last executing test programs: 55.008604364s ago: executing program 1 (id=242): sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000ffdbdf2501006a"], 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x4040080) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000004a008d2a00000000000000000a"], 0x1c}}, 0x0) 54.449233674s ago: executing program 1 (id=247): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x21, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xa}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x1, 0x0, 0x0, 0xa, 0xd, 0xfffffffffffffff8, 0x7}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0xf, 0x4, 0x0, 0x6}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x66}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x33}}]}, 0x0, 0xd, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 53.961422664s ago: executing program 1 (id=253): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8000c0, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x1, 0x4430, &(0x7f0000000240)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r0, 0xb61, 0x2) 51.545465416s ago: executing program 1 (id=262): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000400), 0x1, 0x5d8, &(0x7f0000000600)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x4d0101, 0xe4ff) 49.397208983s ago: executing program 1 (id=277): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r0) ppoll(&(0x7f0000000140)=[{r1, 0x380}], 0x1, 0x0, 0x0, 0x0) 48.309055754s ago: executing program 1 (id=284): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$eJzs3MtvG8UfAPDv2nHS5y/5lfJoaCFQEBGPpEkf9MAFBBIHkJC4FHEKSVqFpg1qgkSrCAKHcESVuCOOSPwFnOCCgBMSV7ijShXKpYWT0dq7qZvYaZw4del+PtLGM96xZr67O/bsjJ0ACmso/ZNE7IuI3yOiv569vcBQ/eHmyuLk3yuLk0lUq2//ldTK3VhZnMyL5q/bW89Uq1m+r0m9y+9GTMzOTl/K8qMLFz4Ynb985YWZCxPnps9NXxw/ffrE8SO9p8ZPdiTONK4bgx/PHT70+jtX35w8c/W9n79N27sv298YR6cM1Y9uU09XOl1bd+1vSCc9XWwIbSlHRHq6KrX+3x/l2L26rz9e+6yrjQN2VLVarTb7fM4sVYH7WBLdbgHQHfkHfXr/m293aehxT7j+cv0GKI37ZrbV9/REKStTWXN/20lDEXFm6Z+v0i12aB4CAKDR9+n45/lm479SPNRQ7n/ZGspARPw/Ig5ExAMRcTAiHoyolX04Ih5ps/61KyTrxz+la1sKbJPS8d9L2drW7eO/fPQXA+Ust78WfyU5OzM7fSw7JsNR6UvzYxvU8cOrv33Ral/j+C/d0vrzsWDWjms9aybopiYWJrYTc6Prn0YM9jSLP4l8GSeJiEMRMbjFOmae/eZwq313jn8DHVhnqn4d8Uz9/C/FmvhzScv1ybEXT42fHN0Vs9PHRvOrYr1ffl1+q1X924q/A9Lzv6fp9b8a/0CyK2L+8pXztfXa+fbrWP7j85b3NFu7/mdWG9ebPX40sbBwaSyiN3lj/fPjt16b5/PyafzDR5v3/wNx60g8GhHpRXwkIh6LiMeztj8REU9GxNEN4v/plafebz/+DWblOyiNf+pO5z8az3/7ifL5H79rP/5cev5P1FLD2TObef/bbAO3c+wAAADgv6JU+w58UhpZTZdKIyP17/AfjD1LMTe/8NzZuQ8vTtW/Kz8QlVI+09XfMB86ls0N5/nxNfnj2bzxl+XdtfzI5NzsVLeDh4Lb26L/p/4sd7t1wI7zey0oLv0fikv/h+LS/6G49H8ormb9/5MutAO4+3z+Q3Hp/1Bc+j8Ul/4PhdTyt/Glbf3kf7uJpBuVSrSTiNI90Yz7P9Gz6X9mscVEX9Nd3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Ix/AwAA//+UFuN0") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x1f8, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x20, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 47.183852205s ago: executing program 32 (id=284): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x1f8, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x20, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 27.648318179s ago: executing program 5 (id=287): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) 27.293567838s ago: executing program 5 (id=392): syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) rmdir(&(0x7f0000000a40)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 26.736083669s ago: executing program 5 (id=398): r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000380)=[{0x0, 0xea39}], 0x1) semop(r0, &(0x7f0000000080)=[{0x0, 0xfffe}], 0x2) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) 11.192952995s ago: executing program 33 (id=398): r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000380)=[{0x0, 0xea39}], 0x1) semop(r0, &(0x7f0000000080)=[{0x0, 0xfffe}], 0x2) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) 4.959343851s ago: executing program 0 (id=472): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) clock_getres(0x6, 0x0) 4.470228286s ago: executing program 0 (id=473): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x1, 0x3, "aaa3de"}, 0x0}) 3.21183412s ago: executing program 4 (id=476): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x16b301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3.119805908s ago: executing program 2 (id=477): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000080a0001"], 0x2c}, 0x1, 0xba01}, 0x0) 2.708971833s ago: executing program 3 (id=478): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001900)="a9cff3", 0x20}, {&(0x7f0000000300)="5fb3450effde69bf04cde3e44a973930e0b6f397eedea64fe44b76997a964d6dbf627ac32d940e425221339f6408e63b6f6d871037c56aacf4e4ee20952ec6f2c30ce60421c810a4c8ac6669773938054f3e380259ba92bc6eeff0509ea1edb32624a7b7bc59c32f1d", 0x69}], 0x2}}], 0x1, 0x0) 2.606778607s ago: executing program 2 (id=479): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x20000000, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x82}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x30}}, 0x0) 2.415592415s ago: executing program 4 (id=480): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@local, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) 2.271266762s ago: executing program 2 (id=481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x47, 0x0, "74b726a137c433aa4cf0f8a94c7510ddbf387212ce63ffca84192f1a7e8fada98c09787c0f09d31204d72b1adc22136d0634dc3a24c89484e02716f385873737b1b6f21d8d87d45685a6377fb167d2e7"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 2.095830695s ago: executing program 3 (id=482): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000480), 0x0}, 0x20) 2.056290847s ago: executing program 4 (id=483): unshare(0x22020600) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="8500000008000000350000008400000085000000070000009500000000000000fed023d1d405000000c7d4012507000000c71adb05d72768b8242dd90d17e4c52505750482b009546a5f3f00573f31b53fd3e52bd87184446d165ae2939bbca322a415a98c885faad395f3e4e0635559362ed862ce7c69ad133037af3a000000000000000000000058c122dff93c54caec3751652d11fd4f66711918d3604b92666d60c88b658fe57bb5d365c5b89625385f230ba21f570635837c7bc74be573bfd68aaaf06d842085f84b96c4709e2c9449f0818f6fc5657572fb3e5bb8ff6f643e52f4964c62a70a011ede8b504c8a30381b8eff01d7615e1789bb4b3b7ef3668a98a785a80aa2d1ab149b9316091fb3025f0716799d8280acb3880a882f28dd3111e02c3b0b2818bf5bb902cc9c1666f5fdd2e43901ca4796f04db25c3df35cdfc17c54936202b45b7a09816aa76e8b9bbe24022007aae367025040e8b2255ced48a4b2db3f280dc6fd2f5374548c499ae74631f3be04e28d601369f9488fb074eb35540df5e053376ea29125d6bb916496b04b8e359c1edef91677414729967cffa736d7789c14e918b77518ee8e5d5aff9148be69267fff35"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x320, 0x8, 0x7f02ae, 0x0, 0x200, 0x3f0, 0x2e8, 0x2e8, 0x3f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x320, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@hl={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 1.850158887s ago: executing program 2 (id=484): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) 1.709251477s ago: executing program 3 (id=485): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) read$alg(r1, &(0x7f0000000180)=""/84, 0x54) 1.595064916s ago: executing program 0 (id=486): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r1, 0x114, 0x2716, 0x0, 0x20000000) 1.402594333s ago: executing program 3 (id=487): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)={0x2b, 0x4, 0x0, {0x1, 0xfffffffffffffffe, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) 1.399261365s ago: executing program 4 (id=488): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 1.190828271s ago: executing program 0 (id=489): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x27, &(0x7f0000000940)=@framed={{}, [@map_idx, @kfunc, @alu, @jmp, @cb_func, @snprintf, @map_val, @map_fd, @printk={@s}, @ringbuf_query]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 1.111842108s ago: executing program 2 (id=490): r0 = fanotify_init(0x4, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x61, 0x40001002, r1, 0x0) fanotify_mark(r0, 0x61, 0x40000028, r1, 0x0) 978.915022ms ago: executing program 3 (id=491): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000240)={0xf0f03c, 0x1}) 975.876528ms ago: executing program 4 (id=492): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000540)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC=0x0, @ANYBLOB="060001bd00", @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x6e6, &(0x7f0000001640)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x35a4, 0x40200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 565.567808ms ago: executing program 0 (id=493): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000008100000001c001a80080002802d05ff00080006"], 0x44}}, 0x0) 512.777739ms ago: executing program 2 (id=494): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4208, r0) 227.276127ms ago: executing program 3 (id=495): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x5, 0xa, 0x4}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000500)={0xa, @pix_mp={0x5, 0x0, 0x3234564e, 0x2, 0x7, [{0x40000}, {0x6, 0x80}, {0xb6e7}, {0x0, 0x8}, {0xfffffffc}, {0xa8}, {0xc23, 0x2000}, {0x0, 0xfffffffe}], 0x0, 0x0, 0x0, 0x2}}) 58.427388ms ago: executing program 4 (id=496): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000080)="17372f") 0s ago: executing program 0 (id=497): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x2) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000001280), 0x248000, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0x7, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. syzkaller login: [ 170.914022][ T5790] cgroup: Unknown subsys name 'net' [ 171.042900][ T5790] cgroup: Unknown subsys name 'cpuset' [ 171.058870][ T5790] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 216.097805][ T5790] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 219.117476][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.124366][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 220.053380][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.062458][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.072062][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.082141][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.086070][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.098296][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.099072][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.107491][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.116502][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.125234][ T5816] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.136651][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.149324][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.167238][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.176688][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.186984][ T5103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.207098][ T5103] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.219111][ T5103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.223846][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.241189][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.255403][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.280572][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.282936][ T5812] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.297264][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.305414][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.370897][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.380343][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.392075][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.417088][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.545128][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.580746][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.277922][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 221.770816][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 222.101140][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 222.123533][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 222.278973][ T5103] Bluetooth: hci0: command tx timeout [ 222.342759][ T5103] Bluetooth: hci2: command tx timeout [ 222.344323][ T5816] Bluetooth: hci1: command tx timeout [ 222.424649][ T5816] Bluetooth: hci4: command tx timeout [ 222.485332][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.493147][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.500871][ T5810] bridge_slave_0: entered allmulticast mode [ 222.510187][ T5810] bridge_slave_0: entered promiscuous mode [ 222.536403][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.544196][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.551874][ T5810] bridge_slave_1: entered allmulticast mode [ 222.561020][ T5810] bridge_slave_1: entered promiscuous mode [ 222.606205][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 222.663810][ T5816] Bluetooth: hci3: command tx timeout [ 222.870770][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.881177][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.891836][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.899974][ T5807] bridge_slave_0: entered allmulticast mode [ 222.908863][ T5807] bridge_slave_0: entered promiscuous mode [ 222.928231][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.991087][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.999065][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.006957][ T5807] bridge_slave_1: entered allmulticast mode [ 223.015896][ T5807] bridge_slave_1: entered promiscuous mode [ 223.201464][ T5810] team0: Port device team_slave_0 added [ 223.281879][ T5810] team0: Port device team_slave_1 added [ 223.314467][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.406982][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.480804][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.488450][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.514884][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.528851][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.536828][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.544703][ T5806] bridge_slave_0: entered allmulticast mode [ 223.553449][ T5806] bridge_slave_0: entered promiscuous mode [ 223.636176][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.644156][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.670534][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.684467][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.692633][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.700345][ T5806] bridge_slave_1: entered allmulticast mode [ 223.710013][ T5806] bridge_slave_1: entered promiscuous mode [ 223.758038][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.766086][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.773928][ T5819] bridge_slave_0: entered allmulticast mode [ 223.782749][ T5819] bridge_slave_0: entered promiscuous mode [ 223.800098][ T5807] team0: Port device team_slave_0 added [ 223.888420][ T5807] team0: Port device team_slave_1 added [ 223.895884][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.903771][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.911484][ T5819] bridge_slave_1: entered allmulticast mode [ 223.920467][ T5819] bridge_slave_1: entered promiscuous mode [ 223.965211][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.973006][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.980693][ T5817] bridge_slave_0: entered allmulticast mode [ 223.989809][ T5817] bridge_slave_0: entered promiscuous mode [ 224.094040][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.257289][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.267997][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.275878][ T5817] bridge_slave_1: entered allmulticast mode [ 224.284963][ T5817] bridge_slave_1: entered promiscuous mode [ 224.300948][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.342429][ T5816] Bluetooth: hci0: command tx timeout [ 224.343873][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.355293][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.381661][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.422719][ T5816] Bluetooth: hci2: command tx timeout [ 224.428555][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.437950][ T5816] Bluetooth: hci1: command tx timeout [ 224.502520][ T5816] Bluetooth: hci4: command tx timeout [ 224.513449][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.520608][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.548034][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.597461][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.667393][ T5806] team0: Port device team_slave_0 added [ 224.701772][ T5810] hsr_slave_0: entered promiscuous mode [ 224.710901][ T5810] hsr_slave_1: entered promiscuous mode [ 224.752484][ T5816] Bluetooth: hci3: command tx timeout [ 224.758519][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.778297][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.827626][ T5806] team0: Port device team_slave_1 added [ 224.902537][ T5819] team0: Port device team_slave_0 added [ 224.919613][ T5819] team0: Port device team_slave_1 added [ 224.961292][ T5817] team0: Port device team_slave_0 added [ 224.970565][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.977901][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.004291][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.110101][ T5817] team0: Port device team_slave_1 added [ 225.120947][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.128360][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.155286][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.227793][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.235061][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.261577][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.354263][ T5807] hsr_slave_0: entered promiscuous mode [ 225.364136][ T5807] hsr_slave_1: entered promiscuous mode [ 225.371907][ T5807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.380103][ T5807] Cannot create hsr debugfs directory [ 225.389413][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.396747][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.423009][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.650437][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.657926][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.684332][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.701719][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.709192][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.735537][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.759922][ T5806] hsr_slave_0: entered promiscuous mode [ 225.768998][ T5806] hsr_slave_1: entered promiscuous mode [ 225.778131][ T5806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.787137][ T5806] Cannot create hsr debugfs directory [ 226.089150][ T5819] hsr_slave_0: entered promiscuous mode [ 226.099996][ T5819] hsr_slave_1: entered promiscuous mode [ 226.109152][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.117108][ T5819] Cannot create hsr debugfs directory [ 226.311283][ T5817] hsr_slave_0: entered promiscuous mode [ 226.322152][ T5817] hsr_slave_1: entered promiscuous mode [ 226.330987][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.339885][ T5817] Cannot create hsr debugfs directory [ 226.426836][ T5816] Bluetooth: hci0: command tx timeout [ 226.512718][ T5816] Bluetooth: hci1: command tx timeout [ 226.518381][ T5816] Bluetooth: hci2: command tx timeout [ 226.589745][ T5816] Bluetooth: hci4: command tx timeout [ 226.822735][ T5816] Bluetooth: hci3: command tx timeout [ 226.942028][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 226.974695][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 227.055698][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 227.079207][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 227.448008][ T5806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.518100][ T5806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.557598][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.577810][ T5806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 227.600127][ T5806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 227.623222][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.767283][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.874319][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 227.896790][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 227.919077][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 227.983300][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.027575][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.075599][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 228.107450][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.169276][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.252054][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 228.513959][ T5816] Bluetooth: hci0: command tx timeout [ 228.583735][ T5816] Bluetooth: hci2: command tx timeout [ 228.589407][ T5816] Bluetooth: hci1: command tx timeout [ 228.673839][ T5816] Bluetooth: hci4: command tx timeout [ 228.786627][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.877983][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.908595][ T5816] Bluetooth: hci3: command tx timeout [ 229.000775][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.080754][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.135763][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.143556][ T3774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.163738][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.269676][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.277438][ T3774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.344923][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.375005][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.382768][ T3774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.399227][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.406998][ T3774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.439323][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.495605][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.503367][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.518366][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.526235][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.849562][ T5806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.964997][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.025799][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.033658][ T3774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.111078][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.170104][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.177936][ T3774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.209322][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.386626][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.560831][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.568627][ T3774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.590474][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.598299][ T3774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.827060][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.898654][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.207507][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.411364][ T5810] veth0_vlan: entered promiscuous mode [ 232.485427][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.609000][ T5810] veth1_vlan: entered promiscuous mode [ 232.769005][ T5819] veth0_vlan: entered promiscuous mode [ 232.907790][ T5819] veth1_vlan: entered promiscuous mode [ 233.015031][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.042726][ T5807] veth0_vlan: entered promiscuous mode [ 233.160094][ T5807] veth1_vlan: entered promiscuous mode [ 233.182939][ T5810] veth0_macvtap: entered promiscuous mode [ 233.260312][ T5819] veth0_macvtap: entered promiscuous mode [ 233.275133][ T5810] veth1_macvtap: entered promiscuous mode [ 233.336153][ T5819] veth1_macvtap: entered promiscuous mode [ 233.445514][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.531527][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.563952][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.575771][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.589912][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.648147][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.657551][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.666947][ T5810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.676102][ T5810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.722113][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.734219][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.748396][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.773786][ T5807] veth0_macvtap: entered promiscuous mode [ 233.851037][ T5819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.860393][ T5819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.869781][ T5819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.879110][ T5819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.900095][ T5817] veth0_vlan: entered promiscuous mode [ 233.916320][ T5807] veth1_macvtap: entered promiscuous mode [ 234.051410][ T5817] veth1_vlan: entered promiscuous mode [ 234.129829][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.140949][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.151226][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.161990][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.176348][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.434266][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.445375][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.455701][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.466464][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.480660][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.505680][ T5806] veth0_vlan: entered promiscuous mode [ 234.573741][ T5817] veth0_macvtap: entered promiscuous mode [ 234.651320][ T5806] veth1_vlan: entered promiscuous mode [ 234.671642][ T5817] veth1_macvtap: entered promiscuous mode [ 234.709452][ T5807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.719523][ T5807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.728902][ T5807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.738053][ T5807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.964426][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.975959][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.987206][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.998046][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.008255][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.019113][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.033583][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.170649][ T5806] veth0_macvtap: entered promiscuous mode [ 235.270762][ T5806] veth1_macvtap: entered promiscuous mode [ 235.293910][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.305539][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.316369][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.327198][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.337399][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.348250][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.363450][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.591711][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.602734][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.613058][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.625475][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.636947][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.647914][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.658130][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.668997][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.683401][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.777504][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.786719][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.797917][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.807144][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.947973][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.959876][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.970191][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.981067][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.991341][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.003605][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.014924][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.029074][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.044434][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.118124][ T5806] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.127894][ T5806] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.137230][ T5806] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.146429][ T5806] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.151644][ T3996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.160022][ T3996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.384128][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.392400][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.656954][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 240.704080][ T4862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.712167][ T4862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.904506][ T4407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.913843][ T4407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.447838][ T3996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.456106][ T3996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.800773][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.809165][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.872725][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 242.054359][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 242.080245][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.089028][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.193624][ T25] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 242.203143][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.211412][ T25] usb 4-1: Product: syz [ 242.216016][ T25] usb 4-1: Manufacturer: syz [ 242.220859][ T25] usb 4-1: SerialNumber: syz [ 242.303480][ T25] usb 4-1: config 0 descriptor?? [ 242.331156][ T25] gspca_main: sq930x-2.14.0 probing 2770:930c [ 242.412187][ T4117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.422158][ T4117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.494511][ T4407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.502723][ T4407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.625495][ T4862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.634031][ T4862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.064225][ T1697] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 243.231031][ T25] gspca_sq930x: ucbus_write failed -71 [ 243.237350][ T25] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 243.283167][ T1697] usb 1-1: Using ep0 maxpacket: 8 [ 243.332909][ T25] usb 4-1: USB disconnect, device number 2 [ 243.408143][ T1697] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 243.418714][ T1697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.427925][ T1697] usb 1-1: Product: syz [ 243.433264][ T1697] usb 1-1: Manufacturer: syz [ 243.438119][ T1697] usb 1-1: SerialNumber: syz [ 243.501186][ T1697] usb 1-1: config 0 descriptor?? [ 243.781537][ T1697] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 244.389395][ T1697] gspca_sunplus: reg_w_riv err -71 [ 244.395493][ T1697] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 244.478161][ T1697] usb 1-1: USB disconnect, device number 2 [ 245.008588][ T6018] loop1: detected capacity change from 0 to 2048 [ 245.372345][ T6018] process 'syz.1.13' launched './file1' with NULL argv: empty string added [ 245.377174][ T6024] loop4: detected capacity change from 0 to 64 [ 246.094388][ T6029] loop4: detected capacity change from 0 to 128 [ 246.295141][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 246.879947][ T6040] input: syz1 as /devices/virtual/input/input5 [ 247.534596][ T6049] loop3: detected capacity change from 0 to 512 [ 248.045512][ T6058] loop2: detected capacity change from 0 to 2048 [ 248.346817][ T5103] Bluetooth: hci4: command 0x0405 tx timeout [ 248.370376][ T6062] netlink: 3688 bytes leftover after parsing attributes in process `syz.1.32'. [ 248.380078][ T6062] netlink: 3688 bytes leftover after parsing attributes in process `syz.1.32'. [ 248.775435][ T6049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.788648][ T6049] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.250410][ T6065] loop0: detected capacity change from 0 to 32768 [ 249.417018][ T6065] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 249.916170][ T6081] netlink: 'syz.2.36': attribute type 13 has an invalid length. [ 249.917360][ T6065] XFS (loop0): Ending clean mount [ 249.924207][ T6081] netlink: 152 bytes leftover after parsing attributes in process `syz.2.36'. [ 249.928118][ T6081] syz_tun: refused to change device tx_queue_len [ 249.951493][ T6081] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 250.024722][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.174150][ T5807] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 251.880420][ T6106] loop2: detected capacity change from 0 to 512 [ 251.921224][ T6106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.396367][ T29] audit: type=1326 audit(1732839767.427:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a7380809 code=0x7ffc0000 [ 252.513896][ T29] audit: type=1326 audit(1732839767.497:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a7380809 code=0x7ffc0000 [ 252.536944][ T29] audit: type=1326 audit(1732839767.497:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19a7380809 code=0x7ffc0000 [ 252.559459][ T29] audit: type=1326 audit(1732839767.497:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a7380809 code=0x7ffc0000 [ 252.582913][ T29] audit: type=1326 audit(1732839767.497:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a7380809 code=0x7ffc0000 [ 252.610555][ T29] audit: type=1326 audit(1732839767.517:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19a7380809 code=0x7ffc0000 [ 252.634006][ T29] audit: type=1326 audit(1732839767.517:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a7380809 code=0x7ffc0000 [ 252.656472][ T29] audit: type=1326 audit(1732839767.527:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f19a7380809 code=0x7ffc0000 [ 252.679407][ T29] audit: type=1326 audit(1732839767.527:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a7380809 code=0x7ffc0000 [ 252.793027][ T6118] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 252.886939][ T6106] EXT4-fs: Ignoring removed nobh option [ 252.900974][ T6106] EXT4-fs: Mount option(s) incompatible with ext3 [ 253.150087][ T6106] loop2: detected capacity change from 0 to 1024 [ 253.241626][ T6126] loop0: detected capacity change from 0 to 128 [ 253.250662][ T6126] ======================================================= [ 253.250662][ T6126] WARNING: The mand mount option has been deprecated and [ 253.250662][ T6126] and is ignored by this kernel. Remove the mand [ 253.250662][ T6126] option from the mount to silence this warning. [ 253.250662][ T6126] ======================================================= [ 253.355332][ T6106] hfsplus: xattr searching failed [ 253.876485][ T6126] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.962737][ T6126] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 254.804677][ T5807] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 255.145869][ T6152] loop2: detected capacity change from 0 to 2048 [ 255.210330][ T6152] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.933492][ T6160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.940934][ T6160] IPv6: NLM_F_CREATE should be set when creating new route [ 255.948580][ T6160] IPv6: NLM_F_CREATE should be set when creating new route [ 255.993681][ T6161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.67'. [ 257.049357][ T6176] loop4: detected capacity change from 0 to 2048 [ 257.163870][ T6176] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 257.254013][ T6181] netlink: 276 bytes leftover after parsing attributes in process `syz.3.75'. [ 257.341780][ T6182] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.822864][ T6189] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 257.908609][ T6189] dummy0: entered promiscuous mode [ 257.918071][ T6189] macvlan2: entered allmulticast mode [ 257.923948][ T6189] dummy0: entered allmulticast mode [ 257.988471][ T6189] dummy0: left promiscuous mode [ 258.498775][ T6198] netlink: 'syz.2.82': attribute type 1 has an invalid length. [ 258.507339][ T6198] netlink: 'syz.2.82': attribute type 2 has an invalid length. [ 258.704985][ T1697] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 258.909389][ T1697] usb 5-1: Using ep0 maxpacket: 32 [ 258.910121][ T6206] netpci0: tun_chr_ioctl cmd 1074025675 [ 258.920828][ T6206] netpci0: persist disabled [ 259.018064][ T1697] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.030360][ T1697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 259.042811][ T1697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 259.054529][ T1697] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 259.067614][ T1697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.410593][ T1697] usb 5-1: config 0 descriptor?? [ 259.421270][ T6196] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 259.636720][ T1697] hub 5-1:0.0: USB hub found [ 259.680070][ T6217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.88'. [ 259.743460][ T1697] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 259.902792][ T6219] loop3: detected capacity change from 0 to 128 [ 260.013844][ T6219] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 260.149253][ T6219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.251361][ T6223] loop1: detected capacity change from 0 to 256 [ 260.307193][ T1697] hid-generic 0003:046D:C314.0001: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.4-1/input0 [ 260.606171][ T1697] usb 5-1: USB disconnect, device number 2 [ 261.206139][ T29] audit: type=1326 audit(1732839776.237:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9cd80809 code=0x7ffc0000 [ 261.353120][ T29] audit: type=1326 audit(1732839776.357:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fdc9cd80809 code=0x7ffc0000 [ 261.377330][ T29] audit: type=1326 audit(1732839776.357:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9cd80809 code=0x7ffc0000 [ 261.399984][ T29] audit: type=1326 audit(1732839776.357:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9cd80809 code=0x7ffc0000 [ 261.429353][ T29] audit: type=1326 audit(1732839776.357:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc9cd80809 code=0x7ffc0000 [ 261.460204][ T29] audit: type=1326 audit(1732839776.357:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9cd80809 code=0x7ffc0000 [ 261.482833][ T29] audit: type=1326 audit(1732839776.357:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9cd80809 code=0x7ffc0000 [ 261.505442][ T29] audit: type=1326 audit(1732839776.367:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fdc9cd80809 code=0x7ffc0000 [ 261.533978][ T29] audit: type=1326 audit(1732839776.367:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9cd80809 code=0x7ffc0000 [ 261.556639][ T29] audit: type=1326 audit(1732839776.367:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9cd80809 code=0x7ffc0000 [ 261.909324][ T6244] loop1: detected capacity change from 0 to 24 [ 262.250460][ T6247] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 262.547221][ T6255] loop3: detected capacity change from 0 to 512 [ 262.773914][ T6255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.787715][ T6255] ext4 filesystem being mounted at /22/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 263.387714][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.941468][ T6291] Failed to get privilege flags for destination (handle=0x2:0x0) [ 265.007879][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 265.469910][ T6299] overlayfs: disabling nfs_export due to verity=require [ 265.949678][ T6301] devpts: called with bogus options [ 268.015310][ T6340] loop3: detected capacity change from 0 to 512 [ 268.142738][ T6340] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.145: invalid block [ 268.278676][ T6340] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.145: invalid indirect mapped block 4294967295 (level 1) [ 268.322622][ T6340] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.145: invalid indirect mapped block 4294967295 (level 1) [ 268.444472][ T6340] EXT4-fs (loop3): 2 truncates cleaned up [ 268.452050][ T6340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.501855][ T6349] loop4: detected capacity change from 0 to 512 [ 269.051948][ T6349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.053239][ T6349] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.263376][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.288848][ T6359] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 269.656303][ T5806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.207504][ T6373] loop4: detected capacity change from 0 to 16 [ 270.355915][ T6373] erofs (device loop4): mounted with root inode @ nid 36. [ 270.490583][ T6373] syz.4.155: attempt to access beyond end of device [ 270.490583][ T6373] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 270.490874][ T6373] erofs (device loop4): read error -5 @ 8200 of nid 36 [ 271.214817][ T6372] loop2: detected capacity change from 0 to 4096 [ 271.263426][ T6372] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 271.281058][ T6376] syz.4.155 (6376): drop_caches: 2 [ 271.515117][ T6372] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 271.515905][ T6372] ntfs3(loop2): Failed to load $Extend (-2). [ 271.516015][ T6372] ntfs3(loop2): Failed to initialize $Extend. [ 271.902938][ T29] audit: type=1326 audit(1732839786.917:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d9180809 code=0x7ffc0000 [ 271.903160][ T29] audit: type=1326 audit(1732839786.917:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d9180809 code=0x7ffc0000 [ 271.967715][ T29] audit: type=1326 audit(1732839787.007:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73d9180809 code=0x7ffc0000 [ 272.117237][ T29] audit: type=1326 audit(1732839787.127:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d9180809 code=0x7ffc0000 [ 272.117467][ T29] audit: type=1326 audit(1732839787.127:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d9180809 code=0x7ffc0000 [ 272.121028][ T29] audit: type=1326 audit(1732839787.157:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73d9180809 code=0x7ffc0000 [ 272.128253][ T29] audit: type=1326 audit(1732839787.157:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d9180809 code=0x7ffc0000 [ 272.175021][ T29] audit: type=1326 audit(1732839787.217:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73d91777a7 code=0x7ffc0000 [ 272.177769][ T29] audit: type=1326 audit(1732839787.217:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73d911c149 code=0x7ffc0000 [ 272.178000][ T29] audit: type=1326 audit(1732839787.217:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f73d9180809 code=0x7ffc0000 [ 274.458513][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.176'. [ 274.680253][ T6419] program syz.1.177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.981797][ T6423] loop0: detected capacity change from 0 to 256 [ 275.223568][ T6427] input: syz0 as /devices/virtual/input/input6 [ 275.293876][ T6423] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 275.307525][ T6423] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 276.032676][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 276.347334][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 276.376421][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.387918][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.398293][ T8] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 276.407743][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.431177][ T6452] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 276.478558][ T8] usb 2-1: config 0 descriptor?? [ 276.928565][ T8] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 276.936177][ T8] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 276.943679][ T8] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 276.951037][ T8] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 276.958514][ T8] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 276.973806][ T8] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 277.247822][ T5868] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 277.315799][ T6467] loop2: detected capacity change from 0 to 16 [ 277.328524][ T6467] erofs (device loop2): mounted with root inode @ nid 36. [ 277.337299][ T8] usb 2-1: USB disconnect, device number 2 [ 277.425506][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 277.457996][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.468814][ T5868] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 277.478318][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.520483][ T5868] usb 5-1: config 0 descriptor?? [ 277.533905][ T1697] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 277.574074][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 277.723320][ T1697] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.735588][ T1697] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 277.741781][ T8] usb 5-1: USB disconnect, device number 3 [ 277.746907][ T1697] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 277.747137][ T1697] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 277.747296][ T1697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.789882][ T6465] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 278.028710][ T6476] capability: warning: `syz.2.205' uses deprecated v2 capabilities in a way that may be insecure [ 278.613542][ T6485] netlink: 116 bytes leftover after parsing attributes in process `syz.0.208'. [ 278.850070][ T1697] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 278.860643][ T1697] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input7 [ 279.077385][ T1697] usb 4-1: USB disconnect, device number 3 [ 279.077615][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 279.234171][ T6495] loop2: detected capacity change from 0 to 64 [ 279.329241][ T6495] Trying to free block not in datazone [ 279.339354][ T6495] Trying to free block not in datazone [ 280.535909][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.542849][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.775598][ T6530] loop4: detected capacity change from 0 to 128 [ 280.787300][ T6530] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4626: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 280.801587][ T6530] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 281.258062][ T6537] loop4: detected capacity change from 0 to 128 [ 281.274624][ T6538] program syz.2.233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.334153][ T6529] loop1: detected capacity change from 0 to 4096 [ 281.369814][ T6529] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 281.602081][ T6540] capability: warning: `syz.3.234' uses 32-bit capabilities (legacy support in use) [ 281.719352][ T6544] loop2: detected capacity change from 0 to 128 [ 281.749594][ T6544] EXT4-fs (loop2): Test dummy encryption mode enabled [ 281.851397][ T6544] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 281.912764][ T6544] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 281.930404][ T6548] loop4: detected capacity change from 0 to 512 [ 282.025577][ T6548] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 282.039148][ T6548] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 282.380951][ T6548] EXT4-fs (loop4): 1 truncate cleaned up [ 282.388824][ T6548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.445512][ T6555] syz.0.240: attempt to access beyond end of device [ 282.445512][ T6555] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 282.458791][ T6555] VFS: unable to read V7 FS superblock on device nbd0. [ 282.466328][ T6555] VFS: could not find a valid V7 on nbd0. [ 282.526040][ T5817] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 282.790411][ T5806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.135934][ T6567] loop4: detected capacity change from 0 to 128 [ 283.180948][ T6572] loop2: detected capacity change from 0 to 16 [ 283.181010][ T6575] sch_fq: defrate 0 ignored. [ 283.253296][ T6572] erofs (device loop2): mounted with root inode @ nid 36. [ 284.306344][ T6579] loop3: detected capacity change from 0 to 32768 [ 284.357692][ T6579] (syz.3.251,6579,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 284.385264][ T6579] (syz.3.251,6579,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 284.419999][ T6579] JBD2: Ignoring recovery information on journal [ 284.630303][ T6579] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 284.749215][ T6579] ocfs2: Unmounting device (7,3) on (node local) [ 285.269310][ T6581] loop1: detected capacity change from 0 to 32768 [ 285.466999][ T6581] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 286.029120][ T6611] loop3: detected capacity change from 0 to 128 [ 286.089363][ T5810] ocfs2: Unmounting device (7,1) on (node local) [ 286.126035][ T6611] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 286.394096][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 287.161942][ T6627] loop1: detected capacity change from 0 to 1024 [ 287.224460][ T6627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.541565][ T6635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.272'. [ 287.654494][ T6634] EXT4-fs error (device loop1): ext4_xattr_ibody_get:653: inode #2: comm syz.1.262: corrupted in-inode xattr: bad e_name length [ 287.787461][ T6638] netlink: 'syz.4.274': attribute type 14 has an invalid length. [ 288.006618][ T5810] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2793: inode #2: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 288.090138][ T5810] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 288.357150][ T5810] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 288.400059][ T5810] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 288.522120][ T6652] loop3: detected capacity change from 0 to 512 [ 288.535116][ T6652] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 288.629891][ T6652] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 288.641149][ T6652] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 288.655690][ T6652] System zones: 0-1, 15-15, 18-18, 34-34 [ 288.662790][ T6652] EXT4-fs (loop3): orphan cleanup on readonly fs [ 288.669601][ T6652] __quota_error: 3 callbacks suppressed [ 288.669678][ T6652] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 288.688083][ T6652] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 288.705894][ T6652] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 288.715475][ T6652] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.281: bg 0: block 40: padding at end of block bitmap is not set [ 288.731221][ T6652] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 288.757872][ T6652] EXT4-fs (loop3): 1 truncate cleaned up [ 288.765468][ T6652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 288.930602][ T3774] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.931501][ T5810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.104223][ T3774] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.205102][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.299870][ T3774] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.424552][ T6658] netlink: 512 bytes leftover after parsing attributes in process `syz.4.283'. [ 289.460092][ T3774] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.904388][ T3774] bridge_slave_1: left allmulticast mode [ 289.910312][ T3774] bridge_slave_1: left promiscuous mode [ 289.920013][ T3774] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.940027][ T3774] bridge_slave_0: left allmulticast mode [ 289.948828][ T3774] bridge_slave_0: left promiscuous mode [ 289.955571][ T3774] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.417235][ T3774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.436932][ T3774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.457474][ T3774] bond0 (unregistering): Released all slaves [ 290.503616][ T6665] loop4: detected capacity change from 0 to 128 [ 290.608155][ T6665] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 290.683710][ T6665] syz.4.291: attempt to access beyond end of device [ 290.683710][ T6665] loop4: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 290.777333][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.855160][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.868802][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.885817][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.910303][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 290.920343][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 291.083918][ T6678] loop0: detected capacity change from 0 to 128 [ 291.103508][ T1697] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 291.175063][ T6678] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 291.206323][ T5806] sysv_free_block: trying to free block not in datazone [ 291.217866][ T5806] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 291.301869][ T6678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.308083][ T6680] vivid-000: disconnect [ 291.347593][ T6679] vivid-000: reconnect [ 291.414476][ T1697] usb 4-1: Using ep0 maxpacket: 32 [ 291.436114][ T1697] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 291.444925][ T1697] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 291.454264][ T1697] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 291.466314][ T1697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 291.477647][ T1697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 291.487882][ T1697] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 291.497382][ T1697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.537962][ T1697] usb 4-1: config 0 descriptor?? [ 291.548927][ T1697] hub 4-1:0.0: USB hub found [ 291.688071][ T3774] hsr_slave_0: left promiscuous mode [ 291.731170][ T3774] hsr_slave_1: left promiscuous mode [ 291.764455][ T3774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.772644][ T3774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.774759][ T1697] hub 4-1:0.0: 7 ports detected [ 291.805154][ T1697] hub 4-1:0.0: insufficient power available to use all downstream ports [ 291.858082][ T3774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.865958][ T3774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.893084][ T6684] netlink: 32 bytes leftover after parsing attributes in process `syz.2.296'. [ 291.933675][ T3774] veth1_macvtap: left promiscuous mode [ 291.939546][ T3774] veth0_macvtap: left promiscuous mode [ 291.946011][ T3774] veth1_vlan: left promiscuous mode [ 291.951737][ T3774] veth0_vlan: left promiscuous mode [ 291.983314][ T1697] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 291.990052][ T1697] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 292.238713][ T1697] usbhid 4-1:0.0: can't add hid device: -71 [ 292.245475][ T1697] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 292.304027][ T1697] usb 4-1: USB disconnect, device number 4 [ 292.846164][ T3774] team0 (unregistering): Port device team_slave_1 removed [ 292.908149][ T3774] team0 (unregistering): Port device team_slave_0 removed [ 293.062976][ T5816] Bluetooth: hci2: command tx timeout [ 293.226112][ T6684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.296'. [ 293.460092][ T6700] loop4: detected capacity change from 0 to 128 [ 293.703382][ T6703] loop0: detected capacity change from 0 to 1024 [ 293.754686][ T6703] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 293.767866][ T6703] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 293.786545][ T6703] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 293.866153][ T6703] EXT4-fs error (device loop0): ext4_get_journal_inode:5809: inode #5: comm syz.0.302: unexpected bad inode w/o EXT4_IGET_BAD [ 293.967658][ T6703] EXT4-fs (loop0): no journal found [ 293.976080][ T6703] EXT4-fs (loop0): can't get journal size [ 294.016748][ T6703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.127682][ T6706] loop3: detected capacity change from 0 to 64 [ 294.178545][ T6673] chnl_net:caif_netlink_parms(): no params data found [ 294.354009][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.716104][ T6717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.308'. [ 294.925535][ T6723] warning: `syz.0.312' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 295.142942][ T5816] Bluetooth: hci2: command tx timeout [ 296.366535][ T6673] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.377347][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.385253][ T6673] bridge_slave_0: entered allmulticast mode [ 296.394334][ T6673] bridge_slave_0: entered promiscuous mode [ 296.429418][ T6673] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.442120][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.450113][ T6673] bridge_slave_1: entered allmulticast mode [ 296.459397][ T6673] bridge_slave_1: entered promiscuous mode [ 296.681946][ T6673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.723295][ T6673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.805628][ T6740] netlink: 'syz.2.318': attribute type 49 has an invalid length. [ 296.967738][ T6673] team0: Port device team_slave_0 added [ 297.035465][ T6673] team0: Port device team_slave_1 added [ 297.133602][ T6673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.140860][ T6673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.175541][ T6673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.195151][ T6673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.202445][ T6673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.228536][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.238925][ T6673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.246298][ T6744] loop0: detected capacity change from 0 to 512 [ 297.273732][ T5816] Bluetooth: hci2: command tx timeout [ 297.346004][ T6744] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.319: iget: bogus i_mode (0) [ 297.453653][ T6744] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.319: couldn't read orphan inode 17 (err -117) [ 297.577546][ T6744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.793580][ T6744] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.319: bg 0: block 7: invalid block bitmap [ 297.818003][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.323'. [ 297.884181][ T6673] hsr_slave_0: entered promiscuous mode [ 297.961785][ T6673] hsr_slave_1: entered promiscuous mode [ 298.286215][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.288129][ T6756] loop3: detected capacity change from 0 to 4096 [ 298.373746][ T6756] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 298.736626][ T6756] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 298.777075][ T6673] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 298.814384][ T6756] ntfs3(loop3): Failed to load $Extend (-22). [ 298.820971][ T6756] ntfs3(loop3): Failed to initialize $Extend. [ 298.824300][ T6673] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 298.856039][ T6673] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 298.883094][ T6673] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 299.308759][ T5816] Bluetooth: hci2: command tx timeout [ 299.789419][ T6673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.865435][ T6673] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.909238][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.917016][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.939094][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.946882][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.774467][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.339'. [ 301.181395][ T6797] tun0: tun_chr_ioctl cmd 1074812118 [ 301.224665][ T6800] loop2: detected capacity change from 0 to 256 [ 301.261232][ T6800] vfat: Unknown parameter './file1' [ 302.103304][ T6673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.296240][ T6805] loop0: detected capacity change from 0 to 32768 [ 302.391558][ T6805] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 302.599885][ T5807] ocfs2: Unmounting device (7,0) on (node local) [ 302.629250][ T6815] netlink: 324 bytes leftover after parsing attributes in process `syz.3.347'. [ 304.649368][ T6846] loop0: detected capacity change from 0 to 8 [ 304.700959][ T6673] veth0_vlan: entered promiscuous mode [ 304.799853][ T6673] veth1_vlan: entered promiscuous mode [ 304.920882][ T6843] loop3: detected capacity change from 0 to 4096 [ 304.944753][ T6843] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 305.110725][ T6673] veth0_macvtap: entered promiscuous mode [ 305.196456][ T6673] veth1_macvtap: entered promiscuous mode [ 305.231091][ T6843] ntfs3(loop3): ino=0, attr_set_size [ 305.265315][ T6850] ntfs3(loop3): ino=0, attr_set_size [ 305.350261][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.364490][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.374626][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.387646][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.398189][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.411611][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.421767][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.435138][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.454568][ T6673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.567616][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.579177][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.591981][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.603040][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.615824][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.629588][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.642547][ T6673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.659812][ T6673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.675501][ T6673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.830874][ T6673] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.842811][ T6673] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.851870][ T6673] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.869927][ T6673] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.850979][ T6897] netlink: 'syz.4.377': attribute type 1 has an invalid length. [ 307.863483][ T6897] netlink: 'syz.4.377': attribute type 4 has an invalid length. [ 307.871369][ T6897] netlink: 192 bytes leftover after parsing attributes in process `syz.4.377'. [ 308.878992][ T6914] loop3: detected capacity change from 0 to 1024 [ 309.153319][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.161530][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.318624][ T3952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.329661][ T3952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.415328][ T6914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.556509][ T6914] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.3.381: corrupted in-inode xattr: bad magic number in in-inode xattr [ 309.593423][ T6914] EXT4-fs (loop3): Remounting filesystem read-only [ 309.903802][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.380954][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 310.457895][ T6945] program syz.0.393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.918990][ T6950] loop0: detected capacity change from 0 to 164 [ 311.041923][ T6950] Unable to read rock-ridge attributes [ 311.753145][ T6955] loop3: detected capacity change from 0 to 256 [ 311.779609][ T6956] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 312.041832][ T6955] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 312.282511][ T6955] exFAT-fs (loop3): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295) [ 312.282511][ T6955] [ 312.297936][ T6955] exFAT-fs (loop3): error, failed to bmap (inode : ffff88812422ca70 iblock : 0, err : -5) [ 313.063885][ T6964] Process accounting resumed [ 314.145910][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.408'. [ 315.224321][ T6980] netlink: 'syz.4.411': attribute type 11 has an invalid length. [ 315.233849][ T6980] netlink: 204 bytes leftover after parsing attributes in process `syz.4.411'. [ 316.199608][ T6987] loop4: detected capacity change from 0 to 2048 [ 316.304880][ T6987] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.720561][ T6996] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 316.731136][ T6996] macvlan2: entered allmulticast mode [ 316.736961][ T6996] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 316.832989][ T6996] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 316.840441][ T6996] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 319.701363][ T7021] loop0: detected capacity change from 0 to 2048 [ 319.817333][ T7025] loop2: detected capacity change from 0 to 256 [ 319.893235][ T7021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.993119][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 320.130657][ T7025] FAT-fs (loop2): Directory bread(block 64) failed [ 320.137913][ T7025] FAT-fs (loop2): Directory bread(block 65) failed [ 320.145203][ T7025] FAT-fs (loop2): Directory bread(block 66) failed [ 320.151989][ T7025] FAT-fs (loop2): Directory bread(block 67) failed [ 320.159234][ T7025] FAT-fs (loop2): Directory bread(block 68) failed [ 320.166168][ T7025] FAT-fs (loop2): Directory bread(block 69) failed [ 320.173249][ T7025] FAT-fs (loop2): Directory bread(block 70) failed [ 320.180030][ T7025] FAT-fs (loop2): Directory bread(block 71) failed [ 320.189822][ T7025] FAT-fs (loop2): Directory bread(block 72) failed [ 320.201732][ T7025] FAT-fs (loop2): Directory bread(block 73) failed [ 320.283650][ T7021] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 320.351441][ T25] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 320.362679][ T25] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 320.374252][ T25] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.387663][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 320.400196][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.412737][ T7021] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4095 with max blocks 33 with error 28 [ 320.425880][ T7021] EXT4-fs (loop0): This should not happen!! Data will be lost [ 320.425880][ T7021] [ 320.436068][ T7021] EXT4-fs (loop0): Total free blocks count 0 [ 320.442522][ T7021] EXT4-fs (loop0): Free/Dirty block details [ 320.448651][ T7021] EXT4-fs (loop0): free_blocks=2415919104 [ 320.454822][ T7021] EXT4-fs (loop0): dirty_blocks=64 [ 320.460166][ T7021] EXT4-fs (loop0): Block reservation details [ 320.466628][ T7021] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 320.656319][ T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 320.665523][ T25] usb 4-1: invalid MIDI out EP 0 [ 321.196047][ T25] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 321.279442][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.312120][ T25] usb 4-1: USB disconnect, device number 5 [ 321.462663][ T1697] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 321.700274][ T1697] usb 5-1: Using ep0 maxpacket: 16 [ 321.807463][ T1697] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.817958][ T1697] usb 5-1: config 0 interface 0 has no altsetting 0 [ 321.825028][ T1697] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 321.837555][ T1697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.128056][ T1697] usb 5-1: config 0 descriptor?? [ 323.013416][ T1697] cougar 0003:060B:500A.0003: unexpected long global item [ 323.111271][ T1697] cougar 0003:060B:500A.0003: parse failed [ 323.117961][ T1697] cougar 0003:060B:500A.0003: probe with driver cougar failed with error -22 [ 323.231210][ T1697] usb 5-1: USB disconnect, device number 4 [ 325.191444][ T7060] loop3: detected capacity change from 0 to 256 [ 325.268024][ T7060] vfat: Unknown parameter 'shxrtname' [ 325.836159][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 326.233845][ T7062] loop4: detected capacity change from 0 to 4096 [ 327.289414][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 327.310436][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 327.337849][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 327.351864][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 327.375685][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 327.385290][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 327.519955][ T34] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.649059][ T7062] ntfs3(loop4): failed to convert "0080" to cp737 [ 327.710162][ T7062] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 327.816946][ T7062] ntfs3(loop4): failed to convert name for inode 1e. [ 327.829166][ T34] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.883316][ T7087] ntfs3(loop4): mft corrupted [ 328.059228][ T34] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.233784][ T34] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.918407][ T7102] loop4: detected capacity change from 0 to 128 [ 328.941787][ T34] bridge_slave_1: left allmulticast mode [ 328.948249][ T34] bridge_slave_1: left promiscuous mode [ 328.955158][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.991371][ T34] bridge_slave_0: left allmulticast mode [ 329.001845][ T34] bridge_slave_0: left promiscuous mode [ 329.008654][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.014087][ T7102] EXT4-fs: Ignoring removed nobh option [ 329.244022][ T7102] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 329.380876][ T7102] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 329.528063][ T5816] Bluetooth: hci2: command tx timeout [ 329.552594][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.588145][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.736335][ T34] bond0 (unregistering): Released all slaves [ 329.977270][ T7078] chnl_net:caif_netlink_parms(): no params data found [ 330.190290][ T5806] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 330.580652][ T7115] loop4: detected capacity change from 0 to 64 [ 330.861300][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 331.503384][ T7118] loop2: detected capacity change from 0 to 32768 [ 331.559697][ T5816] Bluetooth: hci2: command tx timeout [ 331.619140][ T7118] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 331.974855][ T34] hsr_slave_0: left promiscuous mode [ 332.013215][ T34] hsr_slave_1: left promiscuous mode [ 332.015382][ T7118] XFS (loop2): Ending clean mount [ 332.056029][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.064209][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.227380][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.236122][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.286847][ T5817] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 332.354112][ T34] veth1_macvtap: left promiscuous mode [ 332.359899][ T34] veth0_macvtap: left promiscuous mode [ 332.365939][ T34] veth1_vlan: left promiscuous mode [ 332.371490][ T34] veth0_vlan: left promiscuous mode [ 333.006415][ T7141] loop3: detected capacity change from 0 to 2048 [ 333.179918][ T7141] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.336963][ T7143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.470'. [ 333.387237][ T34] team0 (unregistering): Port device team_slave_1 removed [ 333.415055][ T34] team0 (unregistering): Port device team_slave_0 removed [ 333.626523][ T5816] Bluetooth: hci2: command tx timeout [ 333.632824][ T5866] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 333.797323][ T7078] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.807816][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.820391][ T7078] bridge_slave_0: entered allmulticast mode [ 333.830112][ T7078] bridge_slave_0: entered promiscuous mode [ 333.970839][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.982484][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.995455][ T5866] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 334.004906][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.021881][ T7078] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.032730][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.040513][ T7078] bridge_slave_1: entered allmulticast mode [ 334.049581][ T7078] bridge_slave_1: entered promiscuous mode [ 334.064248][ T5866] usb 1-1: config 0 descriptor?? [ 334.409415][ T7078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.483456][ T7078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.586066][ T5866] isku 0003:1E7D:319C.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 334.705490][ T7078] team0: Port device team_slave_0 added [ 334.727242][ T7078] team0: Port device team_slave_1 added [ 334.995229][ T7078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.002724][ T7078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.031769][ T7078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.083507][ T1697] usb 1-1: USB disconnect, device number 3 [ 335.169785][ T7078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.177237][ T7078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.207260][ T7078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.548596][ T7078] hsr_slave_0: entered promiscuous mode [ 335.584154][ T7078] hsr_slave_1: entered promiscuous mode [ 335.634148][ T7166] xt_NFQUEUE: number of total queues is 0 [ 335.720236][ T5816] Bluetooth: hci2: command tx timeout [ 336.497564][ T7078] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 336.522095][ T7078] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 336.547489][ T7078] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 336.569389][ T7078] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 336.737164][ T7183] loop4: detected capacity change from 0 to 1024 [ 337.015274][ T29] audit: type=1800 audit(1732839852.057:34): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.492" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 337.338492][ T5806] hfsplus: bad catalog entry type [ 337.443304][ T5806] ===================================================== [ 337.450656][ T5806] BUG: KMSAN: uninit-value in hfsplus_strcasecmp+0x1ca/0x770 [ 337.458720][ T5806] hfsplus_strcasecmp+0x1ca/0x770 [ 337.466739][ T5806] hfsplus_cat_case_cmp_key+0xde/0x190 [ 337.472638][ T5806] hfs_find_rec_by_key+0xb1/0x240 [ 337.477859][ T5806] __hfsplus_brec_find+0x26f/0x7b0 [ 337.483356][ T5806] hfsplus_brec_find+0x445/0x970 [ 337.488485][ T5806] hfsplus_brec_read+0x46/0x1a0 [ 337.496380][ T5806] hfsplus_find_cat+0xdb/0x460 [ 337.505849][ T5806] hfsplus_iget+0x729/0xae0 [ 337.510576][ T5806] hfsplus_lookup+0xcde/0xef0 [ 337.516777][ T5806] __lookup_slow+0x506/0x6e0 [ 337.519203][ T7078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.521512][ T5806] lookup_slow+0x6a/0xd0 [ 337.535521][ T5806] walk_component+0x467/0x650 [ 337.540373][ T5806] path_lookupat+0x27d/0x6f0 [ 337.547471][ T5806] filename_lookup+0x288/0x7c0 [ 337.555308][ T5806] user_path_at+0x90/0x3e0 [ 337.559928][ T5806] __x64_sys_umount+0x146/0x240 [ 337.565081][ T5806] x64_sys_call+0x265e/0x3c30 [ 337.569968][ T5806] do_syscall_64+0xcd/0x1e0 [ 337.574793][ T5806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.580928][ T5806] [ 337.586089][ T5806] Uninit was created at: [ 337.590595][ T5806] __kmalloc_noprof+0x923/0x1230 [ 337.595902][ T5806] hfsplus_find_init+0x95/0x1d0 [ 337.605018][ T5806] hfsplus_iget+0x3c4/0xae0 [ 337.611221][ T5806] hfsplus_lookup+0xcde/0xef0 [ 337.618829][ T5806] __lookup_slow+0x506/0x6e0 [ 337.620646][ T7078] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.623670][ T5806] lookup_slow+0x6a/0xd0 [ 337.623775][ T5806] walk_component+0x467/0x650 [ 337.639803][ T5806] path_lookupat+0x27d/0x6f0 [ 337.647479][ T5806] filename_lookup+0x288/0x7c0 [ 337.652593][ T5806] user_path_at+0x90/0x3e0 [ 337.657206][ T5806] __x64_sys_umount+0x146/0x240 [ 337.662604][ T5806] x64_sys_call+0x265e/0x3c30 [ 337.667505][ T5806] do_syscall_64+0xcd/0x1e0 [ 337.672187][ T5806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.681118][ T5806] [ 337.683706][ T5806] CPU: 0 UID: 0 PID: 5806 Comm: syz-executor Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 337.694632][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 337.711545][ T5806] ===================================================== [ 337.719842][ T5806] Disabling lock debugging due to kernel taint [ 337.726284][ T5806] Kernel panic - not syncing: kmsan.panic set ... [ 337.732873][ T5806] CPU: 0 UID: 0 PID: 5806 Comm: syz-executor Tainted: G B 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 337.745088][ T5806] Tainted: [B]=BAD_PAGE [ 337.749353][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 337.759576][ T5806] Call Trace: [ 337.762982][ T5806] [ 337.766023][ T5806] dump_stack_lvl+0x216/0x2d0 [ 337.770880][ T5806] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 337.776947][ T5806] dump_stack+0x1e/0x30 [ 337.781277][ T5806] panic+0x4e2/0xcf0 [ 337.785390][ T5806] ? kmsan_get_metadata+0x91/0x1c0 [ 337.790730][ T5806] kmsan_report+0x2c7/0x2d0 [ 337.795440][ T5806] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 337.801460][ T5806] ? __msan_warning+0x95/0x120 [ 337.806412][ T5806] ? hfsplus_strcasecmp+0x1ca/0x770 [ 337.811791][ T5806] ? hfsplus_cat_case_cmp_key+0xde/0x190 [ 337.817646][ T5806] ? hfs_find_rec_by_key+0xb1/0x240 [ 337.823025][ T5806] ? __hfsplus_brec_find+0x26f/0x7b0 [ 337.828490][ T5806] ? hfsplus_brec_find+0x445/0x970 [ 337.833778][ T5806] ? hfsplus_brec_read+0x46/0x1a0 [ 337.838983][ T5806] ? hfsplus_find_cat+0xdb/0x460 [ 337.844132][ T5806] ? hfsplus_iget+0x729/0xae0 [ 337.848985][ T5806] ? hfsplus_lookup+0xcde/0xef0 [ 337.853986][ T5806] ? __lookup_slow+0x506/0x6e0 [ 337.858921][ T5806] ? lookup_slow+0x6a/0xd0 [ 337.863498][ T5806] ? walk_component+0x467/0x650 [ 337.868506][ T5806] ? path_lookupat+0x27d/0x6f0 [ 337.873430][ T5806] ? filename_lookup+0x288/0x7c0 [ 337.878533][ T5806] ? user_path_at+0x90/0x3e0 [ 337.883288][ T5806] ? __x64_sys_umount+0x146/0x240 [ 337.888501][ T5806] ? x64_sys_call+0x265e/0x3c30 [ 337.893561][ T5806] ? do_syscall_64+0xcd/0x1e0 [ 337.898421][ T5806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.904722][ T5806] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 337.910770][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 337.916190][ T5806] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 337.922742][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 337.928169][ T5806] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 337.934221][ T5806] ? hfsplus_bnode_read_u16+0x3e/0x2b0 [ 337.939867][ T5806] ? filter_irq_stacks+0x60/0x1a0 [ 337.945069][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 337.950474][ T5806] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 337.956494][ T5806] __msan_warning+0x95/0x120 [ 337.961273][ T5806] hfsplus_strcasecmp+0x1ca/0x770 [ 337.966475][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 337.971875][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 337.977282][ T5806] hfsplus_cat_case_cmp_key+0xde/0x190 [ 337.982971][ T5806] hfs_find_rec_by_key+0xb1/0x240 [ 337.988179][ T5806] ? __pfx_hfsplus_cat_case_cmp_key+0x10/0x10 [ 337.994466][ T5806] __hfsplus_brec_find+0x26f/0x7b0 [ 337.999759][ T5806] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 338.005582][ T5806] hfsplus_brec_find+0x445/0x970 [ 338.010693][ T5806] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 338.016634][ T5806] hfsplus_brec_read+0x46/0x1a0 [ 338.021683][ T5806] hfsplus_find_cat+0xdb/0x460 [ 338.026670][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 338.032095][ T5806] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 338.038137][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 338.043539][ T5806] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 338.049559][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 338.054962][ T5806] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 338.060987][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 338.066393][ T5806] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 338.072923][ T5806] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 338.079205][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 338.084624][ T5806] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 338.090670][ T5806] hfsplus_iget+0x729/0xae0 [ 338.095380][ T5806] hfsplus_lookup+0xcde/0xef0 [ 338.100242][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 338.105696][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 338.111106][ T5806] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 338.117138][ T5806] ? __pfx_hfsplus_lookup+0x10/0x10 [ 338.122497][ T5806] ? __pfx_hfsplus_lookup+0x10/0x10 [ 338.127851][ T5806] __lookup_slow+0x506/0x6e0 [ 338.132628][ T5806] lookup_slow+0x6a/0xd0 [ 338.137040][ T5806] walk_component+0x467/0x650 [ 338.142113][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 338.147551][ T5806] path_lookupat+0x27d/0x6f0 [ 338.152419][ T5806] filename_lookup+0x288/0x7c0 [ 338.157368][ T5806] ? strncpy_from_user+0x46d/0x550 [ 338.162641][ T5806] ? kmsan_get_metadata+0x13e/0x1c0 [ 338.168044][ T5806] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 338.174073][ T5806] ? getname_flags+0x5df/0xa30 [ 338.179004][ T5806] user_path_at+0x90/0x3e0 [ 338.183595][ T5806] ? __x64_sys_umount+0x6d/0x240 [ 338.188718][ T5806] __x64_sys_umount+0x146/0x240 [ 338.193761][ T5806] x64_sys_call+0x265e/0x3c30 [ 338.198632][ T5806] do_syscall_64+0xcd/0x1e0 [ 338.203296][ T5806] ? clear_bhb_loop+0x25/0x80 [ 338.208179][ T5806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.214296][ T5806] RIP: 0033:0x7f73d9181b37 [ 338.218851][ T5806] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 338.238740][ T5806] RSP: 002b:00007ffef4e96f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 338.247331][ T5806] RAX: ffffffffffffffda RBX: 00007f73d91f37dc RCX: 00007f73d9181b37 [ 338.255449][ T5806] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef4e97010 [ 338.263558][ T5806] RBP: 00007ffef4e97010 R08: 0000000000000000 R09: 0000000000000000 [ 338.271662][ T5806] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffef4e98100 [ 338.279773][ T5806] R13: 00007f73d91f37dc R14: 0000000000052290 R15: 00007ffef4e9a2b0 [ 338.287909][ T5806] [ 338.291339][ T5806] Kernel Offset: disabled [ 338.295727][ T5806] Rebooting in 86400 seconds..