last executing test programs: 4.237134288s ago: executing program 1 (id=573): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x80}, 0x100}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) syz_emit_ethernet(0x82, &(0x7f00000002c0)={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x48, 0x3a, 0x1, @empty, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0x3, 0x6, "39afb8", 0xf648, 0x4, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, [@srh={0x4, 0x2, 0x4, 0x1, 0x2, 0xd8, 0x9, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}]}]}}}}}}}, 0x0) 4.129493142s ago: executing program 1 (id=574): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x3}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x4a, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff35a1e107fa5c8d3cbb1fa61229a00ecd207d9e6f2a208bf148e6bc56955cb53300000000"}) 3.200514142s ago: executing program 1 (id=580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_mount_image$xfs(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x2000048, &(0x7f0000000240)={[{@quota}]}, 0x1, 0xb950, &(0x7f000000d2c0)="$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") setxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000100), &(0x7f00000004c0)=ANY=[], 0x3c8, 0x1) 2.691749644s ago: executing program 0 (id=583): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d80000000000000004007d002ae359e2b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107e35a8081587d3dc42a0bc0d0c5e85c355c9cbadd6e8f8014acb52d24b961a3989d5102d540829ad660fdca299e7e74a71ed264d75a3e1dfb8331f1b441972bc5941fa418cfee6139c15eda91b1ecf8887e108b15c4c7505c31efe205c875a7c854aa65bcc2e04ea6739f968547df4ae455ecd6b0566ef52705630df27d81e2a544ecc09f8c73cec559d206644acdc56c717e19f04613456b8d7a386c0a700c032d0165c3b3f5716aa7f24e6fca522f91350793d13ba7f887e7b48cd3e6e41139d0deb8de9aeac59bf750ce0000000000000000000000000f18d233cdc36efdead60d008963851bc819e1b4551b3f13bbf6c18ea0165c66f5261c9ec61f0914c6ffb8506596b61392aa5d906994608b36096a2f5c0f3fef95bf6ddb78c8d07eee5e815c9a2a3d21a054e6fd032be118e9a3f4d016db35b5048e20f1859680e5571822934769e6f9361babb4766dc073d1dabfb220daa1cf4e7206b2b8aa7b55d1396273690ec7a8d36ffbfe2a68a9547758d3ece744be07d320147c0e92e0b63f9b86ec19670ea43b7f596b347d8b9116506356d0279d21f6a0cab3056c27dec074e8dac12c1d99afcd84f82a47a0cb5093c7a221f7fb624e2f6e9eeca4e5050fc3be50bbdc62d41333b4243336a5590e49658a10b5c8624eb2410d68e64f230fdcf4689495c0bf62403c2eaad20d1d8fb185ebefac64aa0eb1d36ccacf61ec28b4ec24dba53b21ed5c5f727cccb0d614884908957138d2c30560e88f128af21ccc9fd64d229f35b2f76d0ee9e25f9e4390a55a8600449774ca116e3ba523c9c5d39abcf09a36127c17fc6194711f20307ead0d5bbbe2aa3f677156b8856411a8045159df771ac3e3d5828e359c24a59d65e92f4112fb6825536751f82e9d55e89853a03c693d418c4d2cccb61c6f60ad304a68d15fc20edaec9af4725f47c8e1724cffb", 0x2fa}, {&(0x7f0000002b40)="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", 0x2af}], 0x2}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000640)="455b1c1ed5900423c15445e625bc121395a1ca64b3dd6f8aeb723872f617d717a26bf00271b580f6822a2c6896c756f9884b052d314f2a0e782a11c793063457ccd878782b6599e2c51e40ed5142e32cf8b07a76201b7644ac62f011223e925d8565cde47b522a9b86be7847318bfeaf58de2c6a1aebf00c39a22ec6de373ec332917b7586bf8298180eb89831e03feae224ca839e8ca7041056cb9ed42abcd994", 0xa1}, {&(0x7f0000000800)="7e24225d7d1bf3f2c2e3350446b32bcc9a579c864b87c0b26e9513f1a964562cd0fb40e07a028a9e4a8509c6183dc2c51a7f307806ce093fad8f167b3f1656081a0f4b15e021952a5e40d65779b924ed3fd175df8673c7544e9e3b11bc621acae054258215e76d7f16569f3436c00fcc7c6c154f87afc22e0ad2a3737a8f6e1cdf815f357d0b10e57e633006dd00e8cc5c66ddb415a93124d45ef1e687b1e29d9fb742d4f8b91f69854f7ba2eaec1b2782a4807fba2fc86bb82f320faa5da21794d4e6b2795f823dd429c33bb5a117ec441e28", 0xd3}, {&(0x7f0000003ac0)="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", 0x43c}], 0x3}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) 2.464628454s ago: executing program 0 (id=584): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x180) write(r2, 0x0, 0x0) 2.225514684s ago: executing program 1 (id=585): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f0000000540)={r3, 0x77, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e58"}, &(0x7f00000000c0)=0x7f) 2.197887985s ago: executing program 0 (id=586): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="80010000100001000000000800000000fc020000000000000000000000000000fe8000000000000000000000000000aa00000000000000040000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000805600000018000000000000000000000000000000000000000000000010000000090000000200000000000000000000000200010002000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048"], 0x180}}, 0x0) 2.005411034s ago: executing program 0 (id=588): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220500000007"], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000140)="ab54976ebca6", 0x6}, {0x0}, {0x0}], 0x3) 1.753847225s ago: executing program 2 (id=593): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) 1.601326791s ago: executing program 2 (id=595): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x40043d14, 0x0) 1.538698984s ago: executing program 2 (id=596): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.175002569s ago: executing program 2 (id=598): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x20) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80, 0x2) write(r0, 0x0, 0x0) 1.025609806s ago: executing program 3 (id=599): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x14}, {}, {0x4}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x24}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x6, 0x1006, &(0x7f0000001b00)=""/4102, 0x40f00, 0x9, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 938.754329ms ago: executing program 3 (id=600): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, 0x0) 923.95235ms ago: executing program 2 (id=601): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x2fa}, {&(0x7f0000002b40)="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", 0x2af}], 0x2}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000640)="455b1c1ed5900423c15445e625bc121395a1ca64b3dd6f8aeb723872f617d717a26bf00271b580f6822a2c6896c756f9884b052d314f2a0e782a11c793063457ccd878782b6599e2c51e40ed5142e32cf8b07a76201b7644ac62f011223e925d8565cde47b522a9b86be7847318bfeaf58de2c6a1aebf00c39a22ec6de373ec332917b7586bf8298180eb89831e03feae224ca839e8ca7041056cb9ed42abcd994", 0xa1}, {&(0x7f0000000800)="7e24225d7d1bf3f2c2e3350446b32bcc9a579c864b87c0b26e9513f1a964562cd0fb40e07a028a9e4a8509c6183dc2c51a7f307806ce093fad8f167b3f1656081a0f4b15e021952a5e40d65779b924ed3fd175df8673c7544e9e3b11bc621acae054258215e76d7f16569f3436c00fcc7c6c154f87afc22e0ad2a3737a8f6e1cdf815f357d0b10e57e633006dd00e8cc5c66ddb415a93124d45ef1e687b1e29d9fb742d4f8b91f69854f7ba2eaec1b2782a4807fba2fc86bb82f320faa5da21794d4e6b2795f823dd429c33bb5a117ec441e28", 0xd3}, {&(0x7f0000003ac0)="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", 0x43c}], 0x3}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) 794.130595ms ago: executing program 2 (id=602): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40040, 0x1f9, 0xf}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r2 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@rdma_map={0x23, 0x114, 0x3, {{0x0}, 0x0, 0x31}}, @rdma_args={0x0, 0x114, 0x1, {{0x3}, {&(0x7f0000000dc0)=""/209}, &(0x7f0000000380), 0x0, 0x0, 0xffff}}], 0x60, 0x4040895}, 0x0) setsockopt$inet_int(r5, 0x0, 0xc, &(0x7f0000000200)=0x3, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0xa) unlink(&(0x7f0000000100)='./file0\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, 0x0, 0x0) sendmsg$inet6(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0xc4) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 677.67658ms ago: executing program 3 (id=603): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) 560.515215ms ago: executing program 3 (id=604): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044182, 0x0) fallocate(r1, 0x11, 0x600, 0x7c000) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, 0x0, 0x0) 516.371197ms ago: executing program 1 (id=605): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x180) write(r2, 0x0, 0x0) 273.583398ms ago: executing program 3 (id=606): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=@ipv4_delroute={0x30, 0x19, 0x411, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_NH_ID={0x8, 0x1e, 0x9}]}, 0x30}}, 0x0) 265.955798ms ago: executing program 1 (id=607): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 176.087452ms ago: executing program 3 (id=608): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000180)={[{@nodecompose}, {}, {@umask={'umask', 0x3d, 0x1000}}, {@uid}, {@nodecompose}, {@force}, {@nls={'nls', 0x3d, 'macgaelic'}}]}, 0x1, 0x6b9, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) listxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 65.554107ms ago: executing program 0 (id=609): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x20) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80, 0x2) write(r0, 0x0, 0x0) 0s ago: executing program 0 (id=610): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. [ 57.530120][ T5774] cgroup: Unknown subsys name 'net' [ 57.687502][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.045867][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.213654][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.217994][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.229527][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.229544][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.240866][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.251042][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.259258][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.260013][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.270495][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.274201][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.280887][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.288020][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.295930][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.308961][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.316550][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.333298][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.341291][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.357395][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.362811][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.384338][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.398732][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.425435][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.433625][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.441474][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.761999][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 61.879593][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 61.898978][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 61.940296][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.947949][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.955743][ T5786] bridge_slave_0: entered allmulticast mode [ 61.963271][ T5786] bridge_slave_0: entered promiscuous mode [ 61.975371][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.982538][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.989653][ T5786] bridge_slave_1: entered allmulticast mode [ 61.996658][ T5786] bridge_slave_1: entered promiscuous mode [ 62.011084][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 62.085903][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.097697][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.190424][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.197712][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.204904][ T5784] bridge_slave_0: entered allmulticast mode [ 62.211509][ T5784] bridge_slave_0: entered promiscuous mode [ 62.222679][ T5786] team0: Port device team_slave_0 added [ 62.243433][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.250522][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.257859][ T5796] bridge_slave_0: entered allmulticast mode [ 62.265042][ T5796] bridge_slave_0: entered promiscuous mode [ 62.272461][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.279561][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.286766][ T5796] bridge_slave_1: entered allmulticast mode [ 62.294219][ T5796] bridge_slave_1: entered promiscuous mode [ 62.300589][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.308314][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.316047][ T5784] bridge_slave_1: entered allmulticast mode [ 62.322696][ T5784] bridge_slave_1: entered promiscuous mode [ 62.330329][ T5786] team0: Port device team_slave_1 added [ 62.359945][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.367060][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.374243][ T5792] bridge_slave_0: entered allmulticast mode [ 62.380826][ T5792] bridge_slave_0: entered promiscuous mode [ 62.418542][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.425796][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.432994][ T5792] bridge_slave_1: entered allmulticast mode [ 62.439579][ T5792] bridge_slave_1: entered promiscuous mode [ 62.468540][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.475677][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.501662][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.526179][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.538274][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.549253][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.561235][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.570847][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.577982][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.604054][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.662702][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.687887][ T5796] team0: Port device team_slave_0 added [ 62.696392][ T5784] team0: Port device team_slave_0 added [ 62.705023][ T5784] team0: Port device team_slave_1 added [ 62.712964][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.755649][ T5796] team0: Port device team_slave_1 added [ 62.766538][ T5786] hsr_slave_0: entered promiscuous mode [ 62.773776][ T5786] hsr_slave_1: entered promiscuous mode [ 62.837792][ T5792] team0: Port device team_slave_0 added [ 62.846350][ T5792] team0: Port device team_slave_1 added [ 62.853244][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.860185][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.886468][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.898150][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.909513][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.936024][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.977218][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.984382][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.010380][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.028251][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.035303][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.061231][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.077698][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.084724][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.110665][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.122927][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.129875][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.155793][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.245792][ T5784] hsr_slave_0: entered promiscuous mode [ 63.253085][ T5784] hsr_slave_1: entered promiscuous mode [ 63.259157][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.266912][ T5784] Cannot create hsr debugfs directory [ 63.299264][ T5796] hsr_slave_0: entered promiscuous mode [ 63.305665][ T5796] hsr_slave_1: entered promiscuous mode [ 63.311951][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.312495][ T5795] Bluetooth: hci0: command tx timeout [ 63.319650][ T5796] Cannot create hsr debugfs directory [ 63.382539][ T5795] Bluetooth: hci1: command tx timeout [ 63.415829][ T5792] hsr_slave_0: entered promiscuous mode [ 63.422170][ T5792] hsr_slave_1: entered promiscuous mode [ 63.428172][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.435819][ T5792] Cannot create hsr debugfs directory [ 63.461972][ T5795] Bluetooth: hci2: command tx timeout [ 63.461989][ T5789] Bluetooth: hci3: command tx timeout [ 63.637902][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.667109][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.677137][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.705705][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.774818][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.786392][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.796621][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.806731][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.883688][ T5792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.893880][ T5792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.905893][ T5792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.916943][ T5792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.003399][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.012645][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.023413][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.042610][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.105886][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.138514][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.149554][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.185102][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.192437][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.204876][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.212035][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.225596][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.252100][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.259175][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.298232][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.305358][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.359266][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.419954][ T5786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.438262][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.459087][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.487302][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.508395][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.515565][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.540984][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.548110][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.601601][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.634315][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.641435][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.655640][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.662796][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.718125][ T5796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.737421][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.796866][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.916033][ T5784] veth0_vlan: entered promiscuous mode [ 64.929791][ T5784] veth1_vlan: entered promiscuous mode [ 64.944751][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.064459][ T5784] veth0_macvtap: entered promiscuous mode [ 65.075093][ T5786] veth0_vlan: entered promiscuous mode [ 65.096178][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.110037][ T5784] veth1_macvtap: entered promiscuous mode [ 65.127425][ T5786] veth1_vlan: entered promiscuous mode [ 65.167476][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.195887][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.218717][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.230094][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.240993][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.250556][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.277626][ T5786] veth0_macvtap: entered promiscuous mode [ 65.291118][ T5786] veth1_macvtap: entered promiscuous mode [ 65.335554][ T5796] veth0_vlan: entered promiscuous mode [ 65.370979][ T5796] veth1_vlan: entered promiscuous mode [ 65.387068][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.394375][ T5795] Bluetooth: hci0: command tx timeout [ 65.424695][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.435734][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.446973][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.462672][ T5795] Bluetooth: hci1: command tx timeout [ 65.473963][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.485124][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.490877][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.504928][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.516941][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.530214][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.539022][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.548024][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.548515][ T5795] Bluetooth: hci3: command tx timeout [ 65.557382][ T5789] Bluetooth: hci2: command tx timeout [ 65.562687][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.620311][ T5796] veth0_macvtap: entered promiscuous mode [ 65.634064][ T5796] veth1_macvtap: entered promiscuous mode [ 65.647975][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.649004][ T5792] veth0_vlan: entered promiscuous mode [ 65.663074][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.688750][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.705156][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.716250][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.726875][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.740497][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.761250][ T5792] veth1_vlan: entered promiscuous mode [ 65.773811][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.784781][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.795418][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.806916][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.818094][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.849368][ T5796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.858439][ T5796] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.872914][ T5796] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.896525][ T5796] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.956031][ T5871] syz.0.1[5871]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 66.011125][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.033317][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.049202][ T5792] veth0_macvtap: entered promiscuous mode [ 66.065912][ T5792] veth1_macvtap: entered promiscuous mode [ 66.072509][ T5871] loop0: detected capacity change from 0 to 4096 [ 66.080534][ T5871] ======================================================= [ 66.080534][ T5871] WARNING: The mand mount option has been deprecated and [ 66.080534][ T5871] and is ignored by this kernel. Remove the mand [ 66.080534][ T5871] option from the mount to silence this warning. [ 66.080534][ T5871] ======================================================= [ 66.131517][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.148206][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.161326][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.174122][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.185244][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.196177][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.208797][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.259921][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.273731][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.284012][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.295104][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.306005][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.317998][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.330377][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.352870][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.361439][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.373904][ T3515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.383335][ T3515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.424078][ T5792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.451742][ T5792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.471936][ T5792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.482155][ T5792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.541122][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.554251][ T5871] ntfs3: loop0: failed to convert "0000" to iso8859-14 [ 66.559513][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.579153][ T5871] ntfs3: loop0: failed to convert name for inode 1e. [ 66.724653][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.740231][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.820416][ T27] audit: type=1326 audit(1764126501.772:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5872 comm="syz.3.4" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f023f1865e7 code=0x0 [ 66.841286][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.860484][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.135977][ T5886] loop0: detected capacity change from 0 to 64 [ 67.254466][ T5890] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.461976][ T5789] Bluetooth: hci0: command tx timeout [ 67.519876][ T5895] loop2: detected capacity change from 0 to 128 [ 67.542027][ T5789] Bluetooth: hci1: command tx timeout [ 67.569553][ T5895] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.626263][ T5789] Bluetooth: hci2: command tx timeout [ 67.626275][ T5795] Bluetooth: hci3: command tx timeout [ 67.626417][ T5895] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.657946][ T5897] bridge0: port 3(bond1) entered blocking state [ 67.691222][ T5897] bridge0: port 3(bond1) entered disabled state [ 67.697895][ T5897] bond1: entered allmulticast mode [ 67.715942][ T5897] bond1: entered promiscuous mode [ 67.748827][ T5895] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11'. [ 67.805941][ T5792] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.115954][ T5906] process 'syz.1.13' launched '/dev/fd/3' with NULL argv: empty string added [ 68.123668][ T5915] loop3: detected capacity change from 0 to 128 [ 68.313945][ T5915] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.345787][ T5915] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.706993][ T5917] loop2: detected capacity change from 0 to 40427 [ 68.733592][ T5917] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 68.762012][ T5917] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 68.787245][ T5917] F2FS-fs (loop2): invalid crc value [ 68.815654][ T5917] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.968573][ T5917] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 68.991771][ T5917] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 69.041866][ T5786] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.051055][ T5922] loop0: detected capacity change from 0 to 32768 [ 69.073053][ T5922] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.18 (5922) [ 69.110608][ T5922] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 69.122375][ T5922] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 69.162062][ T5922] BTRFS info (device loop0): turning on sync discard [ 69.196630][ T5922] BTRFS info (device loop0): disabling free space tree [ 69.220283][ T5922] BTRFS info (device loop0): setting nodatasum [ 69.227660][ T5922] BTRFS info (device loop0): turning on async discard [ 69.235856][ T5922] BTRFS info (device loop0): turning off barriers [ 69.242477][ T5922] BTRFS info (device loop0): disabling tree log [ 69.249921][ T5922] BTRFS info (device loop0): enabling ssd optimizations [ 69.257322][ T5922] BTRFS info (device loop0): force clearing of disk cache [ 69.264575][ T5922] BTRFS info (device loop0): enabling auto defrag [ 69.271147][ T5922] BTRFS info (device loop0): force zlib compression, level 3 [ 69.301712][ T5922] BTRFS info (device loop0): max_inline at 4096 [ 69.435063][ T5922] BTRFS info (device loop0): rebuilding free space tree [ 69.489803][ T27] audit: type=1326 audit(1764126504.442:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 69.510992][ T5922] BTRFS info (device loop0): disabling free space tree [ 69.531919][ T5922] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 69.547503][ T5789] Bluetooth: hci0: command tx timeout [ 69.570314][ T27] audit: type=1326 audit(1764126504.482:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 69.597194][ T5922] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 69.622203][ T5789] Bluetooth: hci1: command tx timeout [ 69.631854][ T27] audit: type=1326 audit(1764126504.482:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 69.653651][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.661841][ T27] audit: type=1326 audit(1764126504.482:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 69.684925][ T27] audit: type=1326 audit(1764126504.482:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 69.706807][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.713389][ T5789] Bluetooth: hci3: command tx timeout [ 69.718019][ T5795] Bluetooth: hci2: command tx timeout [ 69.747354][ T27] audit: type=1326 audit(1764126504.482:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 69.762124][ T5784] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 69.769300][ T27] audit: type=1326 audit(1764126504.482:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 69.807634][ T27] audit: type=1326 audit(1764126504.482:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 69.881802][ T27] audit: type=1326 audit(1764126504.482:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 69.903769][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.975843][ T5789] Bluetooth: hci1: hcon ffff88802f142000 sent 1 < count 243 [ 69.983289][ T5789] Bluetooth: hci1: hcon ffff88802f142000 sent 0 < count 65535 [ 70.497151][ T5967] loop3: detected capacity change from 0 to 4096 [ 70.691378][ T5971] loop0: detected capacity change from 0 to 128 [ 70.702734][ T5967] ntfs3: loop3: failed to convert "0000" to iso8859-14 [ 70.729589][ T5967] ntfs3: loop3: failed to convert name for inode 1e. [ 70.866612][ T5971] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.889091][ T5971] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.922077][ T5973] bridge0: port 3(bond1) entered blocking state [ 70.961336][ T5973] bridge0: port 3(bond1) entered disabled state [ 71.011990][ T5973] bond1: entered allmulticast mode [ 71.028148][ T5973] bond1: entered promiscuous mode [ 71.113439][ T5963] loop2: detected capacity change from 0 to 32768 [ 71.240707][ T5981] loop1: detected capacity change from 0 to 128 [ 71.270363][ T5963] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 71.333370][ T5981] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.393124][ T5981] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.472392][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.472712][ T5981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.31'. [ 71.479034][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.577575][ T5792] ocfs2: Unmounting device (7,2) on (node local) [ 71.589571][ T5796] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.616922][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.095695][ T5998] loop1: detected capacity change from 0 to 4096 [ 72.306947][ T5998] ntfs3: loop1: failed to convert "0000" to iso8859-14 [ 72.326391][ T5998] ntfs3: loop1: failed to convert name for inode 1e. [ 72.355018][ T5987] loop3: detected capacity change from 0 to 32768 [ 72.388913][ T5987] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.33 (5987) [ 72.464570][ T5987] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.502231][ T5987] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 72.532572][ T5987] BTRFS info (device loop3): turning on sync discard [ 72.554991][ T5987] BTRFS info (device loop3): disabling free space tree [ 72.579428][ T5987] BTRFS info (device loop3): setting nodatasum [ 72.592615][ T5987] BTRFS info (device loop3): turning on async discard [ 72.609673][ T5987] BTRFS info (device loop3): turning off barriers [ 72.621555][ T5987] BTRFS info (device loop3): disabling tree log [ 72.628946][ T5987] BTRFS info (device loop3): enabling ssd optimizations [ 72.636044][ T5987] BTRFS info (device loop3): force clearing of disk cache [ 72.643356][ T5987] BTRFS info (device loop3): enabling auto defrag [ 72.649822][ T5987] BTRFS info (device loop3): force zlib compression, level 3 [ 72.664770][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 72.664782][ T27] audit: type=1326 audit(1764126507.622:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 72.664896][ T5987] BTRFS info (device loop3): max_inline at 4096 [ 72.676497][ T27] audit: type=1326 audit(1764126507.622:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 72.721191][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.747138][ T27] audit: type=1326 audit(1764126507.662:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 72.770712][ T27] audit: type=1326 audit(1764126507.662:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 72.794619][ T27] audit: type=1326 audit(1764126507.662:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 72.817055][ T27] audit: type=1326 audit(1764126507.662:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 72.838927][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.851128][ T27] audit: type=1326 audit(1764126507.662:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 72.873115][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.881262][ T27] audit: type=1326 audit(1764126507.662:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 72.903169][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.910032][ T27] audit: type=1326 audit(1764126507.662:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 72.936943][ T27] audit: type=1326 audit(1764126507.662:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 72.967605][ T5987] BTRFS info (device loop3): rebuilding free space tree [ 72.994321][ T5987] BTRFS info (device loop3): disabling free space tree [ 72.999552][ T6030] loop1: detected capacity change from 0 to 64 [ 73.001358][ T5987] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 73.018037][ T5987] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 73.087706][ T6028] bridge0: port 3(bond1) entered blocking state [ 73.117980][ T6028] bridge0: port 3(bond1) entered disabled state [ 73.129157][ T6028] bond1: entered allmulticast mode [ 73.152579][ T6028] bond1: entered promiscuous mode [ 73.168275][ T5786] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.298300][ T5800] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop3 scanned by udevd (5800) [ 74.419117][ T6058] loop2: detected capacity change from 0 to 4096 [ 74.625715][ T6058] ntfs3: loop2: failed to convert "0000" to iso8859-14 [ 74.650917][ T6060] bridge0: port 3(bond1) entered blocking state [ 74.658662][ T6058] ntfs3: loop2: failed to convert name for inode 1e. [ 74.666587][ T6060] bridge0: port 3(bond1) entered disabled state [ 74.674273][ T6060] bond1: entered allmulticast mode [ 74.681261][ T6060] bond1: entered promiscuous mode [ 74.795213][ T6056] loop1: detected capacity change from 0 to 32768 [ 74.809545][ T6056] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 75.038296][ T5799] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 75.042243][ T6072] loop2: detected capacity change from 0 to 64 [ 75.140847][ T6073] loop3: detected capacity change from 0 to 128 [ 75.340255][ T6073] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.511978][ T6073] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.042457][ T5786] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.227805][ T6160] loop0: detected capacity change from 0 to 128 [ 79.380420][ T6160] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.467194][ T27] kauditd_printk_skb: 77 callbacks suppressed [ 79.467209][ T27] audit: type=1326 audit(1764126514.422:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 79.516632][ T6160] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.571687][ T27] audit: type=1326 audit(1764126514.422:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 79.646121][ T27] audit: type=1326 audit(1764126514.422:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 79.693311][ T27] audit: type=1326 audit(1764126514.422:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 79.722095][ T27] audit: type=1326 audit(1764126514.422:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 79.744623][ T27] audit: type=1326 audit(1764126514.422:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 79.766948][ T27] audit: type=1326 audit(1764126514.422:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 79.795876][ T27] audit: type=1326 audit(1764126514.422:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 79.817940][ T27] audit: type=1326 audit(1764126514.422:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 79.828255][ T6172] loop2: detected capacity change from 0 to 4096 [ 79.840684][ T27] audit: type=1326 audit(1764126514.422:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f023f18f749 code=0x7ffc0000 [ 80.148032][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.917281][ T6213] loop1: detected capacity change from 0 to 4096 [ 81.199974][ T6221] loop0: detected capacity change from 0 to 64 [ 81.710352][ T966] cfg80211: failed to load regulatory.db [ 81.864124][ T6241] loop0: detected capacity change from 0 to 4096 [ 82.099795][ T6247] loop0: detected capacity change from 0 to 64 [ 82.488832][ T6258] loop1: detected capacity change from 0 to 128 [ 82.550732][ T6258] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.635418][ T6266] loop2: detected capacity change from 0 to 4096 [ 82.667041][ T6258] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.781935][ T6266] ntfs3: loop2: failed to convert "0000" to iso8859-14 [ 82.794017][ T6266] ntfs3: loop2: failed to convert name for inode 1e. [ 83.107227][ T6277] loop3: detected capacity change from 0 to 64 [ 83.495203][ T5796] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.747176][ T6291] loop2: detected capacity change from 0 to 4096 [ 83.904951][ T6291] ntfs3: loop2: failed to convert "0000" to iso8859-14 [ 83.944793][ T6291] ntfs3: loop2: failed to convert name for inode 1e. [ 84.490170][ T6320] loop0: detected capacity change from 0 to 128 [ 84.571280][ T6320] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.698837][ T6320] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.724460][ T27] kauditd_printk_skb: 94 callbacks suppressed [ 84.724472][ T27] audit: type=1326 audit(1764126519.682:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2742b8f749 code=0x7ffc0000 [ 84.779477][ T27] audit: type=1326 audit(1764126519.682:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2742b8f749 code=0x7ffc0000 [ 84.819202][ T27] audit: type=1326 audit(1764126519.712:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2742b8f749 code=0x7ffc0000 [ 84.861811][ T27] audit: type=1326 audit(1764126519.712:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2742b8f749 code=0x7ffc0000 [ 84.902869][ T27] audit: type=1326 audit(1764126519.712:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2742b8f749 code=0x7ffc0000 [ 84.948561][ T6331] loop2: detected capacity change from 0 to 4096 [ 84.951667][ T27] audit: type=1326 audit(1764126519.722:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2742b8f749 code=0x7ffc0000 [ 84.982264][ T27] audit: type=1326 audit(1764126519.722:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2742b8f749 code=0x7ffc0000 [ 85.004425][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.011787][ T27] audit: type=1326 audit(1764126519.722:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2742b8f749 code=0x7ffc0000 [ 85.034747][ T27] audit: type=1326 audit(1764126519.722:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2742b8f749 code=0x7ffc0000 [ 85.056797][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.066607][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.081814][ T27] audit: type=1326 audit(1764126519.722:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2742b8f749 code=0x7ffc0000 [ 85.103950][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.441590][ T6339] loop2: detected capacity change from 0 to 64 [ 85.948863][ T6358] loop1: detected capacity change from 0 to 4096 [ 86.277961][ T6369] loop2: detected capacity change from 0 to 64 [ 86.911541][ T6385] loop2: detected capacity change from 0 to 4096 [ 87.772242][ T6421] loop3: detected capacity change from 0 to 4096 [ 88.685256][ T6449] loop1: detected capacity change from 0 to 4096 [ 89.313862][ T6477] loop0: detected capacity change from 0 to 64 [ 89.732660][ T6485] loop0: detected capacity change from 0 to 4096 [ 89.797531][ T27] kauditd_printk_skb: 101 callbacks suppressed [ 89.797543][ T27] audit: type=1326 audit(1764126524.752:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 89.892249][ T27] audit: type=1326 audit(1764126524.792:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 89.932331][ T27] audit: type=1326 audit(1764126524.792:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 89.978454][ T27] audit: type=1326 audit(1764126524.792:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 90.034162][ T27] audit: type=1326 audit(1764126524.792:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 90.089789][ T27] audit: type=1326 audit(1764126524.792:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 90.122208][ T27] audit: type=1326 audit(1764126524.792:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 90.146431][ T27] audit: type=1326 audit(1764126524.802:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 90.170193][ T27] audit: type=1326 audit(1764126524.802:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 90.239469][ T27] audit: type=1326 audit(1764126524.802:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caf58f749 code=0x7ffc0000 [ 90.264694][ T6501] loop3: detected capacity change from 0 to 64 [ 91.173263][ T6532] loop3: detected capacity change from 0 to 64 [ 91.866510][ T6559] loop2: detected capacity change from 0 to 128 [ 91.905661][ T6559] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.941206][ T6559] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.059533][ T5792] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.280866][ T6578] Zero length message leads to an empty skb [ 92.544181][ T6589] loop0: detected capacity change from 0 to 128 [ 92.585679][ T6589] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.601961][ T6589] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.662097][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.169980][ T6615] loop0: detected capacity change from 0 to 128 [ 93.206109][ T6615] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.220193][ T6615] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.350226][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.886948][ T6644] loop2: detected capacity change from 0 to 128 [ 93.956358][ T6644] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.010891][ T6644] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.452740][ T5792] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.197257][ T6698] loop2: detected capacity change from 0 to 128 [ 95.309803][ T6698] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.407833][ T6698] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.611404][ T5792] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.437257][ T6736] loop3: detected capacity change from 0 to 128 [ 96.534995][ T6729] loop2: detected capacity change from 0 to 40427 [ 96.554537][ T6729] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 96.562364][ T6729] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.594373][ T6729] F2FS-fs (loop2): invalid crc value [ 96.617949][ T6729] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.622937][ T6736] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.672340][ T6729] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 96.679419][ T6729] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.733210][ T6736] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.127310][ T6754] netlink: 44 bytes leftover after parsing attributes in process `syz.1.339'. [ 97.183689][ T5786] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.062811][ T6785] loop0: detected capacity change from 0 to 128 [ 98.151793][ T6785] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.295779][ T6785] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.678245][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.119229][ T6807] loop0: detected capacity change from 0 to 2048 [ 99.178014][ T6807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.264649][ T6805] loop1: detected capacity change from 0 to 32768 [ 99.365155][ T6805] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.469115][ T6805] XFS (loop1): Ending clean mount [ 99.484181][ T6805] XFS (loop1): Quotacheck needed: Please wait. [ 99.576422][ T6805] XFS (loop1): Quotacheck: Done. [ 99.602454][ T27] kauditd_printk_skb: 112 callbacks suppressed [ 99.602465][ T27] audit: type=1800 audit(1764126534.562:463): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.359" name="file2" dev="loop1" ino=4423 res=0 errno=0 [ 99.715742][ T6828] loop2: detected capacity change from 0 to 128 [ 99.723996][ T5796] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.766061][ T6828] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.794107][ T6828] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.339026][ T5792] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.479130][ T6850] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.908819][ T6858] loop3: detected capacity change from 0 to 32768 [ 101.074500][ T6858] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.085485][ T6858] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 101.094728][ T6858] BTRFS info (device loop3): max_inline at 4096 [ 101.101077][ T6858] BTRFS info (device loop3): enabling auto defrag [ 101.107634][ T6858] BTRFS info (device loop3): turning off barriers [ 101.114258][ T6858] BTRFS info (device loop3): disabling tree log [ 101.121559][ T6858] BTRFS info (device loop3): enabling ssd optimizations [ 101.128779][ T6858] BTRFS info (device loop3): force clearing of disk cache [ 101.136112][ T6858] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 101.145771][ T6858] BTRFS info (device loop3): use zstd compression, level 3 [ 101.153279][ T6858] BTRFS info (device loop3): using free space tree [ 101.208458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.305490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.318468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.327670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.347333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.410557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.488384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.576802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.589954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.759838][ T6858] BTRFS info (device loop3): rebuilding free space tree [ 101.784429][ T6858] BTRFS info (device loop3): checking UUID tree [ 102.275166][ T5786] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.932363][ T6905] loop2: detected capacity change from 0 to 32768 [ 102.940367][ T6905] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.384 (6905) [ 102.977530][ T6905] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.988016][ T6905] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 102.996794][ T6905] BTRFS info (device loop2): setting nodatacow, compression disabled [ 103.004934][ T6905] BTRFS info (device loop2): enabling auto defrag [ 103.011403][ T6905] BTRFS info (device loop2): max_inline at 0 [ 103.017470][ T6905] BTRFS info (device loop2): using free space tree [ 103.120699][ T6905] BTRFS info (device loop2): auto enabling async discard [ 103.417937][ T5792] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.512265][ T1188] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.795891][ T1188] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 103.813592][ T1188] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 103.834495][ T1188] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 103.846113][ T1188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.886505][ T6928] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.935805][ T1188] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 104.282052][ T1188] usb 2-1: USB disconnect, device number 2 [ 104.694132][ T6963] loop3: detected capacity change from 0 to 128 [ 104.744239][ T6963] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.859894][ T6963] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.380327][ T5786] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.931573][ T7004] loop0: detected capacity change from 0 to 128 [ 105.968973][ T7004] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.987497][ T7004] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.188962][ T7012] loop3: detected capacity change from 0 to 64 [ 106.242479][ T7012] hfs: request for non-existent node 3584 in B*Tree [ 106.261655][ T7012] hfs: request for non-existent node 3584 in B*Tree [ 106.268651][ T7012] hfs: request for non-existent node 1280 in B*Tree [ 106.276145][ T7012] hfs: request for non-existent node 1280 in B*Tree [ 106.346154][ T1136] hfs: request for non-existent node 1280 in B*Tree [ 106.347258][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.363143][ T1136] hfs: request for non-existent node 1280 in B*Tree [ 106.978243][ T7040] loop0: detected capacity change from 0 to 128 [ 107.037958][ T7040] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.050677][ T7040] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.158363][ T7044] loop3: detected capacity change from 0 to 4096 [ 107.172809][ T7044] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 107.624984][ T5795] Bluetooth: hci0: command 0x0406 tx timeout [ 107.866627][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.349380][ T7075] syz.3.441 (7075) used greatest stack depth: 20688 bytes left [ 108.506391][ T7093] loop0: detected capacity change from 0 to 128 [ 108.598940][ T7093] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.690407][ T7093] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.043442][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.484971][ T7112] loop2: detected capacity change from 0 to 40427 [ 109.501208][ T7112] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 109.509072][ T7112] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 109.533088][ T7112] F2FS-fs (loop2): invalid crc value [ 109.549120][ T7112] F2FS-fs (loop2): Found nat_bits in checkpoint [ 109.602368][ T7112] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 109.609419][ T7112] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 109.632679][ T7121] loop0: detected capacity change from 0 to 4096 [ 110.626295][ T7148] loop0: detected capacity change from 0 to 128 [ 110.707027][ T7148] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.840737][ T7148] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.090714][ T7158] loop3: detected capacity change from 0 to 4096 [ 111.099524][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 111.236666][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.404949][ T7162] loop2: detected capacity change from 0 to 4096 [ 111.500389][ T7169] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.716948][ T7176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.474'. [ 111.727413][ T7173] loop0: detected capacity change from 0 to 1024 [ 111.733454][ T7176] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 111.856164][ T7183] program syz.3.478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.047981][ T49] hfsplus: b-tree write err: -5, ino 4 [ 112.134276][ T7189] loop3: detected capacity change from 0 to 128 [ 112.198090][ T27] audit: type=1326 audit(1764126547.152:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.1.483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5caf58f749 code=0x0 [ 112.260519][ T7189] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.308666][ T7189] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.511922][ T6933] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 112.544147][ T5786] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.703050][ T6933] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 112.711498][ T6933] usb 1-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 112.721902][ T6933] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 112.730934][ T6933] usb 1-1: config 150 has no interface number 0 [ 112.737285][ T6933] usb 1-1: config 150 interface 204 has no altsetting 0 [ 112.747599][ T6933] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 112.756685][ T6933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.764750][ T6933] usb 1-1: Product: syz [ 112.768904][ T6933] usb 1-1: Manufacturer: syz [ 112.773826][ T6933] usb 1-1: SerialNumber: syz [ 113.006516][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 113.042946][ T6933] usb 1-1: USB disconnect, device number 2 [ 113.100055][ T7219] loop1: detected capacity change from 0 to 64 [ 113.152987][ T7217] loop3: detected capacity change from 0 to 1024 [ 113.173597][ T7217] ext4: Bad value for 'barrier' [ 113.541845][ T1188] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.611915][ T7228] loop0: detected capacity change from 0 to 128 [ 113.642131][ T7228] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.660783][ T7228] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.743802][ T1188] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 113.761696][ T1188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.762930][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.780860][ T1188] usb 2-1: config 0 descriptor?? [ 113.809478][ T1188] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 114.214526][ T1188] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 114.299597][ T7241] loop3: detected capacity change from 0 to 32768 [ 114.317514][ T7241] (syz.3.497,7241,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 114.364592][ T7241] (syz.3.497,7241,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 114.390758][ T7241] (syz.3.497,7241,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 114.409191][ T7241] (syz.3.497,7241,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 114.473333][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 114.475290][ T7241] JBD2: Ignoring recovery information on journal [ 114.605157][ T7241] (syz.3.497,7241,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 114.628709][ T1188] gspca_cpia1: usb_control_msg 02, error -32 [ 114.631461][ T7241] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 114.646101][ T1188] gspca_cpia1: usb_control_msg 02, error -71 [ 114.659094][ T7241] (syz.3.497,7241,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 114.660172][ T1188] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 114.685699][ T1188] usb 2-1: USB disconnect, device number 3 [ 114.717914][ T7241] (syz.3.497,7241,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 114.797634][ T7241] (syz.3.497,7241,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 114.809930][ T7257] loop0: detected capacity change from 0 to 128 [ 114.840094][ T7241] (syz.3.497,7241,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 114.858873][ T7257] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.859329][ T7241] (syz.3.497,7241,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 114.885334][ T7241] (syz.3.497,7241,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 114.895445][ T7241] (syz.3.497,7241,1):ocfs2_quota_read:201 ERROR: status = -5 [ 114.903375][ T7241] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 5 [ 114.913024][ T7241] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 114.918688][ T7257] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.922488][ T7241] (syz.3.497,7241,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 114.923261][ T7241] (syz.3.497,7241,1):ocfs2_mknod:314 ERROR: status = -5 [ 114.950425][ T7241] (syz.3.497,7241,1):ocfs2_mknod:502 ERROR: status = -5 [ 114.957923][ T7241] (syz.3.497,7241,1):ocfs2_mkdir:659 ERROR: status = -5 [ 114.989844][ T7241] syz.3.497 (7241) used greatest stack depth: 18736 bytes left [ 115.014643][ T5786] ocfs2: Unmounting device (7,3) on (node local) [ 115.059163][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.479418][ T7274] loop0: detected capacity change from 0 to 4096 [ 115.488247][ T7274] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 115.530183][ T7278] capability: warning: `syz.1.510' uses 32-bit capabilities (legacy support in use) [ 115.985974][ T7286] loop1: detected capacity change from 0 to 128 [ 116.105153][ T7286] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.229473][ T7286] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.241484][ T7282] loop3: detected capacity change from 0 to 65536 [ 116.313535][ T7282] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 116.370865][ T7282] XFS (loop3): Ending clean mount [ 116.385125][ T7282] XFS (loop3): Quotacheck needed: Please wait. [ 116.451035][ T5796] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.524740][ T7282] XFS (loop3): Quotacheck: Done. [ 116.629127][ T5786] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 117.123613][ T7325] loop1: detected capacity change from 0 to 512 [ 117.191074][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'. [ 117.202789][ T7325] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.525: bg 0: block 248: padding at end of block bitmap is not set [ 117.224703][ T7325] Quota error (device loop1): write_blk: dquota write failed [ 117.234910][ T7325] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 117.246371][ T7325] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.525: Failed to acquire dquot type 1 [ 117.267209][ T7325] EXT4-fs (loop1): 1 truncate cleaned up [ 117.279725][ T7325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.292842][ T7325] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.316013][ T7325] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 117.327172][ T7325] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 131074 [ 117.338572][ T7325] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.525: Failed to acquire dquot type 1 [ 117.411478][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.528275][ T7336] loop2: detected capacity change from 0 to 128 [ 117.565946][ T7336] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.605512][ T7336] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.669700][ T7344] loop1: detected capacity change from 0 to 1024 [ 117.759095][ T59] hfsplus: b-tree write err: -5, ino 4 [ 117.792560][ T5792] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.038360][ T7356] loop2: detected capacity change from 0 to 164 [ 118.095389][ T7356] rock: directory entry would overflow storage [ 118.113952][ T7356] rock: sig=0x4f50, size=4, remaining=3 [ 118.126177][ T7356] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 118.151232][ T7357] loop3: detected capacity change from 0 to 4096 [ 118.243133][ T7357] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 118.311712][ T27] audit: type=1800 audit(1764126553.262:465): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.534" name="file2" dev="loop3" ino=33 res=0 errno=0 [ 118.638222][ T7371] loop3: detected capacity change from 0 to 128 [ 118.738642][ T7371] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.777790][ T7371] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.840954][ T7369] loop1: detected capacity change from 0 to 32768 [ 118.848869][ T7369] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.541 (7369) [ 118.866963][ T7369] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.877218][ T7369] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 118.886166][ T7369] BTRFS info (device loop1): turning on sync discard [ 118.892899][ T7369] BTRFS error (device loop1): unrecognized commit_interval value 0x0000000080000001 [ 118.905752][ T7369] BTRFS error (device loop1): open_ctree failed: -22 [ 119.018459][ T5786] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.024426][ T5797] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (5797) [ 119.423859][ T7396] loop1: detected capacity change from 0 to 16 [ 119.442072][ T7394] overlay: filesystem on ./file0 not supported [ 119.500680][ T7396] erofs: (device loop1): mounted with root inode @ nid 36. [ 119.898310][ T7404] loop0: detected capacity change from 0 to 128 [ 119.969997][ T7404] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.017213][ T7417] netlink: 256 bytes leftover after parsing attributes in process `syz.3.559'. [ 120.036428][ T7404] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.051294][ T7417] unsupported nlmsg_type 40 [ 120.084914][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.560'. [ 120.100632][ T7417] syz_tun: entered allmulticast mode [ 120.117053][ T7417] dvmrp8: entered allmulticast mode [ 120.164018][ T7416] syz_tun: left allmulticast mode [ 120.243540][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.776905][ T7448] loop3: detected capacity change from 0 to 128 [ 120.807712][ T7448] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.883922][ T7448] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.998172][ T5786] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.266010][ T7461] loop3: detected capacity change from 0 to 40427 [ 121.278325][ T7461] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 121.595740][ T7463] loop0: detected capacity change from 0 to 32768 [ 121.661195][ T7463] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.725415][ T7463] XFS (loop0): Ending clean mount [ 121.731561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 121.906693][ T5784] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 122.532628][ T7480] loop1: detected capacity change from 0 to 65536 [ 122.566125][ T7480] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 122.615722][ T7480] XFS (loop1): Ending clean mount [ 122.625780][ T7480] XFS (loop1): Quotacheck needed: Please wait. [ 122.691796][ T7480] XFS (loop1): Quotacheck: Done. [ 122.740765][ T7499] loop0: detected capacity change from 0 to 128 [ 122.766860][ T7499] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.782089][ T7499] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.786261][ T5796] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 122.827078][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.937196][ T7504] netlink: 72 bytes leftover after parsing attributes in process `syz.0.586'. [ 123.341704][ T1188] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.494413][ T7523] loop3: detected capacity change from 0 to 128 [ 123.514366][ T7523] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.531709][ T1188] usb 1-1: Using ep0 maxpacket: 16 [ 123.543065][ T1188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.564801][ T7523] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.584371][ T1188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.620168][ T1188] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 123.642001][ T1188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.661332][ T5786] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.690227][ T1188] usb 1-1: config 0 descriptor?? [ 124.150632][ T1188] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 124.361147][ T1188] usb 1-1: USB disconnect, device number 3 [ 124.623133][ T7555] loop1: detected capacity change from 0 to 128 [ 124.682568][ T7555] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.720698][ T7555] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.793049][ T5796] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.971082][ T7565] loop3: detected capacity change from 0 to 1024 [ 125.053622][ T7565] hfsplus: invalid length 256 has been corrected to 255 [ 125.063729][ T7565] ================================================================== [ 125.071804][ T7565] BUG: KASAN: slab-out-of-bounds in hfsplus_uni2asc+0x5bd/0x1240 [ 125.079548][ T7565] Read of size 2 at addr ffff888026048218 by task syz.3.608/7565 [ 125.087265][ T7565] [ 125.089604][ T7565] CPU: 1 PID: 7565 Comm: syz.3.608 Not tainted syzkaller #0 [ 125.096887][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.106953][ T7565] Call Trace: [ 125.110236][ T7565] [ 125.113180][ T7565] dump_stack_lvl+0x16c/0x230 [ 125.117877][ T7565] ? __lock_acquire+0x7c80/0x7c80 [ 125.122917][ T7565] ? show_regs_print_info+0x20/0x20 [ 125.128134][ T7565] ? load_image+0x3b0/0x3b0 [ 125.132648][ T7565] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 125.138032][ T7565] ? __virt_addr_valid+0x18c/0x540 [ 125.143161][ T7565] ? __virt_addr_valid+0x469/0x540 [ 125.148289][ T7565] print_report+0xac/0x220 [ 125.152718][ T7565] ? hfsplus_uni2asc+0x5bd/0x1240 [ 125.157740][ T7565] kasan_report+0x117/0x150 [ 125.162233][ T7565] ? hfsplus_uni2asc+0x5bd/0x1240 [ 125.167249][ T7565] hfsplus_uni2asc+0x5bd/0x1240 [ 125.172085][ T7565] ? hfsplus_bnode_read+0x1c2/0x6f0 [ 125.177275][ T7565] hfsplus_listxattr+0x58f/0xb80 [ 125.182202][ T7565] ? hfsplus_getxattr+0x160/0x160 [ 125.187213][ T7565] ? kasan_save_free_info+0x2e/0x50 [ 125.192419][ T7565] ? slab_free_freelist_hook+0x130/0x1b0 [ 125.198045][ T7565] ? user_path_at_empty+0x4c/0x60 [ 125.203060][ T7565] ? kmem_cache_free+0xf8/0x280 [ 125.207896][ T7565] ? bpf_lsm_inode_listxattr+0x9/0x10 [ 125.213254][ T7565] ? hfsplus_getxattr+0x160/0x160 [ 125.218265][ T7565] listxattr+0x107/0x280 [ 125.222508][ T7565] path_listxattr+0xdd/0x1b0 [ 125.227101][ T7565] ? path_getxattr+0x400/0x400 [ 125.231862][ T7565] ? lockdep_hardirqs_on+0x98/0x150 [ 125.237056][ T7565] do_syscall_64+0x55/0xb0 [ 125.241457][ T7565] ? clear_bhb_loop+0x40/0x90 [ 125.246115][ T7565] ? clear_bhb_loop+0x40/0x90 [ 125.250774][ T7565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.256649][ T7565] RIP: 0033:0x7f023f18f749 [ 125.261053][ T7565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.280653][ T7565] RSP: 002b:00007f02400d9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 125.289064][ T7565] RAX: ffffffffffffffda RBX: 00007f023f3e5fa0 RCX: 00007f023f18f749 [ 125.297022][ T7565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 125.304978][ T7565] RBP: 00007f023f213f91 R08: 0000000000000000 R09: 0000000000000000 [ 125.312936][ T7565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.320890][ T7565] R13: 00007f023f3e6038 R14: 00007f023f3e5fa0 R15: 00007ffef977f1f8 [ 125.328851][ T7565] [ 125.331854][ T7565] [ 125.334165][ T7565] Allocated by task 7565: [ 125.338472][ T7565] kasan_set_track+0x4e/0x70 [ 125.343049][ T7565] __kasan_kmalloc+0x8f/0xa0 [ 125.347624][ T7565] __kmalloc+0xb4/0x240 [ 125.351764][ T7565] hfsplus_find_init+0x89/0x1d0 [ 125.356597][ T7565] hfsplus_listxattr+0x390/0xb80 [ 125.361517][ T7565] listxattr+0x107/0x280 [ 125.365749][ T7565] path_listxattr+0xdd/0x1b0 [ 125.370323][ T7565] do_syscall_64+0x55/0xb0 [ 125.374725][ T7565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.380602][ T7565] [ 125.382907][ T7565] Last potentially related work creation: [ 125.388608][ T7565] kasan_save_stack+0x3e/0x60 [ 125.393280][ T7565] __kasan_record_aux_stack+0xaf/0xc0 [ 125.398636][ T7565] kvfree_call_rcu+0xee/0x780 [ 125.403297][ T7565] cgroup_migrate_finish+0x1a3/0x370 [ 125.408565][ T7565] cgroup_attach_task+0x5cd/0x830 [ 125.413571][ T7565] cgroup_attach_task_all+0x9a/0xe0 [ 125.418755][ T7565] kvm_vm_worker_thread+0x38e/0x570 [ 125.423932][ T7565] kthread+0x2fa/0x390 [ 125.427985][ T7565] ret_from_fork+0x48/0x80 [ 125.432384][ T7565] ret_from_fork_asm+0x11/0x20 [ 125.437134][ T7565] [ 125.439441][ T7565] The buggy address belongs to the object at ffff888026048000 [ 125.439441][ T7565] which belongs to the cache kmalloc-1k of size 1024 [ 125.453475][ T7565] The buggy address is located 0 bytes to the right of [ 125.453475][ T7565] allocated 536-byte region [ffff888026048000, ffff888026048218) [ 125.467946][ T7565] [ 125.470255][ T7565] The buggy address belongs to the physical page: [ 125.476650][ T7565] page:ffffea0000981200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26048 [ 125.486783][ T7565] head:ffffea0000981200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 125.495695][ T7565] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 125.504097][ T7565] page_type: 0xffffffff() [ 125.508410][ T7565] raw: 00fff00000000840 ffff888017841dc0 0000000000000000 dead000000000001 [ 125.516978][ T7565] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 125.525538][ T7565] page dumped because: kasan: bad access detected [ 125.531932][ T7565] page_owner tracks the page as allocated [ 125.537624][ T7565] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6334, tgid 6334 (kvm-nx-lpage-re), ts 85341578889, free_ts 83617072796 [ 125.560613][ T7565] post_alloc_hook+0x1cd/0x210 [ 125.565368][ T7565] get_page_from_freelist+0x195c/0x19f0 [ 125.570908][ T7565] __alloc_pages+0x1e3/0x460 [ 125.575483][ T7565] alloc_slab_page+0x5d/0x170 [ 125.580146][ T7565] new_slab+0x87/0x2e0 [ 125.584200][ T7565] ___slab_alloc+0xc6d/0x1300 [ 125.588862][ T7565] __kmem_cache_alloc_node+0x1a2/0x260 [ 125.594313][ T7565] kmalloc_trace+0x2a/0xe0 [ 125.598738][ T7565] find_css_set+0x9ba/0x1540 [ 125.603329][ T7565] cgroup_migrate_prepare_dst+0x130/0x6f0 [ 125.609034][ T7565] cgroup_attach_task+0x527/0x830 [ 125.614057][ T7565] cgroup_attach_task_all+0x9a/0xe0 [ 125.619246][ T7565] kvm_vm_worker_thread+0x38e/0x570 [ 125.624430][ T7565] kthread+0x2fa/0x390 [ 125.628485][ T7565] ret_from_fork+0x48/0x80 [ 125.632894][ T7565] ret_from_fork_asm+0x11/0x20 [ 125.637655][ T7565] page last free stack trace: [ 125.642309][ T7565] free_unref_page_prepare+0x7ce/0x8e0 [ 125.647756][ T7565] free_unref_page+0x32/0x2e0 [ 125.652419][ T7565] __unfreeze_partials+0x1cf/0x210 [ 125.657515][ T7565] put_cpu_partial+0x17c/0x250 [ 125.662262][ T7565] __slab_free+0x31d/0x410 [ 125.666665][ T7565] qlist_free_all+0x75/0xe0 [ 125.671151][ T7565] kasan_quarantine_reduce+0x143/0x160 [ 125.676592][ T7565] __kasan_slab_alloc+0x22/0x80 [ 125.681429][ T7565] slab_post_alloc_hook+0x6e/0x4d0 [ 125.686523][ T7565] kmem_cache_alloc+0x11e/0x2e0 [ 125.691358][ T7565] ptlock_alloc+0x20/0x70 [ 125.695671][ T7565] pte_alloc_one+0xce/0x540 [ 125.700172][ T7565] handle_mm_fault+0x2e8e/0x4920 [ 125.705101][ T7565] do_user_addr_fault+0xad0/0x12e0 [ 125.710194][ T7565] exc_page_fault+0x67/0x110 [ 125.714767][ T7565] asm_exc_page_fault+0x26/0x30 [ 125.719601][ T7565] [ 125.721908][ T7565] Memory state around the buggy address: [ 125.727515][ T7565] ffff888026048100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 125.735557][ T7565] ffff888026048180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 125.743595][ T7565] >ffff888026048200: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.751632][ T7565] ^ [ 125.756458][ T7565] ffff888026048280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.764499][ T7565] ffff888026048300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.772536][ T7565] ================================================================== [ 125.820420][ T7565] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 125.827627][ T7565] CPU: 1 PID: 7565 Comm: syz.3.608 Not tainted syzkaller #0 [ 125.834912][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.844980][ T7565] Call Trace: [ 125.848263][ T7565] [ 125.851197][ T7565] dump_stack_lvl+0x16c/0x230 [ 125.855891][ T7565] ? show_regs_print_info+0x20/0x20 [ 125.861106][ T7565] ? load_image+0x3b0/0x3b0 [ 125.865626][ T7565] panic+0x2c0/0x710 [ 125.869538][ T7565] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 125.875703][ T7565] ? bpf_jit_dump+0xd0/0xd0 [ 125.880219][ T7565] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 125.886113][ T7565] ? _raw_spin_unlock+0x40/0x40 [ 125.890952][ T7565] ? hfsplus_uni2asc+0x5bd/0x1240 [ 125.895962][ T7565] check_panic_on_warn+0x84/0xa0 [ 125.900896][ T7565] ? hfsplus_uni2asc+0x5bd/0x1240 [ 125.905922][ T7565] end_report+0x6f/0x140 [ 125.910154][ T7565] kasan_report+0x128/0x150 [ 125.914644][ T7565] ? hfsplus_uni2asc+0x5bd/0x1240 [ 125.919651][ T7565] hfsplus_uni2asc+0x5bd/0x1240 [ 125.924482][ T7565] ? hfsplus_bnode_read+0x1c2/0x6f0 [ 125.929662][ T7565] hfsplus_listxattr+0x58f/0xb80 [ 125.934600][ T7565] ? hfsplus_getxattr+0x160/0x160 [ 125.939621][ T7565] ? kasan_save_free_info+0x2e/0x50 [ 125.944812][ T7565] ? slab_free_freelist_hook+0x130/0x1b0 [ 125.950434][ T7565] ? user_path_at_empty+0x4c/0x60 [ 125.955441][ T7565] ? kmem_cache_free+0xf8/0x280 [ 125.960273][ T7565] ? bpf_lsm_inode_listxattr+0x9/0x10 [ 125.965623][ T7565] ? hfsplus_getxattr+0x160/0x160 [ 125.970628][ T7565] listxattr+0x107/0x280 [ 125.974867][ T7565] path_listxattr+0xdd/0x1b0 [ 125.979437][ T7565] ? path_getxattr+0x400/0x400 [ 125.984185][ T7565] ? lockdep_hardirqs_on+0x98/0x150 [ 125.989360][ T7565] do_syscall_64+0x55/0xb0 [ 125.993756][ T7565] ? clear_bhb_loop+0x40/0x90 [ 125.998416][ T7565] ? clear_bhb_loop+0x40/0x90 [ 126.003082][ T7565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.008983][ T7565] RIP: 0033:0x7f023f18f749 [ 126.013394][ T7565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.032995][ T7565] RSP: 002b:00007f02400d9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 126.041395][ T7565] RAX: ffffffffffffffda RBX: 00007f023f3e5fa0 RCX: 00007f023f18f749 [ 126.049348][ T7565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 126.057297][ T7565] RBP: 00007f023f213f91 R08: 0000000000000000 R09: 0000000000000000 [ 126.065246][ T7565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.073196][ T7565] R13: 00007f023f3e6038 R14: 00007f023f3e5fa0 R15: 00007ffef977f1f8 [ 126.081149][ T7565] [ 126.084372][ T7565] Kernel Offset: disabled [ 126.088683][ T7565] Rebooting in 86400 seconds..