last executing test programs: 2.193315346s ago: executing program 2 (id=448): r0 = socket$tipc(0x1e, 0x2, 0x0) shutdown(r0, 0x0) 2.101648104s ago: executing program 2 (id=451): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.869341975s ago: executing program 2 (id=454): ioperm(0x5453, 0x1, 0x100000001) set_mempolicy(0x8001, 0x0, 0x1) 1.843340347s ago: executing program 2 (id=455): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1.721311928s ago: executing program 1 (id=458): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x1, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000300)={{0x77ded23f, 0x5, 0x0, 0xfffffffd, 'syz1\x00'}, 0x3, 0x0, 0x20, 0x0, 0x1, 0x80000000, 'syz0\x00', &(0x7f0000000240)=['']}) 1.693067961s ago: executing program 2 (id=459): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000004, 0x3b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 1.601937408s ago: executing program 1 (id=462): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x20000804) 1.35882859s ago: executing program 1 (id=465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 1.293224286s ago: executing program 3 (id=467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010102000000000000000002000000240002800c000280040001003a00000014000180080001007f000001080002"], 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 1.185978265s ago: executing program 1 (id=468): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704023f80fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1.177557586s ago: executing program 0 (id=469): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x5b, 0xa, 0x0, "93bba551042af768810fa32fa3ccbaf1121823a6dc898168d8b3c3945d8636cf"}) 1.114284812s ago: executing program 3 (id=470): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 987.215423ms ago: executing program 0 (id=471): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x11dc, &(0x7f0000001280)="$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") truncate(&(0x7f0000000500)='./file2\x00', 0xe1) 986.591603ms ago: executing program 1 (id=472): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0xfd, 0x6216, &(0x7f000000cb40)="$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") lsetxattr$security_ima(&(0x7f0000000240)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380)=@ng={0x4, 0x17}, 0x2, 0x0) 869.282084ms ago: executing program 3 (id=473): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x2, @local, 0x3, 0x1}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x65}, 0x41) 741.429935ms ago: executing program 3 (id=474): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000180)={0x7, "e2ebe98e04f0e5b9b5f55ac3ae9a40da89308612ad610ef0a34d5ba77de10f12", 0x3, 0x2, 0x5, 0x80008, 0x2, 0x2}) 537.347683ms ago: executing program 3 (id=475): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 510.033745ms ago: executing program 2 (id=476): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 509.291075ms ago: executing program 0 (id=477): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x0, 0xe0, 0x1b0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x2, 0x4, 0x1}, {0x3, 0x6, 0x4}, 0xa8ef, 0xc0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @private1, [0xff, 0xffffffff, 0xffffffff, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff], 'bridge_slave_1\x00', 'batadv0\x00', {}, {}, 0x1d, 0x80, 0x2, 0x28}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x8, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 317.920282ms ago: executing program 3 (id=478): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 173.342665ms ago: executing program 0 (id=479): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000000)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) 121.24932ms ago: executing program 0 (id=480): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000180)='0', 0x1) 2.22447ms ago: executing program 0 (id=481): r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x109200) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000380)) 0s ago: executing program 1 (id=482): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)={'pimreg0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. syzkaller login: [ 64.179003][ T5751] cgroup: Unknown subsys name 'net' [ 64.313228][ T5751] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.701721][ T5751] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.096020][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.096042][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.111142][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.113038][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.127255][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.135097][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.139881][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.143572][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.150624][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.158060][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.166604][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.172587][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.179508][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.184657][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.193076][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.200988][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.206637][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.213373][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.219995][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.226489][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.235949][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.241315][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.248127][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.261971][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.618097][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 67.763932][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 67.788365][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.796108][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.803887][ T5763] bridge_slave_0: entered allmulticast mode [ 67.810971][ T5763] bridge_slave_0: entered promiscuous mode [ 67.819278][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 67.875745][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.883020][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.891293][ T5763] bridge_slave_1: entered allmulticast mode [ 67.898860][ T5763] bridge_slave_1: entered promiscuous mode [ 67.954493][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.967076][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.988227][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 68.063333][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.070599][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.080240][ T5767] bridge_slave_0: entered allmulticast mode [ 68.087596][ T5767] bridge_slave_0: entered promiscuous mode [ 68.104067][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.111407][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.118695][ T5767] bridge_slave_1: entered allmulticast mode [ 68.125404][ T5767] bridge_slave_1: entered promiscuous mode [ 68.135404][ T5763] team0: Port device team_slave_0 added [ 68.145785][ T5763] team0: Port device team_slave_1 added [ 68.156641][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.163842][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.171209][ T5762] bridge_slave_0: entered allmulticast mode [ 68.179037][ T5762] bridge_slave_0: entered promiscuous mode [ 68.203972][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.211209][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.221201][ T5762] bridge_slave_1: entered allmulticast mode [ 68.228079][ T5762] bridge_slave_1: entered promiscuous mode [ 68.282047][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.289193][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.315302][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.328862][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.335844][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.362071][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.387111][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.421674][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.429274][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.436996][ T5764] bridge_slave_0: entered allmulticast mode [ 68.443766][ T5764] bridge_slave_0: entered promiscuous mode [ 68.452548][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.472461][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.490051][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.497347][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.504532][ T5764] bridge_slave_1: entered allmulticast mode [ 68.511600][ T5764] bridge_slave_1: entered promiscuous mode [ 68.545080][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.557076][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.573595][ T5763] hsr_slave_0: entered promiscuous mode [ 68.580063][ T5763] hsr_slave_1: entered promiscuous mode [ 68.590168][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.601985][ T5767] team0: Port device team_slave_0 added [ 68.611528][ T5767] team0: Port device team_slave_1 added [ 68.690096][ T5762] team0: Port device team_slave_0 added [ 68.721858][ T5764] team0: Port device team_slave_0 added [ 68.731148][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.738370][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.764675][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.783227][ T5762] team0: Port device team_slave_1 added [ 68.795855][ T5764] team0: Port device team_slave_1 added [ 68.802391][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.809497][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.835443][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.921273][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.928702][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.954886][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.973078][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.980176][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.006391][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.022018][ T5767] hsr_slave_0: entered promiscuous mode [ 69.029391][ T5767] hsr_slave_1: entered promiscuous mode [ 69.035615][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.044133][ T5767] Cannot create hsr debugfs directory [ 69.051042][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.058359][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.086939][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.105474][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.113204][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.139352][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.212993][ T5764] hsr_slave_0: entered promiscuous mode [ 69.219777][ T5764] hsr_slave_1: entered promiscuous mode [ 69.225960][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.234213][ T5764] Cannot create hsr debugfs directory [ 69.337680][ T5776] Bluetooth: hci2: command tx timeout [ 69.343535][ T5776] Bluetooth: hci1: command tx timeout [ 69.346523][ T5769] Bluetooth: hci3: command tx timeout [ 69.349609][ T5776] Bluetooth: hci0: command tx timeout [ 69.371653][ T5762] hsr_slave_0: entered promiscuous mode [ 69.379080][ T5762] hsr_slave_1: entered promiscuous mode [ 69.385154][ T5762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.392882][ T5762] Cannot create hsr debugfs directory [ 69.532198][ T5763] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.570540][ T5763] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.586225][ T5763] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.616258][ T5763] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.717086][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.732549][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.743771][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.755559][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.812002][ T5764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.846210][ T5764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.889120][ T5764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.923528][ T5764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.958219][ T5762] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.970167][ T5762] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.981242][ T5762] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.992303][ T5762] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.074008][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.113549][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.143573][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.175675][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.183051][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.205826][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.239118][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.246266][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.257171][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.264351][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.274226][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.281374][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.352639][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.397374][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.410692][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.417871][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.433341][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.465481][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.472704][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.486272][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.586205][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.634104][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.641326][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.677845][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.685046][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.935577][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.001875][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.113695][ T5767] veth0_vlan: entered promiscuous mode [ 71.181409][ T5767] veth1_vlan: entered promiscuous mode [ 71.205741][ T5763] veth0_vlan: entered promiscuous mode [ 71.213760][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.224930][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.255532][ T5763] veth1_vlan: entered promiscuous mode [ 71.313731][ T5767] veth0_macvtap: entered promiscuous mode [ 71.346969][ T5763] veth0_macvtap: entered promiscuous mode [ 71.354352][ T5767] veth1_macvtap: entered promiscuous mode [ 71.382759][ T5763] veth1_macvtap: entered promiscuous mode [ 71.394632][ T5764] veth0_vlan: entered promiscuous mode [ 71.416565][ T5776] Bluetooth: hci0: command tx timeout [ 71.416809][ T51] Bluetooth: hci3: command tx timeout [ 71.422010][ T5776] Bluetooth: hci1: command tx timeout [ 71.428149][ T5769] Bluetooth: hci2: command tx timeout [ 71.445040][ T5764] veth1_vlan: entered promiscuous mode [ 71.456165][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.474424][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.485997][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.498591][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.518352][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.526654][ T5762] veth0_vlan: entered promiscuous mode [ 71.538960][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.549705][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.561038][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.573062][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.583457][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.592442][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.601376][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.618738][ T5763] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.628132][ T5763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.637553][ T5763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.646276][ T5763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.662582][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.670108][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.721160][ T5762] veth1_vlan: entered promiscuous mode [ 71.780281][ T5764] veth0_macvtap: entered promiscuous mode [ 71.811718][ T5764] veth1_macvtap: entered promiscuous mode [ 71.830895][ T5762] veth0_macvtap: entered promiscuous mode [ 71.871283][ T5762] veth1_macvtap: entered promiscuous mode [ 71.909352][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.925130][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.936093][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.947516][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.960100][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.985976][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.997221][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.997446][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.005270][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.017296][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.037670][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.049674][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.061098][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.074462][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.084502][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.095414][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.105441][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.116040][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.128144][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.143670][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.154469][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.155382][ T5764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.173361][ T5764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.182506][ T5764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.192233][ T5764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.211665][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.223672][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.234169][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.244884][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.255723][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.266799][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.279316][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.292642][ T5762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.302600][ T5762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.311573][ T5762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.321046][ T5762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.377752][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.385710][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.424350][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.433335][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.555443][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.572520][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.634181][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.656854][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.714020][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.754464][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.799565][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.826657][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.016048][ T5838] syz.0.1[5838]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.042033][ T5838] loop0: detected capacity change from 0 to 64 [ 73.206765][ T5842] tmpfs: Bad value for 'mpol' [ 73.360282][ T5844] loop1: detected capacity change from 0 to 2048 [ 73.364893][ T5846] netlink: 'syz.2.9': attribute type 32 has an invalid length. [ 73.472548][ T5853] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.507248][ T5769] Bluetooth: hci1: command tx timeout [ 73.512876][ T5769] Bluetooth: hci0: command tx timeout [ 73.516373][ T51] Bluetooth: hci2: command tx timeout [ 73.519618][ T5769] Bluetooth: hci3: command tx timeout [ 73.859172][ T5853] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 73.916433][ T5853] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 73.927654][ T5865] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16'. [ 73.953217][ T5853] Remounting filesystem read-only [ 73.981231][ T3526] NILFS (loop1): discard dirty page: offset=0, ino=12 [ 74.049927][ T3526] NILFS (loop1): discard dirty block: blocknr=17, size=1024 [ 74.074628][ T3526] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.114088][ T3526] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.123691][ T3526] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.162777][ T3526] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 74.187787][ T3526] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 74.195149][ T3526] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.234586][ T3526] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.255939][ T3526] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.285004][ T5763] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 74.327293][ T5763] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 74.334136][ T5763] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.377741][ T5763] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.399944][ T5880] /dev/nullb0: Can't open blockdev [ 74.410039][ T5763] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 74.434717][ T5763] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 74.463995][ T5763] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 74.481571][ T5882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.523216][ T5763] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 74.586627][ T5763] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.614844][ T5889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 74.623353][ T5763] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.651710][ T5763] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.681898][ T5763] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 74.694113][ T5891] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 74.708603][ T5763] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 74.715934][ T5763] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 74.725681][ T5763] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 74.743119][ T5763] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.752692][ T5763] NILFS (loop1): discard dirty page: offset=131072, ino=3 [ 74.763252][ T5763] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.796884][ T5763] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.805869][ T5763] NILFS (loop1): discard dirty block: blocknr=46, size=1024 [ 74.852378][ T5763] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 75.173028][ T5905] loop3: detected capacity change from 0 to 2048 [ 75.193654][ T5907] loop2: detected capacity change from 0 to 1024 [ 75.210554][ T5905] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=66359, location=66359 [ 75.267514][ T5905] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.366232][ T5907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.574382][ T23] IPVS: starting estimator thread 0... [ 75.581038][ T5769] Bluetooth: hci3: command tx timeout [ 75.586600][ T5776] Bluetooth: hci2: command tx timeout [ 75.586668][ T51] Bluetooth: hci0: command tx timeout [ 75.591991][ T5776] Bluetooth: hci1: command tx timeout [ 75.650917][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.717311][ T5923] IPVS: using max 23 ests per chain, 55200 per kthread [ 75.822499][ T5929] loop0: detected capacity change from 0 to 1024 [ 75.837870][ T2130] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.864762][ T5929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.931644][ T5929] EXT4-fs error (device loop0): ext4_get_first_dir_block:3606: inode #11: comm syz.0.45: directory missing '..' [ 75.996443][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.046657][ T2130] usb 2-1: Using ep0 maxpacket: 8 [ 76.072796][ T2130] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.106575][ T2130] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 76.116937][ T2130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.125586][ T2130] usb 2-1: Product: syz [ 76.130506][ T2130] usb 2-1: Manufacturer: syz [ 76.135350][ T2130] usb 2-1: SerialNumber: syz [ 76.141482][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.168888][ T2130] usb 2-1: config 0 descriptor?? [ 76.192064][ T2130] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 76.199736][ T2130] usb 2-1: selecting invalid altsetting 1 [ 76.306479][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.329053][ T23] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 76.344745][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.355999][ T23] usb 3-1: config 0 has no interface number 0 [ 76.370162][ T23] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 76.398595][ T23] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.422716][ T23] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 76.435194][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.53'. [ 76.439080][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.450036][ T5947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.456506][ T23] usb 3-1: Product: syz [ 76.467185][ T23] usb 3-1: Manufacturer: syz [ 76.471822][ T23] usb 3-1: SerialNumber: syz [ 76.479268][ T23] usb 3-1: config 0 descriptor?? [ 76.511748][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 76.529772][ T8] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 76.552204][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.577428][ T8] usb 4-1: Product: syz [ 76.589357][ T8] usb 4-1: Manufacturer: syz [ 76.594023][ T8] usb 4-1: SerialNumber: syz [ 76.622382][ T8] usb 4-1: config 0 descriptor?? [ 76.633491][ T8] gspca_main: sq930x-2.14.0 probing 2770:930c [ 76.704491][ T5765] usb 2-1: USB disconnect, device number 2 [ 76.932234][ T23] usbtouchscreen: probe of 3-1:0.117 failed with error -71 [ 76.974504][ T23] usb 3-1: USB disconnect, device number 2 [ 77.023604][ T786] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 77.054264][ T8] gspca_sq930x: ucbus_write failed -71 [ 77.312060][ T8] gspca_sq930x: Sensor ov9630 not yet treated [ 77.333099][ T8] sq930x: probe of 4-1:0.0 failed with error -22 [ 77.371496][ T8] usb 4-1: USB disconnect, device number 2 [ 77.392832][ T786] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 77.899106][ T5979] syz.3.68 uses obsolete (PF_INET,SOCK_PACKET) [ 78.095005][ T5988] usb usb7: usbfs: process 5988 (syz.3.72) did not claim interface 0 before use [ 78.272790][ T5993] loop1: detected capacity change from 0 to 512 [ 78.343673][ T5993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.403661][ T6004] loop0: detected capacity change from 0 to 16 [ 78.412050][ T6004] ======================================================= [ 78.412050][ T6004] WARNING: The mand mount option has been deprecated and [ 78.412050][ T6004] and is ignored by this kernel. Remove the mand [ 78.412050][ T6004] option from the mount to silence this warning. [ 78.412050][ T6004] ======================================================= [ 78.447879][ C1] vkms_vblank_simulate: vblank timer overrun [ 78.461557][ T6004] erofs: (device loop0): mounted with root inode @ nid 36. [ 78.483463][ T6004] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 78.497027][ T5776] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 78.515001][ T6004] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 78.531256][ T28] audit: type=1800 audit(1771886330.991:2): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.79" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 78.547842][ T5993] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #12: comm syz.1.75: No space for directory leaf checksum. Please run e2fsck -D. [ 78.566763][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.625835][ T5993] EXT4-fs error (device loop1): ext4_get_first_dir_block:3584: inode #12: comm syz.1.75: Directory block failed checksum [ 78.715300][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.766978][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 78.777406][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.800547][ T8] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 78.810307][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.831236][ T8] usb 4-1: Product: syz [ 78.835672][ T8] usb 4-1: Manufacturer: syz [ 78.844425][ T8] usb 4-1: SerialNumber: syz [ 78.852273][ T8] usb 4-1: config 0 descriptor?? [ 78.881286][ T8] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 78.896267][ T8] usb 4-1: selecting invalid altsetting 1 [ 78.916436][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.975623][ T6012] loop1: detected capacity change from 0 to 4096 [ 78.994028][ T6012] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 79.072250][ T6012] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 79.143363][ T23] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 79.172546][ T23] usb 3-1: config 0 has no interface number 0 [ 79.204267][ T23] usb 3-1: config 0 interface 93 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 16 [ 79.231085][ T23] usb 3-1: config 0 interface 93 has no altsetting 0 [ 79.239294][ T23] usb 3-1: New USB device found, idVendor=07ff, idProduct=4e09, bcdDevice=37.aa [ 79.269130][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.293866][ T23] usb 3-1: config 0 descriptor?? [ 79.311679][ T6006] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 79.377195][ T23] usb 4-1: USB disconnect, device number 3 [ 79.508134][ T6027] loop1: detected capacity change from 0 to 16 [ 79.523314][ T6027] erofs: (device loop1): mounted with root inode @ nid 36. [ 79.564857][ T6027] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 79.592351][ T8] usb 3-1: USB disconnect, device number 3 [ 79.598871][ T5776] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 79.617007][ T6027] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 79.630104][ T28] audit: type=1800 audit(1771886332.101:3): pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.90" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 79.785660][ T6029] process 'syz.1.91' launched './file1' with NULL argv: empty string added [ 80.045284][ T6035] QAT: Invalid ioctl 1076910120 [ 80.093237][ T6025] loop0: detected capacity change from 0 to 32768 [ 80.169020][ T6025] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 80.206432][ T6025] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 80.330964][ T6025] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 80.339472][ T6042] loop2: detected capacity change from 0 to 4096 [ 80.361266][ T6042] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 80.367101][ T2130] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 80.408779][ T2130] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 80.500233][ T6042] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 80.577050][ T2130] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 168ms [ 80.586236][ T2130] gfs2: fsid=syz:syz.0: jid=0: Done [ 80.607999][ T6047] loop1: detected capacity change from 0 to 2048 [ 80.639836][ T6048] loop3: detected capacity change from 0 to 16 [ 80.660936][ T6025] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 80.689750][ T6047] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=66359, location=66359 [ 80.706719][ T6048] erofs: (device loop3): mounted with root inode @ nid 36. [ 80.728908][ T6048] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 80.741478][ T5776] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 80.763674][ T6048] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 80.795135][ T28] audit: type=1800 audit(1771886333.251:4): pid=6048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.100" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 80.814466][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.815066][ T6047] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.855081][ T6052] cgroup: Invalid name [ 81.244227][ T6025] gfs2: fsid=syz:syz.0: found 1 quota changes [ 81.315243][ T6065] loop2: detected capacity change from 0 to 256 [ 81.363354][ T6065] exfat: Deprecated parameter 'namecase' [ 81.449549][ T6065] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 81.606152][ T5764] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 81.646917][ T5764] CPU: 1 PID: 5764 Comm: syz-executor Not tainted syzkaller #0 [ 81.654546][ T5764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.664636][ T5764] Call Trace: [ 81.667942][ T5764] [ 81.670892][ T5764] dump_stack_lvl+0x18c/0x250 [ 81.675602][ T5764] ? show_regs_print_info+0x20/0x20 [ 81.680837][ T5764] ? load_image+0x400/0x400 [ 81.685371][ T5764] ? do_raw_spin_unlock+0x121/0x230 [ 81.690656][ T5764] gfs2_assert_warn_i+0x193/0x2c0 [ 81.695721][ T5764] gfs2_qd_dispose+0x4aa/0x5b0 [ 81.700697][ T5764] gfs2_quota_cleanup+0x410/0x720 [ 81.705760][ T5764] ? spin_lock_bucket+0x150/0x150 [ 81.710818][ T5764] ? __might_sleep+0xe0/0xe0 [ 81.715443][ T5764] ? gfs2_ail_empty_tr+0x2f0/0x2f0 [ 81.720630][ T5764] ? gfs2_quota_sync+0x591/0x5a0 [ 81.725599][ T5764] gfs2_make_fs_ro+0x2aa/0x320 [ 81.730436][ T5764] ? gfs2_dinode_out+0xb10/0xb10 [ 81.735508][ T5764] ? __lock_acquire+0x7d40/0x7d40 [ 81.740563][ T5764] ? __rwlock_init+0x150/0x150 [ 81.745368][ T5764] ? do_raw_spin_unlock+0x121/0x230 [ 81.750689][ T5764] gfs2_put_super+0x224/0x930 [ 81.755412][ T5764] ? gfs2_evict_inode+0x1350/0x1350 [ 81.760650][ T5764] generic_shutdown_super+0x134/0x2b0 [ 81.766025][ T5764] kill_block_super+0x44/0x90 [ 81.770697][ T5764] deactivate_locked_super+0x97/0x100 [ 81.776063][ T5764] cleanup_mnt+0x43b/0x4d0 [ 81.780478][ T5764] task_work_run+0x1d4/0x260 [ 81.785073][ T5764] ? task_work_cancel+0x220/0x220 [ 81.790191][ T5764] ? exit_to_user_mode_loop+0x3b/0x110 [ 81.795658][ T5764] exit_to_user_mode_loop+0xe6/0x110 [ 81.800940][ T5764] exit_to_user_mode_prepare+0xee/0x180 [ 81.806576][ T5764] syscall_exit_to_user_mode+0x1a/0x50 [ 81.812030][ T5764] do_syscall_64+0x61/0xa0 [ 81.816450][ T5764] ? clear_bhb_loop+0x40/0x90 [ 81.821159][ T5764] ? clear_bhb_loop+0x40/0x90 [ 81.825842][ T5764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.831905][ T5764] RIP: 0033:0x7efc5679d897 [ 81.836373][ T5764] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 81.855974][ T5764] RSP: 002b:00007ffd4c1b4d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 81.864388][ T5764] RAX: 0000000000000000 RBX: 00007efc56831ef0 RCX: 00007efc5679d897 [ 81.872532][ T5764] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4c1b4df0 [ 81.880496][ T5764] RBP: 00007ffd4c1b4df0 R08: 00007ffd4c1b5df0 R09: 00000000ffffffff [ 81.888807][ T5764] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4c1b5e80 [ 81.896772][ T5764] R13: 00007efc56831ef0 R14: 0000000000013dc9 R15: 00007ffd4c1b5ec0 [ 81.904764][ T5764] [ 81.907861][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.918141][ T6073] vlan0: entered promiscuous mode [ 81.938999][ T27] cfg80211: failed to load regulatory.db [ 83.225271][ T6126] loop0: detected capacity change from 0 to 16 [ 83.278318][ T6126] erofs: (device loop0): mounted with root inode @ nid 36. [ 83.345356][ T6126] syz.0.136: attempt to access beyond end of device [ 83.345356][ T6126] loop0: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 83.756397][ T786] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.876410][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.977597][ T786] usb 2-1: config 0 has no interfaces? [ 83.987193][ T786] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 83.998197][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.010806][ T786] usb 2-1: Product: syz [ 84.015022][ T786] usb 2-1: Manufacturer: syz [ 84.019770][ T786] usb 2-1: SerialNumber: syz [ 84.034812][ T786] r8152-cfgselector 2-1: config 0 descriptor?? [ 84.097352][ T8] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 84.121788][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.137656][ T8] usb 1-1: Product: syz [ 84.142734][ T8] usb 1-1: Manufacturer: syz [ 84.161413][ T8] usb 1-1: SerialNumber: syz [ 84.184273][ T8] usb 1-1: config 0 descriptor?? [ 84.272545][ T786] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 84.414143][ T8] int51x1: probe of 1-1:0.0 failed with error -22 [ 84.445646][ T42] usb 2-1: config 0 descriptor?? [ 84.498766][ T786] usb 2-1: USB disconnect, device number 3 [ 84.504907][ T42] usb 2-1: can't set config #0, error -71 [ 84.648194][ T8] usb 1-1: USB disconnect, device number 2 [ 84.867688][ T6176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.161'. [ 85.658931][ T6211] loop0: detected capacity change from 0 to 256 [ 85.734615][ T6213] cgroup: name respecified [ 85.762878][ T786] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 85.801573][ T6211] FAT-fs (loop0): Directory bread(block 64) failed [ 85.834946][ T6211] FAT-fs (loop0): Directory bread(block 65) failed [ 85.879508][ T6211] FAT-fs (loop0): Directory bread(block 66) failed [ 85.897821][ T6211] FAT-fs (loop0): Directory bread(block 67) failed [ 85.904498][ T6211] FAT-fs (loop0): Directory bread(block 68) failed [ 85.920609][ T6211] FAT-fs (loop0): Directory bread(block 69) failed [ 85.955642][ T6211] FAT-fs (loop0): Directory bread(block 70) failed [ 85.972610][ T6211] FAT-fs (loop0): Directory bread(block 71) failed [ 85.996550][ T6211] FAT-fs (loop0): Directory bread(block 72) failed [ 86.003324][ T6211] FAT-fs (loop0): Directory bread(block 73) failed [ 86.325704][ T28] audit: type=1800 audit(1771886338.771:5): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.178" name="bus" dev="loop0" ino=1048592 res=0 errno=0 [ 86.991170][ T6229] loop1: detected capacity change from 0 to 32768 [ 87.023070][ T786] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 87.040837][ T6229] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.187 (6229) [ 87.079995][ T6257] binfmt_misc: register: failed to install interpreter file ./file0 [ 87.140724][ T6259] netlink: 'syz.0.201': attribute type 21 has an invalid length. [ 87.142977][ T6229] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 87.150868][ T6259] netlink: 132 bytes leftover after parsing attributes in process `syz.0.201'. [ 87.192736][ T6229] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 87.225525][ T6229] BTRFS info (device loop1): force clearing of disk cache [ 87.246996][ T6229] BTRFS info (device loop1): metadata ratio 0 [ 87.253416][ T6229] BTRFS info (device loop1): enabling ssd optimizations [ 87.272518][ T6229] BTRFS info (device loop1): using spread ssd allocation scheme [ 87.295659][ T6229] BTRFS info (device loop1): using free space tree [ 87.490543][ T6229] BTRFS info (device loop1): auto enabling async discard [ 87.569766][ T6229] BTRFS info (device loop1): rebuilding free space tree [ 87.714309][ T6289] loop0: detected capacity change from 0 to 512 [ 87.860834][ T5763] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 88.286574][ T2130] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 88.311029][ T2942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 88.386615][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.404547][ T6303] netlink: 'syz.1.212': attribute type 1 has an invalid length. [ 88.490177][ T2130] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 88.501074][ T2130] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 88.522470][ T2130] usb 4-1: config 8 has no interface number 0 [ 88.536620][ T2130] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 88.554846][ T6301] loop2: detected capacity change from 0 to 32768 [ 88.576604][ T2130] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 88.603958][ T27] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 88.611183][ T6301] jfs_strtoUCS: char2uni returned -22. [ 88.623816][ T6301] charset = cp936, char = 0xd4 [ 88.627171][ T27] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 88.641780][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 88.653785][ T2130] usb 4-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 88.667061][ T2130] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.667238][ T27] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 88.685661][ T2130] usb 4-1: Product: syz [ 88.694041][ T2130] usb 4-1: Manufacturer: syz [ 88.699332][ T27] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 88.718609][ T2130] usb 4-1: SerialNumber: syz [ 88.735553][ T27] usb 1-1: Product: syz [ 88.742220][ T27] usb 1-1: Manufacturer: syz [ 88.757703][ T27] usb 1-1: SerialNumber: syz [ 88.765593][ T27] usb 1-1: config 0 descriptor?? [ 88.824735][ T27] hub 1-1:0.0: bad descriptor, ignoring hub [ 88.835040][ T27] hub: probe of 1-1:0.0 failed with error -5 [ 88.874767][ T27] usb 1-1: selecting invalid altsetting 0 [ 89.016827][ T2130] usb 4-1: USB disconnect, device number 4 [ 89.034123][ T27] usb 1-1: USB disconnect, device number 3 [ 89.338974][ T6318] loop2: detected capacity change from 0 to 2048 [ 89.354588][ T6318] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 89.379259][ T6319] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.414514][ T6318] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952 [ 89.430737][ T6318] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 89.446205][ T6318] Remounting filesystem read-only [ 89.459798][ T6318] NILFS (loop2): error -5 truncating bmap (ino=15) [ 89.505143][ T5762] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 89.512497][ T5762] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 89.520453][ T5762] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 89.528292][ T5828] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.537028][ T5762] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 89.544580][ T5762] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 89.553790][ T5762] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 89.560648][ T5762] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 89.568813][ T5762] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 89.577294][ T5762] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 89.585465][ T5762] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 89.604798][ T5762] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 89.620530][ T5762] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 89.631394][ T5762] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 89.640431][ T5762] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 89.645815][ T6321] ieee802154 phy0 wpan0: encryption failed: -22 [ 89.648673][ T5762] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 89.729028][ T5828] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 89.767371][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.783992][ T5828] usb 2-1: config 0 descriptor?? [ 89.798897][ T5828] cp210x 2-1:0.0: cp210x converter detected [ 89.943821][ T6329] netlink: 'syz.3.228': attribute type 32 has an invalid length. [ 90.045771][ T5828] usb 2-1: cp210x converter now attached to ttyUSB0 [ 90.091992][ T6332] loop3: detected capacity change from 0 to 256 [ 90.141053][ T6332] FAT-fs (loop3): Directory bread(block 64) failed [ 90.156797][ T6332] FAT-fs (loop3): Directory bread(block 65) failed [ 90.163633][ T6332] FAT-fs (loop3): Directory bread(block 66) failed [ 90.187852][ T6332] FAT-fs (loop3): Directory bread(block 67) failed [ 90.212704][ T6332] FAT-fs (loop3): Directory bread(block 68) failed [ 90.220135][ T6332] FAT-fs (loop3): Directory bread(block 69) failed [ 90.239472][ T6332] FAT-fs (loop3): Directory bread(block 70) failed [ 90.277951][ T6332] FAT-fs (loop3): Directory bread(block 71) failed [ 90.286041][ T6332] FAT-fs (loop3): Directory bread(block 72) failed [ 90.288126][ T5828] usb 2-1: USB disconnect, device number 4 [ 90.315055][ T6332] FAT-fs (loop3): Directory bread(block 73) failed [ 90.347343][ T5828] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 90.380301][ T5828] cp210x 2-1:0.0: device disconnected [ 90.727136][ T6349] kAFS: unable to lookup cell '/,' [ 90.978423][ T6360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.244'. [ 91.011743][ T6360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.244'. [ 91.133079][ T6365] netlink: 'syz.0.246': attribute type 1 has an invalid length. [ 91.156434][ T6365] netlink: 228 bytes leftover after parsing attributes in process `syz.0.246'. [ 91.450554][ T28] audit: type=1326 audit(1771886343.911:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab6b9c629 code=0x7ffc0000 [ 91.536439][ T28] audit: type=1326 audit(1771886343.941:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab6b9c629 code=0x7ffc0000 [ 91.596210][ T28] audit: type=1326 audit(1771886343.941:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f4ab6b9c629 code=0x7ffc0000 [ 91.647551][ T28] audit: type=1326 audit(1771886343.941:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab6b9c629 code=0x7ffc0000 [ 91.690688][ T6357] loop3: detected capacity change from 0 to 32768 [ 91.711975][ T28] audit: type=1326 audit(1771886343.941:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab6b9c629 code=0x7ffc0000 [ 91.837282][ T6357] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 91.996039][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 92.008319][ T6357] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 92.032890][ T6395] netlink: 312 bytes leftover after parsing attributes in process `syz.1.256'. [ 92.072288][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 92.120585][ T6357] XFS (loop3): Ending clean mount [ 92.240673][ T6399] netlink: 'syz.1.260': attribute type 10 has an invalid length. [ 92.282819][ T6399] veth1_macvtap: left promiscuous mode [ 92.282846][ T6373] loop0: detected capacity change from 0 to 32768 [ 92.340447][ T5767] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 92.388774][ T6373] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.539480][ T6411] netlink: 'syz.2.262': attribute type 2 has an invalid length. [ 92.633616][ T6373] XFS (loop0): Ending clean mount [ 92.778111][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 92.879867][ T5764] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.631574][ T6413] loop2: detected capacity change from 0 to 32768 [ 93.684257][ T6413] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 93.701479][ T6413] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 93.752347][ T6413] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 93.763245][ T5765] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 93.772788][ T5765] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 93.857174][ T5765] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 84ms [ 93.877436][ T5765] gfs2: fsid=syz:syz.0: jid=0: Done [ 93.886505][ T6413] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 94.068893][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 94.386245][ T6413] gfs2: fsid=syz:syz.0: found 1 quota changes [ 94.420890][ T6464] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.692252][ T5762] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 94.746354][ T5762] CPU: 0 PID: 5762 Comm: syz-executor Not tainted syzkaller #0 [ 94.753964][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.764130][ T5762] Call Trace: [ 94.767432][ T5762] [ 94.770385][ T5762] dump_stack_lvl+0x18c/0x250 [ 94.775143][ T5762] ? show_regs_print_info+0x20/0x20 [ 94.780456][ T5762] ? load_image+0x400/0x400 [ 94.785088][ T5762] ? do_raw_spin_unlock+0x121/0x230 [ 94.790326][ T5762] gfs2_assert_warn_i+0x193/0x2c0 [ 94.795567][ T5762] gfs2_qd_dispose+0x4aa/0x5b0 [ 94.800372][ T5762] gfs2_quota_cleanup+0x410/0x720 [ 94.805434][ T5762] ? spin_lock_bucket+0x150/0x150 [ 94.810485][ T5762] ? __might_sleep+0xe0/0xe0 [ 94.815086][ T5762] ? gfs2_ail_empty_tr+0x2f0/0x2f0 [ 94.820255][ T5762] ? gfs2_quota_sync+0x591/0x5a0 [ 94.825285][ T5762] gfs2_make_fs_ro+0x2aa/0x320 [ 94.830068][ T5762] ? gfs2_dinode_out+0xb10/0xb10 [ 94.835014][ T5762] ? __lock_acquire+0x7d40/0x7d40 [ 94.840033][ T5762] ? __rwlock_init+0x150/0x150 [ 94.844883][ T5762] ? do_raw_spin_unlock+0x121/0x230 [ 94.850254][ T5762] gfs2_put_super+0x224/0x930 [ 94.855107][ T5762] ? gfs2_evict_inode+0x1350/0x1350 [ 94.860306][ T5762] generic_shutdown_super+0x134/0x2b0 [ 94.865679][ T5762] kill_block_super+0x44/0x90 [ 94.870351][ T5762] deactivate_locked_super+0x97/0x100 [ 94.875766][ T5762] cleanup_mnt+0x43b/0x4d0 [ 94.880204][ T5762] task_work_run+0x1d4/0x260 [ 94.884808][ T5762] ? task_work_cancel+0x220/0x220 [ 94.889925][ T5762] ? exit_to_user_mode_loop+0x3b/0x110 [ 94.895764][ T5762] exit_to_user_mode_loop+0xe6/0x110 [ 94.901075][ T5762] exit_to_user_mode_prepare+0xee/0x180 [ 94.906632][ T5762] syscall_exit_to_user_mode+0x1a/0x50 [ 94.912091][ T5762] do_syscall_64+0x61/0xa0 [ 94.916522][ T5762] ? clear_bhb_loop+0x40/0x90 [ 94.921302][ T5762] ? clear_bhb_loop+0x40/0x90 [ 94.925994][ T5762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.931902][ T5762] RIP: 0033:0x7f92e599d897 [ 94.936429][ T5762] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 94.956401][ T5762] RSP: 002b:00007ffe0bf5f198 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 94.964823][ T5762] RAX: 0000000000000000 RBX: 00007f92e5a31ef0 RCX: 00007f92e599d897 [ 94.972967][ T5762] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0bf5f250 [ 94.980944][ T5762] RBP: 00007ffe0bf5f250 R08: 00007ffe0bf60250 R09: 00000000ffffffff [ 94.988909][ T5762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0bf602e0 [ 94.996963][ T5762] R13: 00007f92e5a31ef0 R14: 0000000000017110 R15: 00007ffe0bf60320 [ 95.005027][ T5762] [ 95.113017][ T6459] loop1: detected capacity change from 0 to 32768 [ 95.199098][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 95.239925][ T6459] syz.1.281: attempt to access beyond end of device [ 95.239925][ T6459] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 95.266458][ T6459] lbmIODone: I/O error in JFS log [ 95.272304][ T6459] *** Log Format Error ! *** [ 95.280023][ T6459] lmLogInit: exit(-22) [ 95.284366][ T6459] lmLogOpen: exit(-22) [ 95.480460][ T786] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.506544][ T6481] loop1: detected capacity change from 0 to 16 [ 95.536198][ T6481] erofs: (device loop1): mounted with root inode @ nid 36. [ 95.636799][ T6485] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.701668][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 95.736506][ T786] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 95.770580][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.806113][ T786] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 95.837053][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.845190][ T786] usb 4-1: Product: syz [ 95.862439][ T786] usb 4-1: Manufacturer: syz [ 95.882085][ T786] usb 4-1: SerialNumber: syz [ 95.904564][ T786] usb 4-1: config 0 descriptor?? [ 95.939678][ T786] kvaser_usb 4-1:0.0: Cannot get usb endpoint(s) [ 96.145651][ T5828] usb 4-1: USB disconnect, device number 5 [ 96.652655][ T6489] loop1: detected capacity change from 0 to 32768 [ 96.685989][ T6489] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 96.741922][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 96.748276][ T6489] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 96.881773][ T6489] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 96.917616][ T5765] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 96.924524][ T5765] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 97.037928][ T6522] loop0: detected capacity change from 0 to 8 [ 97.055151][ T5765] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 130ms [ 97.091333][ T5765] gfs2: fsid=syz:syz.0: jid=0: Done [ 97.110505][ T6489] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 97.226019][ T6528] capability: warning: `syz.2.315' uses deprecated v2 capabilities in a way that may be insecure [ 97.569585][ T6489] gfs2: fsid=syz:syz.0: found 1 quota changes [ 97.632868][ T6541] warning: `syz.3.321' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.859558][ T5763] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 97.880062][ T5763] CPU: 0 PID: 5763 Comm: syz-executor Not tainted syzkaller #0 [ 97.887751][ T5763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.897830][ T5763] Call Trace: [ 97.901122][ T5763] [ 97.904113][ T5763] dump_stack_lvl+0x18c/0x250 [ 97.908831][ T5763] ? show_regs_print_info+0x20/0x20 [ 97.914138][ T5763] ? load_image+0x400/0x400 [ 97.918839][ T5763] ? do_raw_spin_unlock+0x121/0x230 [ 97.924082][ T5763] gfs2_assert_warn_i+0x193/0x2c0 [ 97.929237][ T5763] gfs2_qd_dispose+0x4aa/0x5b0 [ 97.934032][ T5763] gfs2_quota_cleanup+0x410/0x720 [ 97.939093][ T5763] ? spin_lock_bucket+0x150/0x150 [ 97.944254][ T5763] ? __might_sleep+0xe0/0xe0 [ 97.948877][ T5763] ? gfs2_ail_empty_tr+0x2f0/0x2f0 [ 97.954033][ T5763] ? gfs2_quota_sync+0x591/0x5a0 [ 97.959008][ T5763] gfs2_make_fs_ro+0x2aa/0x320 [ 97.963801][ T5763] ? gfs2_dinode_out+0xb10/0xb10 [ 97.968765][ T5763] ? __lock_acquire+0x7d40/0x7d40 [ 97.974522][ T5763] ? __rwlock_init+0x150/0x150 [ 97.979404][ T5763] ? do_raw_spin_unlock+0x121/0x230 [ 97.984634][ T5763] gfs2_put_super+0x224/0x930 [ 97.989348][ T5763] ? gfs2_evict_inode+0x1350/0x1350 [ 97.994570][ T5763] generic_shutdown_super+0x134/0x2b0 [ 97.999972][ T5763] kill_block_super+0x44/0x90 [ 98.004691][ T5763] deactivate_locked_super+0x97/0x100 [ 98.010180][ T5763] cleanup_mnt+0x43b/0x4d0 [ 98.014643][ T5763] task_work_run+0x1d4/0x260 [ 98.019275][ T5763] ? task_work_cancel+0x220/0x220 [ 98.024305][ T5763] ? exit_to_user_mode_loop+0x3b/0x110 [ 98.029762][ T5763] exit_to_user_mode_loop+0xe6/0x110 [ 98.035068][ T5763] exit_to_user_mode_prepare+0xee/0x180 [ 98.040612][ T5763] syscall_exit_to_user_mode+0x1a/0x50 [ 98.046761][ T5763] do_syscall_64+0x61/0xa0 [ 98.051278][ T5763] ? clear_bhb_loop+0x40/0x90 [ 98.055947][ T5763] ? clear_bhb_loop+0x40/0x90 [ 98.060705][ T5763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.066696][ T5763] RIP: 0033:0x7f4ab6b9d897 [ 98.071132][ T5763] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 98.090755][ T5763] RSP: 002b:00007fff0b4ff3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 98.099179][ T5763] RAX: 0000000000000000 RBX: 00007f4ab6c31ef0 RCX: 00007f4ab6b9d897 [ 98.107152][ T5763] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0b4ff4a0 [ 98.115121][ T5763] RBP: 00007fff0b4ff4a0 R08: 00007fff0b5004a0 R09: 00000000ffffffff [ 98.123088][ T5763] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0b500530 [ 98.131054][ T5763] R13: 00007f4ab6c31ef0 R14: 0000000000017dae R15: 00007fff0b500570 [ 98.139048][ T5763] [ 98.188173][ T6554] x_tables: duplicate underflow at hook 4 [ 98.466053][ T6564] netlink: 'syz.2.335': attribute type 21 has an invalid length. [ 98.496200][ T6564] netlink: 'syz.2.335': attribute type 1 has an invalid length. [ 98.526515][ T6564] netlink: 144 bytes leftover after parsing attributes in process `syz.2.335'. [ 98.539805][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 98.978085][ T6585] loop3: detected capacity change from 0 to 16 [ 99.023432][ T6585] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 99.087051][ T6585] cramfs: empty filesystem [ 99.307105][ T6597] netlink: 'syz.3.349': attribute type 4 has an invalid length. [ 99.446453][ T786] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.662076][ T786] usb 2-1: Using ep0 maxpacket: 32 [ 99.689845][ T786] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 99.703002][ T786] usb 2-1: config 4 has no interface number 0 [ 99.730357][ T786] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.764633][ T786] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.786565][ T786] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 99.806756][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.831026][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 99.833154][ T6599] loop2: detected capacity change from 0 to 32768 [ 99.865512][ T786] hub 2-1:4.128: USB hub found [ 99.906575][ T28] audit: type=1326 audit(1771886352.361:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55c19c629 code=0x7ffc0000 [ 99.938620][ T28] audit: type=1326 audit(1771886352.361:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55c19c629 code=0x7ffc0000 [ 99.966494][ T6599] (syz.2.350,6599,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 100.021737][ T28] audit: type=1326 audit(1771886352.361:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fe55c19c629 code=0x7ffc0000 [ 100.042359][ T6615] loop0: detected capacity change from 0 to 1764 [ 100.052108][ T6599] (syz.2.350,6599,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 100.061960][ T28] audit: type=1326 audit(1771886352.431:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55c19c629 code=0x7ffc0000 [ 100.089669][ T28] audit: type=1326 audit(1771886352.431:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55c19c629 code=0x7ffc0000 [ 100.124650][ T786] hub 2-1:4.128: 2 ports detected [ 100.133367][ T786] hub 2-1:4.128: Using single TT (err -22) [ 100.201180][ T6615] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 100.262621][ T6599] JBD2: Ignoring recovery information on journal [ 100.321624][ T786] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 100.329731][ T786] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 100.386626][ T786] usb 2-1: USB disconnect, device number 5 [ 100.463336][ T6599] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 100.672310][ T6629] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 100.794761][ T5762] ocfs2: Unmounting device (7,2) on (node local) [ 101.328584][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.371'. [ 101.384692][ T6627] loop3: detected capacity change from 0 to 32768 [ 101.411756][ T6627] [ 101.411756][ T6627] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.411756][ T6627] [ 101.441607][ T6648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.373'. [ 101.494563][ T6648] netlink: 30 bytes leftover after parsing attributes in process `syz.1.373'. [ 101.504248][ T6627] __jfs_setxattr: xattr_size = 67, new_size = 161 [ 101.705300][ T42] [ 101.705300][ T42] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.705300][ T42] [ 101.734856][ T42] [ 101.734856][ T42] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.734856][ T42] [ 101.750232][ T5767] [ 101.750232][ T5767] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.750232][ T5767] [ 101.764762][ T5767] [ 101.764762][ T5767] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.764762][ T5767] [ 101.787658][ T112] [ 101.787658][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.787658][ T112] [ 102.197764][ T6675] binder: 6674:6675 ioctl c018620c 200000000000 returned -1 [ 102.297014][ T6680] netlink: 'syz.2.388': attribute type 4 has an invalid length. [ 102.564179][ T6691] loop0: detected capacity change from 0 to 512 [ 102.605848][ T6691] EXT4-fs: old and new quota format mixing [ 103.019967][ T786] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 103.661532][ T2942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 103.696458][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.887018][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 103.895740][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 103.927298][ T27] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 103.946394][ T27] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 103.956799][ T27] usb 1-1: Product: syz [ 103.961007][ T27] usb 1-1: Manufacturer: syz [ 103.969315][ T27] usb 1-1: SerialNumber: syz [ 104.147035][ T6727] loop3: detected capacity change from 0 to 32768 [ 104.214995][ T27] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 104.245101][ T27] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 104.267525][ T27] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 104.364470][ T6749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.420'. [ 104.418185][ T27] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 104.452297][ T27] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 104.480700][ T27] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 104.500620][ T6753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.422'. [ 104.522357][ T27] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 104.557823][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 104.566402][ T27] usb 1-1: USB disconnect, device number 4 [ 104.597835][ T27] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 104.670724][ T27] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 104.711410][ T27] visor 1-1:1.0: device disconnected [ 104.937843][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 105.052945][ T6769] loop1: detected capacity change from 0 to 512 [ 105.088722][ T6769] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.122528][ T6775] loop3: detected capacity change from 0 to 512 [ 105.158458][ T6769] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.430: Directory hole found for htree leaf block 0 [ 105.168175][ T6775] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 105.192729][ T6775] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c09c, mo2=0002] [ 105.207639][ T6769] EXT4-fs (loop1): Remounting filesystem read-only [ 105.224907][ T6775] EXT4-fs (loop3): orphan cleanup on readonly fs [ 105.264450][ T6775] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #13: comm syz.3.432: iget: bad i_size value: 12154761577498 [ 105.330185][ T6775] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.432: couldn't read orphan inode 13 (err -117) [ 105.364718][ T6775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 105.403286][ T6775] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.432: dx entry: limit 65535 != root limit 120 [ 105.421772][ T5763] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 105.451989][ T6775] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.432: Corrupt directory, running e2fsck is recommended [ 105.585561][ T786] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 105.610118][ T6788] netlink: 'syz.1.435': attribute type 1 has an invalid length. [ 105.630651][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.634854][ T6788] netlink: 224 bytes leftover after parsing attributes in process `syz.1.435'. [ 105.924538][ T28] audit: type=1326 audit(1771886358.381:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55c19c629 code=0x7ffc0000 [ 105.996551][ T28] audit: type=1326 audit(1771886358.381:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55c19c629 code=0x7ffc0000 [ 106.080292][ T28] audit: type=1326 audit(1771886358.381:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55c19c629 code=0x7ffc0000 [ 106.103243][ T6803] xt_hashlimit: Unknown mode mask E2, kernel too old? [ 106.146111][ T28] audit: type=1326 audit(1771886358.381:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fe55c19c629 code=0x7ffc0000 [ 106.197764][ T28] audit: type=1326 audit(1771886358.381:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55c19c629 code=0x7ffc0000 [ 106.262574][ T28] audit: type=1326 audit(1771886358.381:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55c19c629 code=0x7ffc0000 [ 106.294567][ T28] audit: type=1326 audit(1771886358.381:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55c19c629 code=0x7ffc0000 [ 106.356439][ T28] audit: type=1326 audit(1771886358.381:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe55c19c629 code=0x7ffc0000 [ 106.434576][ T28] audit: type=1326 audit(1771886358.391:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe55c19c629 code=0x7ffc0000 [ 106.490947][ T6818] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 107.215623][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.467'. [ 107.245451][ T6850] netlink: 'syz.3.467': attribute type 1 has an invalid length. [ 107.349040][ T6852] netlink: 'syz.1.468': attribute type 2 has an invalid length. [ 107.369924][ T6852] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.468'. [ 107.671462][ T6859] loop0: detected capacity change from 0 to 8192 [ 108.116454][ T6871] x_tables: duplicate underflow at hook 2 [ 108.271433][ T6861] loop1: detected capacity change from 0 to 32768 [ 108.301857][ T6861] [ 108.301857][ T6861] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.301857][ T6861] [ 108.349661][ T6861] __jfs_setxattr: xattr_size = 67, new_size = 161 [ 108.447103][ T42] [ 108.447103][ T42] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.447103][ T42] [ 108.464952][ T42] [ 108.464952][ T42] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.464952][ T42] [ 108.477562][ T2130] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 108.494206][ T5763] [ 108.494206][ T5763] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.494206][ T5763] [ 108.527022][ T5763] [ 108.527022][ T5763] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.527022][ T5763] [ 108.558377][ T111] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 108.570136][ T111] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 108.578557][ T111] CPU: 1 PID: 111 Comm: jfsCommit Not tainted syzkaller #0 [ 108.585941][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 108.589807][ T6867] loop2: detected capacity change from 0 to 32768 [ 108.595991][ T111] RIP: 0010:lmLogSync+0x14f/0x9f0 [ 108.607428][ T111] Code: 02 af fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 9f 54 d9 fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 83 54 d9 fe 49 8b 3f e8 3b 02 af fe [ 108.627064][ T111] RSP: 0018:ffffc90002857c40 EFLAGS: 00010202 [ 108.633161][ T111] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: b0f5b04fe8978800 [ 108.641142][ T111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.649135][ T111] RBP: ffffc90002857d48 R08: 0000000000000004 R09: 0000000000000004 [ 108.657197][ T111] R10: ffffc90002857b64 R11: fffff5200050af75 R12: ffff888025636000 [ 108.665159][ T111] R13: ffffc90002857ca0 R14: ffff88802ef18238 R15: 0000000000000040 [ 108.673132][ T111] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 108.682069][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.686443][ T6867] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.476 (6867) [ 108.688658][ T111] CR2: 0000001b35021ff8 CR3: 00000000620de000 CR4: 00000000003506e0 [ 108.708697][ T111] Call Trace: [ 108.712151][ T111] [ 108.715077][ T111] ? jfs_syncpt+0x25/0x90 [ 108.719421][ T111] ? lmWriteRecord+0x1ac0/0x1ac0 [ 108.724350][ T111] ? __rwlock_init+0x150/0x150 [ 108.729103][ T111] jfs_syncpt+0x7b/0x90 [ 108.733247][ T111] txEnd+0x2e5/0x520 [ 108.737133][ T111] jfs_lazycommit+0x5a4/0xa70 [ 108.741800][ T111] ? txFreelock+0x5a0/0x5a0 [ 108.746296][ T111] ? do_task_dead+0xd0/0xd0 [ 108.750785][ T111] ? __kthread_parkme+0x7a/0x1c0 [ 108.755717][ T111] kthread+0x2fa/0x390 [ 108.759773][ T111] ? txFreelock+0x5a0/0x5a0 [ 108.764262][ T111] ? kthread_blkcg+0xd0/0xd0 [ 108.768843][ T111] ret_from_fork+0x48/0x80 [ 108.773428][ T111] ? kthread_blkcg+0xd0/0xd0 [ 108.778006][ T111] ret_from_fork_asm+0x11/0x20 [ 108.782763][ T111] [ 108.785792][ T111] Modules linked in: [ 108.802681][ T111] ---[ end trace 0000000000000000 ]--- [ 108.808236][ T111] RIP: 0010:lmLogSync+0x14f/0x9f0 [ 108.813962][ T111] Code: 02 af fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 9f 54 d9 fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 83 54 d9 fe 49 8b 3f e8 3b 02 af fe [ 108.835282][ T111] RSP: 0018:ffffc90002857c40 EFLAGS: 00010202 [ 108.842302][ T111] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: b0f5b04fe8978800 [ 108.845922][ T6867] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.850487][ T111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.868808][ T111] RBP: ffffc90002857d48 R08: 0000000000000004 R09: 0000000000000004 [ 108.877202][ T111] R10: ffffc90002857b64 R11: fffff5200050af75 R12: ffff888025636000 [ 108.884795][ T6867] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 108.885235][ T111] R13: ffffc90002857ca0 R14: ffff88802ef18238 R15: 0000000000000040 [ 108.898596][ T6867] BTRFS info (device loop2): setting nodatasum [ 108.913165][ T2130] usb 4-1: config index 0 descriptor too short (expected 93, got 72) [ 108.922902][ T6867] BTRFS info (device loop2): force zlib compression, level 3 [ 108.927734][ T2130] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 108.931346][ T6867] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 108.940173][ T2130] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.950352][ T6867] BTRFS info (device loop2): use lzo compression, level 0 [ 108.964764][ T6867] BTRFS info (device loop2): turning on flush-on-commit [ 108.966961][ T111] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 108.973015][ T6867] BTRFS info (device loop2): enabling auto defrag [ 108.981015][ T2130] usb 4-1: Product: syz [ 108.991660][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.999545][ T111] CR2: 00007fb72a4beba0 CR3: 000000002e340000 CR4: 00000000003506e0 [ 109.005196][ T6867] BTRFS info (device loop2): max_inline at 4096 [ 109.007881][ T2130] usb 4-1: Manufacturer: syz [ 109.019075][ T111] Kernel panic - not syncing: Fatal exception [ 109.025487][ T111] Kernel Offset: disabled [ 109.029799][ T111] Rebooting in 86400 seconds..