last executing test programs: 6.966386243s ago: executing program 0 (id=442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 6.456866619s ago: executing program 1 (id=444): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 6.296234266s ago: executing program 0 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@coherency_buffered}, {@heartbeat_none}, {@grpquota}, {@commit={'commit', 0x3d, 0x4}}, {@heartbeat_none}, {@localflocks}, {@intr}, {@dir_resv_level}, {@cluster_stack}, {@resv_level={'resv_level', 0x3d, 0x1}}, {@localflocks}, {@commit={'commit', 0x3d, 0xf9}}], [{@fsmagic={'fsmagic', 0x3d, 0xb}}]}, 0xb, 0x4432, &(0x7f0000004480)="$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") 5.343629429s ago: executing program 1 (id=448): unshare(0x24040400) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x60) 5.293676526s ago: executing program 3 (id=449): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10000008}) 5.263399167s ago: executing program 2 (id=450): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @mcast2, @private0}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', r1, 0x0, 0x2, 0x0, 0x0, 0x46427640f2ce7066, @mcast2, @private0, 0x0, 0x20}}) 4.514453418s ago: executing program 4 (id=451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003680)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8001, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 4.303345161s ago: executing program 2 (id=452): getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0), &(0x7f00000003c0)=0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000000000000080000000000000000000000000000fc02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000fe880000000000000000000000000101e0000002000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bbff0200000000000000000000000000010003"], 0x27c}}, 0x0) 4.158224443s ago: executing program 0 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x15) 4.151572231s ago: executing program 1 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 4.057662392s ago: executing program 3 (id=455): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0xfffffffc, 0x9, 0x0, 0xffffffff, 0x0, "01000000000e65300000000800008000"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x6) 3.751241976s ago: executing program 4 (id=456): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 3.504051281s ago: executing program 0 (id=457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x4000) 3.454327342s ago: executing program 3 (id=458): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='codepage=maccroatian,iocharset=iso8859-6,umask=00000000000000000000005,file_umask=00000000000000000000006,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x7, 0x2db, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) chmod(&(0x7f0000000000)='./file0\x00', 0x9) 3.439062581s ago: executing program 2 (id=459): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000240)) 3.314157252s ago: executing program 1 (id=460): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x3, 0x7fe2, 0x5, 0x140, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x2, &(0x7f0000000200)={0x3, 0x2b, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.930033679s ago: executing program 4 (id=461): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000078c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="ff41"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.893370519s ago: executing program 0 (id=462): unshare(0x28000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@map=r0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.728015405s ago: executing program 3 (id=463): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f0000000e40)=""/232, 0xe8}, {&(0x7f0000000080)=""/109, 0x6d}], 0x5}, 0x40000100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 2.585927094s ago: executing program 1 (id=464): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_setup(0xc, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 2.336123677s ago: executing program 0 (id=465): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000021105e04f90000000000000109022d00010000000e090400cb01030000000921feff10012203000905810300001b"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x40, 0xc, 0x3, {0x3, 0x26, 'T'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.301283279s ago: executing program 4 (id=466): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.843455491s ago: executing program 2 (id=467): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x1, 0x7, 0x4, {0x1, @pix_mp={0x0, 0x9, 0x35323645, 0x4, 0x7, [{0xadb, 0x1000}, {0xfffffffc, 0xc}, {0x8c5e, 0x400}, {0x6, 0x2}, {0x3, 0x4}, {0x4, 0xac}, {0x8, 0x3000000}, {0x8, 0x3}], 0x2, 0x88, 0x6, 0x0, 0x7}}, 0x8}) 1.654885791s ago: executing program 1 (id=468): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.56954234s ago: executing program 3 (id=469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x81c6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004010}, 0x40840) 1.482152926s ago: executing program 4 (id=470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r1, 0x50dc85624ea6cf59}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 977.724877ms ago: executing program 2 (id=471): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000940)={0x24, r0, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x1, 0x3d}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4051}, 0x4) 638.422418ms ago: executing program 3 (id=472): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=f']) 550.911864ms ago: executing program 4 (id=473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000006700000008003d"], 0x1c}}, 0x0) 0s ago: executing program 2 (id=474): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x0, 0x3, 0x0, 0x0, 0x9}, 0xc) recvmsg(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x160) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.61' (ED25519) to the list of known hosts. [ 203.473858][ T5780] cgroup: Unknown subsys name 'net' [ 203.659551][ T5780] cgroup: Unknown subsys name 'cpuset' [ 203.687326][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.686730][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.693928][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.730550][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 261.915327][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.925169][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 261.934224][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 261.946203][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.956717][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.021961][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.033978][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.045036][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.054754][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.066483][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.075317][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.090466][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.100186][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.113361][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.143206][ T5094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 262.335716][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 262.412041][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 262.421956][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 262.433393][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 262.459580][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 262.471853][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 262.502790][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 262.519627][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 262.538676][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 262.598391][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.361778][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 263.752629][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 264.067667][ T5094] Bluetooth: hci0: command tx timeout [ 264.151560][ T5094] Bluetooth: hci2: command tx timeout [ 264.308333][ T5094] Bluetooth: hci1: command tx timeout [ 264.326749][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.335418][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.343441][ T5808] bridge_slave_0: entered allmulticast mode [ 264.353618][ T5808] bridge_slave_0: entered promiscuous mode [ 264.376632][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.384559][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.392627][ T5808] bridge_slave_1: entered allmulticast mode [ 264.402602][ T5808] bridge_slave_1: entered promiscuous mode [ 264.551529][ T5094] Bluetooth: hci4: command tx timeout [ 264.612744][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 264.715710][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.728840][ T5094] Bluetooth: hci3: command tx timeout [ 264.774918][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.838404][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 265.125096][ T5808] team0: Port device team_slave_0 added [ 265.133054][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 265.323622][ T5808] team0: Port device team_slave_1 added [ 265.365326][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.377151][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.385859][ T5802] bridge_slave_0: entered allmulticast mode [ 265.395766][ T5802] bridge_slave_0: entered promiscuous mode [ 265.488206][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.495860][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.505421][ T5802] bridge_slave_1: entered allmulticast mode [ 265.515427][ T5802] bridge_slave_1: entered promiscuous mode [ 265.771077][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.778641][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.805245][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.918528][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.926196][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.934233][ T5806] bridge_slave_0: entered allmulticast mode [ 265.945256][ T5806] bridge_slave_0: entered promiscuous mode [ 265.961292][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.968833][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.995559][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.051380][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.140868][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.148676][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.156441][ T5806] bridge_slave_1: entered allmulticast mode [ 266.166621][ T5806] bridge_slave_1: entered promiscuous mode [ 266.196417][ T5094] Bluetooth: hci0: command tx timeout [ 266.221691][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.232138][ T5094] Bluetooth: hci2: command tx timeout [ 266.388247][ T5094] Bluetooth: hci1: command tx timeout [ 266.419871][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.429438][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.437508][ T5814] bridge_slave_0: entered allmulticast mode [ 266.447614][ T5814] bridge_slave_0: entered promiscuous mode [ 266.524724][ T5802] team0: Port device team_slave_0 added [ 266.573071][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.583359][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.593480][ T5814] bridge_slave_1: entered allmulticast mode [ 266.605018][ T5814] bridge_slave_1: entered promiscuous mode [ 266.635411][ T5094] Bluetooth: hci4: command tx timeout [ 266.706000][ T5802] team0: Port device team_slave_1 added [ 266.725489][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.787887][ T5094] Bluetooth: hci3: command tx timeout [ 266.826803][ T5808] hsr_slave_0: entered promiscuous mode [ 266.837110][ T5808] hsr_slave_1: entered promiscuous mode [ 266.896504][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.906574][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.914672][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.924916][ T5812] bridge_slave_0: entered allmulticast mode [ 266.934765][ T5812] bridge_slave_0: entered promiscuous mode [ 267.074289][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.081982][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.089884][ T5812] bridge_slave_1: entered allmulticast mode [ 267.099754][ T5812] bridge_slave_1: entered promiscuous mode [ 267.153285][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.160605][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.188356][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.212274][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.338078][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.345310][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.371922][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.415703][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.464370][ T5806] team0: Port device team_slave_0 added [ 267.523172][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.617110][ T5806] team0: Port device team_slave_1 added [ 267.691868][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.959433][ T5802] hsr_slave_0: entered promiscuous mode [ 267.969562][ T5802] hsr_slave_1: entered promiscuous mode [ 267.977738][ T5802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.985581][ T5802] Cannot create hsr debugfs directory [ 268.000582][ T5814] team0: Port device team_slave_0 added [ 268.012027][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.019679][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.046246][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.079442][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.086680][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.113529][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.133946][ T5812] team0: Port device team_slave_0 added [ 268.156000][ T5814] team0: Port device team_slave_1 added [ 268.228590][ T5094] Bluetooth: hci0: command tx timeout [ 268.247920][ T5812] team0: Port device team_slave_1 added [ 268.307835][ T5094] Bluetooth: hci2: command tx timeout [ 268.476070][ T5094] Bluetooth: hci1: command tx timeout [ 268.642886][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.651053][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.677826][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.707615][ T5094] Bluetooth: hci4: command tx timeout [ 268.779700][ T5806] hsr_slave_0: entered promiscuous mode [ 268.793244][ T5806] hsr_slave_1: entered promiscuous mode [ 268.802255][ T5806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.810357][ T5806] Cannot create hsr debugfs directory [ 268.821413][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.829165][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.855989][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.868759][ T5094] Bluetooth: hci3: command tx timeout [ 268.916538][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.924086][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.950987][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.008141][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.015347][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.042123][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.621973][ T5814] hsr_slave_0: entered promiscuous mode [ 269.632518][ T5814] hsr_slave_1: entered promiscuous mode [ 269.641538][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.649555][ T5814] Cannot create hsr debugfs directory [ 269.669540][ T5812] hsr_slave_0: entered promiscuous mode [ 269.679336][ T5812] hsr_slave_1: entered promiscuous mode [ 269.687730][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.695563][ T5812] Cannot create hsr debugfs directory [ 269.804586][ T5808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 269.868815][ T5808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 269.986725][ T5808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 270.139829][ T5808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 270.307695][ T5094] Bluetooth: hci0: command tx timeout [ 270.351348][ T5802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 270.380171][ T5802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 270.391056][ T5094] Bluetooth: hci2: command tx timeout [ 270.578481][ T5094] Bluetooth: hci1: command tx timeout [ 270.585848][ T5802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 270.710093][ T5802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 270.799090][ T5094] Bluetooth: hci4: command tx timeout [ 270.951511][ T5094] Bluetooth: hci3: command tx timeout [ 271.149552][ T5806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 271.256127][ T5806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 271.336941][ T5806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 271.399405][ T5806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 271.445721][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 271.548693][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 271.601166][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 271.668853][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 271.875734][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 271.975475][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.010026][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.100673][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.150185][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.422830][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.493933][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.605626][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.613336][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.729605][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.737258][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.799389][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.925806][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.001742][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.009512][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.138863][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.146502][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.368489][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.468111][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.535897][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.543785][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.662521][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.670349][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.850643][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.898727][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.004065][ T3989] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.011818][ T3989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.112261][ T5806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.159249][ T3989] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.166898][ T3989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.232903][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.384317][ T3989] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.392104][ T3989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.412477][ T3989] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.420226][ T3989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.779144][ T5812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 274.791278][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.862521][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.902666][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.973639][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.427306][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.582469][ T5802] veth0_vlan: entered promiscuous mode [ 276.664423][ T5808] veth0_vlan: entered promiscuous mode [ 276.779116][ T5802] veth1_vlan: entered promiscuous mode [ 276.815025][ T5808] veth1_vlan: entered promiscuous mode [ 276.905190][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.117020][ T5806] veth0_vlan: entered promiscuous mode [ 277.268193][ T5806] veth1_vlan: entered promiscuous mode [ 277.339391][ T5802] veth0_macvtap: entered promiscuous mode [ 277.423626][ T5802] veth1_macvtap: entered promiscuous mode [ 277.545916][ T5808] veth0_macvtap: entered promiscuous mode [ 277.589962][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.607929][ T5812] veth0_vlan: entered promiscuous mode [ 277.649655][ T5808] veth1_macvtap: entered promiscuous mode [ 277.696412][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.778466][ T5812] veth1_vlan: entered promiscuous mode [ 277.801533][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.921913][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.936267][ T5806] veth0_macvtap: entered promiscuous mode [ 277.988955][ T5802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.998274][ T5802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.010137][ T5802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.019418][ T5802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.069175][ T5806] veth1_macvtap: entered promiscuous mode [ 278.103223][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.219020][ T5808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.228407][ T5808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.237685][ T5808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.246768][ T5808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.311928][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.339586][ T5812] veth0_macvtap: entered promiscuous mode [ 278.416813][ T5812] veth1_macvtap: entered promiscuous mode [ 278.442980][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.573047][ T5806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.583836][ T5806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.593189][ T5806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.602457][ T5806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.702691][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.780319][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.936548][ T5812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.946089][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.955523][ T5812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.964741][ T5812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.915959][ T5814] veth0_vlan: entered promiscuous mode [ 281.035133][ T5814] veth1_vlan: entered promiscuous mode [ 281.425748][ T5814] veth0_macvtap: entered promiscuous mode [ 281.547463][ T5814] veth1_macvtap: entered promiscuous mode [ 281.772194][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.870181][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.946191][ T5814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.957141][ T5814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.968023][ T5814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.977110][ T5814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.054717][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.064408][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.246795][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.255499][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.341503][ T3814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.351099][ T3814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.361693][ T3989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.370849][ T3989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.745224][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.753612][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.759227][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.769310][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.847640][ T5802] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 287.168980][ T3814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.177104][ T3814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.443059][ T3814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.452325][ T3814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.427062][ T5992] netlink: 'syz.3.4': attribute type 8 has an invalid length. [ 288.612335][ T5995] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 289.178772][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 289.199380][ T6002] netlink: 'syz.0.9': attribute type 1 has an invalid length. [ 289.207165][ T6002] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9'. [ 290.094348][ T30] audit: type=1326 audit(1750633175.972:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.2.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964dd8e929 code=0x7ffc0000 [ 290.266606][ T30] audit: type=1326 audit(1750633176.012:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.2.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f964dd8e929 code=0x7ffc0000 [ 290.289364][ T30] audit: type=1326 audit(1750633176.022:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.2.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964dd8e929 code=0x7ffc0000 [ 290.567716][ T3989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.579674][ T3989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.896157][ T3989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.905103][ T3989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.160396][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.167206][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.521951][ T30] audit: type=1400 audit(1750633177.412:5): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6029 comm="syz.3.21" [ 292.347850][ T6038] loop2: detected capacity change from 0 to 1024 [ 292.474377][ T6034] loop0: detected capacity change from 0 to 2048 [ 292.910325][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25'. [ 293.862213][ T6052] netlink: 52 bytes leftover after parsing attributes in process `syz.4.31'. [ 294.874855][ T6066] loop0: detected capacity change from 0 to 256 [ 294.992974][ T6066] exfat: Deprecated parameter 'utf8' [ 295.196512][ T6066] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 295.464671][ T6062] sctp: failed to load transform for md5: -2 [ 295.987769][ T6074] loop1: detected capacity change from 0 to 2048 [ 296.220337][ T6074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.885780][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.366440][ T5859] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 297.600033][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 297.684442][ T5859] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 297.694546][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.703143][ T5859] usb 1-1: Product: syz [ 297.707763][ T5859] usb 1-1: Manufacturer: syz [ 297.712669][ T5859] usb 1-1: SerialNumber: syz [ 297.815981][ T5859] usb 1-1: config 0 descriptor?? [ 298.077967][ T5859] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 298.302779][ T6106] netlink: 60 bytes leftover after parsing attributes in process `syz.4.52'. [ 298.319053][ T6104] netlink: 60 bytes leftover after parsing attributes in process `syz.4.52'. [ 298.495786][ T5859] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 298.585326][ T5859] usb 1-1: USB disconnect, device number 2 [ 298.918621][ T6110] loop3: detected capacity change from 0 to 512 [ 299.085027][ T6115] capability: warning: `syz.1.56' uses deprecated v2 capabilities in a way that may be insecure [ 299.107108][ T6110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 299.122014][ T6110] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.562459][ T6118] loop2: detected capacity change from 0 to 512 [ 299.642122][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 299.800900][ T6118] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.57: casefold flag without casefold feature [ 299.877820][ T6118] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.57: couldn't read orphan inode 15 (err -117) [ 299.980232][ T6118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.679563][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.483609][ T6144] loop1: detected capacity change from 0 to 256 [ 301.561540][ T6144] exfat: Deprecated parameter 'namecase' [ 301.568136][ T6144] exfat: Deprecated parameter 'utf8' [ 301.710580][ T6144] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 302.059435][ T6150] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.70'. [ 302.069501][ T6150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.378007][ T6152] loop2: detected capacity change from 0 to 1024 [ 302.486411][ T6152] EXT4-fs: Ignoring removed orlov option [ 302.582801][ T6152] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 302.741158][ T6152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.991470][ T6152] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 303.609236][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.513122][ T6173] loop0: detected capacity change from 0 to 1024 [ 304.725430][ T6178] loop1: detected capacity change from 0 to 512 [ 304.840170][ T6178] ======================================================= [ 304.840170][ T6178] WARNING: The mand mount option has been deprecated and [ 304.840170][ T6178] and is ignored by this kernel. Remove the mand [ 304.840170][ T6178] option from the mount to silence this warning. [ 304.840170][ T6178] ======================================================= [ 304.875459][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.958152][ T6178] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 304.971737][ T6178] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 305.090285][ T6178] EXT4-fs (loop1): 1 truncate cleaned up [ 305.099007][ T6178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.181941][ T6184] hugetlbfs: Bad value '¢' for mount option 'nr_inodes' [ 305.181941][ T6184] [ 305.303618][ T1151] hfsplus: b-tree write err: -5, ino 4 [ 305.608005][ T6177] loop4: detected capacity change from 0 to 4096 [ 305.801539][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.318118][ T6193] loop1: detected capacity change from 0 to 256 [ 306.380857][ T6193] exfat: Deprecated parameter 'namecase' [ 306.387785][ T6193] exfat: Deprecated parameter 'utf8' [ 306.561533][ T6193] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 306.810957][ T6197] tipc: Started in network mode [ 306.816402][ T6197] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 306.827171][ T6197] tipc: Enabled bearer , priority 10 [ 307.016059][ T6196] loop0: detected capacity change from 0 to 2048 [ 307.292056][ T6202] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.940479][ T5859] tipc: Node number set to 10463914 [ 307.949505][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 308.558030][ T30] audit: type=1326 audit(1750633194.442:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.4.98" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c59f8e929 code=0x0 [ 310.339764][ T5856] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 310.558974][ T6237] loop4: detected capacity change from 0 to 512 [ 310.593421][ T6239] loop1: detected capacity change from 0 to 128 [ 310.603523][ T5856] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 310.613417][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.670600][ T6239] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 310.719394][ T5856] pwc: Logitech/Cisco VT Camera webcam detected. [ 310.750182][ T6237] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.109: dx entry: limit 0 != root limit 125 [ 310.762727][ T6237] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.109: Corrupt directory, running e2fsck is recommended [ 310.859535][ T6237] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 310.883667][ T6239] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.928873][ T6237] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.109: corrupted in-inode xattr: invalid ea_ino [ 311.025975][ T6237] EXT4-fs (loop4): Remounting filesystem read-only [ 311.029566][ T30] audit: type=1800 audit(1750633196.912:7): pid=6239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.110" name="bus" dev="loop1" ino=125 res=0 errno=0 [ 311.038304][ T6237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.084824][ T6233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.096477][ T6233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.204948][ T6237] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.109: dx entry: limit 0 != root limit 125 [ 311.217879][ T6237] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.109: Corrupt directory, running e2fsck is recommended [ 311.337768][ T6245] loop3: detected capacity change from 0 to 1024 [ 311.353326][ T5856] pwc: send_video_command error -71 [ 311.367305][ T5856] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 311.378680][ T5856] Philips webcam 1-1:127.0: probe with driver Philips webcam failed with error -71 [ 311.479650][ T6247] process 'syz.2.113' launched './file0' with NULL argv: empty string added [ 311.510757][ T5856] usb 1-1: USB disconnect, device number 3 [ 311.526429][ T6245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.846084][ T5814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.427521][ T6254] loop4: detected capacity change from 0 to 256 [ 313.680406][ T6245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 313.688419][ T6245] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 313.700522][ T6267] tipc: Enabled bearer , priority 0 [ 313.708788][ T30] audit: type=1326 audit(1750633199.572:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59f8e929 code=0x7ffc0000 [ 313.897868][ T30] audit: type=1326 audit(1750633199.652:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59f8e929 code=0x7ffc0000 [ 313.925844][ T30] audit: type=1326 audit(1750633199.672:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8c59f8e929 code=0x7ffc0000 [ 313.950129][ T30] audit: type=1326 audit(1750633199.672:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59f8e929 code=0x7ffc0000 [ 313.973013][ T30] audit: type=1326 audit(1750633199.672:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59f8e929 code=0x7ffc0000 [ 314.321725][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.895042][ T6278] loop0: detected capacity change from 0 to 512 [ 315.016371][ T6282] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 315.085540][ T6278] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 315.094004][ T6278] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842e018, mo2=0002] [ 315.130720][ T6278] System zones: 0-1, 15-15, 18-18, 34-34 [ 315.196269][ T6278] EXT4-fs (loop0): orphan cleanup on readonly fs [ 315.206142][ T6278] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #16: comm syz.0.124: casefold flag without casefold feature [ 315.226133][ T6278] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.124: couldn't read orphan inode 16 (err -117) [ 315.311505][ T6278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.528242][ T6278] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 315.536572][ T6278] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842e018, mo2=0002] [ 315.649858][ T6289] loop3: detected capacity change from 0 to 64 [ 315.998417][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.054128][ T6286] loop1: detected capacity change from 0 to 4096 [ 316.160011][ T6286] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 316.450684][ T6293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.131'. [ 316.650912][ T6295] loop2: detected capacity change from 0 to 1024 [ 316.943410][ T5154] udevd[5154]: worker [6263] terminated by signal 33 (Unknown signal 33) [ 317.041788][ T5154] udevd[5154]: worker [6263] failed while handling '/devices/virtual/block/loop2' [ 317.105696][ T5154] udevd[5154]: worker [5969] terminated by signal 33 (Unknown signal 33) [ 317.169882][ T5154] udevd[5154]: worker [5969] failed while handling '/devices/virtual/block/loop1' [ 318.214563][ T6312] netlink: 'syz.4.139': attribute type 3 has an invalid length. [ 318.578582][ T6316] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 318.585481][ T6316] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 318.593874][ T6316] vhci_hcd vhci_hcd.0: Device attached [ 318.640246][ T6303] loop0: detected capacity change from 0 to 8192 [ 318.777516][ T6303] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 318.887747][ T5859] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 318.957722][ T5856] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 319.174302][ T5856] usb 2-1: config 0 has no interfaces? [ 319.180444][ T5856] usb 2-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 319.190098][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.329582][ T5856] usb 2-1: config 0 descriptor?? [ 319.623212][ T5856] usb 2-1: USB disconnect, device number 2 [ 319.636123][ T6317] vhci_hcd: connection closed [ 319.661991][ T3989] vhci_hcd: stop threads [ 319.671901][ T3989] vhci_hcd: release socket [ 319.676661][ T3989] vhci_hcd: disconnect device [ 319.704979][ T5859] vhci_hcd: vhci_device speed not set [ 321.312873][ T30] audit: type=1326 audit(1750633207.163:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336698e929 code=0x7ffc0000 [ 321.450747][ T6339] loop2: detected capacity change from 0 to 32768 [ 321.461747][ T6339] XFS (loop2): invalid log iosize: -1 [not 12-30] [ 321.466694][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 321.478061][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 321.513447][ T30] audit: type=1326 audit(1750633207.263:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f336698e929 code=0x7ffc0000 [ 321.537162][ T30] audit: type=1326 audit(1750633207.263:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336698e929 code=0x7ffc0000 [ 321.560370][ T30] audit: type=1326 audit(1750633207.263:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336698e929 code=0x7ffc0000 [ 321.585203][ T30] audit: type=1326 audit(1750633207.283:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f336698e929 code=0x7ffc0000 [ 321.613185][ T30] audit: type=1326 audit(1750633207.303:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336698e929 code=0x7ffc0000 [ 321.637766][ T30] audit: type=1326 audit(1750633207.303:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336698e929 code=0x7ffc0000 [ 322.140655][ T6349] loop4: detected capacity change from 0 to 1024 [ 322.836507][ T6359] loop3: detected capacity change from 0 to 128 [ 322.855378][ T1151] hfsplus: b-tree write err: -5, ino 4 [ 322.880241][ T6359] ufs: Unknown parameter '0xffffffffffffffff' [ 323.089966][ T6359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.840545][ T6372] sp0: Synchronizing with TNC [ 323.949018][ T6374] sp0: Found TNC [ 324.112406][ T6378] loop3: detected capacity change from 0 to 256 [ 324.638526][ T6378] FAT-fs (loop3): Directory bread(block 64) failed [ 324.645436][ T6378] FAT-fs (loop3): Directory bread(block 65) failed [ 324.652735][ T6378] FAT-fs (loop3): Directory bread(block 66) failed [ 324.660977][ T6378] FAT-fs (loop3): Directory bread(block 67) failed [ 324.669062][ T6378] FAT-fs (loop3): Directory bread(block 68) failed [ 324.675908][ T6378] FAT-fs (loop3): Directory bread(block 69) failed [ 324.689421][ T6378] FAT-fs (loop3): Directory bread(block 70) failed [ 324.696260][ T6378] FAT-fs (loop3): Directory bread(block 71) failed [ 324.705720][ T6378] FAT-fs (loop3): Directory bread(block 72) failed [ 324.712915][ T6378] FAT-fs (loop3): Directory bread(block 73) failed [ 327.255511][ T6415] loop3: detected capacity change from 0 to 16 [ 327.369484][ T6415] erofs (device loop3): mounted with root inode @ nid 36. [ 327.524896][ T6415] erofs (device loop3): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 327.560231][ T5856] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 327.764916][ T5856] usb 5-1: Using ep0 maxpacket: 8 [ 327.808865][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.819284][ T5856] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 327.828928][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.962424][ T5856] usb 5-1: config 0 descriptor?? [ 328.473117][ T5856] belkin 0003:050D:3201.0001: unknown main item tag 0x0 [ 328.484475][ T5856] belkin 0003:050D:3201.0001: unknown main item tag 0x0 [ 328.492048][ T5856] belkin 0003:050D:3201.0001: unknown main item tag 0x0 [ 328.499670][ T5856] belkin 0003:050D:3201.0001: unknown main item tag 0x0 [ 328.507062][ T5856] belkin 0003:050D:3201.0001: unknown main item tag 0x0 [ 328.931561][ T5856] belkin 0003:050D:3201.0001: hiddev0,hidraw0: USB HID vff.fb Device [HID 050d:3201] on usb-dummy_hcd.4-1/input0 [ 329.042430][ T6423] loop2: detected capacity change from 0 to 2048 [ 329.210834][ T5856] usb 5-1: USB disconnect, device number 2 [ 329.312294][ T6427] loop1: detected capacity change from 0 to 512 [ 329.361778][ T6423] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 329.613103][ T6424] loop3: detected capacity change from 0 to 40427 [ 329.665819][ T6427] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.181: casefold flag without casefold feature [ 329.818101][ T6427] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.181: couldn't read orphan inode 15 (err -117) [ 329.980929][ T6427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.217212][ T6332] udevd[6332]: incorrect nilfs2 checksum on /dev/loop2 [ 331.263011][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.948711][ T6441] loop3: detected capacity change from 0 to 32768 [ 331.968495][ T6441] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.186 (6441) [ 331.992226][ T6441] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 332.003787][ T6441] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 332.013274][ T6441] BTRFS info (device loop3): using free-space-tree [ 332.584490][ T35] BTRFS warning (device loop3): checksum verify failed on logical 5292032 mirror 1 wanted 0xe145e4ee found 0x4b57c26e level 0 [ 332.599271][ T6441] BTRFS warning (device loop3): failed to read root (objectid=9): -5 [ 332.695444][ T6437] fido_id[6437]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 333.145946][ T6460] loop4: detected capacity change from 0 to 32768 [ 333.160961][ T6441] BTRFS error (device loop3): open_ctree failed: -5 [ 333.406717][ T6460] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=xxhash,data_checksum=none,compression=lz4,str_hash=crc64,norecovery,reconstruct_alloc [ 333.406871][ T6460] allowing incompatible features above 0.0: (unknown version) [ 333.406967][ T6460] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 333.448257][ T6460] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 333.457631][ T6460] bcachefs (loop4): superblock marked clean but clean section not present, fixing [ 333.467716][ T6460] bcachefs (loop4): error in recovery: invalid_sb_cleanemergency read only at seq 0 [ 333.482966][ T6460] bcachefs (loop4): bch2_fs_start(): error starting filesystem invalid_sb_clean [ 333.494092][ T6460] bcachefs (loop4): shutting down [ 333.523929][ T6460] bcachefs (loop4): shutdown complete [ 334.235456][ T6476] loop0: detected capacity change from 0 to 512 [ 334.288841][ T6476] EXT4-fs: Ignoring removed bh option [ 334.338167][ T6476] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 334.401988][ T5859] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 334.468733][ T6476] EXT4-fs (loop0): 1 truncate cleaned up [ 334.478037][ T6476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.514990][ T6460] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 334.673193][ T5859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.684002][ T5859] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 334.693653][ T5859] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 334.703249][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.800095][ T6476] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 335.001656][ T5859] usb 4-1: config 0 descriptor?? [ 335.078317][ T5859] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 335.085363][ T5859] dvb-usb: bulk message failed: -22 (3/0) [ 335.257817][ T5859] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 335.284964][ T6474] dvb-usb: bulk message failed: -22 (2/0) [ 335.297917][ T5859] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 335.305416][ T5859] usb 4-1: media controller created [ 335.415093][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 335.469487][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.590905][ T6488] loop2: detected capacity change from 0 to 512 [ 335.643879][ T5859] dvb-usb: bulk message failed: -22 (6/0) [ 335.651215][ T5859] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 335.773704][ T5859] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 335.900799][ T5859] dvb-usb: schedule remote query interval to 150 msecs. [ 335.918746][ T5859] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 336.078929][ T38] dvb-usb: bulk message failed: -22 (1/0) [ 336.085695][ T38] dvb-usb: error while querying for an remote control event. [ 336.108094][ T5859] usb 4-1: USB disconnect, device number 2 [ 336.365614][ T5859] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 336.499495][ T6488] EXT4-fs (loop2): 1 orphan inode deleted [ 336.508484][ T6488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.523186][ T3586] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 336.534162][ T3586] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:17: Failed to release dquot type 1 [ 336.616330][ T6488] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.024453][ T6494] syz.1.198 (6494) used greatest stack depth: 4040 bytes left [ 337.884386][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.219540][ T6512] loop3: detected capacity change from 0 to 1024 [ 338.889054][ T3586] hfsplus: b-tree write err: -5, ino 4 [ 339.646474][ T6519] loop2: detected capacity change from 0 to 4096 [ 339.839265][ T6519] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 339.848763][ T6532] loop3: detected capacity change from 0 to 256 [ 339.888417][ T6532] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 339.900071][ T6532] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 340.171715][ T6532] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 340.404547][ T6519] ntfs3(loop2): Failed to load $Extend (-22). [ 340.411392][ T6519] ntfs3(loop2): Failed to initialize $Extend. [ 341.736259][ T6549] loop0: detected capacity change from 0 to 1024 [ 341.792385][ T6549] EXT4-fs: Ignoring removed mblk_io_submit option [ 341.858184][ T6549] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 341.952079][ T6549] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 342.063992][ T6549] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.217: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 342.188777][ T6549] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.217: couldn't read orphan inode 11 (err -117) [ 342.322342][ T6549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.577299][ T6549] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.217: Invalid block bitmap block 0 in block_group 0 [ 342.724195][ T6561] loop3: detected capacity change from 0 to 512 [ 342.756148][ T6549] Quota error (device loop0): write_blk: dquota write failed [ 342.765988][ T6549] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 342.776748][ T6549] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.217: Failed to acquire dquot type 0 [ 342.888419][ T6561] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 343.300833][ T6561] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 343.516643][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.529232][ T6559] loop2: detected capacity change from 0 to 4096 [ 343.605143][ T1151] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 343.620648][ T1151] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 344.345898][ T6571] loop4: detected capacity change from 0 to 764 [ 344.620876][ T6571] rock: directory entry would overflow storage [ 344.627899][ T6571] rock: sig=0x4f50, size=4, remaining=3 [ 344.633742][ T6571] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 345.083500][ T30] audit: type=1326 audit(1750633230.963:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92618e929 code=0x7ffc0000 [ 345.234145][ T30] audit: type=1326 audit(1750633231.043:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92618e929 code=0x7ffc0000 [ 345.262428][ T30] audit: type=1326 audit(1750633231.123:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7ff92618e929 code=0x7ffc0000 [ 345.287084][ T30] audit: type=1326 audit(1750633231.123:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92618e929 code=0x7ffc0000 [ 345.619719][ T30] audit: type=1326 audit(1750633231.203:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92618e929 code=0x7ffc0000 [ 345.642589][ T30] audit: type=1326 audit(1750633231.233:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7ff92618e929 code=0x7ffc0000 [ 345.668814][ T30] audit: type=1326 audit(1750633231.233:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92618e929 code=0x7ffc0000 [ 346.401528][ T6594] loop0: detected capacity change from 0 to 1024 [ 347.090113][ T3554] hfsplus: b-tree write err: -5, ino 4 [ 347.654990][ T6614] warning: `syz.0.239' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 348.013163][ T6616] loop1: detected capacity change from 0 to 256 [ 348.140309][ T6616] exfat: Deprecated parameter 'namecase' [ 348.146737][ T6616] exfat: Deprecated parameter 'namecase' [ 348.153071][ T6616] exfat: Deprecated parameter 'utf8' [ 348.250444][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.243'. [ 348.446066][ T6616] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012366, chksum : 0xd06b6363, utbl_chksum : 0xe619d30d) [ 349.398653][ T6632] loop6: detected capacity change from 0 to 524287487 [ 349.489302][ T6632] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.497915][ T6632] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.506152][ T6632] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.514650][ T6632] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.523225][ T6632] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.532530][ T6632] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.541179][ T6632] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.549650][ T6632] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.568982][ T6632] ldm_validate_partition_table(): Disk read failed. [ 349.575973][ T6632] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.592005][ T6632] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.600651][ T6632] Dev loop6: unable to read RDB block 0 [ 349.607090][ T6632] loop6: unable to read partition table [ 349.651005][ T6632] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 349.801318][ T6638] smc: net device bond0 applied user defined pnetid SYZ0 [ 350.944660][ T6640] loop4: detected capacity change from 0 to 32768 [ 351.111094][ T6640] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=xxhash,data_checksum=none,compression=lz4,str_hash=crc64,norecovery,reconstruct_alloc [ 351.111242][ T6640] allowing incompatible features above 0.0: (unknown version) [ 351.111340][ T6640] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 351.152685][ T6640] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 351.163319][ T6640] bcachefs (loop4): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: no devices in entry free: 0/0 [], fixing [ 351.181835][ T6640] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 351.196218][ T6640] bcachefs (loop4): Version upgrade from 1.19: autofix_errors to 1.7: mi_btree_bitmap incomplete [ 351.196218][ T6640] Doing compatible version upgrade from 1.19: autofix_errors to 1.28: inode_has_case_insensitive [ 351.196218][ T6640] running recovery passes: check_extents_to_backpointers,check_inodes [ 351.228562][ T6640] bcachefs (loop4): dropping and reconstructing all alloc info [ 351.260470][ T6640] bcachefs (loop4): btree node read error at btree extents level 0/0 [ 351.260582][ T6640] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 351.260708][ T6640] loop4 node offset 0/16 bset u64s 0: invalid bkey format: incorrect key_u64s: got 0, should be 3 [ 351.260810][ T6640] u64s 0 fields 64:0, 64:0, 32:0, 0:0, 0:0, 0:0 [ 351.260897][ T6640] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 351.261000][ T6640] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 351.261096][ T6640] ret btree_node_read_validate_error [ 351.335415][ T6640] bcachefs (loop4): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 351.357940][ T6651] loop1: detected capacity change from 0 to 256 [ 351.361661][ T6640] bcachefs (loop4): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 351.383067][ T6640] bcachefs (loop4): btree node read error at btree xattrs level 0/0 [ 351.383175][ T6640] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 351.383287][ T6640] loop4 node offset 0/16: got wrong btree node: got [ 351.383369][ T6640] btree=xattrs level=0 seq ded0abe32 1 [ 351.383445][ T6640] min: POS_MIN [ 351.383509][ T6640] max: SPOS_MAX [ 351.383576][ T6640] ret btree_node_read_validate_error [ 351.438414][ T6640] bcachefs (loop4): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 351.462243][ T6640] bcachefs (loop4): btree node read error at btree snapshots level 0/0 [ 351.462351][ T6640] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 351.462464][ T6640] loop4 node offset 0/16: incorrect min_key: got 0:0:1023410176 should be POS_MIN [ 351.462584][ T6640] flagging btree snapshots lost data [ 351.462670][ T6640] running recovery pass reconstruct_snapshots (21), currently at recovery_pass_empty (0) [ 351.462767][ T6640] ret btree_node_read_validate_error [ 351.524437][ T6640] bcachefs (loop4): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 351.543922][ T6640] bcachefs (loop4): check_topology... [ 351.544394][ T6640] bcachefs (loop4): btree root extents unreadable, must recover from scan [ 351.559775][ T6640] bcachefs (loop4): no nodes found for btree extents, continuing [ 351.569077][ T6640] bcachefs (loop4): btree root dirents unreadable, must recover from scan [ 351.578586][ T6640] bcachefs (loop4): no nodes found for btree dirents, continuing [ 351.587114][ T6640] bcachefs (loop4): btree root xattrs unreadable, must recover from scan [ 351.596700][ T6640] bcachefs (loop4): no nodes found for btree xattrs, continuing [ 351.610687][ T6640] bcachefs (loop4): btree root snapshots unreadable, must recover from scan [ 351.621722][ T6640] bcachefs (loop4): no nodes found for btree snapshots, continuing [ 351.634816][ T6640] done [ 351.638009][ T6640] bcachefs (loop4): accounting_read... done [ 351.652049][ T6640] bcachefs (loop4): alloc_read... done [ 351.660664][ T6640] bcachefs (loop4): snapshots_read... done [ 351.669884][ T6640] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 351.682050][ T6640] bcachefs (loop4): done starting filesystem [ 351.957696][ T5814] bcachefs (loop4): shutting down [ 352.046832][ T6655] loop3: detected capacity change from 0 to 128 [ 352.180119][ T5814] bcachefs (loop4): shutdown complete [ 352.503245][ T6660] loop2: detected capacity change from 0 to 512 [ 352.605890][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.613539][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.682936][ T6663] loop1: detected capacity change from 0 to 22 [ 352.712513][ T6660] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 352.784503][ T6663] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 352.901310][ T6660] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.259: iget: bogus i_mode (5) [ 352.938608][ T6660] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.259: couldn't read orphan inode 15 (err -117) [ 352.969429][ T6660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.982470][ T6660] ext2 filesystem being mounted at /54/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.461197][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.664439][ T6691] loop2: detected capacity change from 0 to 32768 [ 355.716951][ T6691] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section journal_seq_blacklist: entry 0 start >= end (73183498273292547 >= 0) [ 355.716951][ T6691] journal_seq_blacklist (size 24): [ 355.716951][ T6691] 73183498273292547-0 [ 355.716951][ T6691] [ 355.745741][ T6691] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal_seq_blacklist [ 357.373605][ T6715] loop2: detected capacity change from 0 to 164 [ 359.909985][ T6744] random: crng reseeded on system resumption [ 363.185888][ T6787] loop4: detected capacity change from 0 to 1024 [ 364.089141][ T6794] binder: 6793:6794 ioctl 9362 0 returned -22 [ 364.144392][ T6795] binder: 6793:6795 ioctl c0046209 200000000000000 returned -22 [ 366.130132][ T6816] loop2: detected capacity change from 0 to 2048 [ 366.158620][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 366.319383][ T6816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.950031][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.905826][ T6839] loop4: detected capacity change from 0 to 64 [ 369.222869][ T6855] sp0: Synchronizing with TNC [ 369.369381][ T6857] netlink: 132 bytes leftover after parsing attributes in process `syz.3.336'. [ 369.510129][ T6859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.337'. [ 369.526312][ T6859] netlink: 36 bytes leftover after parsing attributes in process `syz.1.337'. [ 371.864948][ T6891] loop4: detected capacity change from 0 to 1024 [ 372.000883][ T6891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.839622][ T5859] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 373.057785][ T5859] usb 1-1: Using ep0 maxpacket: 16 [ 373.084492][ T5859] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.095279][ T5859] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.169234][ T5859] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 373.179058][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.187999][ T5859] usb 1-1: Product: syz [ 373.192454][ T5859] usb 1-1: Manufacturer: syz [ 373.197960][ T5859] usb 1-1: SerialNumber: syz [ 373.331934][ T5814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.857672][ T5859] usb 1-1: cannot find UAC_HEADER [ 374.052092][ T5859] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 374.208941][ T5859] usb 1-1: USB disconnect, device number 4 [ 374.779794][ T6332] udevd[6332]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.901391][ T6921] loop3: detected capacity change from 0 to 512 [ 374.980305][ T6921] EXT4-fs: Ignoring removed nobh option [ 375.120958][ T6921] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 375.230650][ T6921] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 375.239798][ T6921] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #13: comm syz.3.365: casefold flag without casefold feature [ 375.378510][ T6921] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.365: couldn't read orphan inode 13 (err -117) [ 375.490779][ T6921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.562171][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.582716][ T6934] loop1: detected capacity change from 0 to 164 [ 376.661982][ T6928] loop0: detected capacity change from 0 to 40427 [ 376.676609][ T6928] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 376.684467][ T6928] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 376.700394][ T6928] F2FS-fs (loop0): heap/no_heap options were deprecated [ 376.713552][ T6928] F2FS-fs (loop0): build fault injection rate: 17008 [ 376.720806][ T6928] F2FS-fs (loop0): heap/no_heap options were deprecated [ 376.728803][ T6928] F2FS-fs (loop0): build fault injection type: 0x1 [ 376.779348][ T6928] F2FS-fs (loop0): invalid crc value [ 376.788217][ T6934] Unable to read rock-ridge attributes [ 377.036143][ T6934] Unable to read rock-ridge attributes [ 377.122054][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 377.228320][ T6941] loop2: detected capacity change from 0 to 8 [ 377.235959][ T6928] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 377.244322][ T6928] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 377.449580][ T6941] SQUASHFS error: lzo decompression failed, data probably corrupt [ 377.462891][ T6941] SQUASHFS error: Failed to read block 0x91: -5 [ 377.469696][ T6941] SQUASHFS error: Unable to read metadata cache entry [8f] [ 377.477184][ T6941] SQUASHFS error: Unable to read inode 0x11f [ 377.674967][ T6941] /dev/loop0: Can't open blockdev [ 379.336899][ T6963] loop3: detected capacity change from 0 to 256 [ 380.138561][ T6973] tmpfs: Bad value for 'mpol' [ 380.839011][ T6981] overlayfs: missing 'workdir' [ 383.417940][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 383.418023][ T30] audit: type=1800 audit(1750633269.303:28): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.399" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 384.367080][ T38] IPVS: starting estimator thread 0... [ 384.486885][ T7026] IPVS: using max 192 ests per chain, 9600 per kthread [ 384.697670][ T5856] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 384.908878][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.919303][ T5856] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 384.932835][ T5856] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 384.942425][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.201212][ T5856] usb 5-1: config 0 descriptor?? [ 385.348246][ T7009] Bluetooth: hci2: command 0x0406 tx timeout [ 385.355756][ T7008] Bluetooth: hci1: command 0x0406 tx timeout [ 385.364222][ T7009] Bluetooth: hci0: command 0x0406 tx timeout [ 385.366974][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 385.371011][ T7008] Bluetooth: hci3: command 0x0406 tx timeout [ 385.732882][ T5856] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 385.910521][ T5856] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device [ 385.921772][ T5856] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse [ 385.968754][ T5856] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -71 [ 386.070944][ T5856] usb 5-1: USB disconnect, device number 3 [ 386.775243][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 386.804113][ T7053] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 386.989278][ T7053] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 387.113711][ T7055] Bluetooth: MGMT ver 1.23 [ 387.202564][ T7050] fido_id[7050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 387.346066][ T7061] nbd: couldn't find device at index 587202560 [ 389.815466][ T7093] loop2: detected capacity change from 0 to 64 [ 393.785405][ T7129] loop0: detected capacity change from 0 to 32768 [ 393.814905][ T7129] (syz.0.445,7129,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len is smaller than minimal - offset=56, inode=262212, rec_len=0, name_len=18 [ 393.833240][ T7129] (syz.0.445,7129,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 393.842472][ T7129] (syz.0.445,7129,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 393.842674][ T7129] (syz.0.445,7129,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 393.864338][ T7129] (syz.0.445,7129,0):ocfs2_initialize_super:2198 ERROR: status = -22 [ 393.873511][ T7129] (syz.0.445,7129,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 394.239709][ T7137] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 394.971136][ T7144] netlink: 96 bytes leftover after parsing attributes in process `syz.2.452'. [ 395.677514][ T7155] loop3: detected capacity change from 0 to 64 [ 395.843590][ T30] audit: type=1800 audit(1750633281.723:29): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.458" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 396.272060][ T7164] Zero length message leads to an empty skb [ 396.651042][ T7171] netlink: 60 bytes leftover after parsing attributes in process `syz.3.463'. [ 396.668369][ T7169] netlink: 60 bytes leftover after parsing attributes in process `syz.3.463'. [ 396.856998][ T30] audit: type=1326 audit(1750633282.743:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59f8e929 code=0x7ffc0000 [ 396.885634][ T30] audit: type=1326 audit(1750633282.743:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59f8e929 code=0x7ffc0000 [ 396.913804][ T30] audit: type=1326 audit(1750633282.803:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8c59f8e929 code=0x7ffc0000 [ 396.936337][ T30] audit: type=1326 audit(1750633282.803:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59f8e929 code=0x7ffc0000 [ 396.959518][ T30] audit: type=1326 audit(1750633282.803:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59f8e929 code=0x7ffc0000 [ 396.987111][ T30] audit: type=1326 audit(1750633282.803:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f8c59f8e929 code=0x7ffc0000 [ 397.011684][ T30] audit: type=1326 audit(1750633282.803:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59f8e929 code=0x7ffc0000 [ 397.117906][ T5859] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 397.398045][ T5859] usb 1-1: Using ep0 maxpacket: 16 [ 397.432281][ T5859] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.442946][ T5859] usb 1-1: config 0 interface 0 altsetting 203 endpoint 0x81 has an invalid bInterval 27, changing to 8 [ 397.454785][ T5859] usb 1-1: config 0 interface 0 altsetting 203 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.465689][ T5859] usb 1-1: config 0 interface 0 has no altsetting 0 [ 397.472934][ T5859] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 397.486027][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.571981][ T5859] usb 1-1: config 0 descriptor?? [ 397.910563][ T5807] Bluetooth: hci4: command 0x0406 tx timeout [ 397.976227][ T7179] loop1: detected capacity change from 0 to 1024 [ 398.075759][ T5859] microsoft 0003:045E:00F9.0003: item fetching failed at offset 0/3 [ 398.126229][ T5859] microsoft 0003:045E:00F9.0003: parse failed [ 398.134023][ T5859] microsoft 0003:045E:00F9.0003: probe with driver microsoft failed with error -22 [ 398.299507][ T5859] usb 1-1: USB disconnect, device number 5 [ 398.768828][ T7187] 9p: Unknown Cache mode or invalid value f [ 398.979566][ T749] ===================================================== [ 398.986976][ T749] BUG: KMSAN: uninit-value in hfsplus_cat_case_cmp_key+0xd9/0x190 [ 398.996216][ T749] hfsplus_cat_case_cmp_key+0xd9/0x190 [ 399.002115][ T749] hfs_find_rec_by_key+0xab/0x240 [ 399.007595][ T749] __hfsplus_brec_find+0x274/0x840 [ 399.017644][ T749] hfsplus_brec_find+0x4df/0x9f0 [ 399.022903][ T749] hfsplus_brec_read+0x46/0x1f0 [ 399.029841][ T749] hfsplus_find_cat+0xb5/0x4f0 [ 399.034903][ T749] hfsplus_cat_write_inode+0x2ca/0xe20 [ 399.040927][ T749] hfsplus_write_inode+0x178/0x960 [ 399.046301][ T749] __writeback_single_inode+0x88f/0x1190 [ 399.053023][ T749] writeback_sb_inodes+0xaa9/0x1c90 [ 399.058671][ T749] wb_writeback+0x4ce/0xc00 [ 399.063440][ T749] wb_workfn+0x397/0x1910 [ 399.068140][ T749] process_scheduled_works+0xb91/0x1d80 [ 399.073973][ T749] worker_thread+0xedf/0x1590 [ 399.079243][ T749] kthread+0xd5c/0xf00 [ 399.083555][ T749] ret_from_fork+0x1e3/0x310 [ 399.088572][ T749] ret_from_fork_asm+0x1a/0x30 [ 399.093609][ T749] [ 399.096088][ T749] Uninit was created at: [ 399.100807][ T749] __kmalloc_noprof+0x95f/0x1310 [ 399.106065][ T749] hfsplus_find_init+0x90/0x1d0 [ 399.111452][ T749] hfsplus_cat_write_inode+0x1a8/0xe20 [ 399.121584][ T749] hfsplus_write_inode+0x178/0x960 [ 399.126944][ T749] __writeback_single_inode+0x88f/0x1190 [ 399.134577][ T749] writeback_sb_inodes+0xaa9/0x1c90 [ 399.140248][ T749] wb_writeback+0x4ce/0xc00 [ 399.144996][ T749] wb_workfn+0x397/0x1910 [ 399.150222][ T749] process_scheduled_works+0xb91/0x1d80 [ 399.156073][ T749] worker_thread+0xedf/0x1590 [ 399.161250][ T749] kthread+0xd5c/0xf00 [ 399.165543][ T749] ret_from_fork+0x1e3/0x310 [ 399.170563][ T749] ret_from_fork_asm+0x1a/0x30 [ 399.175637][ T749] [ 399.178339][ T749] CPU: 1 UID: 0 PID: 749 Comm: kworker/u8:6 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(undef) [ 399.191016][ T749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 399.201479][ T749] Workqueue: writeback wb_workfn (flush-7:1) [ 399.208021][ T749] ===================================================== [ 399.215134][ T749] Disabling lock debugging due to kernel taint [ 399.225987][ T749] Kernel panic - not syncing: kmsan.panic set ... [ 399.232630][ T749] CPU: 1 UID: 0 PID: 749 Comm: kworker/u8:6 Tainted: G B 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(undef) [ 399.246656][ T749] Tainted: [B]=BAD_PAGE [ 399.250983][ T749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 399.261244][ T749] Workqueue: writeback wb_workfn (flush-7:1) [ 399.267509][ T749] Call Trace: [ 399.270932][ T749] [ 399.274005][ T749] __dump_stack+0x26/0x30 [ 399.278578][ T749] dump_stack_lvl+0x53/0x270 [ 399.283579][ T749] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.289667][ T749] dump_stack+0x1e/0x25 [ 399.294045][ T749] panic+0x4bd/0xd50 [ 399.298229][ T749] kmsan_report+0x31c/0x320 [ 399.302980][ T749] ? __msan_warning+0x1b/0x30 [ 399.307885][ T749] ? hfsplus_cat_case_cmp_key+0xd9/0x190 [ 399.313777][ T749] ? hfs_find_rec_by_key+0xab/0x240 [ 399.319240][ T749] ? __hfsplus_brec_find+0x274/0x840 [ 399.324839][ T749] ? hfsplus_brec_find+0x4df/0x9f0 [ 399.330217][ T749] ? hfsplus_brec_read+0x46/0x1f0 [ 399.335511][ T749] ? hfsplus_find_cat+0xb5/0x4f0 [ 399.340671][ T749] ? hfsplus_cat_write_inode+0x2ca/0xe20 [ 399.346535][ T749] ? hfsplus_write_inode+0x178/0x960 [ 399.352027][ T749] ? __writeback_single_inode+0x88f/0x1190 [ 399.358069][ T749] ? writeback_sb_inodes+0xaa9/0x1c90 [ 399.363669][ T749] ? wb_writeback+0x4ce/0xc00 [ 399.368570][ T749] ? wb_workfn+0x397/0x1910 [ 399.373276][ T749] ? process_scheduled_works+0xb91/0x1d80 [ 399.379249][ T749] ? worker_thread+0xedf/0x1590 [ 399.384346][ T749] ? kthread+0xd5c/0xf00 [ 399.388791][ T749] ? ret_from_fork+0x1e3/0x310 [ 399.393774][ T749] ? ret_from_fork_asm+0x1a/0x30 [ 399.398967][ T749] ? kmsan_get_metadata+0xfb/0x160 [ 399.404337][ T749] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.410404][ T749] ? kmsan_get_metadata+0xfb/0x160 [ 399.415770][ T749] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 399.422464][ T749] ? kmsan_get_metadata+0xfb/0x160 [ 399.427895][ T749] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 399.434423][ T749] ? kmsan_get_metadata+0xfb/0x160 [ 399.439803][ T749] __msan_warning+0x1b/0x30 [ 399.444536][ T749] hfsplus_cat_case_cmp_key+0xd9/0x190 [ 399.450244][ T749] hfs_find_rec_by_key+0xab/0x240 [ 399.455562][ T749] ? __pfx_hfsplus_cat_case_cmp_key+0x10/0x10 [ 399.461882][ T749] __hfsplus_brec_find+0x274/0x840 [ 399.467259][ T749] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 399.473193][ T749] hfsplus_brec_find+0x4df/0x9f0 [ 399.478393][ T749] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 399.484420][ T749] hfsplus_brec_read+0x46/0x1f0 [ 399.489527][ T749] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.495620][ T749] hfsplus_find_cat+0xb5/0x4f0 [ 399.500611][ T749] ? kmsan_get_metadata+0xfb/0x160 [ 399.506041][ T749] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.512118][ T749] ? should_fail_ex+0x45/0x8a0 [ 399.517091][ T749] ? kmsan_get_metadata+0xfb/0x160 [ 399.522442][ T749] ? kmsan_get_metadata+0xfb/0x160 [ 399.527832][ T749] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 399.534441][ T749] ? kmsan_get_metadata+0xfb/0x160 [ 399.539815][ T749] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.545890][ T749] ? kmsan_get_metadata+0xfb/0x160 [ 399.551429][ T749] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 399.558088][ T749] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 399.564395][ T749] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.570471][ T749] ? kmsan_get_metadata+0xfb/0x160 [ 399.575832][ T749] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.581906][ T749] hfsplus_cat_write_inode+0x2ca/0xe20 [ 399.587686][ T749] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 399.594005][ T749] ? _raw_spin_unlock+0x30/0x50 [ 399.599102][ T749] ? kmsan_get_metadata+0xfb/0x160 [ 399.604462][ T749] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 399.610529][ T749] ? kmsan_get_metadata+0xfb/0x160 [ 399.615902][ T749] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 399.622483][ T749] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 399.628817][ T749] ? kmsan_get_metadata+0xfb/0x160 [ 399.634207][ T749] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 399.640814][ T749] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 399.647122][ T749] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.653235][ T749] hfsplus_write_inode+0x178/0x960 [ 399.658561][ T749] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 399.665140][ T749] ? kmsan_get_metadata+0xfb/0x160 [ 399.670531][ T749] ? kmsan_get_metadata+0xfb/0x160 [ 399.675905][ T749] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.682060][ T749] ? __pfx_hfsplus_write_inode+0x10/0x10 [ 399.687911][ T749] ? __pfx_hfsplus_write_inode+0x10/0x10 [ 399.693775][ T749] __writeback_single_inode+0x88f/0x1190 [ 399.699776][ T749] writeback_sb_inodes+0xaa9/0x1c90 [ 399.705350][ T749] wb_writeback+0x4ce/0xc00 [ 399.710095][ T749] ? queue_io+0x411/0x790 [ 399.714661][ T749] wb_workfn+0x397/0x1910 [ 399.719200][ T749] ? kmsan_get_metadata+0xfb/0x160 [ 399.724586][ T749] ? __pfx_wb_workfn+0x10/0x10 [ 399.729585][ T749] process_scheduled_works+0xb91/0x1d80 [ 399.735480][ T749] worker_thread+0xedf/0x1590 [ 399.740462][ T749] kthread+0xd5c/0xf00 [ 399.744740][ T749] ? __pfx_worker_thread+0x10/0x10 [ 399.750139][ T749] ? __pfx_kthread+0x10/0x10 [ 399.754933][ T749] ret_from_fork+0x1e3/0x310 [ 399.759747][ T749] ? __pfx_kthread+0x10/0x10 [ 399.764540][ T749] ret_from_fork_asm+0x1a/0x30 [ 399.769572][ T749] [ 399.773118][ T749] Kernel Offset: disabled [ 399.777541][ T749] Rebooting in 86400 seconds..