last executing test programs: 7.956170615s ago: executing program 4 (id=55): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) 7.914299651s ago: executing program 3 (id=56): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000a00000500150003000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) 6.994867998s ago: executing program 2 (id=60): unshare(0x400) r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) 6.90135651s ago: executing program 4 (id=61): syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000907000000000000000705d77b5d"], 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) 6.862616233s ago: executing program 3 (id=62): capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x93d5}) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x5207, 0x0) 6.603869876s ago: executing program 1 (id=63): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x11, 0x20000000) 6.159312184s ago: executing program 2 (id=64): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10}]}, 0x3c}}, 0x0) 6.105627816s ago: executing program 3 (id=65): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0xfe, 0xa46, &(0x7f00000014c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) 6.012304184s ago: executing program 0 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x34, r1, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000007}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x8000) 5.813714416s ago: executing program 1 (id=67): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x10, &(0x7f0000000100)={0x0, 0xa}, 0x0, 0x0}) 5.142473691s ago: executing program 0 (id=68): socket$inet(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) alarm(0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 4.959000843s ago: executing program 2 (id=69): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd8, 0x1, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.284181391s ago: executing program 3 (id=70): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) statx(r0, 0x0, 0x1000, 0x10, 0x0) 4.149285831s ago: executing program 4 (id=71): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r0, &(0x7f0000001040)="89", 0x1, 0x6000c804, 0x0, 0x0) 3.870813927s ago: executing program 0 (id=72): r0 = socket$xdp(0x2c, 0x3, 0x0) unshare(0xa000680) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x20}, 0x60) 3.243724486s ago: executing program 4 (id=73): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f00000001c0)={0x14, r1, 0xad0e41e9ad2f93a7, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 3.073813039s ago: executing program 1 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r0, &(0x7f0000000a00)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0x4, 0xc5, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x5, 0xde, 0x68, 0x0, 0x86, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "f6dbd00f90a59680fc3fb32e0fdea33907d01fb854f2e15464ac413bb6b7ccc4000e73fd00488359bb76287d248bfc56af495d392ec667a487a0bbd8da09737c1d7a66d88349f7d4167eec40b7912c0c83bfbaaab634d1118f97ecf90dd233ba9bcce62804499d011ffe9f4eff705dbd3d9bcd848a1254c6d2e93c9b9e91"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xf7, 0x0, 0x0, 0x1, 0x4, 0x9}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x4, {{0x9, 0x2, 0x40, 0x1, 0x1, 0x2, 0x6, 0x6}, 0x2, {0xfffffffb, 0xfe01, 0x2, 0x7, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "3cb913d4c564c3f3"}}}}, 0xec) 2.915225485s ago: executing program 0 (id=75): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 2.225558069s ago: executing program 3 (id=76): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x400454a4, &(0x7f00000000c0)) 1.989339452s ago: executing program 4 (id=77): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001800dd8d000000000000000002000000ff0000060000000008000700ac1414bb08001e006907000008000700ac1e010108000b00ffffffff0800", @ANYRES8=r0], 0x60}}, 0x44000) 1.928109161s ago: executing program 1 (id=78): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x9, 0x2f, 0x0, @loopback, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) 1.883385117s ago: executing program 2 (id=79): pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000280)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "8cae5c2ba870cf8332c44080390ccfab55a54fcdb1e936e9f7cb93da03274b08aa62ae5494c2171c241f22fe0a4229b07a204683ae863556b3b5a0e2f3515ee2"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xfeffffffffffff) 1.313762936s ago: executing program 0 (id=80): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1a, &(0x7f00000004c0)="c868", 0x2) 973.077113ms ago: executing program 4 (id=81): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@umask}, {}, {@nls={'nls', 0x3d, 'iso8859-6'}}, {@uid={'uid', 0x3d, 0xee01}}, {@nobarrier}, {@uid}]}, 0x20, 0x6de, &(0x7f0000000840)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) rmdir(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 936.361739ms ago: executing program 1 (id=82): socket$inet(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7) 879.913256ms ago: executing program 3 (id=83): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c000100000208000600480a000005000b"], 0x44}, 0x1, 0x0, 0x0, 0x200000c0}, 0x800) 769.860165ms ago: executing program 2 (id=84): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0xe74a}, 0x7) 506.712476ms ago: executing program 0 (id=85): fsopen(&(0x7f0000000080)='gfs2\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x90}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) 33.505366ms ago: executing program 1 (id=86): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'netdevsim0\x00', 0x4000021}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000006c0)={0x2, 'pimreg1\x00', 0x4}, 0x18) 0s ago: executing program 2 (id=87): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'veth0_to_bond\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. [ 207.236810][ T5774] cgroup: Unknown subsys name 'net' [ 207.367017][ T5774] cgroup: Unknown subsys name 'cpuset' [ 207.385197][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.685679][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.692463][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.337679][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 268.960809][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 268.969028][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.980419][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 268.988469][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.997234][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.005545][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.020862][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.036235][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.039244][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.051563][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.065457][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.065858][ T5094] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.074220][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.089299][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.099016][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.099445][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.113439][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.121885][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.125287][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.133769][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.150986][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.152844][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.171663][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.186613][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.201658][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.725669][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 271.122684][ T5807] Bluetooth: hci0: command tx timeout [ 271.185043][ T5807] Bluetooth: hci1: command tx timeout [ 271.212841][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 271.265251][ T5807] Bluetooth: hci4: command tx timeout [ 271.269990][ T5809] Bluetooth: hci3: command tx timeout [ 271.270864][ T5807] Bluetooth: hci2: command tx timeout [ 271.631131][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 271.798994][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 271.936073][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.943807][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.953328][ T5808] bridge_slave_0: entered allmulticast mode [ 271.963757][ T5808] bridge_slave_0: entered promiscuous mode [ 272.062484][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.070495][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.078532][ T5808] bridge_slave_1: entered allmulticast mode [ 272.088944][ T5808] bridge_slave_1: entered promiscuous mode [ 272.254665][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 272.537984][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.576580][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.584286][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.593693][ T5803] bridge_slave_0: entered allmulticast mode [ 272.604009][ T5803] bridge_slave_0: entered promiscuous mode [ 272.683066][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.693889][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.701979][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.711632][ T5803] bridge_slave_1: entered allmulticast mode [ 272.721817][ T5803] bridge_slave_1: entered promiscuous mode [ 273.109203][ T5808] team0: Port device team_slave_0 added [ 273.182063][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.199282][ T5807] Bluetooth: hci0: command tx timeout [ 273.265262][ T5807] Bluetooth: hci1: command tx timeout [ 273.317843][ T5808] team0: Port device team_slave_1 added [ 273.327291][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.335485][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.344632][ T5796] bridge_slave_0: entered allmulticast mode [ 273.355701][ T5807] Bluetooth: hci3: command tx timeout [ 273.355828][ T5807] Bluetooth: hci4: command tx timeout [ 273.355937][ T5807] Bluetooth: hci2: command tx timeout [ 273.376634][ T5796] bridge_slave_0: entered promiscuous mode [ 273.406839][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.503231][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.511430][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.519466][ T5796] bridge_slave_1: entered allmulticast mode [ 273.530102][ T5796] bridge_slave_1: entered promiscuous mode [ 273.700210][ T5803] team0: Port device team_slave_0 added [ 273.831093][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.839174][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.847143][ T5802] bridge_slave_0: entered allmulticast mode [ 273.857117][ T5802] bridge_slave_0: entered promiscuous mode [ 273.880122][ T5803] team0: Port device team_slave_1 added [ 273.943851][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.951172][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.978555][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.030117][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.037892][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.048398][ T5802] bridge_slave_1: entered allmulticast mode [ 274.058214][ T5802] bridge_slave_1: entered promiscuous mode [ 274.203320][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.219528][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.227990][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.256506][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.270880][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.278610][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.286508][ T5797] bridge_slave_0: entered allmulticast mode [ 274.295715][ T5797] bridge_slave_0: entered promiscuous mode [ 274.352117][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.360058][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.387212][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.410463][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.444495][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.452710][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.460782][ T5797] bridge_slave_1: entered allmulticast mode [ 274.470825][ T5797] bridge_slave_1: entered promiscuous mode [ 274.493887][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.553978][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.561404][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.588409][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.718246][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.784550][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.807744][ T5796] team0: Port device team_slave_0 added [ 274.909483][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.980397][ T5796] team0: Port device team_slave_1 added [ 275.032833][ T5802] team0: Port device team_slave_0 added [ 275.208750][ T5802] team0: Port device team_slave_1 added [ 275.265221][ T5798] Bluetooth: hci0: command tx timeout [ 275.274739][ T5808] hsr_slave_0: entered promiscuous mode [ 275.284412][ T5808] hsr_slave_1: entered promiscuous mode [ 275.345042][ T5798] Bluetooth: hci1: command tx timeout [ 275.349109][ T5803] hsr_slave_0: entered promiscuous mode [ 275.361481][ T5803] hsr_slave_1: entered promiscuous mode [ 275.369792][ T5803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.377844][ T5803] Cannot create hsr debugfs directory [ 275.430766][ T5797] team0: Port device team_slave_0 added [ 275.433815][ T5798] Bluetooth: hci2: command tx timeout [ 275.439734][ T5807] Bluetooth: hci4: command tx timeout [ 275.444100][ T5798] Bluetooth: hci3: command tx timeout [ 275.505793][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.513047][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.539766][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.557445][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.565364][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.592193][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.652347][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.659807][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.686490][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.709083][ T5797] team0: Port device team_slave_1 added [ 275.809759][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.818761][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.846435][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.194000][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.201522][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.228313][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.338892][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.346614][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.373305][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.479457][ T5796] hsr_slave_0: entered promiscuous mode [ 276.488753][ T5796] hsr_slave_1: entered promiscuous mode [ 276.498038][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.505957][ T5796] Cannot create hsr debugfs directory [ 276.714431][ T5802] hsr_slave_0: entered promiscuous mode [ 276.723985][ T5802] hsr_slave_1: entered promiscuous mode [ 276.732744][ T5802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.740894][ T5802] Cannot create hsr debugfs directory [ 277.134505][ T5797] hsr_slave_0: entered promiscuous mode [ 277.145846][ T5797] hsr_slave_1: entered promiscuous mode [ 277.154109][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.162299][ T5797] Cannot create hsr debugfs directory [ 277.345774][ T5798] Bluetooth: hci0: command tx timeout [ 277.425361][ T5798] Bluetooth: hci1: command tx timeout [ 277.509551][ T5798] Bluetooth: hci3: command tx timeout [ 277.515707][ T5807] Bluetooth: hci4: command tx timeout [ 277.521373][ T5807] Bluetooth: hci2: command tx timeout [ 277.853381][ T5808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 277.983178][ T5808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.027430][ T5808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 278.165016][ T5808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 278.398938][ T5803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.425978][ T5803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 278.535250][ T5803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 278.561651][ T5803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 278.871403][ T5796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 278.945579][ T5796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 278.984469][ T5796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 279.012744][ T5796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 279.178062][ T5802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 279.273333][ T5802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 279.386365][ T5802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 279.484552][ T5802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 279.548214][ T5797] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.664437][ T5797] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.732337][ T5797] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.818391][ T5797] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 279.865944][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.044478][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.111325][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.239151][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.254057][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.261857][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.387339][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.395189][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.412394][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.420515][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.540646][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.548580][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.006961][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.297563][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.399049][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.493498][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.632882][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.640687][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.657927][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.665792][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.682512][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.690350][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.860164][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.867989][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.084463][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.429419][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.543391][ T3664] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.551194][ T3664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.657224][ T3664] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.665075][ T3664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.465597][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.784561][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.251785][ T5803] veth0_vlan: entered promiscuous mode [ 284.344630][ T5808] veth0_vlan: entered promiscuous mode [ 284.380203][ T5803] veth1_vlan: entered promiscuous mode [ 284.530409][ T5808] veth1_vlan: entered promiscuous mode [ 284.832547][ T5803] veth0_macvtap: entered promiscuous mode [ 284.897424][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.943388][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.964467][ T5803] veth1_macvtap: entered promiscuous mode [ 285.071571][ T5808] veth0_macvtap: entered promiscuous mode [ 285.167989][ T5808] veth1_macvtap: entered promiscuous mode [ 285.281871][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.448389][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.483402][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.527227][ T5803] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.537675][ T5803] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.547057][ T5803] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.556305][ T5803] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.582290][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.637747][ T5796] veth0_vlan: entered promiscuous mode [ 285.700723][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.785200][ T5796] veth1_vlan: entered promiscuous mode [ 285.843089][ T5802] veth0_vlan: entered promiscuous mode [ 285.859949][ T5808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.870941][ T5808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.881099][ T5808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.890341][ T5808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.062207][ T5802] veth1_vlan: entered promiscuous mode [ 286.263688][ T5796] veth0_macvtap: entered promiscuous mode [ 286.386848][ T5796] veth1_macvtap: entered promiscuous mode [ 286.566880][ T5802] veth0_macvtap: entered promiscuous mode [ 286.633631][ T5802] veth1_macvtap: entered promiscuous mode [ 286.700985][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.841968][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.934531][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.010336][ T5796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.020048][ T5796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.030780][ T5796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.040055][ T5796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.083301][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.237871][ T5802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.247286][ T5802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.256996][ T5802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.268425][ T5802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.908779][ T5797] veth0_vlan: entered promiscuous mode [ 289.008637][ T5797] veth1_vlan: entered promiscuous mode [ 289.406512][ T5797] veth0_macvtap: entered promiscuous mode [ 289.525844][ T5797] veth1_macvtap: entered promiscuous mode [ 289.802738][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.917114][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.986674][ T5797] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.996143][ T5797] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.005834][ T5797] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.015111][ T5797] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.153713][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.160856][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 294.355632][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.363801][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.681309][ T5084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.689693][ T5084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.822011][ T3835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.830160][ T3835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.174661][ T3664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.183060][ T3664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.205705][ T5803] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 295.995388][ T4157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.003648][ T4157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.101571][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.110275][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.196407][ T5798] Bluetooth: hci4: Invalid connection link type handle 0x00c9 [ 296.379656][ T5084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.388368][ T5084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.755376][ T4157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.763726][ T4157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.980179][ T5996] loop0: detected capacity change from 0 to 512 [ 298.175738][ T5996] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 298.219047][ T5798] Bluetooth: hci2: unexpected cc 0x0c5b length: 5 > 1 [ 298.470349][ T5996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.484076][ T5996] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.037953][ T5996] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.1: corrupted inode contents [ 299.103826][ T5996] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.1: mark_inode_dirty error [ 299.141502][ T5996] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.1: corrupted inode contents [ 299.228734][ T6009] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.1: corrupted inode contents [ 299.314228][ T6009] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.1: mark_inode_dirty error [ 299.385931][ T6009] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.1: corrupted inode contents [ 299.434209][ T6009] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.1: mark_inode_dirty error [ 299.500541][ T6009] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.1: corrupted inode contents [ 299.583803][ T6009] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.1: mark_inode_dirty error [ 299.635204][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.643251][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.735530][ T5996] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.1: corrupted inode contents [ 300.111539][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.121388][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.230343][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.391684][ T30] audit: type=1326 audit(1747842333.132:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 301.419657][ T30] audit: type=1326 audit(1747842333.132:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 301.446478][ T30] audit: type=1326 audit(1747842333.192:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=243 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 301.468868][ T30] audit: type=1326 audit(1747842333.192:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 301.491433][ T30] audit: type=1326 audit(1747842333.192:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 302.295342][ T5851] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 302.515833][ T5851] usb 3-1: Using ep0 maxpacket: 32 [ 302.555626][ T5851] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 302.565515][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.601772][ T5851] usb 3-1: config 0 descriptor?? [ 302.687883][ T5851] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 302.711546][ T6035] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.965378][ T6035] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.374303][ T6035] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.553425][ T6035] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.480814][ T6035] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.529124][ T6035] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.579517][ T6035] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.635237][ T6035] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.797913][ T5851] gspca_vc032x: reg_r err -71 [ 305.803016][ T5851] gspca_vc032x: I2c Bus Busy Wait 00 [ 305.809450][ T5851] gspca_vc032x: I2c Bus Busy Wait 00 [ 305.815237][ T5851] gspca_vc032x: I2c Bus Busy Wait 00 [ 305.828116][ T5851] gspca_vc032x: I2c Bus Busy Wait 00 [ 305.834060][ T5851] gspca_vc032x: I2c Bus Busy Wait 00 [ 305.844372][ T5851] gspca_vc032x: I2c Bus Busy Wait 00 [ 305.850894][ T5851] gspca_vc032x: I2c Bus Busy Wait 00 [ 305.856632][ T5851] gspca_vc032x: I2c Bus Busy Wait 00 [ 305.862159][ T5851] gspca_vc032x: I2c Bus Busy Wait 00 [ 305.867817][ T5851] gspca_vc032x: I2c Bus Busy Wait 00 [ 305.873342][ T5851] gspca_vc032x: I2c Bus Busy Wait 00 [ 305.879074][ T5851] gspca_vc032x: I2c Bus Busy Wait 00 [ 305.884605][ T5851] gspca_vc032x: I2c Bus Busy Wait 00 [ 305.890302][ T5851] gspca_vc032x: I2c Bus Busy Wait 00 [ 305.896040][ T5851] gspca_vc032x: I2c Bus Busy Wait 00 [ 305.901570][ T5851] gspca_vc032x: I2c Bus Busy Wait 00 [ 305.907913][ T5851] gspca_vc032x: I2c Bus Busy Wait 00 [ 305.913472][ T5851] gspca_vc032x: Unknown sensor... [ 305.926920][ T5851] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 306.089430][ T5851] usb 3-1: USB disconnect, device number 2 [ 306.586133][ T6057] netlink: 'syz.1.27': attribute type 12 has an invalid length. [ 306.777764][ T6058] netlink: 'syz.1.27': attribute type 4 has an invalid length. [ 307.507862][ T6064] geneve0: entered allmulticast mode [ 308.977326][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.988020][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.289059][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.319259][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.486770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 309.497944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 309.513817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 309.525460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 309.536316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 309.548924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 309.985808][ T6070] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.996174][ T6070] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.005255][ T6070] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.013991][ T6070] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.019661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 312.264308][ T5798] Bluetooth: hci0: unexpected cc 0x1002 length: 9 < 65 [ 315.127193][ T6149] capability: warning: `syz.3.62' uses 32-bit capabilities (legacy support in use) [ 315.405560][ T5859] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 315.505351][ T5798] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 315.514036][ T5798] Bluetooth: hci2: Injecting HCI hardware error event [ 315.526564][ T5798] Bluetooth: hci2: hardware error 0x00 [ 315.625644][ T5859] usb 5-1: Using ep0 maxpacket: 16 [ 315.657585][ T5859] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 315.669859][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 315.810967][ T5859] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 315.820849][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.829661][ T5859] usb 5-1: Product: syz [ 315.834120][ T5859] usb 5-1: Manufacturer: syz [ 315.839265][ T5859] usb 5-1: SerialNumber: syz [ 315.927309][ T5859] usb 5-1: config 0 descriptor?? [ 316.277700][ T5859] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 316.329019][ T5859] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 316.479048][ T5859] usb 5-1: USB disconnect, device number 2 [ 316.493952][ T6158] loop3: detected capacity change from 0 to 2048 [ 316.597252][ T5851] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 316.696123][ T6162] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 316.817917][ T5851] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 316.828143][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.851405][ T6164] netlink: 'syz.0.68': attribute type 12 has an invalid length. [ 316.886545][ T6162] NILFS (loop3): vblocknr = 22 has abnormal lifetime: start cno (= 1099511627778) > current cno (= 3) [ 316.898690][ T6162] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=6) [ 316.922971][ T5851] usb 2-1: config 0 descriptor?? [ 317.046274][ T6162] Remounting filesystem read-only [ 317.135953][ T6166] netlink: 'syz.0.68': attribute type 4 has an invalid length. [ 317.254098][ T6158] syz.3.65 (6158) used greatest stack depth: 4376 bytes left [ 317.340571][ T5796] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 317.386036][ T5851] ath6kl: Unsupported hardware version: 0x8 [ 317.435428][ T5851] ath6kl: Failed to init ath6kl core: -22 [ 317.444094][ T5851] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 317.525454][ T5857] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 317.599555][ T5798] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 317.622706][ T5851] usb 2-1: USB disconnect, device number 2 [ 317.745402][ T5857] usb 3-1: Using ep0 maxpacket: 8 [ 317.786897][ T5857] usb 3-1: config 0 interface 0 has no altsetting 0 [ 317.793929][ T5857] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 317.807402][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.897535][ T5857] usb 3-1: config 0 descriptor?? [ 318.113924][ T6171] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.498237][ T5857] hid-led 0003:04D8:F372.0001: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.2-1/input0 [ 318.712655][ T5857] hid-led 0003:04D8:F372.0001: Greynut Luxafor initialized [ 318.910851][ T5857] usb 3-1: USB disconnect, device number 3 [ 319.031321][ T3479] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 319.105817][ T1092] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 319.178852][ T1092] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 319.244365][ T60] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 319.292502][ T3664] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 319.398776][ T3664] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 319.477411][ T3664] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 319.519139][ T3479] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 319.579347][ T1092] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 319.685188][ T3479] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 319.704518][ T3664] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 319.758971][ T3835] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 319.835593][ T60] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 319.898109][ T60] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 319.977355][ T60] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 320.008275][ T60] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 320.056118][ T3664] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 320.081620][ T3835] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 320.143299][ T6176] fido_id[6176]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 320.184046][ T6186] netlink: 28 bytes leftover after parsing attributes in process `syz.4.77'. [ 321.355952][ T6203] loop4: detected capacity change from 0 to 1024 [ 321.596907][ T6203] ===================================================== [ 321.605069][ T6203] BUG: KMSAN: uninit-value in hfsplus_delete_cat+0x1195/0x13d0 [ 321.612904][ T6203] hfsplus_delete_cat+0x1195/0x13d0 [ 321.621254][ T6203] hfsplus_rmdir+0x13c/0x310 [ 321.626725][ T6203] vfs_rmdir+0x5b6/0x800 [ 321.631209][ T6203] do_rmdir+0x87b/0xf30 [ 321.635868][ T6203] __ia32_sys_rmdir+0x70/0xa0 [ 321.640804][ T6203] ia32_sys_call+0x31ce/0x42c0 [ 321.646442][ T6203] __do_fast_syscall_32+0xb0/0x110 [ 321.651878][ T6203] do_fast_syscall_32+0x38/0x80 [ 321.657337][ T6203] do_SYSENTER_32+0x1f/0x30 [ 321.662142][ T6203] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.669277][ T6203] [ 321.671757][ T6203] Uninit was stored to memory at: [ 321.677439][ T6203] hfsplus_create_cat+0x18fb/0x1910 [ 321.682998][ T6203] hfsplus_mknod+0x208/0x560 [ 321.688305][ T6203] hfsplus_mkdir+0x5a/0x80 [ 321.697305][ T6203] vfs_mkdir+0x4ea/0x850 [ 321.703329][ T6203] do_mkdirat+0x41a/0xf30 [ 321.708119][ T6203] __ia32_sys_mkdirat+0xc1/0x140 [ 321.713347][ T6203] ia32_sys_call+0x3142/0x42c0 [ 321.718590][ T6203] __do_fast_syscall_32+0xb0/0x110 [ 321.724018][ T6203] do_fast_syscall_32+0x38/0x80 [ 321.729736][ T6203] do_SYSENTER_32+0x1f/0x30 [ 321.734541][ T6203] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.741385][ T6203] [ 321.743871][ T6203] Uninit was stored to memory at: [ 321.749406][ T6203] hfsplus_create_cat+0x18fb/0x1910 [ 321.755149][ T6203] hfsplus_fill_super+0x212e/0x2740 [ 321.760652][ T6203] get_tree_bdev_flags+0x6e6/0x920 [ 321.766209][ T6203] get_tree_bdev+0x38/0x50 [ 321.770910][ T6203] hfsplus_get_tree+0x35/0x40 [ 321.776208][ T6203] vfs_get_tree+0xb3/0x5c0 [ 321.780897][ T6203] do_new_mount+0x738/0x1610 [ 321.785955][ T6203] path_mount+0x6db/0x1e90 [ 321.790630][ T6203] __se_sys_mount+0x6eb/0x7d0 [ 321.800256][ T6203] __ia32_sys_mount+0xe2/0x150 [ 321.806836][ T6203] ia32_sys_call+0x2733/0x42c0 [ 321.811850][ T6203] __do_fast_syscall_32+0xb0/0x110 [ 321.817892][ T6203] do_fast_syscall_32+0x38/0x80 [ 321.823133][ T6203] do_SYSENTER_32+0x1f/0x30 [ 321.829099][ T6203] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.836971][ T6203] [ 321.839450][ T6203] Uninit was created at: [ 321.844065][ T6203] __alloc_frozen_pages_noprof+0x689/0xf00 [ 321.850496][ T6203] alloc_pages_mpol+0x328/0x860 [ 321.855931][ T6203] alloc_frozen_pages_noprof+0xf7/0x200 [ 321.861793][ T6203] allocate_slab+0x24d/0x1210 [ 321.866998][ T6203] ___slab_alloc+0xfec/0x3480 [ 321.871964][ T6203] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 321.878268][ T6203] hfsplus_alloc_inode+0x5a/0xd0 [ 321.883491][ T6203] alloc_inode+0x87/0x4a0 [ 321.888357][ T6203] iget_locked+0x239/0x12d0 [ 321.893192][ T6203] hfsplus_iget+0x5c/0xb80 [ 321.902403][ T6203] hfsplus_btree_open+0x132/0x1c90 [ 321.909346][ T6203] hfsplus_fill_super+0x1161/0x2740 [ 321.915377][ T6203] get_tree_bdev_flags+0x6e6/0x920 [ 321.920788][ T6203] get_tree_bdev+0x38/0x50 [ 321.925901][ T6203] hfsplus_get_tree+0x35/0x40 [ 321.930959][ T6203] vfs_get_tree+0xb3/0x5c0 [ 321.935915][ T6203] do_new_mount+0x738/0x1610 [ 321.940786][ T6203] path_mount+0x6db/0x1e90 [ 321.945799][ T6203] __se_sys_mount+0x6eb/0x7d0 [ 321.950763][ T6203] __ia32_sys_mount+0xe2/0x150 [ 321.956096][ T6203] ia32_sys_call+0x2733/0x42c0 [ 321.961084][ T6203] __do_fast_syscall_32+0xb0/0x110 [ 321.966766][ T6203] do_fast_syscall_32+0x38/0x80 [ 321.971913][ T6203] do_SYSENTER_32+0x1f/0x30 [ 321.977526][ T6203] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.984164][ T6203] [ 321.987075][ T6203] CPU: 1 UID: 0 PID: 6203 Comm: syz.4.81 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(undef) [ 322.003722][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.016285][ T6203] ===================================================== [ 322.023401][ T6203] Disabling lock debugging due to kernel taint [ 322.030084][ T6203] Kernel panic - not syncing: kmsan.panic set ... [ 322.036730][ T6203] CPU: 1 UID: 0 PID: 6203 Comm: syz.4.81 Tainted: G B 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(undef) [ 322.050495][ T6203] Tainted: [B]=BAD_PAGE [ 322.054810][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.065055][ T6203] Call Trace: [ 322.068481][ T6203] [ 322.071593][ T6203] __dump_stack+0x26/0x30 [ 322.076172][ T6203] dump_stack_lvl+0x53/0x270 [ 322.081016][ T6203] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 322.087123][ T6203] dump_stack+0x1e/0x25 [ 322.091520][ T6203] panic+0x4bd/0xd50 [ 322.095726][ T6203] kmsan_report+0x29d/0x2a0 [ 322.100700][ T6203] ? __msan_warning+0x96/0x120 [ 322.105736][ T6203] ? hfsplus_delete_cat+0x1195/0x13d0 [ 322.111475][ T6203] ? hfsplus_rmdir+0x13c/0x310 [ 322.116494][ T6203] ? vfs_rmdir+0x5b6/0x800 [ 322.121153][ T6203] ? do_rmdir+0x87b/0xf30 [ 322.125718][ T6203] ? __ia32_sys_rmdir+0x70/0xa0 [ 322.130871][ T6203] ? ia32_sys_call+0x31ce/0x42c0 [ 322.136018][ T6203] ? __do_fast_syscall_32+0xb0/0x110 [ 322.141610][ T6203] ? do_fast_syscall_32+0x38/0x80 [ 322.146913][ T6203] ? do_SYSENTER_32+0x1f/0x30 [ 322.151861][ T6203] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.158628][ T6203] ? kmsan_get_metadata+0x105/0x1b0 [ 322.164119][ T6203] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 322.170229][ T6203] ? hfsplus_bnode_dump+0x50a/0x560 [ 322.175687][ T6203] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 322.181868][ T6203] ? kmsan_get_metadata+0x105/0x1b0 [ 322.187341][ T6203] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 322.193451][ T6203] ? hfsplus_brec_remove+0x92f/0xa60 [ 322.199024][ T6203] ? kmsan_get_metadata+0x105/0x1b0 [ 322.204628][ T6203] __msan_warning+0x96/0x120 [ 322.209493][ T6203] hfsplus_delete_cat+0x1195/0x13d0 [ 322.214942][ T6203] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 322.221060][ T6203] ? kmsan_get_metadata+0x105/0x1b0 [ 322.226594][ T6203] hfsplus_rmdir+0x13c/0x310 [ 322.231529][ T6203] ? __pfx_hfsplus_rmdir+0x10/0x10 [ 322.236887][ T6203] vfs_rmdir+0x5b6/0x800 [ 322.241476][ T6203] do_rmdir+0x87b/0xf30 [ 322.245926][ T6203] __ia32_sys_rmdir+0x70/0xa0 [ 322.251463][ T6203] ia32_sys_call+0x31ce/0x42c0 [ 322.256455][ T6203] __do_fast_syscall_32+0xb0/0x110 [ 322.261954][ T6203] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 322.267965][ T6203] do_fast_syscall_32+0x38/0x80 [ 322.273097][ T6203] do_SYSENTER_32+0x1f/0x30 [ 322.277886][ T6203] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.284603][ T6203] RIP: 0023:0xf707e539 [ 322.288947][ T6203] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 322.309085][ T6203] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000028 [ 322.317737][ T6203] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000000000000 [ 322.325948][ T6203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.334099][ T6203] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.342345][ T6203] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 322.350501][ T6203] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.358700][ T6203] [ 322.362229][ T6203] Kernel Offset: disabled [ 322.366678][ T6203] Rebooting in 86400 seconds..