192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.980800][ T5184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.989848][ T5184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.001453][ T5184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.010564][ T5184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.077404][ T5189] veth1_vlan: entered promiscuous mode [ 221.127898][ T5191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.203225][ T5181] veth1_vlan: entered promiscuous mode [ 221.339688][ T5189] veth0_macvtap: entered promiscuous mode [ 221.441405][ T5189] veth1_macvtap: entered promiscuous mode [ 221.693468][ T5181] veth0_macvtap: entered promiscuous mode [ 221.736083][ T5191] veth0_vlan: entered promiscuous mode [ 221.759171][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.770240][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.786053][ T5189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.817669][ T5181] veth1_macvtap: entered promiscuous mode [ 221.881580][ T5191] veth1_vlan: entered promiscuous mode [ 221.938382][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.951770][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.967876][ T5189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.083532][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.094378][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.106439][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.118715][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.134045][ T5181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.229762][ T5189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.240897][ T5189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.250226][ T5189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.259259][ T5189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.328135][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.339504][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.349840][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.360755][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.375276][ T5181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.452140][ T5191] veth0_macvtap: entered promiscuous mode [ 222.481858][ T5181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.491081][ T5181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.500363][ T5181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.509415][ T5181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.565476][ T5191] veth1_macvtap: entered promiscuous mode [ 222.829217][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.840293][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.852969][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.863770][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.874048][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.886061][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.903867][ T5191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.096029][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.109827][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.121447][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.132239][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.142665][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.153536][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.168288][ T5191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.248965][ T5191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.260465][ T5191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.269521][ T5191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.278844][ T5191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.897733][ T5192] veth0_vlan: entered promiscuous mode [ 224.017588][ T5192] veth1_vlan: entered promiscuous mode [ 224.420447][ T5192] veth0_macvtap: entered promiscuous mode [ 224.528971][ T5192] veth1_macvtap: entered promiscuous mode [ 224.747335][ T5192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.758917][ T5192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.769244][ T5192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.780146][ T5192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.790346][ T5192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.801148][ T5192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.811672][ T5192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.822699][ T5192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.839032][ T5192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.992542][ T5192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.003430][ T5192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.015155][ T5192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.028685][ T5192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.040172][ T5192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.051771][ T5192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.064308][ T5192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.075188][ T5192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.090378][ T5192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.376752][ T5192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.387036][ T5192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.399245][ T5192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.409548][ T5192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.982530][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.990702][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.152357][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.162537][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.452990][ T5184] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 228.946089][ T5355] loop1: detected capacity change from 0 to 256 [ 229.162127][ T29] audit: type=1800 audit(1727324084.114:2): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="bus" dev="loop1" ino=1048583 res=0 errno=0 [ 229.210980][ T5355] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 202) [ 229.356567][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.366172][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.471893][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.479860][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.690202][ T3137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.698368][ T3137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.792847][ T3397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.801581][ T3397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.984165][ T3224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.992331][ T3224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.254514][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.262861][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.130993][ T5381] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 231.506918][ T5388] libceph: resolve '0' (ret=-3): failed [ 231.702485][ T5390] loop2: detected capacity change from 0 to 256 [ 232.099625][ T3397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.108428][ T3397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.153482][ T5390] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009b275e, utbl_chksum : 0x7319d30d) [ 232.268573][ T3397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.276910][ T3397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.613025][ T5396] warning: `syz.0.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 233.057965][ T5402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.283293][ T5405] netlink: 296 bytes leftover after parsing attributes in process `syz.0.19'. [ 233.293868][ T5405] unsupported nlmsg_type 40 [ 233.737974][ T29] audit: type=1326 audit(1727324088.664:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5410 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4057df39 code=0x7ffc0000 [ 233.768307][ T29] audit: type=1326 audit(1727324088.664:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5410 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4057df39 code=0x7ffc0000 [ 233.792868][ T29] audit: type=1326 audit(1727324088.744:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5410 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9f4057df39 code=0x7ffc0000 [ 233.815184][ T29] audit: type=1326 audit(1727324088.744:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5410 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4057df39 code=0x7ffc0000 [ 233.838452][ T29] audit: type=1326 audit(1727324088.754:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5410 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9f4057df39 code=0x7ffc0000 [ 233.864558][ T29] audit: type=1326 audit(1727324088.754:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5410 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4057df39 code=0x7ffc0000 [ 233.891987][ T29] audit: type=1326 audit(1727324088.764:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5410 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f9f4057df39 code=0x7ffc0000 [ 233.914419][ T29] audit: type=1326 audit(1727324088.764:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5410 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 233.937298][ T29] audit: type=1326 audit(1727324088.764:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5410 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4057df39 code=0x7ffc0000 [ 234.108344][ T5418] use of bytesused == 0 is deprecated and will be removed in the future, [ 234.117301][ T5418] use the actual size instead. [ 234.324071][ T5423] netlink: 'syz.2.26': attribute type 34 has an invalid length. [ 235.867883][ T5444] loop2: detected capacity change from 0 to 128 [ 236.278295][ T5448] loop3: detected capacity change from 0 to 256 [ 236.289739][ T5444] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.330739][ T5444] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 236.526543][ T5191] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.672771][ T5451] loop4: detected capacity change from 0 to 4096 [ 237.751817][ T5451] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 238.331032][ T5190] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 238.340257][ T5190] Bluetooth: hci3: Injecting HCI hardware error event [ 238.351854][ T5190] Bluetooth: hci3: hardware error 0x00 [ 239.279428][ T5475] loop2: detected capacity change from 0 to 4096 [ 239.366581][ T5475] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 239.637204][ T5475] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 240.123635][ T5486] loop4: detected capacity change from 0 to 2048 [ 240.172598][ T5486] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 240.270548][ T5490] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.594073][ T5190] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 241.990613][ T5510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.62'. [ 242.394102][ T5514] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 243.064609][ T5526] loop2: detected capacity change from 0 to 764 [ 243.164378][ T5526] rock: directory entry would overflow storage [ 243.171077][ T5526] rock: sig=0x4654, size=5, remaining=4 [ 243.195970][ T5242] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 243.282487][ T5521] loop4: detected capacity change from 0 to 4096 [ 243.292508][ T5521] ======================================================= [ 243.292508][ T5521] WARNING: The mand mount option has been deprecated and [ 243.292508][ T5521] and is ignored by this kernel. Remove the mand [ 243.292508][ T5521] option from the mount to silence this warning. [ 243.292508][ T5521] ======================================================= [ 243.462200][ T5242] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 243.471794][ T5242] usb 2-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 243.484184][ T5242] usb 2-1: Manufacturer: syz [ 243.545882][ T5242] usb 2-1: config 0 descriptor?? [ 244.101979][ T5242] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 244.396387][ T5521] syz.4.66 (5521) used greatest stack depth: 5000 bytes left [ 244.525226][ T5242] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 244.543967][ T5242] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 244.554467][ T5242] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 244.682979][ T5242] usb 2-1: USB disconnect, device number 2 [ 245.185542][ T5551] trusted_key: syz.4.83 sent an empty control message without MSG_MORE. [ 245.712016][ T5549] loop0: detected capacity change from 0 to 2048 [ 245.780750][ T5549] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.520494][ T44] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 246.720500][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.732337][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 246.746890][ T44] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.761533][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.925238][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.935133][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.944923][ T5578] bridge0: entered promiscuous mode [ 247.064017][ T44] usb 4-1: config 0 descriptor?? [ 247.199719][ T44] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 247.331026][ T5584] loop0: detected capacity change from 0 to 512 [ 247.401936][ T5242] usb 4-1: USB disconnect, device number 2 [ 248.030248][ T5584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.043830][ T5584] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.147753][ T5598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'. [ 248.180478][ T44] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 248.199720][ C1] hrtimer: interrupt took 250645 ns [ 248.237650][ T5181] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.512383][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.523825][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.534119][ T44] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 248.543666][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.592216][ T44] usb 3-1: config 0 descriptor?? [ 248.711025][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 248.920525][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 248.966483][ T25] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 248.975268][ T25] usb 2-1: config 0 has no interface number 0 [ 248.982012][ T25] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 248.992277][ T25] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 249.203343][ T25] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 249.213174][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.229256][ T25] usb 2-1: Product: syz [ 249.234461][ T25] usb 2-1: Manufacturer: syz [ 249.239462][ T25] usb 2-1: SerialNumber: syz [ 249.306542][ T44] usb 3-1: string descriptor 0 read error: -71 [ 249.316076][ T44] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 249.332397][ T44] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 249.344013][ T44] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 249.353122][ T44] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 249.361312][ T44] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 249.382747][ T25] usb 2-1: config 0 descriptor?? [ 249.576679][ T44] usb 3-1: USB disconnect, device number 2 [ 249.991056][ T5617] netlink: 58 bytes leftover after parsing attributes in process `syz.0.107'. [ 250.000709][ T5617] netlink: 58 bytes leftover after parsing attributes in process `syz.0.107'. [ 250.025501][ T25] usb 2-1: USB disconnect, device number 3 [ 250.133217][ T5621] netlink: 'syz.4.109': attribute type 1 has an invalid length. [ 250.306403][ T5625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.110'. [ 250.358423][ T5619] Illegal XDP return value 229762685 on prog (id 12) dev N/A, expect packet loss! [ 250.387571][ T5615] loop3: detected capacity change from 0 to 2048 [ 250.512204][ T5617] netlink: 58 bytes leftover after parsing attributes in process `syz.0.107'. [ 250.521832][ T5617] netlink: 58 bytes leftover after parsing attributes in process `syz.0.107'. [ 250.541082][ T5615] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.778866][ T5615] Process accounting resumed [ 250.788470][ T5628] loop4: detected capacity change from 0 to 256 [ 250.822704][ T5617] netlink: 58 bytes leftover after parsing attributes in process `syz.0.107'. [ 250.833322][ T5617] netlink: 58 bytes leftover after parsing attributes in process `syz.0.107'. [ 250.869344][ T5628] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 250.941399][ T5628] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 250.951584][ T5628] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 250.964379][ T5628] UDF-fs: Scanning with blocksize 512 failed [ 251.152346][ T5628] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 251.269086][ T5628] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.731686][ T5638] netlink: 'syz.1.115': attribute type 11 has an invalid length. [ 251.739827][ T5638] netlink: 204 bytes leftover after parsing attributes in process `syz.1.115'. [ 252.405183][ T5645] loop4: detected capacity change from 0 to 2048 [ 252.690464][ T5655] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.040567][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 253.246493][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.258255][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.268715][ T25] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 253.278201][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.368839][ T25] usb 3-1: config 0 descriptor?? [ 253.389886][ T5645] syz.4.117 (5645) used greatest stack depth: 4424 bytes left [ 253.884676][ T5664] process 'syz.3.125' launched './file0' with NULL argv: empty string added [ 253.895665][ T25] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 253.903387][ T25] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 253.911134][ T25] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x7 [ 253.918491][ T25] mcp2221 0003:04D8:00DD.0002: item fetching failed at offset 4/5 [ 253.975777][ T25] mcp2221 0003:04D8:00DD.0002: can't parse reports [ 253.983257][ T25] mcp2221 0003:04D8:00DD.0002: probe with driver mcp2221 failed with error -22 [ 254.060865][ T5667] capability: warning: `syz.4.126' uses deprecated v2 capabilities in a way that may be insecure [ 254.122275][ T25] usb 3-1: USB disconnect, device number 3 [ 255.231200][ T5688] sctp: [Deprecated]: syz.3.132 (pid 5688) Use of int in maxseg socket option. [ 255.231200][ T5688] Use struct sctp_assoc_value instead [ 255.561964][ T5689] loop1: detected capacity change from 0 to 2048 [ 255.695540][ T5689] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.702771][ T5694] loop4: detected capacity change from 0 to 64 [ 255.761936][ T5695] Process accounting resumed [ 256.517831][ T5700] dummy0: entered promiscuous mode [ 256.625636][ T5700] dummy0: left promiscuous mode [ 256.627133][ T5702] loop4: detected capacity change from 0 to 1024 [ 257.174517][ T3137] hfsplus: b-tree write err: -5, ino 4 [ 257.990537][ T5724] loop3: detected capacity change from 0 to 512 [ 258.080581][ T5724] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 258.094181][ T5724] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 258.211318][ T5724] EXT4-fs (loop3): 1 truncate cleaned up [ 258.276510][ T5724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.314970][ T5734] netlink: 44 bytes leftover after parsing attributes in process `syz.2.156'. [ 258.405495][ T5242] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 258.694361][ T5242] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 258.703897][ T5242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.802837][ T5242] usb 1-1: config 0 descriptor?? [ 259.001382][ T5242] cp210x 1-1:0.0: cp210x converter detected [ 259.011229][ T5189] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.259707][ T5746] loop2: detected capacity change from 0 to 128 [ 259.444283][ T5752] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 259.444283][ T5752] The task syz.4.163 (5752) triggered the difference, watch for misbehavior. [ 259.468723][ T5242] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 259.489627][ T5746] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 259.612703][ T5746] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 259.630316][ T5242] usb 1-1: cp210x converter now attached to ttyUSB0 [ 259.769004][ T5242] usb 1-1: USB disconnect, device number 2 [ 259.832381][ T5242] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 259.921207][ T5242] cp210x 1-1:0.0: device disconnected [ 259.972448][ T5191] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.313139][ T5757] loop2: detected capacity change from 0 to 128 [ 260.410807][ T5757] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 260.569040][ T5757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.963430][ T5780] netlink: 152 bytes leftover after parsing attributes in process `syz.3.175'. [ 262.116265][ T5782] netlink: 'syz.2.176': attribute type 8 has an invalid length. [ 263.471332][ T5806] netlink: 'syz.1.187': attribute type 10 has an invalid length. [ 263.492997][ T5808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.188'. [ 263.510423][ T5806] syz_tun: entered promiscuous mode [ 263.537516][ T5806] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 263.541081][ T5809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.188'. [ 263.797678][ T5812] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 263.976900][ T5814] ipvlan2: entered promiscuous mode [ 264.008528][ T5817] sctp: [Deprecated]: syz.3.189 (pid 5817) Use of int in max_burst socket option. [ 264.008528][ T5817] Use struct sctp_assoc_value instead [ 264.908110][ T5824] loop4: detected capacity change from 0 to 2048 [ 265.021910][ T5830] input: syz0 as /devices/virtual/input/input5 [ 265.327583][ T5834] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 265.518623][ T5837] netlink: 52 bytes leftover after parsing attributes in process `syz.3.201'. [ 265.585896][ T5837] veth0_macvtap: left promiscuous mode [ 265.610426][ T5837] macvtap0: entered promiscuous mode [ 265.982420][ T5844] netlink: 196 bytes leftover after parsing attributes in process `syz.1.204'. [ 267.551114][ T5871] xt_hashlimit: max too large, truncated to 1048576 [ 267.685041][ T5873] xt_ecn: cannot match TCP bits for non-tcp packets [ 267.951901][ T5856] loop1: detected capacity change from 0 to 4096 [ 268.005319][ T5856] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 268.449502][ T5856] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 269.676333][ T5898] bond0: option all_slaves_active: invalid value (209) [ 271.628429][ T5916] loop1: detected capacity change from 0 to 2048 [ 271.882553][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 271.934589][ T5916] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.200947][ T5946] program syz.4.252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.497546][ T5952] netlink: 300 bytes leftover after parsing attributes in process `syz.3.256'. [ 274.517269][ T5986] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 274.871450][ T5993] loop2: detected capacity change from 0 to 256 [ 275.028503][ T5993] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 275.179598][ T5993] syz.2.273: attempt to access beyond end of device [ 275.179598][ T5993] loop2: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 275.194007][ T5993] syz.2.273: attempt to access beyond end of device [ 275.194007][ T5993] loop2: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 275.207892][ T5993] syz.2.273: attempt to access beyond end of device [ 275.207892][ T5993] loop2: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 275.221719][ T5993] Buffer I/O error on dev loop2, logical block 524408, async page read [ 275.235094][ T5993] syz.2.273: attempt to access beyond end of device [ 275.235094][ T5993] loop2: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 275.250095][ T5993] Buffer I/O error on dev loop2, logical block 524408, async page read [ 275.282068][ T29] audit: type=1800 audit(1727324130.224:12): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.273" name="file1" dev="loop2" ino=1048597 res=0 errno=0 [ 276.726078][ T6025] netlink: 'syz.1.287': attribute type 4 has an invalid length. [ 277.371766][ T6037] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 278.111321][ T6051] netlink: 3 bytes leftover after parsing attributes in process `syz.2.292'. [ 278.304039][ T6059] netlink: 44 bytes leftover after parsing attributes in process `syz.0.298'. [ 278.313460][ T6059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.298'. [ 278.323127][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.332243][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.340087][ T6059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.088570][ T6072] loop4: detected capacity change from 0 to 256 [ 279.400472][ T6072] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 279.413909][ T6072] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 279.922736][ T6089] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 280.221150][ T6092] netlink: 60 bytes leftover after parsing attributes in process `syz.0.308'. [ 280.504044][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.511104][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.620609][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.317'. [ 281.630151][ T6115] bond0: option ad_select: unable to set because the bond device is up [ 282.173763][ T6124] loop3: detected capacity change from 0 to 256 [ 282.299633][ T6124] exFAT-fs (loop3): failed to load alloc-bitmap [ 282.307467][ T6124] exFAT-fs (loop3): failed to recognize exfat type [ 284.738503][ T6163] loop4: detected capacity change from 0 to 8 [ 285.349604][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.343'. [ 286.101011][ T6186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.349'. [ 287.770138][ T1534] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 288.013903][ T1534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.031627][ T1534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.041850][ T1534] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 288.051750][ T1534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.181175][ T1534] usb 5-1: config 0 descriptor?? [ 290.545191][ T1534] steelseries 0003:1038:1410.0003: not enough fields in HID_OUTPUT_REPORT 0 [ 290.563155][ T1534] usb 5-1: USB disconnect, device number 2 [ 291.063421][ T6209] loop1: detected capacity change from 0 to 32768 [ 291.163826][ T6209] add_index: next_index = 0. Resetting! [ 291.170022][ T6209] find_entry called with index >= next_index [ 291.178290][ T6209] find_entry called with index >= next_index [ 291.197660][ T6218] loop3: detected capacity change from 0 to 64 [ 291.347663][ T6218] hfs: keylen 1794 too large [ 291.859387][ T5189] hfs: node 4:3 still has 1 user(s)! [ 294.121903][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 295.360501][ T6274] sctp: [Deprecated]: syz.2.387 (pid 6274) Use of int in maxseg socket option. [ 295.360501][ T6274] Use struct sctp_assoc_value instead [ 295.952221][ T6264] loop4: detected capacity change from 0 to 32768 [ 296.485787][ T6281] loop1: detected capacity change from 0 to 2048 [ 296.768662][ T6281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.782473][ T6281] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.801554][ T5242] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 296.966071][ T5242] usb 1-1: Using ep0 maxpacket: 8 [ 297.000274][ T5242] usb 1-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=98.e6 [ 297.009845][ T5242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.018266][ T5242] usb 1-1: Product: syz [ 297.023256][ T5242] usb 1-1: Manufacturer: syz [ 297.028079][ T5242] usb 1-1: SerialNumber: syz [ 297.131110][ T6281] fs-verity: sha256 using implementation "sha256-generic" [ 297.227033][ T6281] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.390: bg 0: block 345: padding at end of block bitmap is not set [ 297.263352][ T5242] usb 1-1: config 0 descriptor?? [ 297.353650][ T6281] fs-verity (loop1, inode 13): Error -117 writing Merkle tree block 0 [ 297.362801][ T6281] fs-verity (loop1, inode 13): Error -117 building Merkle tree [ 297.660723][ T5184] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.785177][ T5242] rndis_host 1-1:0.0: More than one union descriptor, skipping ... [ 297.793593][ T5242] usb 1-1: bad CDC descriptors [ 297.809276][ T5242] cdc_acm 1-1:0.0: More than one union descriptor, skipping ... [ 297.831383][ T5242] usb 1-1: USB disconnect, device number 3 [ 298.006730][ T6305] loop2: detected capacity change from 0 to 256 [ 298.093007][ T6305] exfat: Deprecated parameter 'namecase' [ 298.099056][ T6305] exfat: Deprecated parameter 'utf8' [ 298.105001][ T6305] exfat: Deprecated parameter 'namecase' [ 298.111114][ T6305] exfat: Deprecated parameter 'utf8' [ 298.231986][ T6308] loop4: detected capacity change from 0 to 256 [ 298.286094][ T6305] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 298.560697][ T5242] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 298.861725][ T5242] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 298.871708][ T5242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.884566][ T5242] usb 4-1: Product: syz [ 298.888985][ T5242] usb 4-1: Manufacturer: syz [ 298.895361][ T5242] usb 4-1: SerialNumber: syz [ 299.032867][ T5242] usb 4-1: config 0 descriptor?? [ 299.134182][ T6321] netlink: 88 bytes leftover after parsing attributes in process `syz.0.406'. [ 299.545004][ T5242] usb 4-1: Firmware: major: 215, minor: 149, hardware type: HULUSB (4) [ 299.754445][ T5242] usb 4-1: failed to fetch extended address, random address set [ 299.823016][ T5242] usb 4-1: USB disconnect, device number 3 [ 300.678008][ T6346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'. [ 301.192727][ T6353] loop2: detected capacity change from 0 to 128 [ 301.278513][ T6353] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 301.383237][ T6354] loop1: detected capacity change from 0 to 512 [ 301.592949][ T5191] sysv_free_block: trying to free block not in datazone [ 301.636419][ T5191] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 301.691508][ T6339] loop4: detected capacity change from 0 to 4096 [ 302.197186][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 302.206582][ T6367] netlink: 34 bytes leftover after parsing attributes in process `syz.1.428'. [ 302.393289][ T6369] bridge_slave_1: left allmulticast mode [ 302.393763][ T6339] ntfs3: loop4: failed to convert "0080" to cp860 [ 302.399102][ T6369] bridge_slave_1: left promiscuous mode [ 302.400300][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.429439][ T6339] ntfs3: loop4: failed to convert name for inode 1e. [ 302.471979][ T6369] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 302.528676][ T6370] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 305.103098][ T6412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.445'. [ 307.158208][ T6458] netlink: 156 bytes leftover after parsing attributes in process `syz.1.467'. [ 307.207343][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 308.010279][ T6473] loop1: detected capacity change from 0 to 256 [ 308.151980][ T6475] loop3: detected capacity change from 0 to 64 [ 308.847529][ T44] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 309.043404][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 309.078555][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.129068][ T44] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 309.138870][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.147311][ T44] usb 5-1: Product: syz [ 309.151838][ T44] usb 5-1: Manufacturer: syz [ 309.156678][ T44] usb 5-1: SerialNumber: syz [ 309.249681][ T44] usb 5-1: config 0 descriptor?? [ 309.305731][ T44] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 309.805083][ T6493] loop2: detected capacity change from 0 to 2048 [ 309.900345][ T6500] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.175480][ T44] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 310.183131][ T44] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 310.288685][ T44] usb 5-1: USB disconnect, device number 3 [ 312.429112][ T6540] loop4: detected capacity change from 0 to 1024 [ 312.958406][ T5192] hfsplus: bad catalog entry type [ 312.973790][ T5192] ===================================================== [ 312.982487][ T5192] BUG: KMSAN: uninit-value in hfsplus_uni2asc+0x821/0x2350 [ 312.991222][ T5192] hfsplus_uni2asc+0x821/0x2350 [ 312.996281][ T5192] hfsplus_readdir+0xbd7/0x18d0 [ 313.002407][ T5192] iterate_dir+0x5b3/0x9e0 [ 313.007010][ T5192] __se_sys_getdents64+0x16e/0x550 [ 313.016497][ T5192] __x64_sys_getdents64+0x96/0xe0 [ 313.023640][ T5192] x64_sys_call+0x3430/0x3ba0 [ 313.028529][ T5192] do_syscall_64+0xcd/0x1e0 [ 313.034279][ T5192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.041439][ T5192] [ 313.043865][ T5192] Uninit was created at: [ 313.048342][ T5192] __kmalloc_noprof+0x661/0xf30 [ 313.054596][ T5192] hfsplus_find_init+0x95/0x1d0 [ 313.059648][ T5192] hfsplus_readdir+0x1da/0x18d0 [ 313.065501][ T5192] iterate_dir+0x5b3/0x9e0 [ 313.070250][ T5192] __se_sys_getdents64+0x16e/0x550 [ 313.075551][ T5192] __x64_sys_getdents64+0x96/0xe0 [ 313.080876][ T5192] x64_sys_call+0x3430/0x3ba0 [ 313.085745][ T5192] do_syscall_64+0xcd/0x1e0 [ 313.090568][ T5192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.096656][ T5192] [ 313.099091][ T5192] CPU: 1 UID: 0 PID: 5192 Comm: syz-executor Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 313.110139][ T5192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 313.123615][ T5192] ===================================================== [ 313.131867][ T5192] Disabling lock debugging due to kernel taint [ 313.138141][ T5192] Kernel panic - not syncing: kmsan.panic set ... [ 313.144696][ T5192] CPU: 1 UID: 0 PID: 5192 Comm: syz-executor Tainted: G B 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 313.157800][ T5192] Tainted: [B]=BAD_PAGE [ 313.162249][ T5192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 313.172483][ T5192] Call Trace: [ 313.175888][ T5192] [ 313.178937][ T5192] dump_stack_lvl+0x216/0x2d0 [ 313.183852][ T5192] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 313.189902][ T5192] dump_stack+0x1e/0x30 [ 313.194214][ T5192] panic+0x4e2/0xcf0 [ 313.198314][ T5192] ? kmsan_get_metadata+0xd1/0x1c0 [ 313.203662][ T5192] kmsan_report+0x2c7/0x2d0 [ 313.208369][ T5192] ? kmsan_get_metadata+0x13e/0x1c0 [ 313.213810][ T5192] ? kmsan_get_metadata+0x13e/0x1c0 [ 313.219232][ T5192] ? __msan_warning+0x95/0x120 [ 313.224198][ T5192] ? hfsplus_uni2asc+0x821/0x2350 [ 313.229525][ T5192] ? hfsplus_readdir+0xbd7/0x18d0 [ 313.234774][ T5192] ? iterate_dir+0x5b3/0x9e0 [ 313.239556][ T5192] ? __se_sys_getdents64+0x16e/0x550 [ 313.245052][ T5192] ? __x64_sys_getdents64+0x96/0xe0 [ 313.250458][ T5192] ? x64_sys_call+0x3430/0x3ba0 [ 313.255527][ T5192] ? do_syscall_64+0xcd/0x1e0 [ 313.260372][ T5192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.266660][ T5192] ? filter_irq_stacks+0x60/0x1a0 [ 313.271911][ T5192] ? kmsan_get_metadata+0x13e/0x1c0 [ 313.277341][ T5192] ? kmsan_get_metadata+0x13e/0x1c0 [ 313.282773][ T5192] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 313.288812][ T5192] ? hfsplus_bnode_read_u16+0x3e/0x2b0 [ 313.294479][ T5192] ? filter_irq_stacks+0x60/0x1a0 [ 313.299736][ T5192] ? kmsan_get_metadata+0x13e/0x1c0 [ 313.305160][ T5192] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 313.311203][ T5192] ? utf32_to_utf8+0x4b1/0x4e0 [ 313.316137][ T5192] ? kmsan_get_metadata+0x13e/0x1c0 [ 313.321556][ T5192] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 313.327595][ T5192] __msan_warning+0x95/0x120 [ 313.332377][ T5192] hfsplus_uni2asc+0x821/0x2350 [ 313.337425][ T5192] ? __msan_memcpy+0x108/0x1c0 [ 313.342384][ T5192] ? kmsan_get_metadata+0x13e/0x1c0 [ 313.347806][ T5192] ? __msan_memcpy+0x108/0x1c0 [ 313.352773][ T5192] hfsplus_readdir+0xbd7/0x18d0 [ 313.357819][ T5192] ? __rcu_read_unlock+0x7b/0xe0 [ 313.362933][ T5192] ? aa_file_perm+0x3de/0x1780 [ 313.367888][ T5192] ? kmsan_get_metadata+0x13e/0x1c0 [ 313.373291][ T5192] ? kmsan_get_metadata+0x13e/0x1c0 [ 313.378701][ T5192] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 313.385225][ T5192] ? kmsan_get_metadata+0x13e/0x1c0 [ 313.390632][ T5192] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 313.396689][ T5192] ? __pfx_hfsplus_readdir+0x10/0x10 [ 313.402144][ T5192] iterate_dir+0x5b3/0x9e0 [ 313.406731][ T5192] ? __pfx_hfsplus_readdir+0x10/0x10 [ 313.412199][ T5192] ? mutex_lock+0x38/0x60 [ 313.416746][ T5192] __se_sys_getdents64+0x16e/0x550 [ 313.422058][ T5192] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 313.428609][ T5192] ? __pfx_filldir64+0x10/0x10 [ 313.433570][ T5192] __x64_sys_getdents64+0x96/0xe0 [ 313.438784][ T5192] x64_sys_call+0x3430/0x3ba0 [ 313.443654][ T5192] do_syscall_64+0xcd/0x1e0 [ 313.448312][ T5192] ? clear_bhb_loop+0x25/0x80 [ 313.453172][ T5192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.459260][ T5192] RIP: 0033:0x7f9f405b00d3 [ 313.463808][ T5192] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 313.483614][ T5192] RSP: 002b:00007fff98663238 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 313.492239][ T5192] RAX: ffffffffffffffda RBX: 000055559126a600 RCX: 00007f9f405b00d3 [ 313.500357][ T5192] RDX: 0000000000008000 RSI: 000055559126a600 RDI: 0000000000000005 [ 313.508476][ T5192] RBP: 000055559126a5d4 R08: 0000000000000000 R09: 0000000000000000 [ 313.516581][ T5192] R10: 0000000000000100 R11: 0000000000000293 R12: ffffffffffffffa8 [ 313.524696][ T5192] R13: 0000000000000016 R14: 000055559126a5d0 R15: 00007fff986654e0 [ 313.532831][ T5192] [ 313.536176][ T5192] Kernel Offset: disabled [ 313.540552][ T5192] Rebooting in 86400 seconds..